Report Overview

  1. Submitted URL

    cert.login.info.doc.3-145-14-244.cprapid.com/id/dklogin.php

  2. IP

    3.145.14.244

    ASN

    #16509 AMAZON-02

  3. Submitted

    2023-02-04 18:35:33

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - Nordea

Detections

  1. urlquery

    35

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    72

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
www.mitid.dkunknown2017-04-03T14:46:36Z2023-03-13T06:54:49Z
widgets.amung.us126232012-05-21T21:25:54Z2023-03-13T08:13:33Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
ic.tynt.com43002013-08-06T03:33:59Z2023-03-13T08:58:22Z
t.dtscout.com119512017-01-30T05:52:42Z2023-03-13T05:10:53Z
www.gstatic.comunknown2016-07-26T11:37:06Z2023-03-13T07:57:11Z
cdn.tynt.com72602012-05-21T18:51:48Z2023-03-13T08:41:50Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
cert.login.info.doc.3-145-14-244.cprapid.comunknown2023-02-03T13:34:16Z2023-03-08T23:43:22Z
ocsp.sectigo.com4872019-11-29T12:50:24Z2023-03-13T08:22:43Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
whos.amung.us126872014-04-02T16:27:13Z2023-03-13T07:28:15Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
medium 3.145.14.244Client IP

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/dklogin.phpNordea Bank

PhishTank
SeverityIndicatorAlert
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/dklogin.phpOther

Fortinet's Web Filter
SeverityIndicatorAlert
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/dklogin.phpPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.downloadPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/frame/mitlogin.phpPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svgPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svgPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svgPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woffPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woffPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/empty-3857ebe69f653487f8c9d99adde4657f.svgPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/no-connection-83f79e2367a313b468986e12a237c346.svgPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svgPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/partials/js/jquery.jsPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/partials/status.phpPhishing
mediumcert.login.info.doc.3-145-14-244.cprapid.com/id/partials/status.phpPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed

ThreatFox

No alerts detected


JavaScript (12)

HTTP Transactions (54)

URLIPResponseSize
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/dklogin.php
3.145.14.244200 OK18 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.download
3.145.14.244404 Not Found10 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css
3.145.14.244200 OK46 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/frame/mitlogin.php
3.145.14.244200 OK8.0 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/translateelement.css
3.145.14.244200 OK19 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svg
3.145.14.244200 OK3.1 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svg
3.145.14.244200 OK3.1 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svg
3.145.14.244200 OK2.3 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/frame/mitd.css
3.145.14.244200 OK56 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff
3.145.14.244200 OK32 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/banner.png
3.145.14.244200 OK40 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff
3.145.14.244200 OK31 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/empty-3857ebe69f653487f8c9d99adde4657f.svg
3.145.14.244200 OK1.6 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/no-connection-83f79e2367a313b468986e12a237c346.svg
3.145.14.244200 OK5.0 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/translate_24dp.png
3.145.14.244200 OK825 B
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svg
3.145.14.244200 OK2.8 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/all/5e73b3c67b0510c4c5cf-6629cb5350d6f3276b2dccc43bd3f397.png
3.145.14.244200 OK40 kB
www.gstatic.com/images/branding/product/2x/translate_24dp.png
216.58.211.3200 OK1.8 kB
cert.login.info.doc.3-145-14-244.cprapid.com/id/partials/js/jquery.js
3.145.14.244200 OK272 kB
push.services.mozilla.com/
52.39.191.93101 Switching Protocols0 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
142.250.74.131200 OK472 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
34.120.237.76200 OK5.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
34.120.237.76200 OK9.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
34.120.237.76200 OK8.2 kB
whos.amung.us/pingjs/?k=holland001&t=Nordea%20identification&c=s&x=http%3A%2F%2Fcert.login.info.doc.3-145-14-244.cprapid.com%2Fid%2Fdklogin.php&y=&a=0&d=0.773&v=27&r=4265
172.67.8.141200 OK49 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675535761867&dn=TC&iso=0&pu=http%3A%2F%2Fcert.login.info.doc.3-145-14-244.cprapid.com%2Fid%2Fdklogin.php&t=Nordea%20identification
67.202.105.34204 No Content0 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675535761867&dn=TC&iso=0&pu=http%3A%2F%2Fcert.login.info.doc.3-145-14-244.cprapid.com%2Fid%2Fdklogin.php&t=Nordea%20identification
67.202.105.34204 No Content0 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675535761867&dn=TC&iso=0&pu=http%3A%2F%2Fcert.login.info.doc.3-145-14-244.cprapid.com%2Fid%2Fdklogin.php
67.202.105.34204 No Content0 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675535761867&dn=TC&iso=0&pu=http%3A%2F%2Fcert.login.info.doc.3-145-14-244.cprapid.com%2Fid%2Fdklogin.php
67.202.105.34204 No Content0 B
t.dtscout.com/pv/?_a=v&_h=cert.login.info.doc.3-145-14-244.cprapid.com&_ss=7eb7eqlppa&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=24nt&_cb=_dtspv.c
141.101.120.11200 OK56 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675535761867&dn=TC&iso=0&pu=http%3A%2F%2Fcert.login.info.doc.3-145-14-244.cprapid.com%2Fid%2Fdklogin.php
67.202.105.34204 No Content0 B
cert.login.info.doc.3-145-14-244.cprapid.com/id/partials/status.php
3.145.14.244500 Internal Server Error0 B
cert.login.info.doc.3-145-14-244.cprapid.com/id/partials/status.php
3.145.14.244500 Internal Server Error0 B
www.mitid.dk/assets/fonts/IBMPlexSans-Bold.woff2
95.100.107.92200 OK0 B
www.mitid.dk/assets/fonts/IBMPlexSans-Medium.woff2
95.100.107.92200 OK0 B
www.mitid.dk/assets/fonts/IBMPlexSans-SemiBold.woff2
95.100.107.92200 OK0 B
widgets.amung.us/small.js
104.22.74.171200 OK0 B
cdn.tynt.com/tc.js
172.64.151.83200 OK0 B