Report - livraison-dhl-colis.com/Delivery.php

Report Overview

Submitted URL
livraison-dhl-colis.com/Delivery.php
IP
89.23.103.7
ASN
#48687 Noviton Ltd
Submitted
2022-12-09 12:18:37
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.210.158.59
ws-mt1.pusher.com	8253	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	372 B	44.209.147.211
files.killbot.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	389 B	746 B	104.21.11.160
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	23.33.119.27
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.usertrust.com	899	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	342 B	1.0 kB	172.64.155.188
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.2 kB	32 kB	34.120.237.76
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	796 B	93.184.220.29
livraison-dhl-colis.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	562 kB	89.23.103.7

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-12-08	medium	livraison-dhl-colis.com/Delivery.php	DHL Airways, Inc.

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/countrySelect.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/all.min.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/jquery-1.12.4.min.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/card.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery.php	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/mine.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/imask.min.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/logger-1.min.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/main.min.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/data.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/intlTelInput.js	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/css	Phishing
2022-12-09	medium	livraison-dhl-colis.com/Delivery_files/app.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (16)

	URL	Size	First Seen	Last Seen
	livraison-dhl-colis.com/Delivery.php	106 B	2023-03-08	2023-03-13
Pretty URL livraison-dhl-colis.com/Delivery.php IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:50:44 Last Seen2023-03-13 06:04:54 Times Seen1 Hash 6099fd947cb3698ccbc486683f8a5edf 425eb08d7317ed79ee019959d79b6508ae01046a af44cf563da4e59e6788777418c918362263148a17b299078c0bba16ffe65137 Loading...

	livraison-dhl-colis.com/Delivery_files/jquery-1.12.4.min.js	97 kB	2023-03-07	2024-04-24
Pretty URL livraison-dhl-colis.com/Delivery_files/jquery-1.12.4.min.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-24 08:21:22 Times Seen118658 Hash 4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404 Loading...

	livraison-dhl-colis.com/Delivery_files/all.min.js	1.1 MB	2023-03-07	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/all.min.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:50:19 Last Seen2024-04-06 06:20:40 Times Seen12884 Hash 61008443488f4e7f60d5a5055483187e b56375acc5e062f79280440459d0d7b0f10a290b 1d3f596f76f53d53ef7cb1ffeffd6f791b54bd639b42e4f23e7f2d7b36f91c48 Loading...

	livraison-dhl-colis.com/Delivery_files/intlTelInput.js	89 kB	2023-03-08	2024-04-22
Pretty URL livraison-dhl-colis.com/Delivery_files/intlTelInput.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-22 01:26:12 Times Seen12057 Hash 9146aa46d1f409004183b86f202c4607 717a6d53527fe31ec1c4eef9022b06e5d4d6f6a5 b188900aaff98a87fc69519ab04437aa735708b4b92f2adcab6937d2a1d42e37 Loading...

	livraison-dhl-colis.com/Delivery.php	864 B	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery.php IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:50:44 Last Seen2024-04-06 06:20:41 Times Seen2 Hash 470c8665c54395a2159bffe573dc0647 5afb592e7ee882781c4f20724841e52e49a7bc43 68702b121978bf59c1bc5384f3be76eb6ae200f4890c7de6be3119f90836b73c Loading...

	livraison-dhl-colis.com/Delivery.php	247 B	2023-03-08	2023-04-01
Pretty URL livraison-dhl-colis.com/Delivery.php IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:50:44 Last Seen2023-04-01 10:39:06 Times Seen374 Hash 17668478120b7af09fc8acffed5c5b99 af258ab4192c87a257df329bb10183f5f73346dc d21b0093526e451b5d1b61836c74bc2887f331887dbd6cba50d56f3f17e91830 Loading...

	livraison-dhl-colis.com/Delivery_files/main.min.js	2.7 kB	2023-03-07	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/main.min.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:54:49 Last Seen2024-04-06 06:20:41 Times Seen447 Hash a652ab92584024571b6ea0f3255eb380 9266ee9ab680b63d7205d6bc65b9767513d162a5 a8831773f69697c641e349c519d162ad5afe58cc583703d96f98a79d29087ef1 Loading...

	livraison-dhl-colis.com/Delivery_files/logger-1.min.js	800 kB	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/logger-1.min.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:50:44 Last Seen2024-04-06 06:20:40 Times Seen3 Hash 88fb7ef59416f5fb98d1da9e34e40bf6 a41a5d190ef40c5383eaafffcab3c19b85c8f225 d01b6107e42cbf6efedff510d3971a80127fdc2773d4d666fac177b67fde4362 Loading...

	livraison-dhl-colis.com/Delivery_files/imask.min.js	46 kB	2023-03-07	2024-04-24
Pretty URL livraison-dhl-colis.com/Delivery_files/imask.min.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:12 Last Seen2024-04-24 06:07:17 Times Seen13267 Hash 79c82646b886e08184f7b9fff25e64ff 804b4b0f8f3443ff05833e33fb5b76780ffafe25 8b76b3502583edddf22df0b9c6ee640053a2cdfeaa113ceff3ea9b61d1f6410d Loading...

	livraison-dhl-colis.com/Delivery.php	1.9 kB	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery.php IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:50:44 Last Seen2024-04-06 06:20:40 Times Seen2 Hash 023a2c1c90ea8c29eb46c809f755b0b9 f4c2c098146ff99d5b5d1c22eebf5c39fc891736 3e371e562cf8e48eb6264a9e5bd2681e10597c9748df873d0d513c8fbba1a44e Loading...

	livraison-dhl-colis.com/Delivery_files/card.js	59 kB	2023-03-07	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/card.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:57 Last Seen2024-04-06 06:20:40 Times Seen12198 Hash 30e93a747ba8285615cfbc3643dc1a62 3a55f9d6ac708f519d351ea0b69083457778ec9d 18c4b9b4c27233b541a47300a4ee98239e1f8dec4bbcd9fabb6bdad12ca82025 Loading...

	livraison-dhl-colis.com/Delivery_files/countrySelect.js	37 kB	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/countrySelect.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen12188 Hash ee3d5d4880b5dac09d9ca3c23cdd28da f95728f89723a079442d67ed6aa38abf8ecab4fd 657baddf2724ae4570fa40c00dddefa3379b5709ac06ceb536f6177a1bfc394f Loading...

	livraison-dhl-colis.com/Delivery_files/mine.js	1.6 kB	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/mine.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen8003 Hash f11ee1ccf373dd137b7ad18e4ee2f69e 26baf7db3e340be99ece82b37d294b80c373fd12 71b8a934f8936288d42fe9fd426ff18cbc1fe54070617fd62420025da56b662e Loading...

	livraison-dhl-colis.com/Delivery.php	86 B	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery.php IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:50:44 Last Seen2024-04-06 06:20:40 Times Seen3 Hash df6c7f6a11bafc8abff6c5b68ff820a2 f3df98275e08d4467c2a4dd4d635196d72623e65 d965ea9643ad98c4936b06eecfdfc7fe9dac7d56ac24bcae09c774e2bb55f5d2 Loading...

	livraison-dhl-colis.com/Delivery_files/data.js	12 kB	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/data.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:40 Times Seen12169 Hash a2b78e86240966cda00a463614e4f3dd a2606f30f77bb9f235746059db16b0ee8b585c31 55e47db856701715f613de8674bd0c67604cc304514b791bed402866d18c8557 Loading...

	livraison-dhl-colis.com/Delivery_files/app.js	920 kB	2023-03-08	2024-04-06
Pretty URL livraison-dhl-colis.com/Delivery_files/app.js IP 89.23.103.7 ASN #48687 Noviton Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen11793 Hash 508afd6ff9ab52ce8f480d35568038d1 b5d9891100e0dce59cee59b75a098a1ae64c779b 8af18273c1833477cf810c4e3a76f483b6a6064571d25ea7742d8708378c8f09 Loading...

HTTP Transactions (46)

URL IP Response Size

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7181eff9c60e83eb0004ece591e47dca
0fd8cd0c9d10b0547938982e57d2c43e2d98679f
89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4375
Expires: Fri, 09 Dec 2022 13:31:21 GMT
Date: Fri, 09 Dec 2022 12:18:26 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4143
Expires: Fri, 09 Dec 2022 13:27:29 GMT
Date: Fri, 09 Dec 2022 12:18:26 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 12:08:18 GMT
content-type: application/json
age: 608
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13529
Expires: Fri, 09 Dec 2022 16:03:55 GMT
Date: Fri, 09 Dec 2022 12:18:26 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: tYJkZUvRUb0iRmsVB7AQ6OAimqGL6rNY0JfalbnQBWj+KPd9HLvDBYeDJ3cmPXLxYcQ5TQZQRA/syNLA3mL67A==
x-amz-request-id: S12000ZME92HEFM7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 11:48:19 GMT
age: 1807
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ad57fac3e5549e4200e8ffe7858ca006
ca5a05ad9a2af5f81b5a2995307261a3e827eedc
556b944a47d501b81af1c12798472a57d6b461bd75d5ce77c2a8cf8a28e3c91d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "556B944A47D501B81AF1C12798472A57D6B461BD75D5CE77C2A8CF8A28E3C91D"
Last-Modified: Thu, 08 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 09 Dec 2022 18:18:26 GMT
Date: Fri, 09 Dec 2022 12:18:26 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:26 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 12:07:45 GMT
age: 642
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
e6be4d2155028ffff5d01ab6e7edf6da
07172071b5cf43c4cd7d7930b4ad8518ec1e32e9
4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 967
Cache-Control: max-age=162275
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 12:18:27 GMT
Etag: "6392faaf-1d7"
Expires: Sun, 11 Dec 2022 09:23:02 GMT
Last-Modified: Fri, 09 Dec 2022 09:06:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

livraison-dhl-colis.com/Delivery_files/logo.png

89.23.103.7

200 OK

2.0 kB

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/logo.png
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (1998 bytes)
Hash
5d14ab93691604e826e1319d53599eb9
78724360e9d25da584445b851e37bca05abe6b85
3f0c62b5ccdcdbf3b3ae3885f1e6959e2d937eba9b29dea9a6bdb98788041756

HTTP Headers

GET /Delivery_files/logo.png HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: image/png
content-length: 1998
last-modified: Fri, 25 Nov 2022 21:33:34 GMT
etag: "638134ae-7ce"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/114223-serencontrer-messages-solid.png

89.23.103.7

200 OK

5.0 kB

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/114223-serencontrer-messages-solid.png
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
PNG image data, 640 x 512, 8-bit colormap, non-interlaced\012- data
Size
5.0 kB (4984 bytes)
Hash
faa2a37bbdf6a4d7eb92f4df1396e1bc
b63e5a7323f771d2294a58b3251bb6036ae33fce
cff8856b01d09b6e68b3d6b75172ea259363b4268be55229a963e86edc77e627

HTTP Headers

GET /Delivery_files/114223-serencontrer-messages-solid.png HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: image/png
content-length: 4984
last-modified: Fri, 25 Nov 2022 21:33:34 GMT
etag: "638134ae-1378"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/foo.png

89.23.103.7

200 OK

3.9 kB

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/foo.png
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
PNG image data, 187 x 18, 8-bit/color RGBA, non-interlaced\012- data
Size
3.9 kB (3878 bytes)
Hash
11ff7152775863d8bf58eb585a3cfa46
25127f0e304d9145ef8a824a8be504664a799b7f
5c4b801e60c49235941cfc562ed465a951c937c668db31e3c1ba152513c672d3

HTTP Headers

GET /Delivery_files/foo.png HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: image/png
content-length: 3878
last-modified: Fri, 25 Nov 2022 21:33:36 GMT
etag: "638134b0-f26"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

push.services.mozilla.com/

34.210.158.59

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.210.158.59:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6r+8DqoA1Tb2qEcacDdBVw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JlUhKWg6uw0seqIxUKQ7oKVvvR8=

livraison-dhl-colis.com/assets/img/flagscountry.png

89.23.103.7

200 OK

66 kB

URL HTTP/2
livraison-dhl-colis.com/assets/img/flagscountry.png
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
PNG image data, 5630 x 15, 8-bit/color RGBA, non-interlaced\012- data
Size
66 kB (65960 bytes)
Hash
ae33acae404631e997ef8d91dae08ccd
19fae9a6aa4bb419eba378b0d0573906dc1be38a
38025784bedeb5e4cae496b131c85cabbd95ae0b1c0a3c9d9cb474d7262db04b

HTTP Headers

GET /assets/img/flagscountry.png HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:28 GMT
content-type: image/png
content-length: 65960
last-modified: Fri, 25 Nov 2022 22:47:50 GMT
etag: "63814616-101a8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

livraison-dhl-colis.com/assets/img/loading.gif

89.23.103.7

200 OK

18 kB

URL HTTP/2
livraison-dhl-colis.com/assets/img/loading.gif
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
GIF image data, version 89a, 200 x 103\012- data
Size
18 kB (17585 bytes)
Hash
f3ffb13cf88b13ec557e6149371b361d
3c72f0855b4bd6e3b45675a5e8b08c8fb7a98f49
ce6a239fde88d8fb01c7a10d6f7b27d1bc23f5462d02f5ebb4927479fa32a302

HTTP Headers

GET /assets/img/loading.gif HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:28 GMT
content-type: image/gif
content-length: 17585
last-modified: Fri, 25 Nov 2022 22:46:30 GMT
etag: "638145c6-44b1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.usertrust.com/

172.64.155.188

200 OK

472 B

URL HTTP/1.1
ocsp.usertrust.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
93ebfe4e771fcba4d6e8207fc1d28266
84d4df2ef95269af7d389324558b2c95b1a52f82
dac21b09ffcdfadc4dc4cc09f7e196c82738a6240275a6c9d6481497b9bfa747

HTTP Headers

POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 12:18:28 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 01:28:47 GMT
Expires: Wed, 14 Dec 2022 01:28:46 GMT
Etag: "84d4df2ef95269af7d389324558b2c95b1a52f82"
Cache-Control: max-age=600764,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1652
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776daeff7c1e0b31-OSL

livraison-dhl-colis.com/assets/img/favicon.gif

89.23.103.7

200 OK

2.2 kB

URL HTTP/2
livraison-dhl-colis.com/assets/img/favicon.gif
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel\012- data
Size
2.2 kB (2238 bytes)
Hash
a6f1af8e79a11829ba9a66474b06bb97
d99e3ec7747c865033a8dfad43c9f49634404bc1
b0dbd00f3650fa6b931e678a9d8f79a405d23c7adf111ab91b1a01a0e7109807

HTTP Headers

GET /assets/img/favicon.gif HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:28 GMT
content-type: image/gif
content-length: 2238
last-modified: Fri, 25 Nov 2022 22:49:04 GMT
etag: "63814660-8be"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false

44.209.147.211

101 Switching Protocols

0 B

URL HTTP/1.1
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP
44.209.147.211:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://livraison-dhl-colis.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MsYz13A4dBMuv+u5YX0nTA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Fri, 09 Dec 2022 12:18:28 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: t477TxGkMp9JQxcbLJZraTQ60No=

ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false

44.209.147.211

101 Switching Protocols

0 B

URL HTTP/1.1
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP
44.209.147.211:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://livraison-dhl-colis.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gAk9HKnKJVf89OWYAXweLQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Fri, 09 Dec 2022 12:18:28 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: hsvHhG8bW24JyevEu/v58CcWnEg=

livraison-dhl-colis.com/Delivery_files/countrySelect.js

89.23.103.7

200 OK

11 kB

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/countrySelect.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
Unicode text, UTF-8 text, with very long lines (347)
Size
11 kB (11268 bytes)
Hash
24bf2483aba32d8b7c15e4379e9ba882
cf401b466c72dbd150427e66e46c2311b49e656a
4391f50f6a190c3980561d148218f6447eed55f41a9f59b3ed038150af18e658

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/countrySelect.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:36 GMT
etag: W/"638134b0-8f1a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5271
Expires: Fri, 09 Dec 2022 13:46:19 GMT
Date: Fri, 09 Dec 2022 12:18:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5271
Expires: Fri, 09 Dec 2022 13:46:19 GMT
Date: Fri, 09 Dec 2022 12:18:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5271
Expires: Fri, 09 Dec 2022 13:46:19 GMT
Date: Fri, 09 Dec 2022 12:18:28 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16648
Expires: Fri, 09 Dec 2022 16:55:56 GMT
Date: Fri, 09 Dec 2022 12:18:28 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5188 bytes)
Hash
fba9a3854df65740512f96efe7442e58
8fbff7725c842d70e047c635a725723a9dc9c55a
6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dGxzuQ6zj6wXQbkBuKBnOKxwKJDHUyGoi7PgcugcpdX4QYruNiFxsQ==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:51:24 GMT
age: 52024
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6578 bytes)
Hash
8546542f00ea29ef4df6ab8d3c7c2164
5c8ffe91490006a9890188b53f875568c2b6bd8f
7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nXaZ1pazAGWMI9GFYZjGlvVVIb8wX6feD0O8VpzjsL8F8l3mFmydAw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 07:13:59 GMT
age: 18269
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/all.min.js

89.23.103.7

200 OK

388 kB

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/all.min.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
ASCII text, with very long lines (65351)
Size
388 kB (388319 bytes)
Hash
38d9920cb4e3103e9870707f0155438a
df405279d28c213ec9304db9fa135596e9e561aa
b446417423c0750defcc5f7607a9590048100a55dce444cfca25c7ded526d715

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/all.min.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:36 GMT
etag: W/"638134b0-1125c9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/app.css

89.23.103.7

200 OK

60 kB

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/app.css
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type
assembler source, ASCII text
Size
60 kB (60174 bytes)
Hash
ec0f207248eabb60e452cec2a3e98344
b2d42727f64cb5abbf6b2c0c7bab92a3c1b61a14
c9733aa4f378c7facd8e9a4814f0a91869f3c29e25be6138715c850b8e511ea5

HTTP Headers

GET /Delivery_files/app.css HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 21:33:32 GMT
etag: W/"638134ac-df070"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (7960 bytes)
Hash
eb00a2a503a690cee3e4dd729b5bc9bd
cfb1e5bcab2148a777889680e6e36b9d7e8917ec
7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7960
x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEd8HC0oAMFUag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yL-FrFYh-3PuCZCpCHYg--ebTS7wMmMQ7IE2mgimDVsKWFEtKC2gVQ==
via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 06:08:38 GMT
age: 22190
etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.9 kB (7897 bytes)
Hash
8c3214044657f3b876d1f1848bca5684
7558222788f06623ddae6e883413e38e1146281e
e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oV7bB5Tek01MFi9x2tr_Wix13-UGlQPIt042XM0ALNUvVFYnu5DRcg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:38:26 GMT
age: 31202
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/font-awesome.min.css

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/font-awesome.min.css
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Delivery_files/font-awesome.min.css HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 21:33:32 GMT
etag: W/"638134ac-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/jquery-1.12.4.min.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/jquery-1.12.4.min.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/jquery-1.12.4.min.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:35 GMT
etag: W/"638134af-17b8b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/card.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/card.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/card.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:35 GMT
etag: W/"638134af-e52a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery.php

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery.php
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	DHL Airways, Inc.
fortinet	Phishing

HTTP Headers

GET /Delivery.php HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc; path=/
x-powered-by: PHP/8.0.26, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/mine.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/mine.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/mine.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:35 GMT
etag: W/"638134af-644"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/imask.min.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/imask.min.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/imask.min.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:35 GMT
etag: W/"638134af-b217"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

files.killbot.org/.cdn-cgi/killbot-security.js

104.21.11.160

404 Not Found

0 B

URL HTTP/2
files.killbot.org/.cdn-cgi/killbot-security.js
IP
104.21.11.160:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /.cdn-cgi/killbot-security.js HTTP/1.1
Host: files.killbot.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 404 Not Found
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/html
content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'
cache-control: max-age=14400
cf-cache-status: HIT
age: 164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bUR4RnH0AYFfNHGWqDtmZO6T1OtjpTyvOQE4jfHbdoGLHyVSucwcDS13JQVcxLzKYZige9hpGUMjGGIihDnkHg3bC7%2Bo6KNAkn9%2FGZWFFvhhFwuMy%2BEva4mzsFk0uco009Rmxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776daef87c38fabc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/logger-1.min.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/logger-1.min.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/logger-1.min.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:34 GMT
etag: W/"638134ae-c3710"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/main.min.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/main.min.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/main.min.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:32 GMT
etag: W/"638134ac-a7c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/intlTelInput.css

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/intlTelInput.css
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Delivery_files/intlTelInput.css HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 21:33:32 GMT
etag: W/"638134ac-6037"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/data.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/data.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/data.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:35 GMT
etag: W/"638134af-2f44"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/intlTelInput.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/intlTelInput.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/intlTelInput.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 21:33:36 GMT
etag: W/"638134b0-15cf8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/css

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/css
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/css HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/plain
last-modified: Fri, 25 Nov 2022 21:33:32 GMT
etag: W/"638134ac-222a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/newcc.css

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/newcc.css
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Delivery_files/newcc.css HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 21:33:32 GMT
etag: W/"638134ac-145b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/all.min.css

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/all.min.css
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Delivery_files/all.min.css HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 21:33:33 GMT
etag: W/"638134ad-189ae"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

livraison-dhl-colis.com/Delivery_files/app.js

89.23.103.7

200 OK

0 B

URL HTTP/2
livraison-dhl-colis.com/Delivery_files/app.js
IP
89.23.103.7:0
ASN
#48687 Noviton Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Delivery_files/app.js HTTP/1.1
Host: livraison-dhl-colis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livraison-dhl-colis.com/Delivery.php
Cookie: PHPSESSID=oj3hu7e5qv19td1si66055l8jc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 12:18:27 GMT
content-type: application/javascript
last-modified: Sat, 26 Nov 2022 17:37:01 GMT
etag: W/"63824ebd-e0a1f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations