| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash577f20b1ad1240dc12215f4d93e53b8f 4fb6d79b9c4adb8f712073e9662ceae41a4f097c 523bc00bcd3cc12a640ebce3df80c0aed9fc552c4be5bae1831c00b9027ce0c0
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "523BC00BCD3CC12A640EBCE3DF80C0AED9FC552C4BE5BAE1831C00B9027CE0C0"
Last-Modified: Wed, 24 Jul 2024 18:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9228
Expires: Sat, 27 Jul 2024 04:05:31 GMT
Date: Sat, 27 Jul 2024 01:31:43 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash559312780d7c69aabb31f612abe74b95 0d0356dc28789b5b2b0164783f2c79b6b7b82f6a 20293009653baaf415bde5c2223feb0a6562281a1dfbcc6af42d844341da6d26
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "20293009653BAAF415BDE5C2223FEB0A6562281A1DFBCC6AF42D844341DA6D26"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18923
Expires: Sat, 27 Jul 2024 06:47:07 GMT
Date: Sat, 27 Jul 2024 01:31:44 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash8f4e7b75de1ed909fa79bbcdafccceac 274c1ea75520a0ea06e19a7e692c034baae2cdc1 62cc974e51b62480f576b53853f8f24bfc873687c02bc23c1713956d4b96c0b1
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "62CC974E51B62480F576B53853F8F24BFC873687C02BC23C1713956D4B96C0B1"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9641
Expires: Sat, 27 Jul 2024 04:12:25 GMT
Date: Sat, 27 Jul 2024 01:31:44 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash0b6f864b0a3d0cf483b0830bdb98cded 12564f2826ce74a640c3b65ef52d12f21c8e6f3c d32892cb09f33f4057712b1c1b511af5ea5528cd0f23ba90858d659ec4fcd190
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D32892CB09F33F4057712B1C1B511AF5EA5528CD0F23BA90858D659EC4FCD190"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5055
Expires: Sat, 27 Jul 2024 02:55:59 GMT
Date: Sat, 27 Jul 2024 01:31:44 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash91392416ed946eb8b26810ff46d7e57e 8ce21a441df1ac09da4ebf098eaf47e2d74bbff0 5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9659
Expires: Sat, 27 Jul 2024 04:12:45 GMT
Date: Sat, 27 Jul 2024 01:31:46 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash91392416ed946eb8b26810ff46d7e57e 8ce21a441df1ac09da4ebf098eaf47e2d74bbff0 5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9659
Expires: Sat, 27 Jul 2024 04:12:45 GMT
Date: Sat, 27 Jul 2024 01:31:46 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash91392416ed946eb8b26810ff46d7e57e 8ce21a441df1ac09da4ebf098eaf47e2d74bbff0 5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9659
Expires: Sat, 27 Jul 2024 04:12:45 GMT
Date: Sat, 27 Jul 2024 01:31:46 GMT
Connection: keep-alive
|
|
| boomerangsolution.deltatrack.ro/ | 193.203.204.226 | | 20 B |
URL boomerangsolution.deltatrack.ro/ IP 193.203.204.226:0
ASN#39758 SimpliQ Tech SRL
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sat, 27 Jul 2024 01:31:43 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: tracking.php
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 20 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sat, 27 Jul 2024 01:31:44 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: tracking.php
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| boomerangsolution.deltatrack.ro/tracking.php | 193.203.204.226 | | 46 kB |
URL boomerangsolution.deltatrack.ro/tracking.php IP 193.203.204.226:0
ASN#39758 SimpliQ Tech SRL
File typeHTML document, ASCII text, with very long lines (33241), with CRLF line terminators Hash1e068cdee1bd023974e580f39e0322fd dba5c5086f6137f0519552b21b4e8fba27161410 72dd515c65724011f611339d346e2c570aa9e63d04de7e110e7b33f8fb4625d6
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | PhishTank | phishing | Other | Quad9 DNS | malicious | Sinkholed |
GET /tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Jul 2024 01:31:43 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 140 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashe0e936ce32c2c66f57c79a890f62352a 3d3526a194dd864cafc06e5a068cfaa65c3d3ad0 135c848ea0e3ced822ba435e36800656aaaa45de62688f73db38b8028067ed65
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:44 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 12 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash643f120abd5fd61230f8b042d5dee3d7 9c398232ff374dd24b811aa1987a08aa6b3caae5 9ccb6ae466a5dfb462414d2bb50d13efe9d1c65abe90601089b0ca486ca1bd98
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 4.6 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash0a70186b67db1e1372946a366c65daaa 4a148f66c3b92a54e413b6a83275aade8b3627c0 6761f2e86231f537e4e58509b6bda0af2bc3b9ab72d675dc2283af6fa254767a
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 80 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashebba6f95050d9c8bc108afd55a8e64bf 77fa7c6da4262f45e550796281bc3a306f1bbab5 8d779a504a4175abf17a101756c7e72e9a77466d89656aded7ca632a0bc537ce
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 10 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash91a1bf5b154c50f2523b16c4ff4f85da e172f0d0d6efe69e46d59d0ca6636552293848b4 b6d227691e8f3779af3db598e5aca25a2ca03d7ec0351aeb0d48e887f6f8f1d2
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 5.1 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash9afa4dd8be2e2b4132541dd305c616a7 27b6609fb3fc0c8a536dfde64799c864a6ebe44f b50c7bbedd6e7f3b0c79bace40862d9f0df0b48a58768fb260d3307df7aaebf1
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 220 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashb9b00e301c361e0fd0b2568ff09c6e12 52a478c1996dbb8b75e49c3eb3f7edb72fb8f312 f8a3faa4b19b587e17f002a5c5dea8ba2eeb998a564b5b4ef56b761d90a58fbe
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 80 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashebba6f95050d9c8bc108afd55a8e64bf 77fa7c6da4262f45e550796281bc3a306f1bbab5 8d779a504a4175abf17a101756c7e72e9a77466d89656aded7ca632a0bc537ce
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 420 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashaade78f3a7b93bea586791d2b38fd71b 32d36031c8a18211f4b62945746d3c522ca3fe90 e9cf3a0c714a45a46e75d299e37a4aabeb04c862e65d92c73a7998a91eaa7e9c
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 320 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash4b01465d8d2fb8d69ce6df7fff46e856 73aa4b24669e7ec134cf2bedd949165cbad96797 7ff15a5bb56be8bf6d9d497b6e753e213e55004bb88a23518c4d8ff12b7b878c
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.php | 193.203.204.226 | 302 Found | 0 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|