Report Overview

  1. Submitted URL

    helpdesk.randevupanzio.ro/public/HCtF3hq2q7KUesgh7THtaIGIYGRNOxt5

  2. IP

    89.35.204.123

    ASN

    #20616 H88 Web Hosting S.r.l.

  3. Submitted

    2023-02-01 07:19:36

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - DHL

Detections

  1. urlquery

    7

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    36

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
helpdesk.randevupanzio.rounknown2022-12-30T10:36:17Z2023-03-12T14:32:21Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
ws-mt1.pusher.com82532018-09-20T13:30:02Z2023-03-13T07:20:47Z
static.hotjar.com6412014-11-01T06:14:27Z2023-03-13T05:12:51Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
cdnjs.cloudflare.com2352015-04-17T22:46:33Z2023-03-13T05:09:21Z
kit.fontawesome.com18682019-12-16T20:51:31Z2023-03-13T05:10:17Z
killbot.orgunknown2014-03-26T14:15:40Z2023-03-13T03:31:53Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 89.35.204.123Client IP

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/publicDHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.
mediumhelpdesk.randevupanzio.ro/DHL Airways, Inc.

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumhelpdesk.randevupanzio.ro/public/HCtF3hq2q7KUesgh7THtaIGIYGRNOxt5Phishing
mediumhelpdesk.randevupanzio.ro/publicPhishing
mediumhelpdesk.randevupanzio.ro/public/Phishing
mediumhelpdesk.randevupanzio.ro/VJWK9vwkq0bhPbT3Bb2Za3TL2ZGkJLr5/Phishing
mediumhelpdesk.randevupanzio.ro/public/VJWK9vwkq0bhPbT3Bb2Za3TL2ZGkJLr5Phishing
mediumhelpdesk.randevupanzio.ro/public/js/session-recorder.jsPhishing
mediumhelpdesk.randevupanzio.ro/public/js/app.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (11)

HTTP Transactions (37)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
push.services.mozilla.com/
44.233.165.74101 Switching Protocols0 B
helpdesk.randevupanzio.ro/public/HCtF3hq2q7KUesgh7THtaIGIYGRNOxt5
89.35.204.123302 Found402 B
helpdesk.randevupanzio.ro/public
89.35.204.123301 Moved Permanently248 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc604ad8c-77b4-404f-8364-407f6935f0f1.jpeg
34.120.237.76200 OK9.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
34.120.237.76200 OK9.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff881dee4-27ea-4970-91da-e85794176516.jpeg
34.120.237.76200 OK7.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
34.120.237.76200 OK6.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c0a4094-de1e-41f3-9e75-80a725d23095.jpeg
34.120.237.76200 OK9.8 kB
helpdesk.randevupanzio.ro/public/
89.35.204.123200 OK558 B
ocsp.digicert.com/
93.184.220.29200 OK280 B
helpdesk.randevupanzio.ro/VJWK9vwkq0bhPbT3Bb2Za3TL2ZGkJLr5/
89.35.204.123301 Moved Permanently1.5 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.25.14200 OK5.6 kB
ocsp.digicert.com/
93.184.220.29200 OK280 B
helpdesk.randevupanzio.ro/public/VJWK9vwkq0bhPbT3Bb2Za3TL2ZGkJLr5
89.35.204.123200 OK60 kB
helpdesk.randevupanzio.ro/public/js/session-recorder.js
89.35.204.123200 OK45 kB
helpdesk.randevupanzio.ro/public/css/app.css
89.35.204.123200 OK440 kB
helpdesk.randevupanzio.ro/images/logo.png
89.35.204.123200 OK2.0 kB
helpdesk.randevupanzio.ro/images/all.png
89.35.204.123200 OK12 kB
helpdesk.randevupanzio.ro/public/js/app.js
89.35.204.123200 OK1.6 MB
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
35.171.29.57101 Switching Protocols0 B
helpdesk.randevupanzio.ro/images/favicon.gif
89.35.204.123200 OK2.2 kB
kit.fontawesome.com/f7165dd215.js
104.18.23.52200 OK0 B
static.hotjar.com/c/hotjar-2895475.js?sv=6
54.230.111.8200 OK0 B
killbot.org/api/v2/whois?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU
172.67.166.105200 OK0 B
killbot.org/api/v2/blocker?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU&ip=91.90.42.154&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&url=
172.67.166.105401 Unauthorized0 B