Report Overview

  1. Submitted URL

    ehesg.ml/citizen(updated).zip

  2. IP

    195.20.53.117

    ASN

    #31624 Verotel International B.V.

  3. Submitted

    2023-03-21 15:04:49

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    5

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ehesg.mlunknown2022-09-12T07:51:29Z2023-03-20T16:39:14Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-26T05:10:41Z
register.freenom.comunknown2014-10-06T20:18:42Z2023-03-26T06:29:07Z
www.google-analytics.com402012-10-03T03:04:21Z2023-03-26T06:13:06Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-26T05:09:08Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-26T05:11:12Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-25T18:14:26Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-26T05:11:59Z
domain.dot.tk1665712012-05-22T19:00:16Z2023-03-26T06:29:06Z
ocsp.sectigo.com4872019-11-29T12:50:24Z2023-03-26T05:32:55Z
www.freenom.comunknown2014-05-27T04:45:17Z2023-03-26T06:29:07Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-26T05:10:29Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-25T18:12:03Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IPInternal IP
mediumClient IP 195.20.53.117
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IP 109.235.49.197

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumehesg.ml/citizen(updated).zipPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (7)

HTTP Transactions (38)

URLIPResponseSize
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
ehesg.ml/citizen(updated).zip
195.20.53.117203 630 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
domain.dot.tk/p/?d=EHESG.ML&i=91.90.42.154&c=47&ro=0&ref=unknown&_=1679411078700
109.235.49.197301 Moved Permanently0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679410407
35.186.227.193200 OK2.9 kB
r3.o.lencr.org/
23.33.119.27200 OK503 B
www.freenom.com/css/reset.css
35.186.227.193200 OK795 B
www.freenom.com/js/jquery.easing.min.js
35.186.227.193200 OK7.0 kB
www.freenom.com/css/font-awesome.min.css
35.186.227.193200 OK27 kB
ocsp.pki.goog/gts1c3
142.250.74.163200 OK471 B
www.freenom.com/css/style-2015.css
35.186.227.193200 OK37 kB
www.freenom.com/css/freenom.min.css
35.186.227.193200 OK53 kB
www.freenom.com/images.v2/logo.png
35.186.227.193200 OK12 kB
www.freenom.com/js/jquery.rotating.backgrounds.js
35.186.227.193200 OK979 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
register.freenom.com/js/login.js
104.155.8.167200 OK948 B
ocsp.pki.goog/gts1c3
142.250.74.163200 OK472 B
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
push.services.mozilla.com/
35.166.36.55101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
142.250.74.163200 OK472 B
www.google-analytics.com/j/collect?v=1&_v=j99&a=725775669&t=pageview&_s=1&dl=https%3A%2F%2Fwww.freenom.com%2Fen%2Fpagenotfound.html%3F_urlfwd%3D1%26_%3D1679410407&dr=http%3A%2F%2Fehesg.ml%2F&ul=en-us&de=UTF-8&dt=Page%20not%20found&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=AACAAEABAAAAACAAI~&jid=1548167787&gjid=1291955878&cid=1947841739.1679408428&tid=UA-13022573-13&_gid=291597285.1679408428&_r=1&_slc=1&z=1360250495
142.250.74.174200 OK3 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e5e49ed-9ec4-4b75-b7ba-3c4c213d5d27.jpeg
34.120.237.76200 OK4.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68a4b574-14c9-4d65-81df-d700ef3fa2f4.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg
34.120.237.76200 OK6.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6943b819-ab3e-4698-a81d-266be026b4b8.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
34.120.237.76200 OK8.2 kB