Report Overview

  1. Submitted URL

    www.ewrcommercial.com/wp-content/themes/seotheme/bot.html?key=972b0e38264bd6fbecb4e13c153c5b28&redirect=www.office.com/

  2. IP

    35.203.165.132

    ASN

    #15169 GOOGLE

  3. Submitted

    2023-01-31 09:41:41

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - Dropbox

Detections

  1. urlquery

    23

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    16

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.ewrcommercial.comunknown2019-06-11T08:23:32Z2023-01-31T06:11:12Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
airforservice.comunknown2022-12-05T19:11:48Z2023-02-16T01:23:22Z
i.ibb.co134852018-11-25T11:13:48Z2023-03-13T05:33:20Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
ajax.googleapis.com129052013-08-16T11:51:31Z2023-03-13T08:37:09Z
f003.backblazeb2.com3858172019-07-22T13:51:31Z2023-03-11T01:21:12Z
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
www.google.com72015-05-10T13:11:19Z2023-03-13T06:40:43Z
www.gstatic.comunknown2016-07-26T11:37:06Z2023-03-13T07:57:11Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumairforservice.com/email-list/dropboxyteyt25/assets/Atlas%20Grotesk%20Web%20Light%20Regular.woff2Phishing
mediumairforservice.com/email-list/dropboxyteyt25/assets/source-sans-pro-v14-latin-600.woff2Phishing
mediumairforservice.com/email-list/dropboxyteyt25/assets/Atlas%20Grotesk%20Web%20Bold%20Regular.woff2Phishing
mediumairforservice.com/email-list/dropboxyteyt25/assets/source-sans-pro-v14-latin-600.woffPhishing
mediumairforservice.com/email-list/dropboxyteyt25/assets/Atlas%20Grotesk%20Web%20Light%20Regular.woffPhishing
mediumairforservice.com/email-list/dropboxyteyt25/assets/outlook.svgPhishing
mediumairforservice.com/email-list/dropboxyteyt25/assets/office.svgPhishing
mediumairforservice.com/email-list/dropboxyteyt25/assets/search.svgPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (11)

HTTP Transactions (55)

URLIPResponseSize
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
www.ewrcommercial.com/wp-content/themes/seotheme/bot.html?key=972b0e38264bd6fbecb4e13c153c5b28&redirect=https://www.office.com/
35.203.165.132200 OK726 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
142.250.74.74200 OK31 kB
www.google.com/recaptcha/api.js
142.250.74.132200 OK556 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
142.250.74.99200 OK164 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
www.ewrcommercial.com/favicon.ico
35.203.165.132200 OK0 B
push.services.mozilla.com/
54.190.123.170101 Switching Protocols0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
34.120.237.76200 OK9.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd37b27-1930-4380-aa34-e533abb33eaa.jpeg
34.120.237.76200 OK8.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
34.120.237.76200 OK6.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefbec1f8-74c9-424a-88f1-a90a7ff35701.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg
34.120.237.76200 OK6.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9a2197-1d4c-4aad-a76e-04d2a1f77b60.jpeg
34.120.237.76200 OK13 kB
e1.o.lencr.org/
23.36.76.226200 OK345 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
f003.backblazeb2.com/file/haen-hyperpyrexial-restructures/index.html
45.11.36.16200 77 kB
e1.o.lencr.org/
23.36.76.226200 OK345 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
142.250.74.74200 OK30 kB
airforservice.com/email-list/dropboxyteyt25/assets/aol.png
172.67.157.9200 OK608 B
airforservice.com/email-list/dropboxyteyt25/assets/logo.png
172.67.157.9200 OK10 kB
airforservice.com/email-list/dropboxyteyt25/assets/Atlas%20Grotesk%20Web%20Light%20Regular.woff2
172.67.157.9200 OK34 kB
airforservice.com/email-list/dropboxyteyt25/assets/source-sans-pro-v14-latin-600.woff2
172.67.157.9200 OK16 kB
airforservice.com/email-list/dropboxyteyt25/assets/1.png
172.67.157.9200 OK12 kB
airforservice.com/email-list/dropboxyteyt25/assets/yahoo.png
172.67.157.9200 OK1.0 kB
airforservice.com/email-list/dropboxyteyt25/assets/Atlas%20Grotesk%20Web%20Bold%20Regular.woff2
172.67.157.9200 OK36 kB
airforservice.com/email-list/dropboxyteyt25/assets/source-sans-pro-v14-latin-600.woff
172.67.157.9200 OK20 kB
airforservice.com/email-list/dropboxyteyt25/assets/Atlas%20Grotesk%20Web%20Light%20Regular.woff
172.67.157.9200 OK46 kB
airforservice.com/email-list/dropboxyteyt25/assets/other.png
172.67.157.9200 OK1.8 kB
i.ibb.co/TtTg9r7/icon.png
162.19.58.157200 OK60 kB
airforservice.com/email-list/dropboxyteyt25/assets/outlook.svg
172.67.157.9200 OK0 B
airforservice.com/email-list/dropboxyteyt25/assets/office.svg
172.67.157.9200 OK0 B
airforservice.com/email-list/__vendor/redirect-to-url.php?key=972b0e38264bd6fbecb4e13c153c5b28&redirect=https%3A%2F%2Fwww.office.com%2F&fragment=
172.67.157.9200 OK0 B
airforservice.com/email-list/dropboxyteyt25/assets/search.svg
172.67.157.9200 OK0 B