Report Overview

  1. Submitted URL

    www.esnafbenim.com/wp-includes/2022/-/load/6c904130a030a73638e3c9e003fc5ff1/execution.html

  2. IP

    93.89.224.134

    ASN

    #51557 Isimtescil Bilisim A.S.

  3. Submitted

    2022-09-05 21:50:37

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    Phishing - DHL

Detections

  1. urlquery

    9

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    64

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.jsdelivr.net4390001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
ajax.googleapis.com129050001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.globalsign.com20750001-01-01T00:00:00Z0001-01-01T00:00:00Z
code.jquery.com6340001-01-01T00:00:00Z0001-01-01T00:00:00Z
ipinfo.io81360001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.esnafbenim.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumwww.esnafbenim.com/wp-includes/2022/-/load/6c904130a030a73638e3c9e003fc5ff1/execution.htmlDHL Airways, Inc.
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/DHL_head.htmlDHL Airways, Inc.

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumwww.esnafbenim.com/wp-includes/2022/-/load/6c904130a030a73638e3c9e003fc5ff1/execution.htmlPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/jquery-lang.jsPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/js.cookie.jsPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/load.phpPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/DHL_head.htmlPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/DHL_footer.htmlPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woffPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woffPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woffPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/langpack/en.jsonPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woffPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/DHL_track.htmlPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/jquery.validate.min.jsPhishing
mediumwww.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woffPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed
mediumesnafbenim.comSinkholed

JavaScript (14)

HTTP Transactions (41)

URLIPResponseSize
www.esnafbenim.com/wp-includes/2022/-/load/6c904130a030a73638e3c9e003fc5ff1/execution.html
93.89.224.134200 OK1.8 kB
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK5.3 kB
ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
216.58.207.202200 OK33 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
code.jquery.com/jquery-3.5.1.min.js
69.16.175.42200 OK31 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/jquery-lang.js
93.89.224.134200 OK7.0 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/js.cookie.js
93.89.224.134200 OK1.4 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK329 B
www.esnafbenim.com/wp-includes/2022/-/load/dist/dhl.css
93.89.224.134200 OK313 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
www.esnafbenim.com/wp-includes/2022/-/load/dist/load.php
93.89.224.134200 OK1.2 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/DHL_head.html
93.89.224.134200 OK3.1 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/DHL_footer.html
93.89.224.134200 OK6.1 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woff
93.89.224.134200 OK9.3 kB
push.services.mozilla.com/
52.43.58.150101 Switching Protocols0 B
www.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woff
93.89.224.134200 OK41 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woff
93.89.224.134200 OK41 kB
ipinfo.io/country
34.117.59.81302 Found72 B
www.esnafbenim.com/wp-includes/2022/-/load/dist/langpack/en.json
93.89.224.134200 OK514 B
ocsp.pki.goog/s/gts1d4/5QlTZKzjgCw
142.250.74.3200 OK472 B
www.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woff
93.89.224.134200 OK44 kB
ocsp.pki.goog/s/gts1d4/5QlTZKzjgCw
142.250.74.3200 OK472 B
www.esnafbenim.com/wp-includes/2022/-/load/dist/favicon.ico
93.89.224.134200 OK1.2 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg
34.120.237.76200 OK5.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
34.120.237.76200 OK15 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
34.120.237.76200 OK4.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
34.120.237.76200 OK5.7 kB
ipinfo.io/country
34.117.59.81429 Too Many Requests8.0 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/DHL_track.html
93.89.224.134200 OK2.4 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/jquery.validate.min.js
93.89.224.134200 OK7.8 kB
cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js
151.101.85.229301 Moved Permanently0 B
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK1.5 kB
www.esnafbenim.com/wp-includes/2022/-/load/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woff
93.89.224.134200 OK41 kB