WEBSITE ANALYSIS REPORT

https://www.ehtlimo.com/wp-content/plugins/elementor/includes/base/js/app/details.php?lang=*

13 Oct 2026 · 12:55:26.000 UTCpublic

Report tags: dhl logistics phishing
Submit tags: openphish

Request review

Phishing detected

2 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:54:55.098 GET 200 document 7.5 KB 551 ms 1 alerts

12:54:56.197 GET 200 stylesheet 227.4 KB 59 ms —

12:54:56.200 GET 200 stylesheet 99.6 KB 48 ms —

12:54:56.203 GET 200 stylesheet 120.5 KB 45 ms —

12:54:56.205 GET 200 stylesheet 31.5 KB 148 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://www.ehtlimo.com/wp-content/plugins/elementor/includes/base/js/app/Asstes/css/style.css

IP / ASN

82.180.174.197

AS47583 · Hostinger International Limited

Requested by: https://www.ehtlimo.com/wp-content/plugins/elementor/includes/base/js/app/details.php?lang=*

Resource information

File type: ASCII text, with very long lines (375)
MIME type: text/css
First seen (UTC): 05 Oct 2025 · 06:33:19.904 UTC
Last seen (UTC): 13 Oct 2026 · 15:44:39.045 UTC
Times seen: 47

Size: 31.5 KB (32227 bytes)
MD5: 4409a36e7d4ac8d508a0da9fd3e57754
SHA1: f0b80af553f9ce14fdb07fb70ef52a53b01845f5
SHA256: 51a3b937023ef6a16c096c3e2a0e4584f10a803c3c4bc067597e248edbe6bf6b

Certificate information

Issuer: Let's Encrypt · YE2
Subject: ehtlimo.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: F1:E2:1F:AE:50:DD:15:80:81:9C:30:15:5C:32:FB:58:9E:74:2B:A8
Valid from: Wed, 19 Aug 2026 10:40:03 GMT
Valid until: Tue, 17 Nov 2026 10:40:02 GMT

Technology fingerprints

LiteSpeed (Web servers)
Hostinger (Hosting)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - DHL	medium	Phishing

HTTP headers

Request headers

GET /wp-content/plugins/elementor/includes/base/js/app/Asstes/css/style.css HTTP/1.1
Host: www.ehtlimo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.ehtlimo.com/wp-content/plugins/elementor/includes/base/js/app/details.php?lang=*
Cookie: PHPSESSID=rv1dtfuvjqgblca4hgcbi9kmju
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
cache-control: public, max-age=604800
expires: Tue, 20 Oct 2026 12:54:56 GMT
content-type: text/css
last-modified: Sun, 13 Sep 2026 15:08:14 GMT
etag: "7de3-6aa6bc5e-2379e4d16b49f2df;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3475
date: Tue, 13 Oct 2026 12:54:56 GMT
server: LiteSpeed
platform: hostinger
panel: hpanel
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000

12:54:56.210 GET 200 script 78.8 KB 47 ms —

12:54:56.213 GET 200 script 278.6 KB 65 ms —

12:54:56.216 GET 200 script 8.1 KB 19 ms —

12:54:56.225 GET 200 img 1.1 KB 147 ms 1 alerts

12:54:56.230 GET 200 img 383 B 147 ms 1 alerts

12:54:56.233 GET 200 img 332 B 155 ms 1 alerts

12:54:56.236 GET 200 img 4.0 KB 151 ms 1 alerts

12:54:56.237 GET 200 img 2.0 KB 154 ms 1 alerts

12:54:56.239 GET 200 img 2.9 KB 153 ms 1 alerts

12:54:56.387 GET 200 font 43.3 KB 311 ms 1 alerts

12:54:56.408 GET 200 font 140.4 KB 38 ms —

12:54:56.410 GET 200 font 146.6 KB 15 ms —

12:54:56.412 GET 200 font 43.9 KB 410 ms 1 alerts

12:54:56.659 GET 200 img 1.1 KB 166 ms 1 alerts

https://www.ehtlimo.com/wp-content/plugins/elementor/includes/base/js/app/details.php?lang=*

Domain graph

Hostnames

Connections