Report Overview
URL
qrsu.io/eoXdO
Finishing URL
koylu-bot.neocities.org/cvcvv/
IP / ASN
76.76.21.21
Title
DHL
Phishing - DHL
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
dxsezpiucazphoaenvke.supabase.co | unknown | unknown | 2026-05-29 | 2026-06-27 | 1.7 kB | 2.4 kB |  172.64.149.246 |  |
qrsu.io 2 alert(s) on this Host | unknown | 2024-09-20 | 2025-04-02 | 2026-06-19 | 481 B | 815 B | 76.76.21.21 |  |
www.dhl.com | 12081 | 1989-05-25 | 2012-07-02 | 2026-06-20 | 586 B | 2.0 kB |  23.210.163.90 | |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-06-21 | 532 B | 103 kB | 104.17.25.14 | |
koylu-bot.neocities.org 6 alert(s) on this Host | unknown | 2013-05-24 | 2026-06-27 | 2026-06-27 | 1.6 kB | 96 kB | 23.143.32.12 | |
i.ibb.co | 21643 | 2010-07-20 | 2018-11-25 | 2026-06-25 | 549 B | 1.7 MB |  45.43.142.6 |   |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-06-21 | 2.3 kB | 170 kB | 142.250.178.35 | |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-06-21 | 570 B | 36 kB | 142.250.178.42 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | qrsu.io | malicious | Sinkholed |
| DNS4EU | qrsu.io | malicious | Sinkholed |
| Cloudflare DNS | koylu-bot.neocities.org | malicious | Sinkholed |
JavaScript (8)
No JavaScripts
HTTP Transactions (14)
| URL | IP | Response | Size |
|---|