Report - distinctfreight.co.zw/fgjj/PDFFILE/

Report Overview

Submitted URL
distinctfreight.co.zw/fgjj/PDFFILE/
IP
41.221.145.2
ASN
#36986 AINET
Submitted
2024-05-05 03:39:57
Access
public
Website Title
Adobe PDF
Final URL
distinctfreight.co.zw/fgjj/PDFFILE/
Tags
adobe phishing
urlquery detections
Phishing - Adobe

Detections

urlquery
15
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
antispmelite.com	unknown	unknown	2015-06-10	2017-11-08	350 B	0 B	0.0.0.0
distinctfreight.co.zw	unknown	unknown	2018-05-12	2023-11-29	2.8 kB	127 kB	41.221.145.2

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	antispmelite.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	distinctfreight.co.zw/fgjj/PDFFILE/	2 B	2023-03-07	2024-05-18
Pretty URL distinctfreight.co.zw/fgjj/PDFFILE/ IP 41.221.145.2 ASN #36986 AINET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:30 Last Seen2024-05-18 17:46:11 Times Seen13725 Hash e1c06d85ae7b8b032bef47e42e4c08f9 71853c6197a6a7f222db0f1978c7cb232b87c5ee 75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070 Loading...

	distinctfreight.co.zw/fgjj/PDFFILE/	505 B	2023-03-10	2024-05-07
Pretty URL distinctfreight.co.zw/fgjj/PDFFILE/ IP 41.221.145.2 ASN #36986 AINET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 09:20:59 Last Seen2024-05-07 14:14:05 Times Seen24 Hash 218f16154a948000bba694d2a931737a 29ba9dfc01ba5bece12e6f49857aadc83a1bcdfb 976d239b90f830cdd063b8f3a853c912791974f3ee82a3750dc15469319ff027 Loading...

HTTP Transactions (8)

URL IP Response Size

distinctfreight.co.zw/fgjj/PDFFILE/

41.221.145.2

200 OK

15 kB

URL User Request GET HTTP/1.1
distinctfreight.co.zw/fgjj/PDFFILE/
IP
41.221.145.2:80
ASN
#36986 AINET

File type
HTML document, ISO-8859 text, with very long lines (1512), with CRLF line terminators
Size
15 kB (15032 bytes)
Hash
0f868a525d665e4e47b452d498fabc8a
f834001f04138c8f5425df962c540b3c0ebd8cb4
bc4530fcd57cb2d632340ce9b46c0e32f97eef766c6aceb44a788b2725591563

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Adobe

HTTP Headers

GET /fgjj/PDFFILE/ HTTP/1.1
Host: distinctfreight.co.zw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:39:32 GMT
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Wed, 30 Dec 2015 07:28:16 GMT
ETag: "162564-3ab8-528187b450400"
Accept-Ranges: bytes
Content-Length: 15032
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

distinctfreight.co.zw/fgjj/PDFFILE/fonts/et-line.woff

41.221.145.2

404 Not Found

486 B

URL GET HTTP/1.1
distinctfreight.co.zw/fgjj/PDFFILE/fonts/et-line.woff
IP
41.221.145.2:80
ASN
#36986 AINET

Requested by
http://distinctfreight.co.zw/fgjj/PDFFILE/

File type
HTML document, ASCII text
Size
486 B (486 bytes)
Hash
3396509bd457f22422cbba5524a66d52
0419aa240c574a0bb0ff4d19a1c21b7eabf594cf
d6cfa823ddc3e176eced443ef76bd1457a84100f6550d7ce59d5cb15363f4c84

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Adobe

HTTP Headers

GET /fgjj/PDFFILE/fonts/et-line.woff HTTP/1.1
Host: distinctfreight.co.zw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://distinctfreight.co.zw/fgjj/PDFFILE/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sun, 05 May 2024 03:39:33 GMT
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 486
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

distinctfreight.co.zw/fgjj/PDFFILE/smallpdf.png

41.221.145.2

404 Not Found

480 B

URL GET HTTP/1.1
distinctfreight.co.zw/fgjj/PDFFILE/smallpdf.png
IP
41.221.145.2:80
ASN
#36986 AINET

Requested by
http://distinctfreight.co.zw/fgjj/PDFFILE/

File type
HTML document, ASCII text
Size
480 B (480 bytes)
Hash
3eafeb7f9b89c41bfb5aa62e570be8b9
f684adebdf5cda00fc9bb205ac6ebaa546faa52f
c7b184ee7311af9ac64eb28c20b04e012629d280f86a3c676e6cb4f660712b0f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Adobe

HTTP Headers

GET /fgjj/PDFFILE/smallpdf.png HTTP/1.1
Host: distinctfreight.co.zw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://distinctfreight.co.zw/fgjj/PDFFILE/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sun, 05 May 2024 03:39:33 GMT
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 480
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

distinctfreight.co.zw/fgjj/PDFFILE/index_files/100Secure.jpg

41.221.145.2

200 OK

4.7 kB

URL GET HTTP/1.1
distinctfreight.co.zw/fgjj/PDFFILE/index_files/100Secure.jpg
IP
41.221.145.2:80
ASN
#36986 AINET

Requested by
http://distinctfreight.co.zw/fgjj/PDFFILE/

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x69, components 3
Size
4.7 kB (4687 bytes)
Hash
2e6a7c17a90b17b5ff2019543193b4e9
0f42d5c96d61f25f18bdaad097a14ec0cc08399e
2f71bea7601b970d07eea91af38bcee8b1c9fc197b5f85cbe9bae3b9f2b705c5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Adobe

HTTP Headers

GET /fgjj/PDFFILE/index_files/100Secure.jpg HTTP/1.1
Host: distinctfreight.co.zw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://distinctfreight.co.zw/fgjj/PDFFILE/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:39:33 GMT
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Mon, 28 Dec 2015 16:44:16 GMT
ETag: "162566-124f-527f803ff7800"
Accept-Ranges: bytes
Content-Length: 4687
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

distinctfreight.co.zw/fgjj/PDFFILE/fonts/et-line.ttf

41.221.145.2

404 Not Found

485 B

URL GET HTTP/1.1
distinctfreight.co.zw/fgjj/PDFFILE/fonts/et-line.ttf
IP
41.221.145.2:80
ASN
#36986 AINET

Requested by
http://distinctfreight.co.zw/fgjj/PDFFILE/

File type
HTML document, ASCII text
Size
485 B (485 bytes)
Hash
f095048591999c08c9603db2ff4d3730
295a52212ee027d95359cb74460843da7d55dbb2
b9b2f5ca394e4e2cdb9c3725f3341fc90c744172a7724a71e57db4d5ce4c7e18

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Adobe

HTTP Headers

GET /fgjj/PDFFILE/fonts/et-line.ttf HTTP/1.1
Host: distinctfreight.co.zw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://distinctfreight.co.zw/fgjj/PDFFILE/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sun, 05 May 2024 03:39:33 GMT
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 485
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

distinctfreight.co.zw/fgjj/PDFFILE/index_files/pdf-logo.png

41.221.145.2

200 OK

32 kB

URL GET HTTP/1.1
distinctfreight.co.zw/fgjj/PDFFILE/index_files/pdf-logo.png
IP
41.221.145.2:80
ASN
#36986 AINET

Requested by
http://distinctfreight.co.zw/fgjj/PDFFILE/

File type
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Size
32 kB (31580 bytes)
Hash
2c9a9eb978ff3a4a4f208b2c45739fd3
491bc4fc03ab9fdaad9c0e11190d459688abd774
d5a135bd47b11881dc1a223ea1ea946e6ca5e7cb3b1af58eef8629ea017dbd4e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Adobe

HTTP Headers

GET /fgjj/PDFFILE/index_files/pdf-logo.png HTTP/1.1
Host: distinctfreight.co.zw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://distinctfreight.co.zw/fgjj/PDFFILE/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:39:33 GMT
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Mon, 28 Dec 2015 16:44:16 GMT
ETag: "162568-7b5c-527f803ff7800"
Accept-Ranges: bytes
Content-Length: 31580
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png

distinctfreight.co.zw/fgjj/PDFFILE/bg.jpg

41.221.145.2

200 OK

72 kB

URL GET HTTP/1.1
distinctfreight.co.zw/fgjj/PDFFILE/bg.jpg
IP
41.221.145.2:80
ASN
#36986 AINET

Requested by
http://distinctfreight.co.zw/fgjj/PDFFILE/

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1600x861, components 3
Size
72 kB (72403 bytes)
Hash
da344346f4e6ea3019cf6abd68f77543
642406d183a0a0b2045685efd81bf85fcc616240
ab2f1ad401645c1f385ebae90167cf7d291bef915f78d7f5bd8d5f6ae5b006c7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Adobe

HTTP Headers

GET /fgjj/PDFFILE/bg.jpg HTTP/1.1
Host: distinctfreight.co.zw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://distinctfreight.co.zw/fgjj/PDFFILE/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:39:33 GMT
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Mon, 28 Dec 2015 16:50:10 GMT
ETag: "162560-11ad3-527f819191480"
Accept-Ranges: bytes
Content-Length: 72403
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

antispmelite.com/favicon.ico

0.0.0.0

0 B

URL GET
antispmelite.com/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
http://distinctfreight.co.zw/fgjj/PDFFILE/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: antispmelite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://distinctfreight.co.zw/
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by