Report Overview

  1. Submitted URL

    login.dokument.certificate.52-14-144-11.cprapid.com/id/dklogin.php

  2. IP

    52.14.144.11

    ASN

    #16509 AMAZON-02

  3. Submitted

    2023-01-31 12:36:03

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - Nordea

Detections

  1. urlquery

    18

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    72

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
t.dtscout.com119512017-01-30T05:52:42Z2023-03-13T05:10:53Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
www.gstatic.comunknown2016-07-26T11:37:06Z2023-03-13T07:57:11Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
cdn.tynt.com72602012-05-21T18:51:48Z2023-03-13T08:41:50Z
dtsedge.com504052016-07-13T20:11:09Z2023-03-13T04:50:05Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
whos.amung.us126872014-04-02T16:27:13Z2023-03-13T07:28:15Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
ocsp.sectigo.com4872019-11-29T12:50:24Z2023-03-13T08:22:43Z
ic.tynt.com43002013-08-06T03:33:59Z2023-03-13T08:58:22Z
de.tynt.com12522013-08-06T03:33:59Z2023-03-13T07:56:02Z
widgets.amung.us126232012-05-21T21:25:54Z2023-03-13T08:13:33Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
www.mitid.dkunknown2017-04-03T14:46:36Z2023-03-13T06:54:49Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
login.dokument.certificate.52-14-144-11.cprapid.comunknown2023-01-29T10:03:16Z2023-03-05T20:01:18Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
medium 52.14.144.11Client IP

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/dklogin.phpNordea Bank

PhishTank
SeverityIndicatorAlert
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/dklogin.phpOther

Fortinet's Web Filter
SeverityIndicatorAlert
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/dklogin.phpPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/frame/mitlogin.phpPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.downloadPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svgPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svgPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woffPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svgPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woffPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svgPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/empty-3857ebe69f653487f8c9d99adde4657f.svgPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/all/no-connection-83f79e2367a313b468986e12a237c346.svgPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/partials/js/jquery.jsPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/partials/status.phpPhishing
mediumlogin.dokument.certificate.52-14-144-11.cprapid.com/id/partials/status.phpPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed
mediumcprapid.comSinkholed

ThreatFox

No alerts detected


JavaScript (12)

HTTP Transactions (59)

URLIPResponseSize
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
login.dokument.certificate.52-14-144-11.cprapid.com/id/dklogin.php
52.14.144.11200 OK18 kB
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
login.dokument.certificate.52-14-144-11.cprapid.com/id/frame/mitlogin.php
52.14.144.11200 OK8.0 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/translateelement.css
52.14.144.11200 OK19 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.download
52.14.144.11404 Not Found10 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css
52.14.144.11200 OK46 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svg
52.14.144.11200 OK2.8 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/translate_24dp.png
52.14.144.11200 OK825 B
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svg
52.14.144.11200 OK2.3 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff
52.14.144.11200 OK32 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/5e73b3c67b0510c4c5cf-6629cb5350d6f3276b2dccc43bd3f397.png
52.14.144.11200 OK40 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/frame/mitd.css
52.14.144.11200 OK56 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svg
52.14.144.11200 OK3.1 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff
52.14.144.11200 OK31 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svg
52.14.144.11200 OK3.1 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/empty-3857ebe69f653487f8c9d99adde4657f.svg
52.14.144.11200 OK1.6 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/no-connection-83f79e2367a313b468986e12a237c346.svg
52.14.144.11200 OK5.0 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
login.dokument.certificate.52-14-144-11.cprapid.com/id/all/banner.png
52.14.144.11200 OK40 kB
www.gstatic.com/images/branding/product/2x/translate_24dp.png
142.250.74.3200 OK1.8 kB
login.dokument.certificate.52-14-144-11.cprapid.com/id/partials/js/jquery.js
52.14.144.11200 OK272 kB
push.services.mozilla.com/
52.88.25.203101 Switching Protocols0 B
ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
142.250.74.131200 OK472 B
whos.amung.us/pingjs/?k=holland001&t=Nordea%20identification&c=s&x=http%3A%2F%2Flogin.dokument.certificate.52-14-144-11.cprapid.com%2Fid%2Fdklogin.php&y=&a=0&d=0.817&v=27&r=3614
172.67.8.141200 OK47 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
www.mitid.dk/assets/fonts/IBMPlexSans-Medium.woff
95.100.107.87200 OK15 kB
www.mitid.dk/assets/fonts/IBMPlexSans-Medium.woff2
95.100.107.87200 OK15 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
34.120.237.76200 OK10 kB
cdn.tynt.com/tc.js
104.18.36.173200 OK6.7 kB
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675168571121&dn=TC&iso=0&pu=http%3A%2F%2Flogin.dokument.certificate.52-14-144-11.cprapid.com%2Fid%2Fdklogin.php&t=Nordea%20identification
67.202.105.31204 No Content0 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675168571121&dn=TC&iso=0&pu=http%3A%2F%2Flogin.dokument.certificate.52-14-144-11.cprapid.com%2Fid%2Fdklogin.php
67.202.105.31204 No Content0 B
de.tynt.com/deb/v2?id=w!holland001&dn=TC&cc=1&r=&pu=http%3A%2F%2Flogin.dokument.certificate.52-14-144-11.cprapid.com%2Fid%2Fdklogin.php
67.202.105.33200 OK4 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675168571121&dn=TC&iso=0&pu=http%3A%2F%2Flogin.dokument.certificate.52-14-144-11.cprapid.com%2Fid%2Fdklogin.php
67.202.105.31204 No Content0 B
ic.tynt.com/b/p?id=w!holland001&lm=0&ts=1675168571121&dn=TC&iso=0&pu=http%3A%2F%2Flogin.dokument.certificate.52-14-144-11.cprapid.com%2Fid%2Fdklogin.php
67.202.105.31204 No Content0 B
login.dokument.certificate.52-14-144-11.cprapid.com/id/partials/status.php
52.14.144.11500 Internal Server Error0 B
login.dokument.certificate.52-14-144-11.cprapid.com/id/partials/status.php
52.14.144.11500 Internal Server Error0 B
www.mitid.dk/assets/fonts/IBMPlexSans-SemiBold.woff2
95.100.107.87200 OK0 B
t.dtscout.com/i/?l=http%3A%2F%2Flogin.dokument.certificate.52-14-144-11.cprapid.com%2Fid%2Fdklogin.php&j=
141.101.120.10200 OK0 B
t.dtscout.com/pv/?_a=v&_h=login.dokument.certificate.52-14-144-11.cprapid.com&_ss=3s95qnents&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=7a93&_cb=_dtspv.c
141.101.120.10200 OK0 B
widgets.amung.us/small.js
104.22.74.171200 OK0 B
www.mitid.dk/assets/fonts/IBMPlexSans-Bold.woff2
95.100.107.87200 OK0 B
www.mitid.dk/assets/fonts/IBMPlexSans-Bold.woff
95.100.107.87200 OK0 B
dtsedge.com/ping/?t=0&d=login.dokument.certificate.52-14-144-11.cprapid.com
172.67.130.108200 OK0 B