Report Overview

  1. Submitted URL

    dutsh-helppackage.ecranul.ro/public/5pQMXBTcHoi7M5XRyLNLP51znkzanPoD

  2. IP

    85.9.63.169

    ASN

    #5606 GTS Telecom SRL

  3. Submitted

    2023-02-06 12:26:18

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - DHL

Detections

  1. urlquery

    29

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    50

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
ka-f.fontawesome.com35982019-12-17T07:36:13Z2023-03-13T05:10:17Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
csmetrics.hotjar.comunknown2022-12-14T15:10:55Z2023-03-13T05:29:49Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
cdn.lr-in.com132372021-07-19T16:36:56Z2023-03-13T05:28:06Z
dutsh-helppackage.ecranul.rounknown2023-01-16T12:09:12Z2023-03-09T05:02:46Z
r.lr-in.com168282021-07-27T15:26:50Z2023-03-13T05:28:10Z
killbot.orgunknown2014-03-26T14:15:40Z2023-03-13T03:31:53Z
kit.fontawesome.com18682019-12-16T20:51:31Z2023-03-13T05:10:17Z
static.hotjar.com6412014-11-01T06:14:27Z2023-03-13T05:12:51Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
cdn.jsdelivr.net4392012-09-30T02:15:09Z2023-03-13T06:17:54Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-03-13T05:09:19Z
cdnjs.cloudflare.com2352015-04-17T22:46:33Z2023-03-13T05:09:21Z
ws-mt1.pusher.com82532018-09-20T13:30:02Z2023-03-13T07:20:47Z
ocsp.sca1b.amazontrust.com10152017-03-03T16:20:51Z2019-03-27T05:05:54Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 85.9.63.169Client IP

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/publicDHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdutsh-helppackage.ecranul.ro/public/5pQMXBTcHoi7M5XRyLNLP51znkzanPoDPhishing
mediumdutsh-helppackage.ecranul.ro/publicPhishing
mediumdutsh-helppackage.ecranul.ro/public/Phishing
mediumdutsh-helppackage.ecranul.ro/3p4CX8RVgnWu5vKUsu4pTzatIkOBlEGu/Phishing
mediumdutsh-helppackage.ecranul.ro/public/3p4CX8RVgnWu5vKUsu4pTzatIkOBlEGuPhishing
mediumdutsh-helppackage.ecranul.ro/public/js/session-recorder.jsPhishing
mediumdutsh-helppackage.ecranul.ro/public/js/app.jsPhishing
mediumdutsh-helppackage.ecranul.ro/fonts/vendor/@fontsource/roboto/files/roboto-all-400-normal.woff?376ea5d93f71583052f65de4e0c6a92cPhishing
mediumdutsh-helppackage.ecranul.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff?2285773e6b4b172f07d9b777c81b0775Phishing
mediumdutsh-helppackage.ecranul.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.ttf?be9ee23c0c6390141475d519c2c5fb8fPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (11)

HTTP Transactions (57)

URLIPResponseSize
dutsh-helppackage.ecranul.ro/public/5pQMXBTcHoi7M5XRyLNLP51znkzanPoD
85.9.63.169302 Found212 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
dutsh-helppackage.ecranul.ro/public
85.9.63.169301 Moved Permanently707 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
dutsh-helppackage.ecranul.ro/public/
85.9.63.169200 OK366 B
cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
151.101.65.229200 OK1.2 kB
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.20.226200 OK1.5 kB
dutsh-helppackage.ecranul.ro/3p4CX8RVgnWu5vKUsu4pTzatIkOBlEGu/
85.9.63.169301 Moved Permanently707 B
push.services.mozilla.com/
35.162.71.253101 Switching Protocols0 B
dutsh-helppackage.ecranul.ro/public/3p4CX8RVgnWu5vKUsu4pTzatIkOBlEGu
85.9.63.169200 OK17 kB
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.25.14200 OK5.6 kB
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
dutsh-helppackage.ecranul.ro/public/js/session-recorder.js
85.9.63.169200 OK11 kB
ocsp.digicert.com/
93.184.220.29200 OK279 B
dutsh-helppackage.ecranul.ro/public/css/app.css
85.9.63.169200 OK57 kB
dutsh-helppackage.ecranul.ro/images/all.png
85.9.63.169200 OK12 kB
dutsh-helppackage.ecranul.ro/images/foo.png
85.9.63.169404 Not Found2.3 kB
dutsh-helppackage.ecranul.ro/images/logo.png
85.9.63.169200 OK2.0 kB
dutsh-helppackage.ecranul.ro/public/js/app.js
85.9.63.169200 OK206 kB
dutsh-helppackage.ecranul.ro/fonts/vendor/@fontsource/roboto/files/roboto-all-400-normal.woff?376ea5d93f71583052f65de4e0c6a92c
85.9.63.169404 Not Found6.6 kB
dutsh-helppackage.ecranul.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff?2285773e6b4b172f07d9b777c81b0775
85.9.63.169404 Not Found6.6 kB
dutsh-helppackage.ecranul.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff?eeccf4f66002c6f2ba24d3d22f2434c2
85.9.63.169404 Not Found6.6 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ka-f.fontawesome.com/releases/v6.2.1/css/free.min.css?token=f7165dd215
172.64.169.22200 OK26 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
dutsh-helppackage.ecranul.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.ttf?be9ee23c0c6390141475d519c2c5fb8f
85.9.63.169404 Not Found2.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg
34.120.237.76200 OK9.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
34.120.237.76200 OK7.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
34.120.237.76200 OK9.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg
34.120.237.76200 OK9.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
34.120.237.76200 OK9.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
34.120.237.76200 OK10 kB
dutsh-helppackage.ecranul.ro/images/favicon.gif
85.9.63.169200 OK2.2 kB
ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-solid-900.woff2
172.64.169.22200 OK150 kB
ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-brands-400.woff2
172.64.169.22200 OK108 kB
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
34.205.59.0101 Switching Protocols0 B
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK471 B
csmetrics.hotjar.com/
52.209.24.136204 No Content0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r.lr-in.com/i?a=mnnzup%2Fdus&r=5-3e1b3feb-ca16-430e-8e42-d49b203c53fb&t=5b2df57f-0da9-4a20-aad5-f674b9fee4b9&s=0&rs=0%2Cu&u=344ec904-30a4-4cdd-8b8d-4570749eeb2a&is=1
104.198.23.205201 Created104 B
cdn.lr-in.com/logger-1.min.js
104.21.234.144200 OK0 B
killbot.org/api/v2/whois?apikey=KACXfkKCpcbZJJlzB3D415S561r_pTsXlmE5Qt9SnpHoh
172.67.166.105401 Unauthorized0 B
static.hotjar.com/c/hotjar-2895475.js?sv=6
143.204.55.54200 OK0 B
ka-f.fontawesome.com/releases/v6.2.1/css/free-v5-font-face.min.css?token=f7165dd215
172.64.169.22200 OK0 B
ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-font-face.min.css?token=f7165dd215
172.64.169.22200 OK0 B
kit.fontawesome.com/f7165dd215.js
104.18.23.52200 OK0 B