Report - dhl.0394.potabox.com/home/2257557?page=007tracking.php?id=2257557&page=007

Report Overview

Submitted URL
dhl.0394.potabox.com/home/2257557?page=007tracking.php?id=2257557&page=007
IP
91.212.166.14
ASN
#198953 Proton66 OOO
Submitted
2024-04-20 11:23:46
Access
public
Website Title
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dhl.0394.potabox.com	unknown	2020-05-02	2023-09-23	2024-04-18	1.0 kB	20 kB	91.212.166.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	dhl.0394.potabox.com/home/2257557?page=007tracking.php?id=2257557&page=007	DHL Airways, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

dhl.0394.potabox.com/home/2257557?page=007tracking.php?id=2257557&page=007

91.212.166.14

70 B

URL
dhl.0394.potabox.com/home/2257557?page=007tracking.php?id=2257557&page=007
IP
91.212.166.14:0
ASN
#198953 Proton66 OOO

File type
HTML document, ASCII text, with no line terminators
Size
70 B (70 bytes)
Hash
be77ce07d8e6a0904795c5ab2132efdd
50ee08f6a91952aab6f39c3af96db837907933b6
5864eb86b0b418c28b99d6a07c3530c77943b1c5c3d08af3abc7b34426c510ad

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.

HTTP Headers

GET /home/2257557?page=007tracking.php?id=2257557&page=007 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Sat, 20 Apr 2024 11:23:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 70
Connection: keep-alive
location: tracking.php?id=2257557&page=007

dhl.0394.potabox.com/home/tracking.php?id=2257557&page=007

91.212.166.14

19 kB

URL
dhl.0394.potabox.com/home/tracking.php?id=2257557&page=007
IP
91.212.166.14:0
ASN
#198953 Proton66 OOO

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1304)
Size
19 kB (19352 bytes)
Hash
d014d82b57ba8d4253f3d9d78ca2fb8c
57c117ccf6e823d79549ceb0305c843ed9fdae3e
4096b6b1a2f9897b127b33c6313950f92044e5df6ec4c7c73b2a71bc891e4421

HTTP Headers

GET /home/tracking.php?id=2257557&page=007 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 20 Apr 2024 11:23:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 19352
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers