Report Overview

  1. Submitted URL

    couriernote-001-site1.jtempurl.com/x02CzHXoa89WRbWhRV6PkzuPaLbTYgQO

  2. IP

    45.58.159.112

    ASN

    #46844 SHARKTECH

  3. Submitted

    2024-04-17 05:57:35

    Access

    public

  4. Website Title

    DHL

  5. Final URL

    couriernote-001-site1.jtempurl.com/sRB5V2IO1qCgB5vr0bPRSKUGbpdzCL4I

  6. urlquery detections

    Phishing - DHL

Detections

  1. urlquery

    53

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    36

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
kit.fontawesome.com18682012-10-182019-12-162024-04-16
r.lr-in.com168282021-07-192021-07-272024-03-24
files.killbot.orgunknown2020-04-172021-08-072023-09-13
couriernote-001-site1.jtempurl.comunknown2024-01-202024-04-152024-04-17
cdnjs.cloudflare.com2352009-02-172015-04-172024-04-16
ka-f.fontawesome.com35982012-10-182019-12-172024-04-16
ws-mt1.pusher.com82531997-06-032018-09-202024-04-16
cdn.lr-in.com132372021-07-192021-07-192024-04-16

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumcouriernote-001-site1.jtempurl.com/x02CzHXoa89WRbWhRV6PkzuPaLbTYgQODHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.
mediumcouriernote-001-site1.jtempurl.com/DHL Airways, Inc.

PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (7)

HTTP Transactions (37)

URLIPResponseSize
couriernote-001-site1.jtempurl.com/x02CzHXoa89WRbWhRV6PkzuPaLbTYgQO
45.58.159.112 210 B
couriernote-001-site1.jtempurl.com/
45.58.159.112 348 B
couriernote-001-site1.jtempurl.com/sRB5V2IO1qCgB5vr0bPRSKUGbpdzCL4I/
45.58.159.112301 Moved Permanently284 B
couriernote-001-site1.jtempurl.com/sRB5V2IO1qCgB5vr0bPRSKUGbpdzCL4I
45.58.159.112 15 kB
couriernote-001-site1.jtempurl.com/css/app.css
45.58.159.112200 OK56 kB
couriernote-001-site1.jtempurl.com/js/session-recorder.js
45.58.159.112200 OK11 kB
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.25.14200 OK5.6 kB
couriernote-001-site1.jtempurl.com/js/app.js
45.58.159.112200 OK201 kB
couriernote-001-site1.jtempurl.com/images/logo.png
45.58.159.112200 OK2.0 kB
couriernote-001-site1.jtempurl.com/images/all.png
45.58.159.112200 OK12 kB
couriernote-001-site1.jtempurl.com/images/foo.png
45.58.159.112404 Not Found2.1 kB
couriernote-001-site1.jtempurl.com/fonts/vendor/@fontsource/roboto/files/roboto-latin-400-normal.woff2?4673b4537a84c7f7a130799aa6af329b
45.58.159.112404 Not Found6.6 kB
couriernote-001-site1.jtempurl.com/images/foo.png
45.58.159.112404 Not Found2.1 kB
couriernote-001-site1.jtempurl.com/css/fonts/webfa-brands-400.woff2?d878b0a6a1144760244ff0665888404c
45.58.159.112404 Not Found6.6 kB
couriernote-001-site1.jtempurl.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?1551f4f60c37af51121f106501f69b80
45.58.159.112404 Not Found6.6 kB
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=f7165dd215
172.67.139.119200 OK11 kB
ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=f7165dd215
172.67.139.119200 OK6.9 kB
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.17.25.14200 OK77 kB
couriernote-001-site1.jtempurl.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff?eeccf4f66002c6f2ba24d3d22f2434c2
45.58.159.112404 Not Found6.6 kB
couriernote-001-site1.jtempurl.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.ttf?527940b104eb2ea366c8630f3f038603
45.58.159.112404 Not Found2.1 kB
couriernote-001-site1.jtempurl.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.ttf?be9ee23c0c6390141475d519c2c5fb8f
45.58.159.112404 Not Found2.1 kB
ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-brands-400.woff2
172.67.139.119200 OK118 kB
couriernote-001-site1.jtempurl.com/images/favicon.gif
45.58.159.112200 OK2.2 kB
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
34.196.19.203 0 B
ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2
172.67.139.119200 OK156 kB
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
34.196.19.203 0 B
cdn.lr-in.com/logger-1.min.js
104.21.234.145200 OK171 kB
kit.fontawesome.com/f7165dd215.js
104.18.40.68200 OK33 kB
r.lr-in.com/i?a=mnnzup%2Fdus&r=5-b6dab8df-1b49-439f-a7be-3378168f8844&t=cda7121a-f18d-46a0-bef4-f8bcc76637ba&s=0&rs=0%2Cu&u=e2466a48-ef72-4208-8930-16cbe17e179d&is=1
104.198.23.205201 Created165 B
couriernote-001-site1.jtempurl.com/fonts/vendor/@fontsource/roboto/files/roboto-all-400-normal.woff?376ea5d93f71583052f65de4e0c6a92c
45.58.159.112404 Not Found6.6 kB
couriernote-001-site1.jtempurl.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff?2285773e6b4b172f07d9b777c81b0775
45.58.159.112404 Not Found6.6 kB
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
34.196.19.203101 Switching Protocols0 B
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
34.196.19.203101 Switching Protocols0 B
files.killbot.org/.cdn-cgi/killbot-security.js
0.0.0.0 0 B
files.killbot.org/.cdn-cgi/killbot-security.js
0.0.0.0 0 B
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=f7165dd215
172.67.139.119200 OK1.8 kB
ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=f7165dd215
172.67.139.119200 OK104 kB