Report - www.anrdoezrs.net/links/7179331/type/dlg/https:/gezelligs.com/i

Report Overview

Visitedpublic

2025-05-06 05:12:02

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
gezelligs.com	unknown	unknown	No data	No data	917 B	489 B	89.187.86.8
www.anrdoezrs.net	19286	unknown	No data	No data	531 B	192 B	89.207.16.75

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-30	medium	gezelligs.com/	Generic/Spear Phishing
2025-04-30	medium	gezelligs.com/	Generic/Spear Phishing

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-05	medium	gezelligs.com	Sinkholed
2025-05-05	medium	gezelligs.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

GET gezelligs.com/favicon.ico

89.187.86.8

404 Not Found

0 B

URL GET HTTPS

gezelligs.com/favicon.ico

IP / ASN

89.187.86.8

#31708 Coreix Ltd

Requested byhttps://gezelligs.com/i

Resource Information

File typeN/A

First Seen0001-01-01

Last Seen2025-08-11

Times Seen5764799

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Information

IssuerLet's Encrypt

Subjectcpanel.gezelligs.com

FingerprintAD:ED:F7:20:B6:F4:8F:BE:6B:C0:0D:26:BD:30:29:01:45:20:85:5D

ValidityMon, 10 Mar 2025 02:25:46 GMT - Sun, 08 Jun 2025 02:25:45 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Generic/Spear Phishing
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: gezelligs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gezelligs.com/i
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
content-length: 0
date: Tue, 06 May 2025 05:11:31 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET www.anrdoezrs.net/links/7179331/type/dlg/https:/gezelligs.com/i

89.207.16.75

302 Found

0 B

URL User Request GET HTTPS

www.anrdoezrs.net/links/7179331/type/dlg/https:/gezelligs.com/i

IP / ASN

89.207.16.75

#41041 Conversant LLC

Requested byN/A

Resource Information

File typeN/A

First Seen0001-01-01

Last Seen2025-08-11

Times Seen5764799

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Information

IssuerGlobalSign nv-sa

Subjectwww.qksrv.net

FingerprintF0:E3:EC:FE:C0:09:E3:45:BF:4C:19:88:5C:9D:DA:0D:F8:B9:FD:7C

ValidityMon, 14 Oct 2024 15:51:38 GMT - Sat, 15 Nov 2025 15:51:37 GMT

HTTP Headers

GET /links/7179331/type/dlg/https:/gezelligs.com/i HTTP/1.1
Host: www.anrdoezrs.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: Resin/4.0.66
Location: https://gezelligs.com/i
Content-Type: text/html; charset=utf-8
Content-Length: 61
Date: Tue, 06 May 2025 05:11:30 GMT
X-VC-HTTPS: On

GET gezelligs.com/i

89.187.86.8

200 OK

0 B

URL User Request GET HTTPS

gezelligs.com/i

IP / ASN

89.187.86.8

#31708 Coreix Ltd

Requested byN/A

Resource Information

File typeN/A

First Seen0001-01-01

Last Seen2025-08-11

Times Seen5764799

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Information

IssuerLet's Encrypt

Subjectcpanel.gezelligs.com

FingerprintAD:ED:F7:20:B6:F4:8F:BE:6B:C0:0D:26:BD:30:29:01:45:20:85:5D

ValidityMon, 10 Mar 2025 02:25:46 GMT - Sun, 08 Jun 2025 02:25:45 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Generic/Spear Phishing
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /i HTTP/1.1
Host: gezelligs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 0
date: Tue, 06 May 2025 05:11:31 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2