Report - merchant-businesses.com/

Report Overview

Submitted URL
merchant-businesses.com/
IP
104.171.21.200
ASN
#20473 AS-CHOOPA
Submitted
2024-04-24 22:39:18
Access
public
Website Title
Dotology - Getting down to business just got a whole lot easier
Final URL
merchant-businesses.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-23	512 B	6.5 kB	35.244.181.201
merchant-businesses.com	unknown	2018-10-08	2019-02-06	2024-01-18	3.0 kB	36 kB	104.171.21.200

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	merchant-businesses.com	Sinkholed
2024-04-24	medium	merchant-businesses.com	Sinkholed
2024-04-24	medium	merchant-businesses.com	Sinkholed
2024-04-24	medium	merchant-businesses.com	Sinkholed
2024-04-24	medium	merchant-businesses.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

merchant-businesses.com/assets/img/blue_bar.png

104.171.21.200

200 OK

1.0 kB

URL GET HTTP/2
merchant-businesses.com/assets/img/blue_bar.png
IP
104.171.21.200:443
ASN
#20473 AS-CHOOPA

Requested by
https://merchant-businesses.com/
Certificate
IssuerLet's Encrypt
Subjectmerchant-businesses.com
Fingerprint20:91:9C:23:B6:A7:3D:41:D3:D2:6B:F4:64:90:C4:99:47:25:C0:D9
ValidityMon, 11 Mar 2024 01:08:08 GMT - Sun, 09 Jun 2024 01:08:07 GMT

File type
PNG image data, 4 x 25, 8-bit/color RGB, non-interlaced
Size
1.0 kB (1046 bytes)
Hash
51623be192206824f3da98f0bdbfdef1
f7654e2015fcfa29ab055f0c9d8cbf738b523d1c
f850217c6457f10a24cbe9806850d1f6c34c1d6ed11891750e4351e4419ddc9e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/blue_bar.png HTTP/1.1
Host: merchant-businesses.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://merchant-businesses.com/
Cookie: _gorilla_csrf=MTcxMzk5ODMzM3xJa0pZY0hSaE5VaHZSazEyYzI1RlIzUTRjRUZCVUNzNWJXNVRSRW93TXpsellTdEJla3BCUTFkaU5WVTlJZ289fKNqiafdwkrDJGNJuWiuLkvJhAtdBY-eKSFV4vssTw8V
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
vary: Cookie
content-length: 1046
date: Wed, 24 Apr 2024 22:38:54 GMT
X-Firefox-Spdy: h2

merchant-businesses.com/assets/img/logo.png

104.171.21.200

200 OK

11 kB

URL GET HTTP/2
merchant-businesses.com/assets/img/logo.png
IP
104.171.21.200:443
ASN
#20473 AS-CHOOPA

Requested by
https://merchant-businesses.com/
Certificate
IssuerLet's Encrypt
Subjectmerchant-businesses.com
Fingerprint20:91:9C:23:B6:A7:3D:41:D3:D2:6B:F4:64:90:C4:99:47:25:C0:D9
ValidityMon, 11 Mar 2024 01:08:08 GMT - Sun, 09 Jun 2024 01:08:07 GMT

File type
PNG image data, 113 x 106, 8-bit/color RGBA, non-interlaced
Size
11 kB (11070 bytes)
Hash
95ebae8f6ce3d08774e670e4f6080125
2e534feaa30e7ab81dfa620747af1aedb1d42520
d1e8ea5c7d19a58977423050edae8add94c5f99f7d1e871a2ce7a77887907cf5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/logo.png HTTP/1.1
Host: merchant-businesses.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://merchant-businesses.com/
Cookie: _gorilla_csrf=MTcxMzk5ODMzM3xJa0pZY0hSaE5VaHZSazEyYzI1RlIzUTRjRUZCVUNzNWJXNVRSRW93TXpsellTdEJla3BCUTFkaU5WVTlJZ289fKNqiafdwkrDJGNJuWiuLkvJhAtdBY-eKSFV4vssTw8V
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
vary: Cookie
content-length: 11070
date: Wed, 24 Apr 2024 22:38:54 GMT
X-Firefox-Spdy: h2

merchant-businesses.com/assets/img/dewey.png

104.171.21.200

200 OK

12 kB

URL GET HTTP/2
merchant-businesses.com/assets/img/dewey.png
IP
104.171.21.200:443
ASN
#20473 AS-CHOOPA

Requested by
https://merchant-businesses.com/
Certificate
IssuerLet's Encrypt
Subjectmerchant-businesses.com
Fingerprint20:91:9C:23:B6:A7:3D:41:D3:D2:6B:F4:64:90:C4:99:47:25:C0:D9
ValidityMon, 11 Mar 2024 01:08:08 GMT - Sun, 09 Jun 2024 01:08:07 GMT

File type
PNG image data, 130 x 167, 8-bit/color RGBA, non-interlaced
Size
12 kB (11947 bytes)
Hash
d4e1337543ff33e5ba5118f174275bf9
cad2ac6104005c45ba8438820819b20dc080dfa0
b5ad06a0e61caab4f6ae98c114da3bb82a29916b19e2e08420cd660a494c80bf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/dewey.png HTTP/1.1
Host: merchant-businesses.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://merchant-businesses.com/
Cookie: _gorilla_csrf=MTcxMzk5ODMzM3xJa0pZY0hSaE5VaHZSazEyYzI1RlIzUTRjRUZCVUNzNWJXNVRSRW93TXpsellTdEJla3BCUTFkaU5WVTlJZ289fKNqiafdwkrDJGNJuWiuLkvJhAtdBY-eKSFV4vssTw8V
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
vary: Cookie
content-length: 11947
date: Wed, 24 Apr 2024 22:38:54 GMT
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

5.8 kB

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
gzip compressed data, max speed, from Unix
Size
5.8 kB (5759 bytes)
Hash
aa33725c2d0a3d1c2f9c878d64914807
6e83d13ec860384a977738b04ff0891a01ab519a
fe412eadb3dc9820ec6cab7cb62349be057c509e34f7e2de6d23b28eacc98bfd

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 22:39:12 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=AL9bsBWZ4dbi4mSXxzs37iqFsl2LwGPSad1-cZdL7103dbZFwEI1oo4mEAMu_ll7-V16K5Od7FyD-h-IlyAjV0gJg6szFvUBdgsRIDOhKgH0Fam-7Y0t0ovylLU4Y00l
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

merchant-businesses.com/favicon.ico

104.171.21.200

200 OK

5.1 kB

URL GET HTTP/2
merchant-businesses.com/favicon.ico
IP
104.171.21.200:443
ASN
#20473 AS-CHOOPA

Requested by
https://merchant-businesses.com/
Certificate
IssuerLet's Encrypt
Subjectmerchant-businesses.com
Fingerprint20:91:9C:23:B6:A7:3D:41:D3:D2:6B:F4:64:90:C4:99:47:25:C0:D9
ValidityMon, 11 Mar 2024 01:08:08 GMT - Sun, 09 Jun 2024 01:08:07 GMT

File type
HTML document, ASCII text, with very long lines (5519), with no line terminators
Size
5.1 kB (5122 bytes)
Hash
44c1752a7de7c562aefc057df67e54cd
5ad8ad582a934fa98cf3ec89ac69065169c31b17
31b2d1ba06f0a2577824a2c3f2c54ee9750bb339f6e716e39937d91858fd489a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: merchant-businesses.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://merchant-businesses.com/
Cookie: _gorilla_csrf=MTcxMzk5ODMzM3xJa0pZY0hSaE5VaHZSazEyYzI1RlIzUTRjRUZCVUNzNWJXNVRSRW93TXpsellTdEJla3BCUTFkaU5WVTlJZ289fKNqiafdwkrDJGNJuWiuLkvJhAtdBY-eKSFV4vssTw8V
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
vary: Cookie
x-csrf-token: hQ5KwZZMqsRu+RFnYK7cg5v8IN3j5MESNhx2rhePrfyAdCeqB6S+D4JlUMqSPty8dJq9/So3vn5d/EWKFxnCaQ==
x-rate-limit-duration: 1
x-rate-limit-limit: 5.00
x-rate-limit-request-forwarded-for: 
x-rate-limit-request-remote-addr: 91.90.42.154:4597
date: Wed, 24 Apr 2024 22:38:54 GMT
X-Firefox-Spdy: h2

merchant-businesses.com/

104.171.21.200

200 OK

5.1 kB

URL User Request GET HTTP/2
merchant-businesses.com/
IP
104.171.21.200:443
ASN
#20473 AS-CHOOPA

Certificate
IssuerLet's Encrypt
Subjectmerchant-businesses.com
Fingerprint20:91:9C:23:B6:A7:3D:41:D3:D2:6B:F4:64:90:C4:99:47:25:C0:D9
ValidityMon, 11 Mar 2024 01:08:08 GMT - Sun, 09 Jun 2024 01:08:07 GMT

File type
HTML document, ASCII text, with very long lines (5519), with no line terminators
Size
5.1 kB (5122 bytes)
Hash
44c1752a7de7c562aefc057df67e54cd
5ad8ad582a934fa98cf3ec89ac69065169c31b17
31b2d1ba06f0a2577824a2c3f2c54ee9750bb339f6e716e39937d91858fd489a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: merchant-businesses.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
set-cookie: _gorilla_csrf=MTcxMzk5ODMzM3xJa0pZY0hSaE5VaHZSazEyYzI1RlIzUTRjRUZCVUNzNWJXNVRSRW93TXpsellTdEJla3BCUTFkaU5WVTlJZ289fKNqiafdwkrDJGNJuWiuLkvJhAtdBY-eKSFV4vssTw8V; Path=/; Expires=Thu, 25 Apr 2024 10:38:53 GMT; Max-Age=43200; HttpOnly; SameSite=Lax
vary: Cookie
x-csrf-token: 8JoLB4fHhXuZ2lZnzXNGSNXRqbmxrtxOPn1yc3iyCyT14GZsFi+RsHVGF8o/40Z3Orc0mXh9oyJVnUFXeCRksQ==
x-rate-limit-duration: 1
x-rate-limit-limit: 5.00
x-rate-limit-request-forwarded-for: 
x-rate-limit-request-remote-addr: 91.90.42.154:4597
date: Wed, 24 Apr 2024 22:38:53 GMT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size