Report - surfeitersqqber.life/

Report Overview

Submitted URL
surfeitersqqber.life/
IP
172.67.207.171
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 12:14:50
Access
public
Website Title
O czym powinien wiedzieć początkujący inwestor na giełdzie?
Final URL
surfeitersqqber.life/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
surfeitersqqber.life	unknown	2023-11-08	2023-11-08	2024-03-22	1.9 kB	96 kB	172.67.207.171

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	surfeitersqqber.life	Sinkholed
2024-04-18	medium	surfeitersqqber.life	Sinkholed
2024-04-18	medium	surfeitersqqber.life	Sinkholed
2024-04-18	medium	surfeitersqqber.life	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

surfeitersqqber.life/1.webp

172.67.207.171

200 OK

86 kB

URL GET HTTP/3
surfeitersqqber.life/1.webp
IP
172.67.207.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://surfeitersqqber.life/
Certificate
IssuerLet's Encrypt
Subjectsurfeitersqqber.life
Fingerprint21:07:6B:CF:C7:1B:4B:FA:9D:41:5F:E1:4B:1C:7C:C6:66:05:A6:01
ValidityTue, 05 Mar 2024 19:24:08 GMT - Mon, 03 Jun 2024 19:24:07 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 2048x1536, Scaling: [none]x[none], YUV color, decoders should clamp
Size
86 kB (85840 bytes)
Hash
338d9b0ac4aed1253377feb4edb786bf
ce2343203332f2433f4c0921f1f5cb0707211d2d
c5228a0ccfd873d5e3df781ebe952183ceed869770b3f4ac9ad33b6f4bedeeca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /1.webp HTTP/1.1
Host: surfeitersqqber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://surfeitersqqber.life/
Cookie: PHPSESSID=a5bd52b43cb466b65fa1192b824e29a3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:25 GMT
content-type: image/webp
content-length: 85840
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 18 Apr 2024 12:14:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqzpbD9%2BGaqNxQdO78aOPeb2n9iPvR4mcscvu%2B39MK4J6W1osUIQZdkpH05j2Fmv7%2BpXsARAhpcGmRif%2Bgu4DP8zzP4TpnfEFPK3RFcmH%2BsqZfv7kKGLw8%2BmMuyNibNvCzlygXDiWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764930d6ba456ab-OSL
alt-svc: h3=":443"; ma=86400

surfeitersqqber.life/styles/style.css

172.67.207.171

200 OK

1.5 kB

URL GET HTTP/3
surfeitersqqber.life/styles/style.css
IP
172.67.207.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://surfeitersqqber.life/
Certificate
IssuerLet's Encrypt
Subjectsurfeitersqqber.life
Fingerprint21:07:6B:CF:C7:1B:4B:FA:9D:41:5F:E1:4B:1C:7C:C6:66:05:A6:01
ValidityTue, 05 Mar 2024 19:24:08 GMT - Mon, 03 Jun 2024 19:24:07 GMT

File type
ASCII text, with very long lines (1629), with no line terminators
Size
1.5 kB (1527 bytes)
Hash
ea7ae01a4644651186861c35df657386
7447b75fdacf404e2ccfdbe08a65ebbba92200b9
ee9990c9784d44dd1bf5f2d1cfa46ffa1fbf2e57e2ec5dd0db1a9be68813b2b0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /styles/style.css HTTP/1.1
Host: surfeitersqqber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://surfeitersqqber.life/
Cookie: PHPSESSID=a5bd52b43cb466b65fa1192b824e29a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:24 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 18 Apr 2024 12:14:24 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ksfSNmVLjbJwpwASDGuuebeQSeIU51cnV%2FKIIHYy4%2FvRO6wTIWyUu4JaZzSL%2F4kyazlRN7u0srZjV26oNU%2FVTv%2B9i%2FeEWw6ApnChxZ%2BAcVCyFTm8jpEjJPOcgxTWBnPTrKjg7naCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764930d5ba156ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

surfeitersqqber.life/favicon.ico

172.67.207.171

404 Not Found

146 B

URL GET HTTP/3
surfeitersqqber.life/favicon.ico
IP
172.67.207.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://surfeitersqqber.life/
Certificate
IssuerLet's Encrypt
Subjectsurfeitersqqber.life
Fingerprint21:07:6B:CF:C7:1B:4B:FA:9D:41:5F:E1:4B:1C:7C:C6:66:05:A6:01
ValidityTue, 05 Mar 2024 19:24:08 GMT - Mon, 03 Jun 2024 19:24:07 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: surfeitersqqber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://surfeitersqqber.life/
Cookie: PHPSESSID=a5bd52b43cb466b65fa1192b824e29a3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 12:14:25 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DkAU51Fo3hDlTAeZTaN%2F3GfRzNAkG8PRTGeSE6dyWFLv3psAQfufWJnqKc5TaCHzjNqKPYdzrIcyrgZbBs773szTzhR8QMk%2FsKfV7HOOimTNFvU7WOlEGYgwSYIL%2FnC5nGaPVO2dQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764930ebe1956ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

surfeitersqqber.life/

172.67.207.171

200 OK

5.9 kB

URL User Request GET HTTP/2
surfeitersqqber.life/
IP
172.67.207.171:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectsurfeitersqqber.life
Fingerprint21:07:6B:CF:C7:1B:4B:FA:9D:41:5F:E1:4B:1C:7C:C6:66:05:A6:01
ValidityTue, 05 Mar 2024 19:24:08 GMT - Mon, 03 Jun 2024 19:24:07 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (5871), with no line terminators
Size
5.9 kB (5910 bytes)
Hash
e06c565587c2e6660a1ba5d8d6a08be7
596639535cd2a907600e1fa3f5d246847b568276
1f52e78ecdaff14948219bc1ac4eaf8186cb2651d5bb4bcea72b0518b60882af

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: surfeitersqqber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 12:14:24 GMT
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
set-cookie: PHPSESSID=a5bd52b43cb466b65fa1192b824e29a3; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDaq6yEGkB0rhIVWI6wey97AkVPETHG7UtgGKMOkGQgc4wl7NfVGqN3xTiQBeNPefjjQAHpveUQpfn0bPPWJ3MT2TorGqEW8eMHfmfQ8XPOcVESvY11snIwGIeVo1RzNQn6dw5l%2BqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8764930bc8e2b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (4)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers