Report - itsssl.com/esp-sabadell

Report Overview

Submitted URL
itsssl.com/esp-sabadell
IP
172.67.159.48
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 08:59:38
Access
public
Website Title
503 Service Unavailable
Final URL
prv.ygn.mybluehost.me/sbd
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
prv.ygn.mybluehost.me	unknown	unknown	No data	No data	1.2 kB	1.8 kB	162.241.244.141
itsssl.com	unknown	2005-06-23	2012-11-26	2024-03-13	479 B	1.3 kB	104.21.9.63

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 08:59:13	low	Client IP	104.21.9.63	ETPRO POLICY Observed Link Shortening Service Domain (itsssl .com in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	prv.ygn.mybluehost.me/sbd	162.241.244.141	503 Service Unavailable	428 B
URL User Request GET HTTP/1.1 prv.ygn.mybluehost.me/sbd IP 162.241.244.141:80 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document, ASCII text Size 428 B (428 bytes) Hash cda75ccb8e6f7c1ab4b6934e8a8c95b4 87ffb82a3ed0097ba251ba40d19e3c334b5f1a1a 9f89814b48fc3249bf67a8a6e4439d97391b10b99f02b3da9e38345be1f1ed3f HTTP Headers `GET /sbd HTTP/1.1 Host: prv.ygn.mybluehost.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 503 Service Unavailable content-length: 428 content-type: text/html; charset=iso-8859-1 date: Thu, 18 Apr 2024 08:59:15 GMT server: Apache X-Firefox-Spdy: h2`

	prv.ygn.mybluehost.me/sbd	162.241.244.141	503 Service Unavailable	428 B
URL User Request GET HTTP/1.1 prv.ygn.mybluehost.me/sbd IP 162.241.244.141:80 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document, ASCII text Size 428 B (428 bytes) Hash cda75ccb8e6f7c1ab4b6934e8a8c95b4 87ffb82a3ed0097ba251ba40d19e3c334b5f1a1a 9f89814b48fc3249bf67a8a6e4439d97391b10b99f02b3da9e38345be1f1ed3f HTTP Headers `GET /sbd HTTP/1.1 Host: prv.ygn.mybluehost.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 503 Service Unavailable Date: Thu, 18 Apr 2024 08:59:16 GMT Server: Apache Content-Length: 428 Connection: close Content-Type: text/html; charset=iso-8859-1`

	prv.ygn.mybluehost.me/favicon.ico	162.241.244.141	503 Service Unavailable	428 B
URL GET HTTP/1.1 prv.ygn.mybluehost.me/favicon.ico IP 162.241.244.141:80 ASN #46606 UNIFIEDLAYER-AS-1 Requested by http://prv.ygn.mybluehost.me/sbd File type HTML document, ASCII text Size 428 B (428 bytes) Hash cda75ccb8e6f7c1ab4b6934e8a8c95b4 87ffb82a3ed0097ba251ba40d19e3c334b5f1a1a 9f89814b48fc3249bf67a8a6e4439d97391b10b99f02b3da9e38345be1f1ed3f HTTP Headers `GET /favicon.ico HTTP/1.1 Host: prv.ygn.mybluehost.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://prv.ygn.mybluehost.me/sbd Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 503 Service Unavailable Date: Thu, 18 Apr 2024 08:59:16 GMT Server: Apache Content-Length: 428 Connection: close Content-Type: text/html; charset=iso-8859-1`

	itsssl.com/esp-sabadell	104.21.9.63	301 Moved Permanently	428 B
URL User Request GET HTTP/2 itsssl.com/esp-sabadell IP 104.21.9.63:443 ASN #13335 CLOUDFLARENET Certificate IssuerCloudflare, Inc. Subject.itsssl.com Fingerprint96:DE:E8:F2:4F:66:48:2C:51:7D:E3:52:22:9C:5C:AC:6F:F3:99:D1 ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT File type Size 428 B (428 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /esp-sabadell HTTP/1.1 Host: itsssl.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently date: Thu, 18 Apr 2024 08:59:15 GMT content-type: text/html; charset=UTF-8 location: https://prv.ygn.mybluehost.me/sbd expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding set-cookie: PHPSESSID=c5b3942ec2bb5068b70e570639f4de57; path=/ short_esp-sabadell=1; expires=Thu, 18-Apr-2024 09:29:15 GMT; Max-Age=1800; path=/; HttpOnly cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wwVIZ9wtyKBdMOdonBYOAFSBACtf8YplPCJ4MwLdv5L7%2B%2Bmae10aB97VcAqT9F2atymWMv6xbFmmxIIrvwNzwyYhMuSmk0B%2B1kYGm8MTFvpgYY2ar5Pb65FkU%2BC4"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87637522eb2f712a-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2