Report - geolocation-db.com/json/rance

Report Overview

Submitted URL
geolocation-db.com/json/rance
IP
159.89.102.253
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-05-10 04:56:46
Access
public
Website Title
geolocation-db.com/json/rance
Final URL
geolocation-db.com/json/rance
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
geolocation-db.com	237326	2019-10-23	2019-10-31	2024-05-08	938 B	8.4 kB	159.89.102.253

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 04:56:21	medium	Client IP	159.89.102.253	ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)
2024-05-10 04:56:21	medium	Client IP	159.89.102.253	ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)
2024-05-10 04:56:21	low	Client IP	159.89.102.253	ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI
2024-05-10 04:56:21	low	Client IP	159.89.102.253	ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	geolocation-db.com/favicon.ico	159.89.102.253	404 Not Found	7.6 kB
URL GET HTTP/2 geolocation-db.com/favicon.ico IP 159.89.102.253:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://geolocation-db.com/json/rance Certificate IssuerLet's Encrypt Subjectgeolocation-db.com Fingerprint34:F4:1F:5A:FD:B3:5D:D8:24:9F:E2:5C:00:54:2B:83:DA:5A:0A:1A ValidityThu, 11 Apr 2024 03:27:48 GMT - Wed, 10 Jul 2024 03:27:47 GMT File type gzip compressed data, from Unix Size 7.6 kB (7567 bytes) Hash b54f4620a370a82eb24ad03fc2b0057d 57ac98d4484a15f53c68d8f74f7a0b3fad46982e 8a6109dd7bb15aacdde0a2b158d4e51bafcd7af4a92a146ba0d2490aeca14cca HTTP Headers `GET /favicon.ico HTTP/1.1 Host: geolocation-db.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geolocation-db.com/json/rance Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found server: nginx/1.14.0 (Ubuntu) date: Fri, 10 May 2024 04:56:21 GMT content-type: text/html; charset=utf-8 x-powered-by: Express content-security-policy: default-src 'self' x-content-type-options: nosniff set-cookie: connect.sid=s%3A8LfdYi7_GzHf444xLmRPMODoCxb5v0oR.41ytfmmtb0jg4SEKxEHGqBM%2B4H268BU2kO2kN8E%2Bgr4; Path=/; Expires=Fri, 10 May 2024 12:56:21 GMT; HttpOnly content-encoding: gzip X-Firefox-Spdy: h2`

	geolocation-db.com/json/rance	159.89.102.253	200 OK	157 B
URL User Request GET HTTP/2 geolocation-db.com/json/rance IP 159.89.102.253:443 ASN #14061 DIGITALOCEAN-ASN Certificate IssuerLet's Encrypt Subjectgeolocation-db.com Fingerprint34:F4:1F:5A:FD:B3:5D:D8:24:9F:E2:5C:00:54:2B:83:DA:5A:0A:1A ValidityThu, 11 Apr 2024 03:27:48 GMT - Wed, 10 Jul 2024 03:27:47 GMT File type troff or preprocessor input, ASCII text, with no line terminators Size 157 B (157 bytes) Hash 756577606efeb0ff376c1db7424bb0d7 576e9aea13474e4571cbe504c82f07d6e4a83e36 3d40cc0891d8f98712269fbb48f69185ce50697fdad8cf6fc76a8ffea1bcc017 HTTP Headers `GET /json/rance HTTP/1.1 Host: geolocation-db.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.14.0 (Ubuntu) date: Fri, 10 May 2024 04:56:21 GMT content-type: text/html; charset=UTF-8 access-control-allow-origin: * content-encoding: gzip X-Firefox-Spdy: h2`