403 Forbidden 2.2 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash e22e3d06510790bf8b21df42ec287f0d
2100516d98334b039c0ab30bcaaa1898961644b7
a0dcb383f7769baa7754c0cb4d71f77b03c5511f8e88a9300656537cdcf85f6b
Analyzer Verdict Alert fortinet Spam
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET / HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Fri, 26 May 2023 22:41:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 16 Oct 2014 13:20:58 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tvQ6pISexoKi4rH2FAD9m9ZzzZlL%2BlREC7dQCXUlwQ9Q%2F5EhtWFtyM52CpucKx5%2BBrNXFXjOJBiITLt%2BHVMB450hgrjfVwAL%2Fpzs5HHcX4wCQ4HtzVZTw4o3p830IVAWagU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd98735ddfe1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
waterliber.life/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 655 B URL GET HTTP/1.1 waterliber.life/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
File type HTML document, ASCII text, with very long lines (1238)
Hash 9e8f56e8e1806253ba01a95cfc3d392c
a8af90d7482e1e99d03de6bf88fed2315c5dd728
2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
Analyzer Verdict Alert fortinet Spam
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 May 2023 22:41:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 25 May 2023 08:39:22 GMT
ETag: W/"646f1eba-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KlujPKVdux8i3h%2Fy%2BIJz0Cmb3mXdtEzw79J3LCQVnNCR6wZj7H2cvv8o8vTVxNwHHORY8Lwz4oEmcjusHMW2rgG7KCEfK6ONThlisvumIZ0d4kyL1SJegQpBFKsXkyZpMvo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd98737299a0b49-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Sun, 28 May 2023 22:41:53 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
waterliber.life/noindex/css/open-sans.css
200 OK 636 B URL GET HTTP/1.1 waterliber.life/noindex/css/open-sans.css
IP
Hash 0ca7398a3e9ef11b70b5dfd1a052fe58
8bb7623c7027e927c0eced114d6011c57101a26f
65e9f0d6919c412dd5a04c322ce9cf9db80a1182f57778606a76110086c49fca
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /noindex/css/open-sans.css HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: W/"13d9-4fc0a3f32a9c0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2FIjFHlOOiTrRtUZpmTyLIrUa1STgJerTE5sajSnUyiM9dRm53yeY5Afx3dGs5F6A0er7FFFr9kgtsT63kDk0Uc%2FYl8wUHzU2sOJTY3CeyRjn5z%2FiN6hzt93eDaMBSsUPQg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd98737184db50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
waterliber.life/noindex/css/bootstrap.min.css
200 OK 4.8 kB URL GET HTTP/1.1 waterliber.life/noindex/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (19170)
Hash 44c7856dea679ebcccf8fe201fbe1a7c
192a297f8aeda2bcdd0faa5320ffff825d24116f
bc40aeafcd25bc944d0d6357298c1b198b4a1fe294e0b84015d04b72cf942c10
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /noindex/css/bootstrap.min.css HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: W/"4b8d-4fc0a3f32a9c0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bbDLOVNjAvLBx4HBsMV7aBVgMBGqkc%2Fu4hvNX6LWVsTbfDdprDpFAvli46tEZM1LdF8qYXOwJmPvf%2F2Uk1f0%2BnV%2BHcvJlm5Mqrh5v6%2FbvjSKGIIr0x8hcX4ADBmUby5ImD8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd987371ee81bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
waterliber.life/images/apache_pb.gif
200 OK 2.3 kB URL GET HTTP/1.1 waterliber.life/images/apache_pb.gif
IP
File type GIF image data, version 89a, 259 x 32\012- data
Hash 48bc8b181b36c9289866a2e30f6afedd
7bcc5d916d33ab08929a9f7c1d07c33ac1ba47ba
1654416fec35a8b5d36ee0257025cec63e56dfe8572b6ff67c6b0d0d43158cbb
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /images/apache_pb.gif HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: image/gif
Content-Length: 2326
Connection: keep-alive
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: "916-4fc0a3f32a9c0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iF1%2BRh0ucXSoFSX6Nh06CZsKWHsKkZUWWzqOeaZk%2Fh5a240%2FekG1NRvYLC3alCJJZw0SS5jVr3CxE05rLd01xqgrkJ4M8vKuOd1ScONWVYFW439bG8Z7S6oqzg4HwrbQJDg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd987392a81b50f-OSL
alt-svc: h2=":443"; ma=60
waterliber.life/noindex/css/fonts/Bold/OpenSans-Bold.woff
404 Not Found 239 B URL GET HTTP/1.1 waterliber.life/noindex/css/fonts/Bold/OpenSans-Bold.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 55e916743163813c7b8f4524f6e36b99
e1353703fda388ec26bf105b4132b0459f10163e
b5b54ea0662073c401cabb250a4f107c4763241fa43418503ae5764cff7e9ee4
Analyzer Verdict Alert fortinet Spam
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /noindex/css/fonts/Bold/OpenSans-Bold.woff HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YEuEK5YOzvGrUyz6BB4NGd1FZ1dMyfi1D55FMkoSLTLW%2FV%2Ft7gL8905%2BU7%2B6EV6PIsZySDKUapYzpZStzyt6R6k5jrIj%2Br8roFJkkC0wVkzqfWub2HfMq1ZKVVlNSvg%2BuKA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd9873968b91bfe-OSL
alt-svc: h2=":443"; ma=60
waterliber.life/noindex/css/fonts/Light/OpenSans-Light.woff
404 Not Found 241 B URL GET HTTP/1.1 waterliber.life/noindex/css/fonts/Light/OpenSans-Light.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d5d3f08fc8f1b36bac0b06b89d5384ca
cafebd0173cce7edfcbadcea5b8eabc4d7a20511
c4183128dc59a2ce673414a77fcab7ca0250ef354ef636df49d2b83580734ee0
Analyzer Verdict Alert fortinet Spam
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /noindex/css/fonts/Light/OpenSans-Light.woff HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b88oog%2Bma%2BHMS%2B8z%2FvIi38X0zR%2BgO%2FrECjV%2Ba5c9rXvNXOSa4%2BCe%2Bxw39UZUuiGxypyCgtX%2B0eAK3xH8sxbuiCArLh1M1i2Ojgd3BviVsceCOt2GOFOF34x9wKAaAAnkoQ0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd987396cd9b4eb-OSL
alt-svc: h2=":443"; ma=60
waterliber.life/images/poweredby.png
200 OK 4.0 kB URL GET HTTP/1.1 waterliber.life/images/poweredby.png
IP
File type PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced\012- data
Hash 5b1ca9f747c1b73dfa1c508765d9056a
6b319c943d8c69e212e7de8385802891dbafe8a3
5b720d579bbc1f8fee3b64df9290d41a28c747a5802589e48e05b7ebbfe9fc2f
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /images/poweredby.png HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: image/png
Content-Length: 3956
Connection: keep-alive
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: "f74-4fc0a3f32a9c0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RQl6ifNA75vS2%2FHM8XNbTuV8mBXT9Y4NBmY7K%2FCQd9doiv1muBoiv2feJaN9v8ILxL2lwSI8kcnfMKSLsyvpqyTEtByduElvthP%2BXVIpsYVOQwP2Us85rvew0j2yvVrLttY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd987392af90b49-OSL
alt-svc: h2=":443"; ma=60
waterliber.life/noindex/css/fonts/Bold/OpenSans-Bold.ttf
404 Not Found 198 B URL GET HTTP/1.1 waterliber.life/noindex/css/fonts/Bold/OpenSans-Bold.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 75a28665a8da5eb0e3200d8279c7ef42
ee945af618fe1976e31cd1c467ae0cd68a7fad29
e163df3b08c83f6bdc15321fb0403d1dd059f2846037916a3d12ad2806cb5978
Analyzer Verdict Alert fortinet Spam
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /noindex/css/fonts/Bold/OpenSans-Bold.ttf HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LO39ccTyFkj9rFVWD3zlcFzqfwPxP96dgNw8XSV2Rf55pgZtXqv7hcxa8mfUBCiA4EQ73eElMYze4zt%2FkEocpVj6MgzFk8%2BIzE%2BRvEsm6ccAX5N%2B53sonF2mwGfWIcy%2FZg4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd9873accb4b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
waterliber.life/noindex/css/fonts/Light/OpenSans-Light.ttf
404 Not Found 198 B URL GET HTTP/1.1 waterliber.life/noindex/css/fonts/Light/OpenSans-Light.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5a99182bd45553a369543ec2937fa690
c8766a2b6d830b3d38263d54b0e88c1e384664b7
67db0d028a14f7beb79f8bc441b5d687ca683511965d60e40faebec708d85612
Analyzer Verdict Alert fortinet Spam
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /noindex/css/fonts/Light/OpenSans-Light.ttf HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYA03f%2FgUQIFbPjQxkmiDoEcguhV4INF7K7L9QAgbj2mv2y%2FRd4pAPoRCtvu6edx6TSVwV2MWnsnws8ETZIsZCxdGTNOudAza9VofEQ6M9Mx%2BwMRa4N830uCsngv8HbRhew%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd9873adeccb4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
waterliber.life/favicon.ico
404 Not Found 182 B URL GET HTTP/1.1 waterliber.life/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 18ffb59b61525f781cf9251045be575d
bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET /favicon.ico HTTP/1.1
Host: waterliber.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://waterliber.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 May 2023 22:41:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vxXPkB1cPK6u%2FfrDgg923Pls1HVaB5qf1z71HKHSLl37Gi3vFpp5YR57ICLT3ocoinvK7h%2FpLdUOcVO0DHU4krvYuvy8jcdWAlp7TpA9IFJWZNQ%2BikLIBLifnuSvIKKcwOY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd9873c2d670b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
104.21.83.124
172.67.175.215