1.9 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (319), with CRLF line terminators
Hash 902f098f5f2eac4160cbc97a1c131204
47b26f3014d18773695c075d2792652d12a6eb16
da9f83adc9e48cf02fe4bec5c059be7ca58352d76e4618676f4d6461186c166d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.life Domain
GET / HTTP/1.1
Host: www.wealthinfo.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Sep 2023 09:35:00 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: namecheap-nginx
X-CST: MISS, HIT
Allow: GET, HEAD
Content-Encoding: gzip
GET i.cdnpark.com/themes/assets/style.css
200 OK 359 B URL GET HTTP/1.1 i.cdnpark.com/themes/assets/style.css
IP
Requested by http://www.wealthinfo.life/
Hash e42aacc9e34f351a935e6e83f2cb4a05
539587b5cb2e9383fbf115c0f7f99406079341f9
9cb157f272caecfbd484a0e3b6a8e2f7821e78c6422653ef83530ed9f73b607b
GET /themes/assets/style.css HTTP/1.1
Host: i.cdnpark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.wealthinfo.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 28 Nov 2022 10:41:35 GMT
Content-Encoding: gzip
Date: Thu, 28 Sep 2023 07:01:37 GMT
ETag: W/"6384905f-37c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XCOVBGRVO91fthADxVXud5Eqyt461-desbGLx5ie4Qs2PwMGQCdoXQ==
Age: 9409
GET i.cdnpark.com/themes/registrar/style_namecheap.css
412 Precondition Failed 35 B URL GET HTTP/1.1 i.cdnpark.com/themes/registrar/style_namecheap.css
IP
Requested by http://www.wealthinfo.life/
File type ASCII text, with no line terminators
Hash 7ebb535e2d55ed28492aaf67ab35aaa3
fc2bc209e2a4b8b11c38f34174f7496c04f8ed36
ac75abc43e7355185abad70f5fafabca40e4d7608f5b8d1ac4a5f97a064af619
GET /themes/registrar/style_namecheap.css HTTP/1.1
Host: i.cdnpark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.wealthinfo.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 412 Precondition Failed
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Thu, 28 Sep 2023 09:35:00 GMT
X-Error: Domain unknown
X-Cache: Error from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9T5vNp0Ar7UEKY7SIufHYahQZhqQpftqqTmM6GgLPw19fMgm1DRytw==
GET i.cdnpark.com/themes/registrar/images/logo_namecheap.png
412 Precondition Failed 35 B URL GET HTTP/1.1 i.cdnpark.com/themes/registrar/images/logo_namecheap.png
IP
Requested by http://www.wealthinfo.life/
File type ASCII text, with no line terminators
Hash 7ebb535e2d55ed28492aaf67ab35aaa3
fc2bc209e2a4b8b11c38f34174f7496c04f8ed36
ac75abc43e7355185abad70f5fafabca40e4d7608f5b8d1ac4a5f97a064af619
GET /themes/registrar/images/logo_namecheap.png HTTP/1.1
Host: i.cdnpark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.wealthinfo.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 412 Precondition Failed
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Thu, 28 Sep 2023 09:35:00 GMT
X-Error: Domain unknown
X-Cache: Error from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NzsQPYe9u-ohwuc9xnc9HA04wylNFlCQsXp4g7t5owWG7lUFm1e2bg==
GET parkingcrew.net/jsparkcaf.php?regcn=243142&_v=2&_h=www.wealthinfo.life&_t=1695893700755
412 Precondition Failed 35 B URL GET HTTP/1.1 parkingcrew.net/jsparkcaf.php?regcn=243142&_v=2&_h=www.wealthinfo.life&_t=1695893700755
IP
ASN #61969 Team Internet AG
Requested by http://www.wealthinfo.life/
File type ASCII text, with no line terminators
Hash 7ebb535e2d55ed28492aaf67ab35aaa3
fc2bc209e2a4b8b11c38f34174f7496c04f8ed36
ac75abc43e7355185abad70f5fafabca40e4d7608f5b8d1ac4a5f97a064af619
GET /jsparkcaf.php?regcn=243142&_v=2&_h=www.wealthinfo.life&_t=1695893700755 HTTP/1.1
Host: parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.wealthinfo.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 412 Precondition Failed
Server: nginx
Date: Thu, 28 Sep 2023 09:35:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Error: Domain unknown
GET i.cdnpark.com/themes/registrar/images/logo_namecheap.png
412 Precondition Failed 35 B URL GET HTTP/1.1 i.cdnpark.com/themes/registrar/images/logo_namecheap.png
IP
Requested by http://www.wealthinfo.life/
File type ASCII text, with no line terminators
Hash 7ebb535e2d55ed28492aaf67ab35aaa3
fc2bc209e2a4b8b11c38f34174f7496c04f8ed36
ac75abc43e7355185abad70f5fafabca40e4d7608f5b8d1ac4a5f97a064af619
GET /themes/registrar/images/logo_namecheap.png HTTP/1.1
Host: i.cdnpark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.wealthinfo.life/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 412 Precondition Failed
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Thu, 28 Sep 2023 09:35:00 GMT
X-Error: Domain unknown
X-Cache: Error from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Qp7FwDKJjJUH5S4zJ4s2SmiY3XpgBNGMZoq3UQcSt_jm5_FR6-G9lw==
GET www.wealthinfo.life/favicon.ico
0 B URL GET www.wealthinfo.life/favicon.ico
IP
Requested by http://www.wealthinfo.life/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: www.wealthinfo.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.wealthinfo.life/
Pragma: no-cache
Cache-Control: no-cache
198.54.117.211
185.53.179.29
0.0.0.0