| www.funguselixirs.life/11960-128-5681-146876100/seth/u.html |  172.67.147.111 | 200 OK | 488 B |
URL User Request GET HTTP/1.1www.funguselixirs.life/11960-128-5681-146876100/seth/u.html IP172.67.147.111:80
File typeHTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash0635fd1def26e05755e0c24909ca26c2 e03794fd4f57447470f3ffdc2d16939275a731e9 03630b300f3719aea39ffdf524d8a87ebb65d95a3ed2aab4b1e7a207301e2519
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.life Domain |
GET /11960-128-5681-146876100/seth/u.html HTTP/1.1
Host: www.funguselixirs.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 17 Apr 2023 13:35:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.4
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jtcuI9LofTu77TQRyUClVDTB5GDBAimOjbtt4at%2FWK3k5FiTHlSnj%2F6ppLkH71suBfUJcOIgT2xdT31ZNEWNhvYkxhRDRTgohnTcxz6%2BdB1BD9scVzgjY6MEWxPFqIw9Kq2fvlC0H7DX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b950d61fafab527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
| www.funguselixirs.life/favicon.ico | 172.67.147.111 | 404 Not Found | 182 B |
URL GET HTTP/1.1www.funguselixirs.life/favicon.ico IP172.67.147.111:80
Requested byhttp://www.funguselixirs.life/11960-128-5681-146876100/seth/u.html
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hashe26918a572d6566f76fa74f901c866cb a5dcfbfb5b613f5c482a27f230d771d5d4e22d29 ac2206af41d4c590352b689e8c4a82a77fe82a1f27df3298b9fab1dd6572a5db
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.life Domain |
GET /favicon.ico HTTP/1.1
Host: www.funguselixirs.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.funguselixirs.life/11960-128-5681-146876100/seth/u.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Mon, 17 Apr 2023 13:35:38 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2D2uQ0H0eOBz4yNfZ6PU6kKR%2BWf2oOuidNSnvkX263Tj9zpILtiRPuwcTZjCos9qavr%2F9kAcBx9c%2F%2Bs2d1mJWq0oG0gRHlJj7b9pGVl3y9gVNAeaMXAmptKIXqk2tK9nj5U41MAWRYQs"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b950d653fe3b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
104.21.71.167