Report - rhherbalcare.com/

Report Overview

Submitted URL
rhherbalcare.com/
IP
198.252.102.214
ASN
#20068 HAWKHOST
Submitted
2024-05-10 20:36:04
Access
public
Website Title
Index of /
Final URL
rhherbalcare.com/
Tags
opendir
urlquery detections
Audit - Open directory

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rhherbalcare.com	unknown	unknown	No data	No data	4.3 kB	10 kB	198.252.102.214

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	rhherbalcare.com/	58 B	2023-04-05	2024-05-23
Pretty URL rhherbalcare.com/ IP 198.252.102.214 ASN #20068 HAWKHOST Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 03:56:22 Last Seen2024-05-23 08:06:51 Times Seen4003 Hash 821524a21b9d31d8e5d87899a346e04a 92582c750f6ff8ddb212023b48fc49fe40891d75 7b0cac9d1c981314ca25d8d0f4c4dcf1b2dec8f0a8a5b46ee029c6754a9f7edc Loading...

	rhherbalcare.com/_autoindex/assets/js/tablesort.js	7.7 kB	2023-03-07	2024-05-23
Pretty URL rhherbalcare.com/_autoindex/assets/js/tablesort.js IP 198.252.102.214 ASN #20068 HAWKHOST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-23 08:06:51 Times Seen9353 Hash 0fa71bf6cb125ddac365683ea3352cb0 b94eeac8764b23ab614d148007c360fd2ab46f58 6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e Loading...

	rhherbalcare.com/_autoindex/assets/js/tablesort.number.js	682 B	2023-03-07	2024-05-23
Pretty URL rhherbalcare.com/_autoindex/assets/js/tablesort.number.js IP 198.252.102.214 ASN #20068 HAWKHOST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-23 08:06:51 Times Seen9356 Hash 377b82a88aeda884475d40fa1051c70a e7619035db4c628248b82237f3a99683e29ed7a4 5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07 Loading...

HTTP Transactions (8)

URL IP Response Size

rhherbalcare.com/

198.252.102.214

200 OK

1.4 kB

URL User Request GET HTTP/2
rhherbalcare.com/
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type
JavaScript source, ASCII text
Size
1.4 kB (1445 bytes)
Hash
6f4122286764b87e813a33d4ebfec8db
d3182d047e0318a97c0c0a4d58ff88a80eb296f0
b1399b98919d82e23ae53cc2d544074f25d5b90485216072886de0e24c1fb661

HTTP Headers

GET / HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 20:35:40 GMT
content-length: 1445
cache-control: no-cache, no-store, must-revalidate, max-age=0, no-store, max-age=0
server: imunify360-webshield/1.21
X-Firefox-Spdy: h2

rhherbalcare.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=20602348

198.252.102.214

302 Found

0 B

URL User Request GET HTTP/2
rhherbalcare.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=20602348
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=20602348 HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rhherbalcare.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Fri, 10 May 2024 20:35:40 GMT
content-length: 0
x-forwarded-for: 91.90.42.154
x-real-ip: 91.90.42.154
x-remote-ip: 91.90.42.154
location: https://rhherbalcare.com
set-cookie: wssplashuid=b68d6ce32a5db4b2d611d6a83ef5369598e0af01.1715376940.1; Path=/; Domain=rhherbalcare.com; Max-Age=2592000; HttpOnly; SameSite=Lax
server: imunify360-webshield/1.21
X-Firefox-Spdy: h2

rhherbalcare.com/

198.252.102.214

200 OK

591 B

URL User Request GET HTTP/2
rhherbalcare.com/
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type
HTML document, ASCII text, with very long lines (547)
Size
591 B (591 bytes)
Hash
159b1c76da06e3dcebecd6ea94b4d8c1
05fe14a4f03a338eccbc1268948535a8eb69993e
aa451f1e3c452bc6602f8acf5759204a10d7ddeb9b965341d68c59de6ffa6611

Detections

Analyzer	Verdict	Alert
urlquery	none	Audit - Open directory

HTTP Headers

GET / HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rhherbalcare.com/
DNT: 1
Connection: keep-alive
Cookie: wssplashuid=b68d6ce32a5db4b2d611d6a83ef5369598e0af01.1715376940.1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 20:35:40 GMT
content-type: text/html; charset=UTF-8
content-length: 591
x-powered-by: PHP/7.4.33
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
server: imunify360-webshield/1.21
X-Firefox-Spdy: h2

rhherbalcare.com/_autoindex/assets/js/tablesort.js

198.252.102.214

200 OK

2.1 kB

URL GET HTTP/2
rhherbalcare.com/_autoindex/assets/js/tablesort.js
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Requested by
https://rhherbalcare.com/
Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type
JavaScript source, ASCII text
Size
2.1 kB (2137 bytes)
Hash
0fa71bf6cb125ddac365683ea3352cb0
b94eeac8764b23ab614d148007c360fd2ab46f58
6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e

HTTP Headers

GET /_autoindex/assets/js/tablesort.js HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rhherbalcare.com/
Cookie: wssplashuid=b68d6ce32a5db4b2d611d6a83ef5369598e0af01.1715376940.1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 20:35:41 GMT
content-type: application/javascript
content-length: 2137
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 20:35:41 GMT
last-modified: Tue, 07 May 2024 13:46:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
server: imunify360-webshield/1.21
X-Firefox-Spdy: h2

rhherbalcare.com/_autoindex/assets/css/autoindex.css

198.252.102.214

200 OK

1.2 kB

URL GET HTTP/2
rhherbalcare.com/_autoindex/assets/css/autoindex.css
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Requested by
https://rhherbalcare.com/
Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type
ASCII text
Size
1.2 kB (1170 bytes)
Hash
590db3a115b1e82a26b09f98964030a5
e792179b620700c09bd763ebf3b5f163fd18f213
37e1e1cbb4256d8006ccfcc7c7c8e891276191714768291589b40483d3f0fe46

HTTP Headers

GET /_autoindex/assets/css/autoindex.css HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rhherbalcare.com/
Cookie: wssplashuid=b68d6ce32a5db4b2d611d6a83ef5369598e0af01.1715376940.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 20:35:41 GMT
content-type: text/css
content-length: 1170
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 20:35:41 GMT
last-modified: Tue, 07 May 2024 13:46:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
server: imunify360-webshield/1.21
X-Firefox-Spdy: h2

rhherbalcare.com/_autoindex/assets/js/tablesort.number.js

198.252.102.214

200 OK

322 B

URL GET HTTP/2
rhherbalcare.com/_autoindex/assets/js/tablesort.number.js
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Requested by
https://rhherbalcare.com/
Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
322 B (322 bytes)
Hash
377b82a88aeda884475d40fa1051c70a
e7619035db4c628248b82237f3a99683e29ed7a4
5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07

HTTP Headers

GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rhherbalcare.com/
Cookie: wssplashuid=b68d6ce32a5db4b2d611d6a83ef5369598e0af01.1715376940.1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 20:35:41 GMT
content-type: application/javascript
content-length: 322
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 20:35:41 GMT
last-modified: Tue, 07 May 2024 13:46:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
server: imunify360-webshield/1.21
X-Firefox-Spdy: h2

rhherbalcare.com/_autoindex/assets/icons/folder-fill.svg

198.252.102.214

200 OK

333 B

URL GET HTTP/2
rhherbalcare.com/_autoindex/assets/icons/folder-fill.svg
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Requested by
https://rhherbalcare.com/
Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type
SVG Scalable Vector Graphics image
Size
333 B (333 bytes)
Hash
5d0e817dca10aab2cb58087551767a9c
9286a744de09b180f4d29750e5b16613280a2a09
e52ea75a526a963a5d7371795d5dacb4ceaabfe6c77bdd9649f0b457b0d6009e

HTTP Headers

GET /_autoindex/assets/icons/folder-fill.svg HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rhherbalcare.com/
Cookie: wssplashuid=b68d6ce32a5db4b2d611d6a83ef5369598e0af01.1715376940.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 20:35:41 GMT
content-type: image/svg+xml
content-length: 333
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 20:35:41 GMT
last-modified: Tue, 07 May 2024 13:46:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
server: imunify360-webshield/1.21
X-Firefox-Spdy: h2

rhherbalcare.com/favicon.ico

198.252.102.214

404 Not Found

796 B

URL GET HTTP/3
rhherbalcare.com/favicon.ico
IP
198.252.102.214:443
ASN
#20068 HAWKHOST

Requested by
https://rhherbalcare.com/
Certificate
IssuerLet's Encrypt
Subject*.rhherbalcare.com
Fingerprint6C:6B:EE:BB:73:26:E9:F4:67:A5:1E:58:5D:0B:59:DC:F2:AC:1F:36
ValidityMon, 29 Apr 2024 17:57:15 GMT - Sun, 28 Jul 2024 17:57:14 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rhherbalcare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rhherbalcare.com/
Cookie: wssplashuid=b68d6ce32a5db4b2d611d6a83ef5369598e0af01.1715376940.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Fri, 10 May 2024 20:35:41 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size