Report - www.costsoldier.com/s/?slink=8M5XSt15qD7m0SrqSu70qA==&shost=ElDKxBoTg2+CS1DoJQ9X+Q==

Report Overview

Visited public
2025-05-27 10:50:57
Tags
URL
www.costsoldier.com/s/?slink=8M5XSt15qD7m0SrqSu70qA==&shost=ElDKxBoTg2+CS1DoJQ9X+Q==
Finishing URL
www.small-business-search.com/unsubscribe
IP / ASN
20.119.8.34
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Title
Unsubscribe

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.costsoldier.com	unknown	2015-04-21	2015-06-30	2025-05-24	552 B	3.8 kB	20.119.8.34
www.small-business-search.com	unknown	2011-02-13	2014-02-25	2025-05-21	1.2 kB	36 kB	20.119.0.53
email-click.s3.amazonaws.com	unknown	2005-08-18	2019-01-03	2025-05-24	1.0 kB	856 kB	52.216.211.105

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-27	medium	small-business-search.com	Sinkholed
2025-05-27	medium	small-business-search.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

www.costsoldier.com/s/?slink=8M5XSt15qD7m0SrqSu70qA==&shost=ElDKxBoTg2+CS1DoJQ9X+Q==

20.119.8.34

302 Found

3.0 kB

URL User Request GET
www.costsoldier.com/s/?slink=8M5XSt15qD7m0SrqSu70qA==&shost=ElDKxBoTg2+CS1DoJQ9X+Q==
IP
20.119.8.34:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert, Inc.
Subjectwww.costsoldier.com
Fingerprint89:29:A2:2F:6F:12:93:97:91:33:78:42:47:2A:38:94:9A:95:8D:F8
ValidityMon, 10 Feb 2025 00:00:00 GMT - Sun, 10 Aug 2025 23:59:59 GMT

File type

Size
3.0 kB (3040 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /s/?slink=8M5XSt15qD7m0SrqSu70qA==&shost=ElDKxBoTg2+CS1DoJQ9X+Q== HTTP/1.1
Host: www.costsoldier.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Content-Length: 166
Content-Type: text/html; charset=utf-8
Date: Tue, 27 May 2025 10:50:34 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Location: https://www.small-business-search.com/unsubscribe
Set-Cookie: ASP.NET_SessionId=fx52hqb1thhaa2ptwfwxkitx; path=/; HttpOnly; SameSite=Lax
ARRAffinity=1a60d6c35440ec14bd7ee4e30892dbe752b43e227dc09321527f86e481336608;Path=/;HttpOnly;Domain=www.costsoldier.com
ARRAffinity=e009a7ea98f41f019965fc967ff2f997a5caab0ccf5705708160aa5af7cf72e6;Path=/;HttpOnly;Secure;Domain=www.costsoldier.com
ARRAffinitySameSite=e009a7ea98f41f019965fc967ff2f997a5caab0ccf5705708160aa5af7cf72e6;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.costsoldier.com
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET

www.small-business-search.com/unsubscribe

20.119.0.53

200 OK

3.0 kB

URL User Request GET
www.small-business-search.com/unsubscribe
IP
20.119.0.53:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert, Inc.
Subjectwww.small-business-search.com
Fingerprint6F:52:1C:A2:79:4C:1D:F2:E4:4E:3F:11:59:AF:2F:4A:11:0A:CE:1E
ValidityMon, 24 Feb 2025 00:00:00 GMT - Sun, 24 Aug 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (452), with CRLF line terminators
Size
3.0 kB (3040 bytes)
Hash
675c8b1209f0749a10a7ed3eb6db3a11
1ece729fb05a0084b05dc305af46e4aae2f4547e
9ea46ca282657e37fb8be978299a6d052789a0b952a56c3c72e6c05d52785fb2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /unsubscribe HTTP/1.1
Host: www.small-business-search.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 1723
Content-Type: text/html; charset=utf-8
Date: Tue, 27 May 2025 10:50:35 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: ARRAffinity=028a57d27cc4ebef12657e0e1653fc270b241da54d4529c6222eb96e5aa99387;Path=/;HttpOnly;Domain=www.small-business-search.com
ARRAffinity=069e115ca7c25625ebd8581b6dc49c782dc6ddd6cee7dc472cc3b69eeb2a234a;Path=/;HttpOnly;Secure;Domain=www.small-business-search.com
ARRAffinitySameSite=069e115ca7c25625ebd8581b6dc49c782dc6ddd6cee7dc472cc3b69eeb2a234a;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.small-business-search.com
Vary: Accept-Encoding
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET

email-click.s3.amazonaws.com/application_business-2aac9e5c444881e32e3bce143cba0c7b0d93eb61be2b2c6f4b02f221f40a82f7.css

52.216.211.105

200 OK

828 kB

URL GET
email-click.s3.amazonaws.com/application_business-2aac9e5c444881e32e3bce143cba0c7b0d93eb61be2b2c6f4b02f221f40a82f7.css
IP
52.216.211.105:443
ASN
#16509 AMAZON-02

Requested by
https://www.small-business-search.com/unsubscribe
Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
Fingerprint2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sat, 07 Feb 2026 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
828 kB (827654 bytes)
Hash
aa40868a11aa1f48df8740e9ec7e16a8
3519cbd43c8be65b440a5ca464d2d73dc04b48bb
2aac9e5c444881e32e3bce143cba0c7b0d93eb61be2b2c6f4b02f221f40a82f7

HTTP Headers

GET /application_business-2aac9e5c444881e32e3bce143cba0c7b0d93eb61be2b2c6f4b02f221f40a82f7.css HTTP/1.1
Host: email-click.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.small-business-search.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: OoFq1ig9nABweCrJf670ZKYKPXhiy5Y5cBEiphTj2++DjDr+QsSTM1n4Xqj6Ukl2lQfPUbd4WMo=
x-amz-request-id: Z8K7VBE0H4KPBXSV
Date: Tue, 27 May 2025 10:50:37 GMT
Last-Modified: Mon, 03 Sep 2018 23:53:21 GMT
ETag: "aa40868a11aa1f48df8740e9ec7e16a8"
x-amz-meta-s3b-last-modified: 20180903T235245Z
Accept-Ranges: bytes
Content-Type: text/css
Content-Length: 827654
Server: AmazonS3

email-click.s3.amazonaws.com/application_biz-f76c285370100ebf33e35daeb710ed68.css

52.216.211.105

200 OK

28 kB

URL GET
email-click.s3.amazonaws.com/application_biz-f76c285370100ebf33e35daeb710ed68.css
IP
52.216.211.105:443
ASN
#16509 AMAZON-02

Requested by
https://www.small-business-search.com/unsubscribe
Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
Fingerprint2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sat, 07 Feb 2026 23:59:59 GMT

File type
ASCII text, with very long lines (18878)
Size
28 kB (28043 bytes)
Hash
cb9473d6bb2546acff8bac804706ed11
3c7c67df39c3d4be509ffe83a8b519076cc6f12c
e5ec3fa3de75bf7177dc8a04a364961aa886e6ac9ec1d6b9193c814e48a27fe2

HTTP Headers

GET /application_biz-f76c285370100ebf33e35daeb710ed68.css HTTP/1.1
Host: email-click.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.small-business-search.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: 8cRjUjUIUMtZixPVsp9Xcv2EOOANN6LqxOnbj4hTpx9GURx2S5uKD0C3Hd8efK71fN/8mMsj3WE=
x-amz-request-id: Z8K3V1VBA3EVJ41J
Date: Tue, 27 May 2025 10:50:37 GMT
Last-Modified: Mon, 03 Sep 2018 23:53:21 GMT
ETag: "cb9473d6bb2546acff8bac804706ed11"
x-amz-meta-s3b-last-modified: 20180903T235312Z
Accept-Ranges: bytes
Content-Type: text/css
Content-Length: 28043
Server: AmazonS3

www.small-business-search.com/favicon.ico

20.119.0.53

200 OK

32 kB

URL GET
www.small-business-search.com/favicon.ico
IP
20.119.0.53:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.small-business-search.com/unsubscribe
Certificate
IssuerDigiCert, Inc.
Subjectwww.small-business-search.com
Fingerprint6F:52:1C:A2:79:4C:1D:F2:E4:4E:3F:11:59:AF:2F:4A:11:0A:CE:1E
ValidityMon, 24 Feb 2025 00:00:00 GMT - Sun, 24 Aug 2025 23:59:59 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
32 kB (32038 bytes)
Hash
4859e39ae6c0f1f428f2126a6bb32bd9
1c0c85678ae963bc96d0b7fbe1eb89074cf1fbe0
a94f8a8553caea8430dd4ca3cc01d4e318d19828f74cb65453ffb7f5d9e2f44d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.small-business-search.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.small-business-search.com/unsubscribe
Cookie: ARRAffinity=069e115ca7c25625ebd8581b6dc49c782dc6ddd6cee7dc472cc3b69eeb2a234a; ARRAffinitySameSite=069e115ca7c25625ebd8581b6dc49c782dc6ddd6cee7dc472cc3b69eeb2a234a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 32038
Content-Type: image/x-icon
Date: Tue, 27 May 2025 10:50:37 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "12dd4225bf5d91:0"
Last-Modified: Mon, 02 Oct 2023 18:05:21 GMT
Set-Cookie: ARRAffinity=75623c10526c14b33bec6e2c661fcdf2e2bf727a4d5edc5ab005b2b803e34019;Path=/;HttpOnly;Secure;Domain=www.small-business-search.com
ARRAffinitySameSite=75623c10526c14b33bec6e2c661fcdf2e2bf727a4d5edc5ab005b2b803e34019;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.small-business-search.com
X-Powered-By: ASP.NET

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers