Report - kboost.ca/

Report Overview

Visited public
2023-09-22 20:32:22
Tags
URL
kboost.ca/
Finishing URL
kboost.ca/cgi-sys/suspendedpage.cgi
IP / ASN
107.180.3.243
#26496 AS-26496-GO-DADDY-COM-LLC
Title
Account Suspended

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kboost.ca	unknown	2018-04-02	2019-04-28 12:24:31	2023-07-21 01:39:22	1.5 kB	9.6 kB	107.180.3.243
use.fontawesome.com	942	2012-10-18	2017-01-30 05:43:25	2023-09-22 05:15:10	795 B	48 kB	172.64.103.11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-22 20:32:14	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	kboost.ca/	107.180.3.243	302 Found	226 B
URL User Request GET HTTP/1.1 kboost.ca/ IP 107.180.3.243:80 ASN #26496 AS-26496-GO-DADDY-COM-LLC File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 226 B (226 bytes) Hash bf3ba9609d187c7db496becee09b55c6 18ee36ac377883b3b561e9b855624f038b6a26bb e11ebc24d9e9f9b26f70ea22fcd61e3b4255b121c8fde638fe21d8a792c10339 HTTP Headers `GET / HTTP/1.1 Host: kboost.ca User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Fri, 22 Sep 2023 20:32:05 GMT Server: Apache Location: http://kboost.ca/cgi-sys/suspendedpage.cgi Content-Length: 226 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	kboost.ca/cgi-sys/suspendedpage.cgi	107.180.3.243	200 OK	4.1 kB
URL User Request GET HTTP/1.1 kboost.ca/cgi-sys/suspendedpage.cgi IP 107.180.3.243:80 ASN #26496 AS-26496-GO-DADDY-COM-LLC File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4070) Size 4.1 kB (4114 bytes) Hash fbebc86b5530bc8ab42a56272291adf5 282512aac89d3c974cc03b0e396ac01ab78a8995 9287bdfd7a36712d2325d9c8a89affc5afbe5e198b538da2af8082b33922f351 HTTP Headers `GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: kboost.ca User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 22 Sep 2023 20:32:05 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4114 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html`

	use.fontawesome.com/releases/v5.0.6/css/all.css	172.64.103.11	200 OK	7.5 kB
URL GET HTTP/1.1 use.fontawesome.com/releases/v5.0.6/css/all.css IP 172.64.103.11:80 ASN #13335 CLOUDFLARENET Requested by http://kboost.ca/cgi-sys/suspendedpage.cgi File type ASCII text, with very long lines (34556) Size 7.5 kB (7532 bytes) Hash 42eaa52604673b64d6b356c2fd7f87e3 6b59cb703b2d4a7a2691f13008062b46a6bc7fdb ed0f122470c4d13d86bbabdc38046d743d0228204a56d786d2e17bd83fd358ce HTTP Headers `GET /releases/v5.0.6/css/all.css HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://kboost.ca/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 22 Sep 2023 20:32:06 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive x-amz-id-2: H9hK29b5iFPEy8TCVIP5G7upJA9ACrAE7U0DxTvyHEokOqcJQDZk0RrIb6gPiJ2nNAhA+oTFP3U= x-amz-request-id: ZPVHR3KYK4NCQZSJ Last-Modified: Wed, 30 Jun 2021 15:27:49 GMT ETag: W/"42eaa52604673b64d6b356c2fd7f87e3" Cache-Control: max-age=31556926 CF-Cache-Status: HIT Age: 2309788 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3KSaEHwHrCUOyQuY4qnIOzFki%2BJU9Xh908BqR%2FCenV05x%2F6dCyN68ghoeV0wxZq3vXKAVEwVTD8iYXDvUhlLd5xKqt9CYqg1VkM5b1AirWUC3A9nVVG9kKw2xwKvUxs5mckab8P2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 80ad50b7e8077774-LHR Content-Encoding: gzip alt-svc: h2=":443"; ma=60

	kboost.ca/favicon.ico	107.180.3.243	302 Found	226 B
URL GET HTTP/1.1 kboost.ca/favicon.ico IP 107.180.3.243:80 ASN #26496 AS-26496-GO-DADDY-COM-LLC Requested by http://kboost.ca/cgi-sys/suspendedpage.cgi File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 226 B (226 bytes) Hash bf3ba9609d187c7db496becee09b55c6 18ee36ac377883b3b561e9b855624f038b6a26bb e11ebc24d9e9f9b26f70ea22fcd61e3b4255b121c8fde638fe21d8a792c10339 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: kboost.ca User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://kboost.ca/cgi-sys/suspendedpage.cgi Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Fri, 22 Sep 2023 20:32:06 GMT Server: Apache Location: http://kboost.ca/cgi-sys/suspendedpage.cgi Content-Length: 226 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2	172.64.103.11	200 OK	39 kB
URL GET HTTP/1.1 use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2 IP 172.64.103.11:80 ASN #13335 CLOUDFLARENET Requested by http://kboost.ca/cgi-sys/suspendedpage.cgi File type Web Open Font Format (Version 2), TrueType, length 38784, version 1.0\012- data Size 39 kB (38784 bytes) Hash f9b85c9463af7103b9b24bbbf09a06ed d28d7222bcbeb8ea701a771e85f7efe006e62fb1 62554277d07b20c6bfae7c6267b3198b4846f604a37d4085bf9f54c392210b56 HTTP Headers `GET /releases/v5.0.6/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://kboost.ca DNT: 1 Connection: keep-alive Referer: http://use.fontawesome.com/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 22 Sep 2023 20:32:06 GMT Content-Type: application/font-woff2 Content-Length: 38784 Connection: keep-alive x-amz-id-2: 5H3pQ9GIrW+qbYmu92Zc1SEztnjRs/M1MQ2gBzjgpmiIEDyfLMfef+s1AKKgHvtQBCOFreiHQq8= x-amz-request-id: AA1GDSHW180YMMEY Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Last-Modified: Wed, 30 Jun 2021 15:27:50 GMT ETag: "f9b85c9463af7103b9b24bbbf09a06ed" Cache-Control: max-age=31556926 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VC8UwB3WovF%2FzeV2LVI%2FfU4smmBFTsdBe8o8VhGwoOZdYuqiwYpbIIFwvC7XZagSo%2BOOJbA1Qyz47pK1muz9Fzs58iLsUMR4i0M%2BsRJLaaMIsDD3dWRaG0pDN8XCRgXUn%2BCPgNhv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 80ad50b899d67695-LHR alt-svc: h2=":443"; ma=60

	kboost.ca/cgi-sys/suspendedpage.cgi	107.180.3.243	200 OK	4.1 kB
URL User Request GET HTTP/1.1 kboost.ca/cgi-sys/suspendedpage.cgi IP 107.180.3.243:80 ASN #26496 AS-26496-GO-DADDY-COM-LLC File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4070) Size 4.1 kB (4114 bytes) Hash fbebc86b5530bc8ab42a56272291adf5 282512aac89d3c974cc03b0e396ac01ab78a8995 9287bdfd7a36712d2325d9c8a89affc5afbe5e198b538da2af8082b33922f351 HTTP Headers `GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: kboost.ca User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://kboost.ca/cgi-sys/suspendedpage.cgi DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 22 Sep 2023 20:32:06 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4114 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html`