URL User Request GET HTTP/1.1IP 167.99.137.250:80
ASN#14061 DIGITALOCEAN-ASN
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash7100fecb8ce3da32042c49da186feff0 3d360f05efc88eb0b1f0c17951da3880758c542c cd72210d21a68cbf1689594d7bd1d89ba69bfbcebb13c89f8b56e1ffeabc015d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.life Domain |
GET / HTTP/1.1
Host: servicebiz.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.14.2
Date: Mon, 04 Dec 2023 09:18:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
URL User Request GET HTTP/1.1IP167.99.137.250:80 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4c555068310076e85908835c721911f5 9ec990aabb4391e139034f68e5e657e0f1d0b74d 568b4de0ad30e85670e724dc30ccb675924353b77807356c5ad7f29c8c38f510
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.life Domain |
GET / HTTP/1.1
Host: servicebiz.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.2
Date: Mon, 04 Dec 2023 09:18:38 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: https://servicebiz.life/
|
URL User Request GET HTTP/1.1IP167.99.137.250:80 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash7100fecb8ce3da32042c49da186feff0 3d360f05efc88eb0b1f0c17951da3880758c542c cd72210d21a68cbf1689594d7bd1d89ba69bfbcebb13c89f8b56e1ffeabc015d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.life Domain |
GET / HTTP/1.1
Host: servicebiz.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.14.2
Date: Mon, 04 Dec 2023 09:18:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
| servicebiz.life/favicon.ico | 167.99.137.250 | 404 Not Found | 131 B |
URL GET HTTP/1.1servicebiz.life/favicon.ico IP167.99.137.250:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectservicebiz.life FingerprintC3:4A:A8:EA:03:CD:5D:6B:D3:91:1F:20:81:0E:90:F1:83:40:6B:93 ValidityMon, 13 Nov 2023 19:06:55 GMT - Sun, 11 Feb 2024 19:06:54 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash7693e858b2ca7115ac7fd50df329ab4f f6c47617b9a3e4dc957144fcb29f64a7a8c41da4 5b3fc771f43d8e67bd8957f7b3d9a49eae80b88e43c13cbf16623623e9028375
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: servicebiz.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://servicebiz.life/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.14.2
Date: Mon, 04 Dec 2023 09:18:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|