thedfirreport.com | The DFIR Report - Real Intrusions by Real Attackers, The Truth Behind the

Robots.txt Information

Robot	Path	Permission
GoogleBot	/	✔
BingBot	/	✔
BaiduSpider	/	✔
YandexBot	/	✔
Sitemap: https://thedfirreport.com/sitemap.xml Sitemap: https://thedfirreport.com/news-sitemap.xml # START YOAST BLOCK # --------------------------- User-agent: * Disallow: Sitemap: https://thedfirreport.com/sitemap_index.xml # --------------------------- # END YOAST

Meta Tags

Title	The DFIR Report - Real Intrusions by Real Attackers, The Truth Behind the
Description	Real Intrusions by Real Attackers, The Truth Behind the
Keywords	N/A

Server Information

WebSite	thedfirreport.com
Host IP	172.67.189.47
Location	United States

Related Websites

                        Site
                        Rank
                    

More to Explore

thedfirreport.com Valuation

US$11,315,572

Last updated: 2023-04-29 16:17:15

thedfirreport.com has Semrush global rank of 935,375. thedfirreport.com has an estimated worth of US$ 11,315,572, based on its estimated Ads revenue. thedfirreport.com receives approximately 1,305,643 unique visitors each day. Its web server is located in United States, with IP address 172.67.189.47. According to SiteAdvisor, thedfirreport.com is safe to visit.

Traffic & Worth Estimates

Purchase/Sale Value	US$11,315,572
Daily Ads Revenue	US$10,446
Monthly Ads Revenue	US$313,355
Yearly Ads Revenue	US$3,760,252
Daily Unique Visitors	87,043
Note: All traffic and earnings values are estimates.

DNS Records

Host	Type	TTL	Data
thedfirreport.com.	A	299	IP: 172.67.189.47
thedfirreport.com.	A	299	IP: 104.21.9.80
thedfirreport.com.	AAAA	299	IPV6: 2606:4700:3036::ac43:bd2f
thedfirreport.com.	AAAA	299	IPV6: 2606:4700:3035::6815:950
thedfirreport.com.	NS	86400	NS Record: graham.ns.cloudflare.com.
thedfirreport.com.	NS	86400	NS Record: chin.ns.cloudflare.com.
thedfirreport.com.	MX	300	MX Record: 0 thedfirreport-com.mail.protection.outlook.com.
thedfirreport.com.	TXT	300	TXT Record: v=spf1 include:spf.protection.outlook.com -all
thedfirreport.com.	TXT	300	TXT Record: MS=ms97824162

HtmlToTextCheckTime:2023-04-29 16:17:15

Menu Analysts Contact Us Services Subscribe The DFIR Report Real Intrusions by Real Attackers, The Truth Behind the Intrusion Menu Analysts Contact Us Services Subscribe Saturday, April 29, 2023 adfind cobaltstrike icedid quantum ransomware rclone ShareFinder Malicious ISO File Leads to Domain Wide Ransomware April 3, 2023 IcedID continues to deliver malspam emails to facilitate a compromise. This case covers the activity from a campaign in late September of 2022. Post exploitation activities detail some familiar and … Read More Year in Review 2022 Year in Review March 6, 2023 As we move into the new year, it’s important to reflect on some of the key changes and developments we observed and reported on in 2022. This year’s year-in-review report … Read More autohotkey keylogger Collect, Exfiltrate, Sleep, Repeat February 6, 2023 In this intrusion from August 2022, we observed a compromise that was initiated with a Word document containing a malicious VBA macro, which established

HTTP Headers

HTTP/1.1 301 Moved Permanently
Date: Fri, 22 Oct 2021 14:49:20 GMT
Content-Type: text/html; charset=iso-8859-1
Connection: keep-alive
location: https://thedfirreport.com/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VcuHqY94eqDC5xu5IofLqMoeD%2FJTzmPiXhmfc4rRy9%2Fi%2FC%2B1fpIJvxd9CXTBJxK1khiDjBNxgpr07x2Fa6o2aOh6TzEP7x6SzgP7C0BYovPW1ZDDAPUQcY4mtqOT5w7E81QAzg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 6a23881eeff82b9b-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

HTTP/2 200 
date: Fri, 22 Oct 2021 14:49:20 GMT
content-type: text/html; charset=UTF-8
link: ; rel="https://api.w.org/"
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DlUVhocdP9QLOVXtP5uRsy1S4HKxiYgBYdpLmD6czwz0SzMzYLkJGrr6SE6QQhjCsQHlA1lJzj1vwqIshlaKu8UzFOf2pv68ySmtiPbd2Zr5FXXN95MimjR%2Fo8BHu3rW2pJC6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 6a23881ffd4f2d8e-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

thedfirreport.com Whois Information

Domain Name: THEDFIRREPORT.COM
Registry Domain ID: 2510824510_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.dreamhost.com
Registrar URL: http://www.DreamHost.com
Updated Date: 2021-03-03T09:28:23Z
Creation Date: 2020-04-04T00:13:00Z
Registry Expiry Date: 2022-04-04T00:13:00Z
Registrar: DreamHost, LLC
Registrar IANA ID: 431
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: CHIN.NS.CLOUDFLARE.COM
Name Server: GRAHAM.NS.CLOUDFLARE.COM
DNSSEC: unsigned
>>> Last update of whois database: 2021-09-11T05:20:39Z <<<

thedfirreport.com valuation and analysis