Report - btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460

Report Overview

Submitted URL
btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460
IP
37.1.217.35
ASN
#58061 Scalaxy B.V.
Submitted
2024-04-25 07:39:55
Access
public
Website Title
Thanks
Final URL
btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	466 B	8.3 kB	142.250.74.106
btccoin-istance.com	unknown	unknown	No data	No data	1.6 kB	68 kB	37.1.217.35
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	1.0 kB	48 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	btccoin-istance.com	Sinkholed
2024-04-25	medium	btccoin-istance.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460

37.1.217.35

200 OK

66 kB

URL User Request GET HTTP/1.1
btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460
IP
37.1.217.35:80
ASN
#58061 Scalaxy B.V.

File type
HTML document, ASCII text, with very long lines (65064)
Size
66 kB (65901 bytes)
Hash
2bd5290518bef8198b34d6e339a28239
4a9160217af8d779cd73052967ac826f7d6c20a0
47b8a200d9a267b2c7037cf1a8d89212987976eb0d75c8c03140eaa0f3b23d6b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460 HTTP/1.1
Host: btccoin-istance.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 07:39:29 GMT
Server: Apache/2.4.52 (Ubuntu)
Cache-Control: no-cache, private
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 59
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjVRam45clU4bHdjNDlxMThtUEZabUE9PSIsInZhbHVlIjoiU05CM2o1K3VHY2tJaUxReldqUVhybEdKTlNBZnhBVkFoMzBITXdqazJUNVZFYTJ0WjFBYlVNTThiN2FYZUs1ZEdud1NROGFvSUlDTHR0WGZvdUpDTngzNEkxZ0JtY0tnOW81ZVNoREpOUmdEREJPdmQ4dWE5a1IwWUN0NW51emYiLCJtYWMiOiJmOWE2ODQ3ZWZjZmQyOTIzN2NhYWRhOTY1NGM1YjIzMjM4OTg3ZTcxZDM3YjkzYmM4MjQwZjRhZjllMmQwNTY0IiwidGFnIjoiIn0%3D; expires=Thu, 25 Apr 2024 09:39:29 GMT; Max-Age=7200; path=/
laravel_session=eyJpdiI6IlQrSWd3SUgvY2pnS1BrblhSV3g4aEE9PSIsInZhbHVlIjoiaVVjRU54bFJuMEE1bFJwcVBiWEFlNjV0UGxHeDYwUzJ0dEI0eG1vSm5LZFFCaTBhNGhkL2J4SjhHL2FYYklKU203c1Ura0hmR2M0bGxxQzlMMFRTTnV2b29pemdMclFqbWxEcE1IQjF5SmhEOWgvR1FNT1duSVI3cE5GZDNvekoiLCJtYWMiOiJmZjIxZjdjYzNlOTY2MGE2MjhhYzE0ZjA4ODUwZmU2ODI3NDM1NDFkZDJhY2FiZThjY2UxODJhYjQ5ZTYxMGI0IiwidGFnIjoiIn0%3D; expires=Thu, 25 Apr 2024 09:39:29 GMT; Max-Age=7200; path=/; httponly
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked

btccoin-istance.com/favicon.ico

37.1.217.35

404 Not Found

281 B

URL GET HTTP/1.1
btccoin-istance.com/favicon.ico
IP
37.1.217.35:80
ASN
#58061 Scalaxy B.V.

Requested by
http://btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460

File type
HTML document, ASCII text
Size
281 B (281 bytes)
Hash
56b1f35a00921530332353dbfbd18ba5
44e31544a2573d9a8d7cc6afa11276386b644d9a
765bc3fcdf7ab3e358bb53f6c08cc12c1475892b93dac59fa96c5b4730a0c220

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: btccoin-istance.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460
Cookie: XSRF-TOKEN=eyJpdiI6IjVRam45clU4bHdjNDlxMThtUEZabUE9PSIsInZhbHVlIjoiU05CM2o1K3VHY2tJaUxReldqUVhybEdKTlNBZnhBVkFoMzBITXdqazJUNVZFYTJ0WjFBYlVNTThiN2FYZUs1ZEdud1NROGFvSUlDTHR0WGZvdUpDTngzNEkxZ0JtY0tnOW81ZVNoREpOUmdEREJPdmQ4dWE5a1IwWUN0NW51emYiLCJtYWMiOiJmOWE2ODQ3ZWZjZmQyOTIzN2NhYWRhOTY1NGM1YjIzMjM4OTg3ZTcxZDM3YjkzYmM4MjQwZjRhZjllMmQwNTY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlQrSWd3SUgvY2pnS1BrblhSV3g4aEE9PSIsInZhbHVlIjoiaVVjRU54bFJuMEE1bFJwcVBiWEFlNjV0UGxHeDYwUzJ0dEI0eG1vSm5LZFFCaTBhNGhkL2J4SjhHL2FYYklKU203c1Ura0hmR2M0bGxxQzlMMFRTTnV2b29pemdMclFqbWxEcE1IQjF5SmhEOWgvR1FNT1duSVI3cE5GZDNvekoiLCJtYWMiOiJmZjIxZjdjYzNlOTY2MGE2MjhhYzE0ZjA4ODUwZmU2ODI3NDM1NDFkZDJhY2FiZThjY2UxODJhYjQ5ZTYxMGI0IiwidGFnIjoiIn0%3D
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 25 Apr 2024 07:39:30 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
http://btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22504, version 1.0
Size
22 kB (22504 bytes)
Hash
1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92

HTTP Headers

GET /s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://btccoin-istance.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:32:58 GMT
expires: Fri, 25 Apr 2025 02:32:58 GMT
cache-control: public, max-age=31536000
age: 18392
last-modified: Tue, 02 May 2023 15:12:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2

216.58.207.227

200 OK

24 kB

URL GET HTTP/2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
http://btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Size
24 kB (23580 bytes)
Hash
e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537

HTTP Headers

GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://btccoin-istance.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:21:46 GMT
expires: Fri, 18 Apr 2025 17:21:46 GMT
cache-control: public, max-age=31536000
age: 569864
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Lato:wght@100;300;400;700;900&display=swap

142.250.74.106

200 OK

7.6 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Lato:wght@100;300;400;700;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://btccoin-istance.com/testAutologin?token=8f0712e8a9ef3b17fa960e176bd50460
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
7.6 kB (7632 bytes)
Hash
55413b63e0b1d9fa2b702be618c90b36
e70bbf248b264cbceb80db05979c705257921115
3062b6df014268bae23f2009492a8ac31548e3e157a49bbef3e65d5d6ceccfb6

HTTP Headers

GET /css2?family=Lato:wght@100;300;400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://btccoin-istance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 07:39:30 GMT
date: Thu, 25 Apr 2024 07:39:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers