Report - hunterdn688.netlify.app/foxit

Report Overview

Submitted URL
hunterdn688.netlify.app/foxit
IP
18.192.231.252
ASN
#16509 AMAZON-02
Submitted
2024-04-24 14:00:47
Access
public
Website Title
Foxit
Final URL
hunterdn688.netlify.app/foxit
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
techdows.com	126811	unknown	2013-09-10	2023-07-16	496 B	746 B	104.21.82.95
subcari.info	unknown	2021-02-17	2021-02-17	2024-03-12	558 B	2.4 kB	104.21.76.140
indejs.space	unknown	unknown	2020-12-05	2023-01-07	434 B	0 B	0.0.0.0
hunterdn688.netlify.app	unknown	unknown	No data	No data	3.2 kB	73 kB	18.192.231.252

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	hunterdn688.netlify.app	Sinkholed
2024-04-24	medium	hunterdn688.netlify.app	Sinkholed
2024-04-24	medium	hunterdn688.netlify.app	Sinkholed
2024-04-24	medium	hunterdn688.netlify.app	Sinkholed
2024-04-24	medium	hunterdn688.netlify.app	Sinkholed
2024-04-24	medium	hunterdn688.netlify.app	Sinkholed
2024-04-24	medium	hunterdn688.netlify.app	Sinkholed
2024-04-24	medium	indejs.space	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	unknown	322 B	2024-04-24	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-04-24 16:00:54 Last Seen2024-04-24 16:00:54 Times Seen1 Hash 14c2dae8e529566aab6f191868eae79a a42a4c0f1216a5f0a8b631e0ce1cbec58c400717 f5f4e65b539b5295ed8cd4b67dd99c6bb78a7c02be602d25fe52c0d92174b631 Loading...

	hunterdn688.netlify.app/foxit	14 kB	2024-04-24	2024-04-24
Pretty URL hunterdn688.netlify.app/foxit IP 18.192.231.252 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 16:00:54 Last Seen2024-04-24 16:00:54 Times Seen1 Hash dbc8bcdbbd3e6e7c4ed3cd9586c2f765 c4f6a1f6a4807ba8b7d4028b66071ce04accc3c5 955cd074986248456ee91f4bcf5ce06fd009b3cbd62542fff8ef2b3b69481621 Loading...

	hunterdn688.netlify.app/foxit	562 B	2024-04-24	2024-04-24
Pretty URL hunterdn688.netlify.app/foxit IP 18.192.231.252 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 16:00:54 Last Seen2024-04-24 16:00:54 Times Seen1 Hash 0fcc313ac07efda066110d8c98396466 a1c79ce58f3a9fc34dcfa8897e17206790a65203 412bf93eec0f47fd24827da2b0e2ca6e649134980f12b672d41940e584d5694a Loading...

		Size	First Seen	Last Seen
	#1 Eval - be87939567a9f6c95f03c60ed9e8fbe8	1.5 kB	2024-04-24	2024-04-24
Pretty Observations First Seen2024-04-24 16:00:54 Last Seen2024-04-24 16:00:54 Times Seen1 Hash be87939567a9f6c95f03c60ed9e8fbe8 5aec998b7244aa4102111696e0b6b38fe14247ec c3ea0d3c912b2db92f33d22a36d1f82e8456ed0325665caf792b9e8c85519a6a Loading...

	#2 Eval - 57c255e9e5a344d54c42e825fee71bf9	176 B	2023-03-07	2024-05-04
Pretty Observations First Seen2023-03-07 12:03:20 Last Seen2024-05-04 13:21:34 Times Seen191 Hash 57c255e9e5a344d54c42e825fee71bf9 1e47d2deb09cf81d7a4811cbd24620b5310fdf89 9bea87171bca01d8f7aa0c7d34a5fc8f41e6483136f990056ed6413eb87c5934 Loading...

HTTP Transactions (10)

URL IP Response Size

hunterdn688.netlify.app/pattern2.png

18.192.231.252

200 OK

333 B

URL GET HTTP/2
hunterdn688.netlify.app/pattern2.png
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced
Size
333 B (333 bytes)
Hash
5509f5734468b2d3a6d85ae8498fd824
f57e166287e919896d03f6467dd351ef02efbc66
578879d44284993791fe9f291ccb96bfbbd16994ceae1d91956f4d65778cfb41

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pattern2.png HTTP/1.1
Host: hunterdn688.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Wed, 24 Apr 2024 14:00:23 GMT
etag: "099ecb228ff90aa96a84e6be7455f4d9-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW86GMQERGAV2KFKKQFRKN9K
content-length: 333
X-Firefox-Spdy: h2

hunterdn688.netlify.app/pattern1.png

18.192.231.252

200 OK

320 B

URL GET HTTP/2
hunterdn688.netlify.app/pattern1.png
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced
Size
320 B (320 bytes)
Hash
e3548fb743e23efbeaf1db6ca7c9819a
93fe05b2627779b65fcd83fe78bfb1870bfd74d3
5bd06f9d989a452c2ab6518b56b5437b3bcb456853be7af2bd3114b0296576f5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pattern1.png HTTP/1.1
Host: hunterdn688.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Wed, 24 Apr 2024 14:00:23 GMT
etag: "4fde5cbcc1adc5b463faeab9e1d6f2ab-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW86GMNT42D0F0EH3G21RH0T
content-length: 320
X-Firefox-Spdy: h2

hunterdn688.netlify.app/favicon.ico

18.192.231.252

200 OK

1.7 kB

URL GET HTTP/2
hunterdn688.netlify.app/favicon.ico
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
1.7 kB (1691 bytes)
Hash
e4fb09eaca19164b7cf6774659ce8717
853fa4f7c4e7c885a7ca6b4803145ebe20ba328e
4c8adf3dce30caeed0d3bdd8e8a83c9dec522544c632befbd4c7f2d5c9f5d4bc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: hunterdn688.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/foxit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/vnd.microsoft.icon
date: Wed, 24 Apr 2024 14:00:24 GMT
etag: "52f3e59dd6cb2ae980eb761d53ae2869-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW86GMZQ5FZ3Z8AT9PRFRY3W
content-length: 1691
X-Firefox-Spdy: h2

hunterdn688.netlify.app/style.css

18.192.231.252

200 OK

25 kB

URL GET HTTP/2
hunterdn688.netlify.app/style.css
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (762)
Size
25 kB (24923 bytes)
Hash
d41c431cd26803fe0dfc0c186b16e59f
f3ba5b60d6d58ad4e774178c245ba921d395bdad
3283378410d9bf6a24834936356ed4964236fdfc7f41eca02660b2ce5d4b1541

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /style.css HTTP/1.1
Host: hunterdn688.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/foxit
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/css; charset=UTF-8
date: Wed, 24 Apr 2024 14:00:23 GMT
etag: "81115b8a594b0984f1ebf8d047a361d0-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW86GMCWQ7YGDA9H2T95TAF6
X-Firefox-Spdy: h2

techdows.com/wp-content/uploads/2013/04/Foxit-Reader-Version-6-with-ribbon-toolbar-mode.png

104.21.82.95

404 Not Found

0 B

URL GET HTTP/2
techdows.com/wp-content/uploads/2013/04/Foxit-Reader-Version-6-with-ribbon-toolbar-mode.png
IP
104.21.82.95:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerGoogle Trust Services LLC
Subjecttechdows.com
Fingerprint61:A0:A4:B9:AA:87:C2:D0:42:FC:25:E0:B9:91:F9:81:1D:B9:F4:A7
ValidityThu, 14 Mar 2024 22:12:27 GMT - Wed, 12 Jun 2024 22:12:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/uploads/2013/04/Foxit-Reader-Version-6-with-ribbon-toolbar-mode.png HTTP/1.1
Host: techdows.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 14:00:23 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://techdows.com/wp-json/>; rel="https://api.w.org/"
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=grasvDWHr5RFjlZBXCHZuxBWaHmFNd%2B63ssOcS15OX%2BGD8teMcXzbA3TE%2FVjwGI3wznhn%2FY46kZ3oBNi1BkqbaF1%2FDIQNYFb4zxBFljZjLDssRMyBbaq2vp8UL7gjOI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969e894fae56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

hunterdn688.netlify.app/css@family=Bitter%253A400,400italic,700

18.192.231.252

404 Not Found

3.1 kB

URL GET HTTP/2
hunterdn688.netlify.app/css@family=Bitter%253A400,400italic,700
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3234), with no line terminators
Size
3.1 kB (3082 bytes)
Hash
983ad7ad3b11851a568dac1033e352b7
b97321d9a14c18bc49a2029cae02a7c6fae9e2a3
7037defc36dc79e60caa283cf5443f489b9daa5be1dee869404a3b0b95f687e6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css@family=Bitter%253A400,400italic,700 HTTP/1.1
Host: hunterdn688.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 14:00:23 GMT
etag: 1632741742-ssl-df
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW86GMHCJ3913JRXEX55TSH6
X-Firefox-Spdy: h2

hunterdn688.netlify.app/foxit

18.192.231.252

200 OK

37 kB

URL User Request GET HTTP/2
hunterdn688.netlify.app/foxit
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type

Size
37 kB (36759 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /foxit HTTP/1.1
Host: hunterdn688.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 14:00:22 GMT
etag: "f5445e0d5cc1b79768290e4ed1154622-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW86GM23049FM2SA5S3CCR5H
X-Firefox-Spdy: h2

hunterdn688.netlify.app/css@family=Playball

18.192.231.252

404 Not Found

3.1 kB

URL GET HTTP/2
hunterdn688.netlify.app/css@family=Playball
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3234), with no line terminators
Size
3.1 kB (3082 bytes)
Hash
983ad7ad3b11851a568dac1033e352b7
b97321d9a14c18bc49a2029cae02a7c6fae9e2a3
7037defc36dc79e60caa283cf5443f489b9daa5be1dee869404a3b0b95f687e6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css@family=Playball HTTP/1.1
Host: hunterdn688.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 14:00:23 GMT
etag: 1632741742-ssl-df
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW86GMHC598280Z2D6CAQJCH
X-Firefox-Spdy: h2

subcari.info/?sE=BVdCSloFCl1RE1EMUlMAVA9bAQFPBV1KWUAeCAEDHFNNEltIEggGQUQJF10RSFpfBxhCXAIOGQMcGAsXAgICUk1UGAoVBg0VZjVJFU4XUEsXQBMKAkYBU2M=

104.21.76.140

200 OK

1.5 kB

URL GET HTTP/2
subcari.info/?sE=BVdCSloFCl1RE1EMUlMAVA9bAQFPBV1KWUAeCAEDHFNNEltIEggGQUQJF10RSFpfBxhCXAIOGQMcGAsXAgICUk1UGAoVBg0VZjVJFU4XUEsXQBMKAkYBU2M=
IP
104.21.76.140:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hunterdn688.netlify.app/foxit
Certificate
IssuerGoogle Trust Services LLC
Subjectsubcari.info
Fingerprint60:E0:D3:75:DB:60:C2:AB:29:45:BA:7F:DC:CB:5F:2E:10:0E:21:BC
ValidityWed, 03 Apr 2024 09:32:15 GMT - Tue, 02 Jul 2024 09:32:14 GMT

File type
ASCII text, with very long lines (1562), with no line terminators
Size
1.5 kB (1507 bytes)
Hash
8352c0d0850c30dcfdd787121a0ab261
d89d31b527ad193bc1d0a814111292f0865819a1
1e6112a8778c245a329d41c2d5a2a14120113248e7885c8b1342b2b24fe01fe8

HTTP Headers

GET /?sE=BVdCSloFCl1RE1EMUlMAVA9bAQFPBV1KWUAeCAEDHFNNEltIEggGQUQJF10RSFpfBxhCXAIOGQMcGAsXAgICUk1UGAoVBg0VZjVJFU4XUEsXQBMKAkYBU2M= HTTP/1.1
Host: subcari.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hunterdn688.netlify.app
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:23 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: https://hunterdn688.netlify.app
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: X-Requested-With
access-control-allow-credentials: true
access-control-max-age: 86400
set-cookie: kNrJanhbXv=1.1714053623; expires=Thu, 25-Apr-2024 14:00:23 GMT; Max-Age=86400; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VmjRT2x%2FxORvDMRrkBlNTxs%2Bi7OsLCTAyR1de6NB9NBaIy97WdaxvpTse4szL6jtZygVoVL3Z2mhtOfT9mfLqRKunDvRajDuPc860Mci6wnIxn06e4SqmY41Sfj0Zn8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969e8b587a0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

indejs.space/

0.0.0.0

0 B

URL GET
indejs.space/
IP
0.0.0.0:0
ASN
#0

Requested by
https://hunterdn688.netlify.app/foxit

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: indejs.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hunterdn688.netlify.app
DNT: 1
Connection: keep-alive
Referer: https://hunterdn688.netlify.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (10)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2