Report - ambicorprealestate.com/

Report Overview

Submitted URL
ambicorprealestate.com/
IP
66.45.238.235
ASN
#19318 IS-AS-1
Submitted
2024-05-04 18:58:11
Access
public
Website Title
Ambicorp Real Estate
Final URL
ambicorprealestate.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ambicorprealestate.com	unknown	unknown	No data	No data	4.4 kB	304 kB	66.45.238.235
fonts.bunny.net	unknown	1999-11-22	2022-03-21	2024-05-03	1.0 kB	28 kB	194.242.11.186

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed
2024-05-04	medium	ambicorprealestate.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	ambicorprealestate.com/	0 B	2023-03-07	2024-05-18
Pretty URL ambicorprealestate.com/ IP 66.45.238.235 ASN #19318 IS-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 12:31:34 Times Seen37785043 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ambicorprealestate.com/wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1714402222	2.0 kB	2023-03-07	2024-05-17
Pretty URL ambicorprealestate.com/wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1714402222 IP 66.45.238.235 ASN #19318 IS-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:59 Last Seen2024-05-17 18:36:05 Times Seen513 Hash 112c47ca670be7279689c0d5ecbefd20 30b902ad5710b7050ed561bd6ce7ea8755461591 2bc30f2470769a137e994cd92fa1ccf10e6f662b4ffae1397342344a913d2133 Loading...

	ambicorprealestate.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	88 kB	2023-11-03	2024-05-18
Pretty URL ambicorprealestate.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP 66.45.238.235 ASN #19318 IS-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-03 09:26:43 Last Seen2024-05-18 12:00:38 Times Seen48689 Hash 826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf Loading...

	ambicorprealestate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	14 kB	2023-05-09	2024-05-18
Pretty URL ambicorprealestate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP 66.45.238.235 ASN #19318 IS-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 19:21:05 Last Seen2024-05-18 12:31:33 Times Seen87224 Hash 9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89 Loading...

HTTP Transactions (11)

URL IP Response Size

ambicorprealestate.com/

66.45.238.235

200 OK

1.4 kB

URL User Request GET HTTP/2
ambicorprealestate.com/
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (896)
Size
1.4 kB (1372 bytes)
Hash
1356331e47439112605156f6e2d03295
1970565aa321bda09cc162c84e7b7f2a49220d43
92ef71113a5b3f4eeb4ef85ea360c2272da334fc719223fbdb066901260d52ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://ambicorprealestate.com/index.php?rest_route=/>; rel="https://api.w.org/"
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-length: 1372
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

ambicorprealestate.com/wp-content/plugins/maintenance/load/css/style.css?ver=1714402222

66.45.238.235

200 OK

3.2 kB

URL GET HTTP/3
ambicorprealestate.com/wp-content/plugins/maintenance/load/css/style.css?ver=1714402222
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
3.2 kB (3196 bytes)
Hash
1f7ac8b3c6b8944c9740177ef162dae8
9ff3c459f74a20088a120436e1e4fe9a8e93467f
f4b01013d89759e931124b9d53118d6c868eecac24a894ec4336361bb28278fb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/maintenance/load/css/style.css?ver=1714402222 HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=31536000,public
expires: Sun, 04 May 2025 18:57:44 GMT
content-type: text/css; charset=UTF-8
last-modified: Mon, 29 Apr 2024 14:50:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3196
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

ambicorprealestate.com/wp-content/plugins/maintenance/load/css/fonts.css?ver=1714402222

66.45.238.235

200 OK

9.8 kB

URL GET HTTP/3
ambicorprealestate.com/wp-content/plugins/maintenance/load/css/fonts.css?ver=1714402222
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837), with CRLF line terminators
Size
9.8 kB (9819 bytes)
Hash
5fb4f4b0f6c0e07ec079e22119ba445b
bd4aa9a088c718762be492b0dc8a9cd59cf11c17
a91c36795c5ca61c5d432a09e2158cc841e178ea3037431d620ab25c68617cd8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/maintenance/load/css/fonts.css?ver=1714402222 HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=31536000,public
expires: Sun, 04 May 2025 18:57:44 GMT
content-type: text/css; charset=UTF-8
last-modified: Mon, 29 Apr 2024 14:50:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 9819
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed

fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2

194.242.11.186

200 OK

17 kB

URL GET HTTP/2
fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
https://ambicorprealestate.com/
Certificate
IssuerLet's Encrypt
Subjectfonts.bunny.net
FingerprintCB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F
ValidityTue, 09 Apr 2024 10:09:28 GMT - Mon, 08 Jul 2024 10:09:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16740, version 1.0
Size
17 kB (16740 bytes)
Hash
e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681

HTTP Headers

GET /open-sans/files/open-sans-latin-400-normal.woff2 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ambicorprealestate.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.bunny.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 18:57:44 GMT
content-type: font/woff2
content-length: 16740
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: "64a63e4f-4164"
last-modified: Thu, 06 Jul 2023 04:08:47 GMT
cdn-storageserver: SE-582
cdn-fileserver: 344
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/27/2024 12:20:50
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: ed94eccf6a3b57d1eb51c9bb74fc32a8
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ambicorprealestate.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1

66.45.238.235

200 OK

30 kB

URL GET HTTP/3
ambicorprealestate.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (29744 bytes)
Hash
826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=31536000,public
expires: Sun, 04 May 2025 18:57:44 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 16 Apr 2024 10:09:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 29744
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed

ambicorprealestate.com/wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1714402222

66.45.238.235

200 OK

550 B

URL GET HTTP/3
ambicorprealestate.com/wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1714402222
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
550 B (550 bytes)
Hash
112c47ca670be7279689c0d5ecbefd20
30b902ad5710b7050ed561bd6ce7ea8755461591
2bc30f2470769a137e994cd92fa1ccf10e6f662b4ffae1397342344a913d2133

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1714402222 HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=31536000,public
expires: Sun, 04 May 2025 18:57:44 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 29 Apr 2024 14:50:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 550
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed

ambicorprealestate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1

66.45.238.235

200 OK

4.7 kB

URL GET HTTP/3
ambicorprealestate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (13479)
Size
4.7 kB (4678 bytes)
Hash
9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=31536000,public
expires: Sun, 04 May 2025 18:57:44 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 16 Apr 2024 10:09:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 4678
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed

ambicorprealestate.com/wp-content/plugins/maintenance/load/fonts/foundation-icons.woff

66.45.238.235

200 OK

32 kB

URL GET HTTP/3
ambicorprealestate.com/wp-content/plugins/maintenance/load/fonts/foundation-icons.woff
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 32020, version 0.0
Size
32 kB (32020 bytes)
Hash
a188c2f768ce5033d3f5d47be7280e25
112fb0e498037f2fea036adb8105e47638159eaa
8c44c3feedae5331a281278ea3ba91d2255928a2f3010d316d6fbb9052e0c2ec

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/maintenance/load/fonts/foundation-icons.woff HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/wp-content/plugins/maintenance/load/css/fonts.css?ver=1714402222
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=10368000
expires: Sun, 01 Sep 2024 18:57:44 GMT
content-type: font/woff
last-modified: Mon, 29 Apr 2024 14:50:22 GMT
accept-ranges: bytes
content-length: 32020
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed
vary: Accept-Encoding

ambicorprealestate.com/wp-content/uploads/2024/04/mt-sample-background.jpg

66.45.238.235

200 OK

218 kB

URL GET HTTP/3
ambicorprealestate.com/wp-content/uploads/2024/04/mt-sample-background.jpg
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Size
218 kB (217593 bytes)
Hash
c44b6dbc04ed12e6ca3a8b5559d8859b
8a5653f8852fbea5723b1220a56cce7121c656bf
950f036c961817afda2e2171be2d3c3e24fc24745914f2ee8d6f10a23ddea30e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2024/04/mt-sample-background.jpg HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=10368000,public
expires: Sun, 01 Sep 2024 18:57:44 GMT
content-type: image/jpeg
last-modified: Mon, 29 Apr 2024 14:50:41 GMT
accept-ranges: bytes
content-length: 217593
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed
vary: Accept-Encoding

ambicorprealestate.com/favicon.ico

66.45.238.235

404 Not Found

1.3 kB

URL GET HTTP/3
ambicorprealestate.com/favicon.ico
IP
66.45.238.235:443
ASN
#19318 IS-AS-1

Requested by
https://ambicorprealestate.com/
Certificate
IssuercPanel, Inc.
Subjectambicorprealestate.com
Fingerprint47:38:2F:81:A4:71:16:DC:AC:74:90:50:81:84:0F:45:E2:CD:76:9A
ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ambicorprealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 04 May 2024 18:57:44 GMT
server: LiteSpeed
vary: Accept-Encoding

fonts.bunny.net/css?family=Open%20Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic:300

194.242.11.186

200 OK

9.1 kB

URL GET HTTP/2
fonts.bunny.net/css?family=Open%20Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic:300
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
https://ambicorprealestate.com/
Certificate
IssuerLet's Encrypt
Subjectfonts.bunny.net
FingerprintCB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F
ValidityTue, 09 Apr 2024 10:09:28 GMT - Mon, 08 Jul 2024 10:09:27 GMT

File type
ASCII text
Size
9.1 kB (9069 bytes)
Hash
f45f45f4ec7d67a10012669f391c636e
ba186c661cac2e2ff13b901d137cc90f3cf03a2a
6d15dfc970574dcd637adc8d6e0f383a74e45068d927740001e06a60f2f46ca8

HTTP Headers

GET /css?family=Open%20Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic:300 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ambicorprealestate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 18:57:44 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Tue, 23 Apr 2024 18:55:41 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/23/2024 18:55:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: a3de3645e8cdaa1a822debdeb0ecbc99
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type