Report - coinspot.buzz/

Report Overview

URL

coinspot.buzz/
IP

185.145.99.44

ASN

#54290 HOSTWINDS
Submitted

2023-05-29T15:57:19Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

11
Threat Detection Systems

5

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
coinspot.buzz (10)	unknown	2022-10-28 12:58:07	2023-04-15 08:17:33	3849	39581	185.145.99.44

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-29T15:57:01Z	high	185.145.99.44	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain
2023-05-29T15:57:01Z	medium	Client IP	185.145.99.44	ET INFO HTTP Request to a *.buzz domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-29	medium	coinspot.buzz/
2023-05-29	medium	coinspot.buzz/noindex/css/fonts/Light/OpenSans-Light.woff
2023-05-29	medium	coinspot.buzz/noindex/css/fonts/Bold/OpenSans-Bold.woff
2023-05-29	medium	coinspot.buzz/noindex/css/fonts/Light/OpenSans-Light.ttf
2023-05-29	medium	coinspot.buzz/noindex/css/fonts/Bold/OpenSans-Bold.ttf

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (10)

URL IP Response Size

coinspot.buzz/

185.145.99.44

403 Forbidden

4897

URL User Request GET HTTP/1.1

coinspot.buzz/
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text

Size

4897
Hash

5f3664ed52f6df47c88ec162bb36add4

8e66f78c4d0f075066205823d110bc1902157fcf

9ec2f0698f1c3497de39a192dd1c3f3e4506ff1a84dbf85082344297dc52e681

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET / HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 403 Forbidden
Date: Mon, 29 May 2023 15:57:01 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Thu, 16 Oct 2014 13:20:58 GMT
ETag: "1321-5058a1e728280"
Accept-Ranges: bytes
Content-Length: 4897
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

coinspot.buzz/noindex/css/bootstrap.min.css

185.145.99.44

200 OK

19341

URL GET HTTP/1.1

coinspot.buzz/noindex/css/bootstrap.min.css
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

ASCII text, with very long lines (19170)

Size

19341
Hash

44c7856dea679ebcccf8fe201fbe1a7c

192a297f8aeda2bcdd0faa5320ffff825d24116f

bc40aeafcd25bc944d0d6357298c1b198b4a1fe294e0b84015d04b72cf942c10

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /noindex/css/bootstrap.min.css HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: "4b8d-4fc0a3f32a9c0"
Accept-Ranges: bytes
Content-Length: 19341
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

coinspot.buzz/noindex/css/open-sans.css

185.145.99.44

200 OK

5081

URL GET HTTP/1.1

coinspot.buzz/noindex/css/open-sans.css
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

ASCII text

Size

5081
Hash

0ca7398a3e9ef11b70b5dfd1a052fe58

8bb7623c7027e927c0eced114d6011c57101a26f

65e9f0d6919c412dd5a04c322ce9cf9db80a1182f57778606a76110086c49fca

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /noindex/css/open-sans.css HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: "13d9-4fc0a3f32a9c0"
Accept-Ranges: bytes
Content-Length: 5081
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

coinspot.buzz/images/poweredby.png

185.145.99.44

200 OK

3956

URL GET HTTP/1.1

coinspot.buzz/images/poweredby.png
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced\012- data

Size

3956
Hash

5b1ca9f747c1b73dfa1c508765d9056a

6b319c943d8c69e212e7de8385802891dbafe8a3

5b720d579bbc1f8fee3b64df9290d41a28c747a5802589e48e05b7ebbfe9fc2f

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /images/poweredby.png HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: "f74-4fc0a3f32a9c0"
Accept-Ranges: bytes
Content-Length: 3956
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png

coinspot.buzz/images/apache_pb.gif

185.145.99.44

200 OK

2326

URL GET HTTP/1.1

coinspot.buzz/images/apache_pb.gif
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

GIF image data, version 89a, 259 x 32\012- data

Size

2326
Hash

48bc8b181b36c9289866a2e30f6afedd

7bcc5d916d33ab08929a9f7c1d07c33ac1ba47ba

1654416fec35a8b5d36ee0257025cec63e56dfe8572b6ff67c6b0d0d43158cbb

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /images/apache_pb.gif HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT
ETag: "916-4fc0a3f32a9c0"
Accept-Ranges: bytes
Content-Length: 2326
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif

coinspot.buzz/noindex/css/fonts/Light/OpenSans-Light.woff

185.145.99.44

404 Not Found

241

URL GET HTTP/1.1

coinspot.buzz/noindex/css/fonts/Light/OpenSans-Light.woff
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

241
Hash

d5d3f08fc8f1b36bac0b06b89d5384ca

cafebd0173cce7edfcbadcea5b8eabc4d7a20511

c4183128dc59a2ce673414a77fcab7ca0250ef354ef636df49d2b83580734ee0

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /noindex/css/fonts/Light/OpenSans-Light.woff HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 404 Not Found
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Content-Length: 241
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

coinspot.buzz/noindex/css/fonts/Bold/OpenSans-Bold.woff

185.145.99.44

404 Not Found

239

URL GET HTTP/1.1

coinspot.buzz/noindex/css/fonts/Bold/OpenSans-Bold.woff
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

239
Hash

55e916743163813c7b8f4524f6e36b99

e1353703fda388ec26bf105b4132b0459f10163e

b5b54ea0662073c401cabb250a4f107c4763241fa43418503ae5764cff7e9ee4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /noindex/css/fonts/Bold/OpenSans-Bold.woff HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 404 Not Found
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Content-Length: 239
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

coinspot.buzz/noindex/css/fonts/Light/OpenSans-Light.ttf

185.145.99.44

404 Not Found

240

URL GET HTTP/1.1

coinspot.buzz/noindex/css/fonts/Light/OpenSans-Light.ttf
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

240
Hash

5a99182bd45553a369543ec2937fa690

c8766a2b6d830b3d38263d54b0e88c1e384664b7

67db0d028a14f7beb79f8bc441b5d687ca683511965d60e40faebec708d85612

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /noindex/css/fonts/Light/OpenSans-Light.ttf HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 404 Not Found
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Content-Length: 240
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

coinspot.buzz/noindex/css/fonts/Bold/OpenSans-Bold.ttf

185.145.99.44

404 Not Found

238

URL GET HTTP/1.1

coinspot.buzz/noindex/css/fonts/Bold/OpenSans-Bold.ttf
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

238
Hash

75a28665a8da5eb0e3200d8279c7ef42

ee945af618fe1976e31cd1c467ae0cd68a7fad29

e163df3b08c83f6bdc15321fb0403d1dd059f2846037916a3d12ad2806cb5978

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /noindex/css/fonts/Bold/OpenSans-Bold.ttf HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/noindex/css/open-sans.css
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 404 Not Found
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Content-Length: 238
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

coinspot.buzz/favicon.ico

185.145.99.44

404 Not Found

209

URL GET HTTP/1.1

coinspot.buzz/favicon.ico
IP

185.145.99.44:80
ASN

#54290 HOSTWINDS

Requested by

http://coinspot.buzz/

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

209
Hash

18ffb59b61525f781cf9251045be575d

bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d

b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: coinspot.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coinspot.buzz/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 404 Not Found
Date: Mon, 29 May 2023 15:57:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Content-Length: 209
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP