Report - bevis.netlify.app/

Report Overview

Submitted URL
bevis.netlify.app/
IP
52.58.254.253
ASN
#16509 AMAZON-02
Submitted
2024-04-24 08:33:26
Access
public
Website Title
bevis.netlify.app
Final URL
bevis.netlify.app/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assets.rockpapershotgun.com	529785	2007-07-10	2017-07-13	2024-02-03	451 B	388 kB	143.204.55.122
howtodo.rocks	547232	unknown	2018-12-10	2023-02-14	453 B	18 kB	172.67.141.116
topduilawyer.website	unknown	unknown	No data	No data	528 B	0 B	0.0.0.0
i0.wp.com	3021	1997-03-28	2013-09-17	2024-04-23	573 B	184 B	192.0.77.2
img.letgo.com	174762	2000-05-01	2015-10-12	2023-12-31	489 B	0 B	0.0.0.0
www.helpowl.com	554369	2009-09-11	2014-07-31	2024-01-16	493 B	7.9 kB	104.26.13.11
www.rockpapershotgun.com	143479	2007-07-10	2015-12-26	2024-01-20	448 B	622 B	151.101.65.55
bevis.netlify.app	unknown	unknown	2022-07-09	2023-03-31	3.5 kB	27 kB	18.192.231.252

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	topduilawyer.website	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (15)

URL IP Response Size

www.helpowl.com/manualimages_autos/h/o/1995-pontiac-sunfire-owners-manual-f07b42a_6_673cbb10.png

104.26.13.11

200 OK

6.8 kB

URL GET HTTP/2
www.helpowl.com/manualimages_autos/h/o/1995-pontiac-sunfire-owners-manual-f07b42a_6_673cbb10.png
IP
104.26.13.11:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bevis.netlify.app/
Certificate
IssuerLet's Encrypt
Subjecthelpowl.com
FingerprintA2:51:20:EC:79:7C:3E:7F:37:58:D0:4C:F3:F6:69:32:76:3D:E2:49
ValiditySun, 17 Mar 2024 00:25:40 GMT - Sat, 15 Jun 2024 00:25:39 GMT

File type
RIFF (little-endian) data, Web/P image
Size
6.8 kB (6836 bytes)
Hash
ed07f6078b3d8c8be13b1f93eed80a63
66b0c9a971eda4fbd76c0b407b3b10cdc6c5338b
003aca435899ba3244fae0e47b37ca54fe31f5a518fdb7810d827a936aa821b4

HTTP Headers

GET /manualimages_autos/h/o/1995-pontiac-sunfire-owners-manual-f07b42a_6_673cbb10.png HTTP/1.1
Host: www.helpowl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 08:33:01 GMT
content-type: image/webp
content-length: 6836
cache-control: public, max-age=3600, s-maxage=2592000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=7523
content-disposition: inline; filename="1995-pontiac-sunfire-owners-manual-f07b42a_6_673cbb10.webp"
vary: Accept
content-security-policy: upgrade-insecure-requests; default-src https: data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self'
etag: "556a6b9f-1d63"
last-modified: Sun, 31 May 2015 02:02:07 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwpE%2F3DIOvRKLxJ5VCYdyPPuN6Hx%2FkH79wYwC9N66NRUBVN7DpMZHlb6Cy1jD6Hsf1r07PFWUxE85qnftBFh8n8l%2B6av6jsEk3%2FfLFXJeSsGg7YBymexNpJu8GFV0BAEvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8794befe2ba95695-OSL
X-Firefox-Spdy: h2

www.rockpapershotgun.com/images/15/nov/man_head.png

151.101.65.55

301 Moved Permanently

134 B

URL GET HTTP/2
www.rockpapershotgun.com/images/15/nov/man_head.png
IP
151.101.65.55:443
ASN
#54113 FASTLY

Requested by
https://bevis.netlify.app/
Certificate
IssuerLet's Encrypt
Subject*.rockpapershotgun.com
Fingerprint2B:0B:42:00:A9:D2:7B:57:BE:9B:B8:84:14:C7:48:9E:DF:1C:F2:F6
ValidityWed, 10 Apr 2024 23:22:04 GMT - Tue, 09 Jul 2024 23:22:03 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
134 B (134 bytes)
Hash
4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a

HTTP Headers

GET /images/15/nov/man_head.png HTTP/1.1
Host: www.rockpapershotgun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
content-type: text/html
location: https://assets.rockpapershotgun.com:443/images/15/nov/man_head.png
x-fetched-on: Wed, 24 Apr 2024 08:33:01 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 0
date: Wed, 24 Apr 2024 08:33:01 GMT
via: 1.1 varnish
x-served-by: cache-hel1410032-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713947581.221257,VS0,VE187
strict-transport-security: max-age=31557600
content-length: 134
X-Firefox-Spdy: h2

bevis.netlify.app/moYUMrnL.png

18.192.231.252

200 OK

965 B

URL GET HTTP/2
bevis.netlify.app/moYUMrnL.png
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 5 x 9, 8-bit/color RGBA, non-interlaced
Size
965 B (965 bytes)
Hash
28f29d03d46ea11fd8e0eee8a63a69e4
d3ab18354b140632caf082756d465e81293cfd59
84c7fb2d26ff80cf868adc677147b1452ce215c7906243468ae493e1fc6943ce

HTTP Headers

GET /moYUMrnL.png HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: "d3142581545fef9bb08386c7ca78f3a5-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW7KS6VMSDEZPH89NNJB8553
content-length: 965
X-Firefox-Spdy: h2

bevis.netlify.app/XbrxN.png

18.192.231.252

200 OK

1.1 kB

URL GET HTTP/2
bevis.netlify.app/XbrxN.png
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced
Size
1.1 kB (1145 bytes)
Hash
d957b31f1bdab0b0cf7796e8dce0d740
41f04e2c5e4c2d3ff1fdfa3691e9e20127200e85
beae1051382a2a76c37f91694f48cb892a47b56015e52869c4a2f7ff3d922b36

HTTP Headers

GET /XbrxN.png HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: "24f3e860f56df5d6637525357eaa9ba5-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW7KS6VNT6TD5B3TP25YRCYP
content-length: 1145
X-Firefox-Spdy: h2

bevis.netlify.app/AtTKmTCTGfL.png

18.192.231.252

200 OK

1.2 kB

URL GET HTTP/2
bevis.netlify.app/AtTKmTCTGfL.png
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1212 bytes)
Hash
25cf1e70beb9366da46f1b62c69949c9
ddfae11ff81ef72aa8d475def35cc91482cf73b2
b141dc06c2d9c550cd3ef9003845694343b360480978fb1debe2f4cfcbb821c3

HTTP Headers

GET /AtTKmTCTGfL.png HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: "0ca360ecaafa45604f3061850420f787-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW7KS6VRBXGBNK3BAEC0RXRF
content-length: 1212
X-Firefox-Spdy: h2

bevis.netlify.app/XKkqTyM.png

18.192.231.252

200 OK

1.2 kB

URL GET HTTP/2
bevis.netlify.app/XKkqTyM.png
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1187 bytes)
Hash
e81ec4583e56e4cf4acb1755812d2446
67afd663623b7be54cf93c9393f9eb21d7554a93
ec224815e30f90b523bd4c07e91df2bad5dffa58fad4aec18855bf59f8e4c1d3

HTTP Headers

GET /XKkqTyM.png HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: "1d3c3d745e2d4d88ff27099ccd5f1f0c-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW7KS6VX9FX3MDNKMFB9VKS6
content-length: 1187
X-Firefox-Spdy: h2

bevis.netlify.app/avDUWhw.png

18.192.231.252

200 OK

1.3 kB

URL GET HTTP/2
bevis.netlify.app/avDUWhw.png
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced
Size
1.3 kB (1312 bytes)
Hash
1f8d0f7d21b5eb9169339df92df75c58
9148a61e9fcfe96be31e5d111bad39ab18886bec
172e811642260847dc06822e9bd3994949a3a4ec1ebd48b08c3393a46cac3604

HTTP Headers

GET /avDUWhw.png HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: "18094c002b8e65a0a02e544c5555999c-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW7KS6VR2CYG4F5HASN0BK43
content-length: 1312
X-Firefox-Spdy: h2

assets.rockpapershotgun.com/images/15/nov/man_head.png

143.204.55.122

200 OK

387 kB

URL GET HTTP/2
assets.rockpapershotgun.com/images/15/nov/man_head.png
IP
143.204.55.122:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerAmazon
Subject*.rockpapershotgun.com
Fingerprint88:31:59:7D:BE:DB:8A:24:88:AA:7C:E7:49:2B:34:F7:9D:BA:0B:92
ValiditySat, 03 Feb 2024 00:00:00 GMT - Sun, 02 Mar 2025 23:59:59 GMT

File type
PNG image data, 620 x 320, 8-bit/color RGB, non-interlaced
Size
387 kB (387113 bytes)
Hash
d42aef81b8b854052fd8fe03db7dc4e7
a1266b5a2024df716e8247113f0306ab33aa728b
aead604c61a58b1b07f647cc75238e91140d8e4f29190bc9678a8bc852800734

HTTP Headers

GET /images/15/nov/man_head.png HTTP/1.1
Host: assets.rockpapershotgun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bevis.netlify.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 387113
date: Tue, 23 Apr 2024 17:40:10 GMT
last-modified: Fri, 13 Aug 2021 10:44:44 GMT
etag: "d42aef81b8b854052fd8fe03db7dc4e7"
x-amz-meta-mtime: 1447063477
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MhxVd1Z1cUw5h3Qjl1OM4oS82G5435owDp-k9BtMxvbeiuc-sTa2pg==
age: 53572
X-Firefox-Spdy: h2

bevis.netlify.app/

18.192.231.252

200 OK

5.2 kB

URL GET HTTP/2
bevis.netlify.app/
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (20494), with CRLF line terminators
Size
5.2 kB (5151 bytes)
Hash
2f2b9df994f272300f19329df0ae3ac5
e5f16c8c74808c9ddd53ebc4eb8b789d704c5843
b25c90f22110eeeacc10997ddd811c7b435fea29f0868f41bac7c66e181c5e76

HTTP Headers

GET / HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: "3a8b255d5a2f5701d644082f345c07ba-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW7KS78C1RYD4W7Z42VJ333C
content-length: 5151
X-Firefox-Spdy: h2

howtodo.rocks/wp-content/uploads/2018/04/Office-6.webp

172.67.141.116

200 OK

17 kB

URL GET HTTP/2
howtodo.rocks/wp-content/uploads/2018/04/Office-6.webp
IP
172.67.141.116:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bevis.netlify.app/
Certificate
IssuerLet's Encrypt
Subjecthowtodo.rocks
FingerprintE9:6B:1A:0B:B8:6B:21:AF:10:E3:A3:77:DB:D1:5F:43:15:38:40:A2
ValidityMon, 25 Mar 2024 10:56:21 GMT - Sun, 23 Jun 2024 10:56:20 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x853, Scaling: [none]x[none], YUV color, decoders should clamp
Size
17 kB (17154 bytes)
Hash
a952c3cc0fc4a94f54da95147ffcd22e
0735fd0aa0dcae84bb8a6ffa274aec4c82717d43
5e762c5d7699fe0617d29fb6d5e2754e6c723de3f8abd5c3e7545c0d2ff5696c

HTTP Headers

GET /wp-content/uploads/2018/04/Office-6.webp HTTP/1.1
Host: howtodo.rocks
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 08:33:01 GMT
content-type: image/webp
last-modified: Wed, 10 May 2023 15:11:07 GMT
etag: W/"645bb40b-4302"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-max-age: 3600
access-control-expose-headers: Content-Length
access-control-allow-headers: Range
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WGK1huIuGh45XWL65cmNBc3C2Ru6oQ6%2BUiN60kCBp1jzDLg7BWsoGL5yyFnegkkhT60mftkJ01xGlBPLQ0LUO%2F4iGCsJf4RLjV%2FOoDf0Fi51BheLJtRMJwKvQOmU7H%2BQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8794befe6d317127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

topduilawyer.website/wp-content/uploads/2018/10/rain-bird-esp-3-station-expansion-module-for-esp-m-esp-me-esp-and-esp-e-series-timers-rain-bird-esp-tm2-wifi-setup.jpg

0.0.0.0

0 B

URL GET
topduilawyer.website/wp-content/uploads/2018/10/rain-bird-esp-3-station-expansion-module-for-esp-m-esp-me-esp-and-esp-e-series-timers-rain-bird-esp-tm2-wifi-setup.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://bevis.netlify.app/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/10/rain-bird-esp-3-station-expansion-module-for-esp-m-esp-me-esp-and-esp-e-series-timers-rain-bird-esp-tm2-wifi-setup.jpg HTTP/1.1
Host: topduilawyer.website
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

bevis.netlify.app/favicon.ico

18.192.231.252

404 Not Found

3.1 kB

URL GET HTTP/2
bevis.netlify.app/favicon.ico
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3234), with no line terminators
Size
3.1 kB (3082 bytes)
Hash
983ad7ad3b11851a568dac1033e352b7
b97321d9a14c18bc49a2029cae02a7c6fae9e2a3
7037defc36dc79e60caa283cf5443f489b9daa5be1dee869404a3b0b95f687e6

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: 1590745976-ssl-df
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW7KS77E5NE9W9PZ3X0Z9Z49
X-Firefox-Spdy: h2

bevis.netlify.app/style.css

18.192.231.252

200 OK

9.4 kB

URL GET HTTP/2
bevis.netlify.app/style.css
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://bevis.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (9385), with no line terminators
Size
9.4 kB (9369 bytes)
Hash
7fdec353268bc5e528fef1a3671e0bc3
9fd7d34917a72f14e639fb20c89eec191dd27f35
281e4a8887f60c567a29d285a0fc9f1da97193a1b9f3be77795714353439c8b1

HTTP Headers

GET /style.css HTTP/1.1
Host: bevis.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/css; charset=UTF-8
date: Wed, 24 Apr 2024 08:33:01 GMT
etag: "77cddc581538bfb4d6da0e440da7870a-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW7KS6NGD90G216RPQYSSCE2
X-Firefox-Spdy: h2

i0.wp.com/carpny.org/wp-content/uploads/2017/09/kitchenaid-dishwasher-parts-model-kuds01flss3-sears-partsdirect-with-regard-to-kenmore-ultra-wash-dishwasher-parts-diagram.png

192.0.77.2

404 Not Found

0 B

URL GET HTTP/2
i0.wp.com/carpny.org/wp-content/uploads/2017/09/kitchenaid-dishwasher-parts-model-kuds01flss3-sears-partsdirect-with-regard-to-kenmore-ultra-wash-dishwasher-parts-diagram.png
IP
192.0.77.2:443
ASN
#2635 AUTOMATTIC

Requested by
https://bevis.netlify.app/
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /carpny.org/wp-content/uploads/2017/09/kitchenaid-dishwasher-parts-model-kuds01flss3-sears-partsdirect-with-regard-to-kenmore-ultra-wash-dishwasher-parts-diagram.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Wed, 24 Apr 2024 08:33:01 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 3
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

img.letgo.com/images/b7/fd/45/a7/b7fd45a721cbd17d57c0b52d85602c82.jpg?impolicy=img_200_low

0.0.0.0

0 B

URL GET
img.letgo.com/images/b7/fd/45/a7/b7fd45a721cbd17d57c0b52d85602c82.jpg?impolicy=img_200_low
IP
0.0.0.0:0
ASN
#0

Requested by
https://bevis.netlify.app/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/b7/fd/45/a7/b7fd45a721cbd17d57c0b52d85602c82.jpg?impolicy=img_200_low HTTP/1.1
Host: img.letgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bevis.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (15)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash