Report - slickfox277.netlify.app/

Report Overview

Visited public
2023-11-30 04:53:09
Tags
URL
slickfox277.netlify.app/
Finishing URL
slickfox277.netlify.app/
IP / ASN
35.156.224.161
#16509 AMAZON-02
Title
Slickfox277

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
s3-ap-northeast-1.amazonaws.com	unknown	2005-08-18	2012-05-21 21:13:35	2023-11-29 17:03:58	523 B	46 kB	52.219.150.196
www.ssbwiki.com	392655	unknown	No data	No data	461 B	686 kB	74.50.124.63
skieyclip.weebly.com	unknown	unknown	No data	No data	475 B	1.9 MB	199.34.228.54
indejs.space	unknown	unknown	2020-12-05 13:06:06	2023-01-07 18:29:49	892 B	0 B	0.0.0.0
www.pes-patch.com	559718	unknown	2012-07-15 14:08:17	2023-01-15 04:30:12	499 B	0 B	0.0.0.0
www.djbox.ie	unknown	unknown	No data	No data	491 B	2.5 kB	23.227.38.65
i.ytimg.com	109	2007-12-11	2012-10-03 19:11:04	2023-11-29 08:38:32	455 B	12 kB	142.250.74.118
slickfox277.netlify.app	unknown	unknown	No data	No data	1.4 kB	366 kB	18.192.231.252
cdn.thingiverse.com	73360	2008-10-18	2016-03-30 09:23:18	2023-06-08 11:38:44	513 B	485 B	0.0.0.0
lh5.googleusercontent.com	157	2008-11-17	2012-05-22 09:35:05	2023-11-29 20:19:11	576 B	24 kB	142.250.74.1
cdn.nichesites.pikoya.com	330359	2012-09-01	2020-11-13 11:27:04	2023-11-27 15:59:08	493 B	93 kB	104.18.11.76
video.informer.com	979913	1996-02-13	2017-01-29 16:18:05	2023-02-08 15:17:19	470 B	15 kB	208.94.233.126

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-30	medium	indejs.space	Sinkholed
2023-11-30	medium	indejs.space	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	slickfox277.netlify.app/	ScriptElement	558 B	2024-08-20	2024-08-20
Pretty URL slickfox277.netlify.app/ IP 18.192.231.252 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 17:23 Last Seen2024-08-20 17:23 Times Seen1 Hash 12c33ca34a451efe78fd20b144d62ea3 333284c127d3342cee313ea20c3ae06a0653d59a 3b512519fc12747fa502c0f6ccf74041a24ca7997e19a75206d50715b714ae28 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 57c255e9e5a344d54c42e825fee71bf9	176 B	2023-03-07 12:03	2025-05-10 06:14
Pretty Observations First Seen2023-03-07 12:03 Last Seen2025-05-10 06:14 Times Seen1179 Hash 57c255e9e5a344d54c42e825fee71bf9 1e47d2deb09cf81d7a4811cbd24620b5310fdf89 9bea87171bca01d8f7aa0c7d34a5fc8f41e6483136f990056ed6413eb87c5934 Loading...

HTTP Transactions (15)

URL IP Response Size

i.ytimg.com/vi/G9BIUYr4IQQ/hqdefault.jpg

142.250.74.118

200 OK

12 kB

URL GET HTTP/2
i.ytimg.com/vi/G9BIUYr4IQQ/hqdefault.jpg
IP
142.250.74.118:443
ASN
#15169 GOOGLE

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Size
12 kB (11701 bytes)
Hash
6599bd1aed98f9947649023b66eda395
aea760027de0ec545f60c59e6d568fd9b1a4cf43
48df36151f00d51bf1adad6b163bc01e340353f7cc7cf77b568aa0df42926c75

HTTP Headers

GET /vi/G9BIUYr4IQQ/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 11701
date: Thu, 30 Nov 2023 04:52:53 GMT
expires: Thu, 30 Nov 2023 06:52:53 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.nichesites.pikoya.com/girlgamestown_com/images/games/1901/gallery/3283.jpg

104.18.11.76

200 OK

92 kB

URL GET HTTP/2
cdn.nichesites.pikoya.com/girlgamestown_com/images/games/1901/gallery/3283.jpg
IP
104.18.11.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerLet's Encrypt
Subject*.static.pikoya.com
Fingerprint7B:27:B5:65:3B:CA:32:AC:80:94:BB:D1:D6:F0:AD:F7:4B:53:98:D9
ValidityTue, 28 Nov 2023 04:37:31 GMT - Mon, 26 Feb 2024 04:37:30 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 759x669, components 3\012- data
Size
92 kB (92127 bytes)
Hash
faa884a2f46b89713a50265c188f614c
f243730ae865c380ab59d0c1040a3e7687eaf710
2e6572667a15ac069c7c385340b01c114728220ce2b208b9ec6e57770e2bc459

HTTP Headers

GET /girlgamestown_com/images/games/1901/gallery/3283.jpg HTTP/1.1
Host: cdn.nichesites.pikoya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 30 Nov 2023 04:52:53 GMT
content-type: image/jpeg
content-length: 92127
last-modified: Mon, 04 Jul 2016 19:34:49 GMT
etag: "c5d2cf048ff00ed980235512d0895802-1"
cache-control: max-age=2678400
x-amz-version-id: null
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 10DfwmnzldjFKrAWj3XUVl_jMAHU8wUN9ZTiSuoqWyn1DckALGHlHQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Origin
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=vOPnY04rZqsT4ECjiJANa7VjHpaydswYBaCWf8g2FnQ-1701319973-0-AW2FJaOrv/cn9/tflIG6OXDLqSWpKvIlMJ1T9CDICOC/EW2st91gBFBU/DvN4644+cdrYunf7H8ARGzUf2xvMDw=; path=/; expires=Thu, 30-Nov-23 05:22:53 GMT; domain=.pikoya.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82e07bc7fb610b3d-OSL
X-Firefox-Spdy: h2

video.informer.com/p4/video-preview-stp-viewer-v2.3.jpg

208.94.233.126

200 OK

15 kB

URL GET HTTP/1.1
video.informer.com/p4/video-preview-stp-viewer-v2.3.jpg
IP
208.94.233.126:443
ASN
#40824 WZCOM

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerSectigo Limited
Subject*.informer.com
FingerprintF1:9A:8B:9B:BB:AF:44:0A:0F:21:09:34:8D:25:88:C4:3E:03:E1:FC
ValidityWed, 11 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 350x234, components 3\012- data
Size
15 kB (15142 bytes)
Hash
4793be6d890f92f9b24d8fb1b74480e1
ae8a8046fd0173e26119344a6368effafcb812f8
3c7c257bcfafd57d2e5dcf34a3875c24f3c91a3c460fe07b70f701dbc89e5425

HTTP Headers

GET /p4/video-preview-stp-viewer-v2.3.jpg HTTP/1.1
Host: video.informer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:38:00 GMT
Content-Type: image/jpeg
Content-Length: 15142
Last-Modified: Wed, 14 Feb 2018 09:45:32 GMT
Connection: keep-alive
ETag: "5a84053c-3b26"
Expires: Fri, 29 Nov 2024 04:38:00 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes

slickfox277.netlify.app/favicon.ico

18.192.231.252

200 OK

1.4 kB

URL GET HTTP/2
slickfox277.netlify.app/favicon.ico
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
Fingerprint90:75:F4:E0:1B:98:9D:01:B0:58:B3:E3:3B:DB:DA:E0:24:FA:9F:82
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
1.4 kB (1424 bytes)
Hash
8bd9f637ce1cd8871b2c1ed662df0316
6dd4b6fbff340f3b58e2b2a71c66e09f13c28ecf
e54051da841b1231a15651bdb006955cd20041c2677aea5f643f5d5af579171e

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: slickfox277.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/vnd.microsoft.icon
date: Thu, 30 Nov 2023 04:52:54 GMT
etag: "482dff22054b7a1a7c83a122b6ab1559-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HGF957DH6J56FFNQXGS6SQ09
content-length: 1424
X-Firefox-Spdy: h2

s3-ap-northeast-1.amazonaws.com/peatix-files/pod/10561077/cover-Autocad-2015-crack-32-bit-free-download.jpeg

52.219.150.196

200 OK

45 kB

URL GET HTTP/1.1
s3-ap-northeast-1.amazonaws.com/peatix-files/pod/10561077/cover-Autocad-2015-crack-32-bit-free-download.jpeg
IP
52.219.150.196:443
ASN
#0

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerAmazon
Subject*.s3-ap-northeast-1.amazonaws.com
Fingerprint8D:97:A2:40:73:C5:43:FD:F8:39:B7:94:EC:46:3A:EA:09:49:ED:49
ValidityTue, 10 Oct 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 910x505, components 3\012- data
Size
45 kB (45058 bytes)
Hash
51c895a884777dbc53c535c08a90824d
547aab0158bf7b26b69d9857753782b7300099f3
4ff273f77e56a46de0648d7cbdb4211047fca8a7adabbfec512b63ffe99ae665

HTTP Headers

GET /peatix-files/pod/10561077/cover-Autocad-2015-crack-32-bit-free-download.jpeg HTTP/1.1
Host: s3-ap-northeast-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: oIU99o88p0T7eRA1SpLwbG0h6aSpvZ4z0vncdWbrL7lsyrjmvCExFmzwjq37ACM43kd9DZt+o5M=
x-amz-request-id: MRM8X2RBG66MDTAN
Date: Thu, 30 Nov 2023 04:52:54 GMT
Last-Modified: Mon, 19 Apr 2021 18:23:59 GMT
ETag: "51c895a884777dbc53c535c08a90824d"
Content-Disposition: attachment
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 45058

lh5.googleusercontent.com/V50AO01Cej9ETSomrSUZOraMyKwCD_Dlzqd6rLLKCjosrhRAxjVrEIDP3-0T7rrknQ5D6P_LI-Ah_2Wrzt_hfCaeIGITJMwTq7nbijJsK8Bxu6jvDIK-fTErAIJItrnsqA=s412

142.250.74.1

200 OK

23 kB

URL GET HTTP/2
lh5.googleusercontent.com/V50AO01Cej9ETSomrSUZOraMyKwCD_Dlzqd6rLLKCjosrhRAxjVrEIDP3-0T7rrknQ5D6P_LI-Ah_2Wrzt_hfCaeIGITJMwTq7nbijJsK8Bxu6jvDIK-fTErAIJItrnsqA=s412
IP
142.250.74.1:443
ASN
#15169 GOOGLE

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 412x232, components 3\012- data
Size
23 kB (22989 bytes)
Hash
be18801fcdb798250fba60baf5673477
789620d30b16a5651c90798b046109fde488c336
fa3721ed15cddf8d29be72f9fe98b14b375b6cd871e9420bc17ce481eed8f719

HTTP Headers

GET /V50AO01Cej9ETSomrSUZOraMyKwCD_Dlzqd6rLLKCjosrhRAxjVrEIDP3-0T7rrknQ5D6P_LI-Ah_2Wrzt_hfCaeIGITJMwTq7nbijJsK8Bxu6jvDIK-fTErAIJItrnsqA=s412 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2"
expires: Fri, 01 Dec 2023 04:52:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image1.jpg"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 04:52:54 GMT
server: fife
content-length: 22989
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.ssbwiki.com/images/1/14/SonicThrowBack.gif

74.50.124.63

200 OK

686 kB

URL GET HTTP/2
www.ssbwiki.com/images/1/14/SonicThrowBack.gif
IP
74.50.124.63:443
ASN
#29802 HVC-AS

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerLet's Encrypt
Subject*.ssbwiki.com
Fingerprint09:1F:7C:D0:AE:F1:DD:B2:76:D0:58:99:8E:00:7B:96:15:9D:27:9A
ValiditySat, 07 Oct 2023 03:08:38 GMT - Fri, 05 Jan 2024 03:08:37 GMT

File type
GIF image data, version 89a, 512 x 326\012- data
Size
686 kB (685650 bytes)
Hash
30709d4126f946f3c83acdc702d6688e
f3740998303110135282515b6e7638707641a482
86d7a9cd514f2663a07881d3fa6babfe91bc57682bc1a95ac36bc09543755c90

HTTP Headers

GET /images/1/14/SonicThrowBack.gif HTTP/1.1
Host: www.ssbwiki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=10800
expires: Thu, 30 Nov 2023 07:52:53 GMT
content-type: image/gif
last-modified: Mon, 15 Jan 2018 21:30:19 GMT
accept-ranges: bytes
content-length: 685650
date: Thu, 30 Nov 2023 04:52:53 GMT
server: LiteSpeed
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: frame-ancestors 'none'; upgrade-insecure-requests
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

skieyclip.weebly.com/uploads/1/2/3/9/123979016/894325980.png

199.34.228.54

200 OK

1.9 MB

URL GET HTTP/1.1
skieyclip.weebly.com/uploads/1/2/3/9/123979016/894325980.png
IP
199.34.228.54:443
ASN
#27647 WEEBLY

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT

File type
PNG image data, 1600 x 900, 8-bit/color RGB, non-interlaced\012- data
Size
1.9 MB (1889914 bytes)
Hash
31346f26505f10960299dd7fa1202cbf
9931ba5cb77545001e3119e1eccc4244a0ddab50
d7fb49d7117a682293ac20c3b0cb1ac269e567fdd981075eb5a2c1e588f39808

HTTP Headers

GET /uploads/1/2/3/9/123979016/894325980.png HTTP/1.1
Host: skieyclip.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:52:53 GMT
Content-Type: image/png
Content-Length: 1889914
Connection: keep-alive
Last-Modified: Sat, 05 Oct 2019 08:30:45 GMT
x-rgw-object-type: Normal
ETag: "31346f26505f10960299dd7fa1202cbf"
x-amz-request-id: tx00000cf59a4ac4f31448a-0065681525-db1c716-sfo1
X-Storage-Bucket: zd7fb
X-Storage-Object: d7fb49d7117a682293ac20c3b0cb1ac269e567fdd981075eb5a2c1e588f39808
X-Host: blu22.sf2p.intern.weebly.net
Accept-Ranges: bytes

indejs.space/

0.0.0.0

0 B

URL GET
indejs.space/
IP
0.0.0.0:0
ASN
#0

Requested by
https://slickfox277.netlify.app/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: indejs.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://slickfox277.netlify.app
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

www.pes-patch.com/wp-content/uploads/2017/08/PES17-RB-Leipzig-Away-Kit-300x300.png

0.0.0.0

0 B

URL GET
www.pes-patch.com/wp-content/uploads/2017/08/PES17-RB-Leipzig-Away-Kit-300x300.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://slickfox277.netlify.app/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/uploads/2017/08/PES17-RB-Leipzig-Away-Kit-300x300.png HTTP/1.1
Host: www.pes-patch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

indejs.space/

0.0.0.0

0 B

URL GET
indejs.space/
IP
0.0.0.0:0
ASN
#0

Requested by
https://slickfox277.netlify.app/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: indejs.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://slickfox277.netlify.app
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

www.djbox.ie/images/detailed/4/Focusrite_Scarlett_Solo_-_2nd_Gen_Angle.jpg

23.227.38.65

404 Not Found

0 B

URL GET HTTP/2
www.djbox.ie/images/detailed/4/Focusrite_Scarlett_Solo_-_2nd_Gen_Angle.jpg
IP
23.227.38.65:443
ASN
#13335 CLOUDFLARENET

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerLet's Encrypt
Subjectwww.djbox.ie
Fingerprint69:DC:39:C7:63:55:78:50:96:EE:B5:A2:A2:E8:4A:A8:9C:16:8D:AA
ValidityTue, 17 Oct 2023 07:59:51 GMT - Mon, 15 Jan 2024 07:59:50 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/detailed/4/Focusrite_Scarlett_Solo_-_2nd_Gen_Angle.jpg HTTP/1.1
Host: www.djbox.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Thu, 30 Nov 2023 04:52:53 GMT
content-type: text/html; charset=utf-8
x-sorting-hat-podid: 340
x-sorting-hat-shopid: 40517796004
x-storefront-renderer-rendered: 1
set-cookie: keep_alive=9f484812-26a9-471d-897d-1a496172c955; path=/; expires=Thu, 30 Nov 2023 05:22:53 GMT; HttpOnly; SameSite=Lax
cart_currency=EUR; path=/; expires=Thu, 14 Dec 2023 04:52:53 GMT; SameSite=Lax
_cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Afalse%2C%22p%22%3Afalse%2C%22m%22%3Afalse%2C%22t%22%3Afalse%7D%2C%22display_banner%22%3Atrue%2C%22merchant_geo%22%3A%22IE%22%2C%22sale_of_data_region%22%3Afalse%7D; domain=djbox.ie; path=/; expires=Fri, 01 Dec 2023 04:52:53 GMT; SameSite=Lax
_tracking_consent=%7B%22lim%22%3A%5B%22GDPR_BLOCK_ALL%22%5D%2C%22region%22%3A%22NO03%22%2C%22reg%22%3A%22GDPR%22%2C%22v%22%3A%222.1%22%2C%22con%22%3A%7B%22CMP%22%3A%7B%22p%22%3A%22%22%2C%22s%22%3A%22%22%2C%22m%22%3A%22%22%2C%22a%22%3A%22%22%7D%7D%7D; Expires=Fri, 29-Nov-24 04:52:53 GMT; Domain=djbox.ie; Path=/; SameSite=Lax
link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin
etag: W/"cacheable:8eb3c81e32195f47e532027c58be0608"
x-cache: miss
x-frame-options: DENY
content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=7889238
x-shopid: 40517796004
x-shardid: 340
vary: Accept
content-language: en
powered-by: Shopify
x-shopify-stage: production
x-dc: gcp-europe-north1,gcp-europe-west4,gcp-europe-west4
x-request-id: 119eeafb-86ac-4421-842f-faced6f40d89
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PhxunjXrDKYaCN8UqfNRw%2FgAEasbwYYtGuSh6oT4FiW701BAwZjprDrsxACW77YTlZQ9N3yI2gQz1gj7dHlXd3MYHBsVflcJJ8vIe2GDHqIpIb8U9aM4EPK6ogGYaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: processing;dur=146;desc="gc:21", db;dur=45, parse;dur=4, render;dur=55, asn;desc="50304", edge;desc="ARN", country;desc="NO", theme;desc="132607770879", pageType;desc="404", servedBy;desc="k9bb", requestID;desc="119eeafb-86ac-4421-842f-faced6f40d89", cfRequestDuration;dur=207.000017
server: cloudflare
cf-ray: 82e07bc81c83993e-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

slickfox277.netlify.app/

18.192.231.252

200 OK

16 kB

URL User Request GET HTTP/2
slickfox277.netlify.app/
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subject*.netlify.app
Fingerprint90:75:F4:E0:1B:98:9D:01:B0:58:B3:E3:3B:DB:DA:E0:24:FA:9F:82
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (589), with CRLF line terminators
Size
16 kB (16337 bytes)
Hash
046d67ddb568190469b82d7a7dc50883
3ddcf750d7f13eca6fd8352fae9bdaa1173d7279
754fa9cde489d7ac4181cbb6f26a808cf8d232ff7938862d83b1df47c11b6af3

HTTP Headers

GET / HTTP/1.1
Host: slickfox277.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=UTF-8
date: Thu, 30 Nov 2023 04:52:52 GMT
etag: "b35788b6032f08edbcebbc5e7c47aaba-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HGF955PA9BHDAAE6X10H7R5N
X-Firefox-Spdy: h2

slickfox277.netlify.app/style.css

18.192.231.252

200 OK

346 kB

URL GET HTTP/2
slickfox277.netlify.app/style.css
IP
18.192.231.252:443
ASN
#16509 AMAZON-02

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
Fingerprint90:75:F4:E0:1B:98:9D:01:B0:58:B3:E3:3B:DB:DA:E0:24:FA:9F:82
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT

File type
ASCII text, with very long lines (55064)
Size
346 kB (346534 bytes)
Hash
de0fac30965b5aac9221b948dfb0c542
3333f540f695cf2df70a4ac114db8b406bf1e3cd
e46c753396bb93c297cdf9a56750609d8815bc7bc18868a1f933ec6d30b873b5

HTTP Headers

GET /style.css HTTP/1.1
Host: slickfox277.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/css; charset=UTF-8
date: Thu, 30 Nov 2023 04:52:53 GMT
etag: "c48ddd4e770b3bbe0dac8675f5a39937-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HGF9564HYW7P311QNDZT2AXE
X-Firefox-Spdy: h2

cdn.thingiverse.com/renders/ac/46/7f/fe/01/5d6b1f72ade1fcc189b276fdff8edccd_preview_featured.jpg

0.0.0.0

0 B

URL GET
cdn.thingiverse.com/renders/ac/46/7f/fe/01/5d6b1f72ade1fcc189b276fdff8edccd_preview_featured.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://slickfox277.netlify.app/
Certificate
IssuerSectigo Limited
Subject*.thingiverse.com
FingerprintD2:D1:97:5D:F2:F8:87:45:55:E9:A4:3D:A1:35:B5:59:32:32:48:36
ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /renders/ac/46/7f/fe/01/5d6b1f72ade1fcc189b276fdff8edccd_preview_featured.jpg HTTP/1.1
Host: cdn.thingiverse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slickfox277.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 30 Nov 2023 04:52:53 GMT
content-type: image/jpeg
etag: W/"3b34ef081e0e6d795fde6d3782c6fe00"
last-modified: Sat, 10 Dec 2022 18:51:06 GMT
x-served-by: GCS
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
expires: Sun, 31 Dec 2023 04:52:53 GMT
cache-control: public, max-age=2678400
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 82e07bc7ead756c1-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (15)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN