Nextron YARA rules Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Verdictmalware
Severitymedium
WEBSITE ANALYSIS REPORT
http://fuckinghorse.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://fuckinghorse.com
- Submitted IP / ASN
15.197.225.128 AS16509 · Amazon.com, Inc.
- Final URL
- https://bhpmining.com/
- Final IP / ASN
- 67.205.26.174 AS26347 · DREAMHOST-AS
Final page
- Page title
- BHP Australian mining is a bad faith BHP is a 1 cent stock sell it
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 10.3 KB (10508 bytes)
Detections
Activity
- HTTP requests
- 46
- Observed hosts
- 2
- Script records
- 1
Estimated HTTP data
- Sent
- ~22.7 KB
- Received
- ~111.47 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fuckinghorse.com | N/A | N/A | N/A | N/A | 485 B | 292 B | 15.197.225.128 | |
| bhpmining.com 1 alerts | N/A | 2022-03-25 | 2026-02-24 | 2026-10-07 | 22.3 KB | 111.47 MB | 67.205.26.174 | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |