WEBSITE ANALYSIS REPORT

http://medcanal4info.blogspot.com/

22 Nov 2025 · 17:05:33.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

basepush.com3 captured requests
blogger.googleusercontent.com8 captured requests
ep1.adtrafficquality.google2 captured requests
ep2.adtrafficquality.google2 captured requests
fonts.gstatic.com5 captured requests
go.oclasrv.com2 captured requests
lh3.googleusercontent.com2 captured requests
luckypushh.com6 captured requests
medcanal4info.blogspot.com4 captured requests
pagead2.googlesyndication.com9 captured requests
resources.blogblog.com1 captured requests
www.blogger.com2 captured requests
www.gstatic.com1 captured requests
zdzhk.com6 captured requests

Connections

medcanal4info.blogspot.com → basepush.comCalls2 captured connections
medcanal4info.blogspot.com → basepush.comLoads from1 captured connections
medcanal4info.blogspot.com → blogger.googleusercontent.comLoads from8 captured connections
medcanal4info.blogspot.com → ep1.adtrafficquality.googleCalls1 captured connections
medcanal4info.blogspot.com → ep1.adtrafficquality.googleLoads from1 captured connections
medcanal4info.blogspot.com → ep2.adtrafficquality.googleEmbeds1 captured connections
medcanal4info.blogspot.com → ep2.adtrafficquality.googleLoads from1 captured connections
medcanal4info.blogspot.com → fonts.gstatic.comLoads from5 captured connections
medcanal4info.blogspot.com → go.oclasrv.comLoads from2 captured connections
medcanal4info.blogspot.com → lh3.googleusercontent.comLoads from2 captured connections
medcanal4info.blogspot.com → luckypushh.comCalls4 captured connections
medcanal4info.blogspot.com → luckypushh.comLoads from2 captured connections
medcanal4info.blogspot.com → pagead2.googlesyndication.comEmbeds4 captured connections
medcanal4info.blogspot.com → pagead2.googlesyndication.comLoads from5 captured connections
medcanal4info.blogspot.com → resources.blogblog.comLoads from1 captured connections
medcanal4info.blogspot.com → www.blogger.comLoads from2 captured connections
medcanal4info.blogspot.com → www.gstatic.comLoads from1 captured connections
medcanal4info.blogspot.com → zdzhk.comCalls6 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:05:09.583 GET 200 document 177.8 KB 1149 ms 1 alerts

17:05:10.781 GET 200 script 28.5 KB 201 ms 2 alerts

17:05:10.784 GET 403 script 0 B 244 ms —

17:05:10.786 GET 200 script 11.5 KB 135 ms —

17:05:10.788 GET 200 script 33.0 KB 172 ms —

17:05:10.789 GET 200 script 28.5 KB 279 ms 4 alerts

17:05:10.790 GET 200 script 138.6 KB 297 ms —

17:05:10.791 GET 200 script 6.4 KB 30 ms 1 alerts

17:05:10.793 GET 200 script 144.4 KB 155 ms —

17:05:10.802 GET 200 script 158.4 KB 173 ms —

17:05:11.070 GET 200 fetch 64.7 KB 206 ms 2 alerts

17:05:11.072 GET 200 fetch 167 B 26 ms 2 alerts

17:05:11.073 GET 403 script 0 B 28 ms —

17:05:11.103 GET 200 script 28.5 KB 33 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://luckypushh.com/ntfc.php?p=1800361

IP / ASN

139.45.197.121

AS9002 · RETN Limited

Requested by: https://medcanal4info.blogspot.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (29168), with no line terminators
MIME type: application/javascript
First seen (UTC): 22 Nov 2025 · 04:05:02.734 UTC
Last seen (UTC): 26 Nov 2025 · 11:32:51.604 UTC
Times seen: 14

Size: 28.5 KB (29168 bytes)
MD5: 65b4d432f4b8a1380bcf6c547c45611b
SHA1: 8e3a3740a4b0fe621cb7f30f5183922682193a9d
SHA256: 4e02af032e2911e9e43592048cfaf439d9794d7ef4b662c560d696d62df0fa90

Certificate information

Issuer: Let's Encrypt · E8
Subject: luckypushh.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: F4:A2:3E:79:75:88:F7:E1:0C:F5:45:76:EF:D5:51:BB:51:B6:3C:85
Valid from: Tue, 07 Oct 2025 01:16:18 GMT
Valid until: Mon, 05 Jan 2026 01:16:17 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ntfc.php?p=1800361 HTTP/1.1
Host: luckypushh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://medcanal4info.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Sat, 22 Nov 2025 17:05:11 GMT
content-type: application/javascript
last-modified: Fri, 21 Nov 2025 13:38:39 GMT
etag: W/"69206b5f-71f0"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

17:05:11.135 GET 200 other 7.5 KB 28 ms 1 alerts

17:05:11.146 GET 200 img 267.3 KB 1141 ms —

17:05:11.152 GET 200 img 100.7 KB 1450 ms —

17:05:11.154 GET 200 img 75.6 KB 1087 ms —

17:05:11.163 GET 200 img 73.5 KB 1211 ms —

17:05:11.166 GET 200 img 112.4 KB 1042 ms —

17:05:11.171 GET 200 img 22.8 KB 225 ms —

17:05:11.175 GET 200 img 120.1 KB 1195 ms —

17:05:11.176 GET 200 img 97.7 KB 801 ms —

17:05:11.177 GET 200 img 24.8 KB 246 ms —

17:05:11.179 GET 200 img 101.6 KB 1090 ms —

17:05:11.183 GET 200 font 34.1 KB 197 ms —

17:05:11.185 GET 200 font 29.8 KB 189 ms —

17:05:11.188 GET 200 font 48.0 KB 191 ms —

17:05:11.189 GET 200 font 98.2 KB 202 ms —

17:05:11.192 GET 200 font 29.1 KB 199 ms —

17:05:11.202 GET 200 script 158.4 KB 41 ms —

17:05:11.319 GET 200 fetch 64.7 KB 195 ms 4 alerts

17:05:11.397 GET 200 fetch 167 B 26 ms 4 alerts

17:05:11.500 GET 200 fetch 64.7 KB 33 ms 2 alerts

17:05:11.502 GET 200 fetch 167 B 27 ms 2 alerts

17:05:11.510 GET 200 img 2.5 KB 9 ms —

17:05:11.511 GET 200 script 505.4 KB 86 ms —

17:05:11.570 OPTIONS 200 fetch 0 B 225 ms —

17:05:11.576 OPTIONS 200 fetch 0 B 230 ms —

17:05:11.687 OPTIONS 200 fetch 0 B 26 ms —

17:05:11.715 POST 200 fetch 81 B 175 ms —

17:05:11.763 POST 200 fetch 81 B 27 ms —

17:05:11.788 POST 200 fetch 81 B 27 ms —

17:05:11.805 GET 200 subdocument 8.4 KB 9 ms —

17:05:11.808 GET 400 subdocument 603 B 27 ms —

17:05:11.815 GET 400 subdocument 603 B 30 ms —

17:05:11.850 GET 204 img 0 B 18 ms —

17:05:11.885 GET 200 subdocument 0 B 21 ms —

17:05:12.290 GET 200 img 3.6 KB 684 ms 1 alerts

17:05:12.292 GET 200 xhr 17.4 KB 129 ms —

http://medcanal4info.blogspot.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://medcanal4info.blogspot.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://medcanal4info.blogspot.com/

Domain graph

Network requests