Report - machinehunter644.netlify.app/cape-coast-font

Report Overview

Submitted URL
machinehunter644.netlify.app/cape-coast-font
IP
3.72.140.173
ASN
#16509 AMAZON-02
Submitted
2024-04-27 14:11:21
Access
public
Website Title
Cape Coast Font
Final URL
machinehunter644.netlify.app/cape-coast-font
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
machinehunter644.netlify.app	unknown	unknown	No data	No data	1.4 kB	326 kB	3.72.140.173
subcari.info	unknown	2021-02-17	2021-02-17	2024-03-12	584 B	2.0 kB	172.67.196.25
2exq7bvp9b-flywheel.netdna-ssl.com	unknown	unknown	No data	No data	1.0 kB	0 B	0.0.0.0
indejs.space	unknown	unknown	2020-12-05	2023-01-07	444 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-27	medium	indejs.space	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	machinehunter644.netlify.app/cape-coast-font	18 kB	2024-04-27	2024-04-27
Pretty URL machinehunter644.netlify.app/cape-coast-font IP 3.72.140.173 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-27 16:11:27 Last Seen2024-04-27 16:11:27 Times Seen1 Hash 330f79f1d1d14e8b69bcc5d18ddfdb1b 8456ce07efc4d4ae8c1044f698d160ca4efdb87b ab3b5efbb096fcc00da7c7fec463157f0dab91d96ba37a43fab9ac91016f5523 Loading...

	unknown	340 B	2024-04-27	2024-04-27
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-04-27 16:11:27 Last Seen2024-04-27 16:11:27 Times Seen1 Hash 1d569399b0a8a836b8e3b1a91ac097ec 0a13ceccc3051fce988fd1fe8fde92eb50a23bf7 92bfdde55064e5c4b9b44e4e29f09f9eac52d0d14ec01f47f0c3f649c0553a54 Loading...

	machinehunter644.netlify.app/cape-coast-font	547 B	2024-04-27	2024-04-27
Pretty URL machinehunter644.netlify.app/cape-coast-font IP 3.72.140.173 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-27 16:11:25 Last Seen2024-04-27 17:22:36 Times Seen3 Hash 85fe8ae8ae8dcaa0d005c07db0132784 00b78e3e3fc80b60b0f0a5f207451bc1ebb7e425 fb1efd5c0429007ff1eb138c39ef655a1b907e794d15ec603961d5a3f2ef3427 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 38d66f90e678fbd2ba2b3c366a3228f9	1.5 kB	2024-04-27	2024-04-27
Pretty Observations First Seen2024-04-27 16:11:28 Last Seen2024-04-27 16:11:28 Times Seen2 Hash 38d66f90e678fbd2ba2b3c366a3228f9 38e56b007fcfa9b00aa162884020361c7aec298a 58ad03b1bfc733baf86b8629aea91b72a21cc38e43a1ab6c40a9cb76e13b6bcc Loading...

	#2 Eval - 57c255e9e5a344d54c42e825fee71bf9	176 B	2023-03-07	2024-05-04
Pretty Observations First Seen2023-03-07 12:03:20 Last Seen2024-05-04 13:21:34 Times Seen191 Hash 57c255e9e5a344d54c42e825fee71bf9 1e47d2deb09cf81d7a4811cbd24620b5310fdf89 9bea87171bca01d8f7aa0c7d34a5fc8f41e6483136f990056ed6413eb87c5934 Loading...

HTTP Transactions (7)

URL IP Response Size

machinehunter644.netlify.app/favicon.ico

3.72.140.173

200 OK

1.1 kB

URL GET HTTP/2
machinehunter644.netlify.app/favicon.ico
IP
3.72.140.173:443
ASN
#16509 AMAZON-02

Requested by
https://machinehunter644.netlify.app/cape-coast-font
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
1.1 kB (1143 bytes)
Hash
eb15c758774e21afddd4e2772e42384e
cfd9168544af675bd1966bd1f2f65e26743b5d16
a2e220e57d98f3fcafd8364002def40cebb03aa965a317407afd67bab7b0c687

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: machinehunter644.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://machinehunter644.netlify.app/cape-coast-font
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/vnd.microsoft.icon
date: Sat, 27 Apr 2024 14:10:57 GMT
etag: "256f10ebfb7ce0467f1f331a0ca958ef-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HWFYA4GNSP4DPG44QSCBNB5R
content-length: 1143
X-Firefox-Spdy: h2

subcari.info/?OUFQglwQ=XQQSEFUFClVRRVdWBglUV18NUQ4UBwRAVk1VCgVCQ05fWgoWGlJSAR8ATxdZSUpbVhwRWUoAFhtcClJOEFRWCBIGSE4PTVEAAQFPURoLTVVdSDNlFEhJRFYeQhZBAlZAClQ3

172.67.196.25

200 OK

1.1 kB

URL GET HTTP/2
subcari.info/?OUFQglwQ=XQQSEFUFClVRRVdWBglUV18NUQ4UBwRAVk1VCgVCQ05fWgoWGlJSAR8ATxdZSUpbVhwRWUoAFhtcClJOEFRWCBIGSE4PTVEAAQFPURoLTVVdSDNlFEhJRFYeQhZBAlZAClQ3
IP
172.67.196.25:443
ASN
#13335 CLOUDFLARENET

Requested by
https://machinehunter644.netlify.app/cape-coast-font
Certificate
IssuerGoogle Trust Services LLC
Subjectsubcari.info
Fingerprint60:E0:D3:75:DB:60:C2:AB:29:45:BA:7F:DC:CB:5F:2E:10:0E:21:BC
ValidityWed, 03 Apr 2024 09:32:15 GMT - Tue, 02 Jul 2024 09:32:14 GMT

File type
ASCII text, with very long lines (619)
Size
1.1 kB (1118 bytes)
Hash
38d66f90e678fbd2ba2b3c366a3228f9
38e56b007fcfa9b00aa162884020361c7aec298a
58ad03b1bfc733baf86b8629aea91b72a21cc38e43a1ab6c40a9cb76e13b6bcc

HTTP Headers

GET /?OUFQglwQ=XQQSEFUFClVRRVdWBglUV18NUQ4UBwRAVk1VCgVCQ05fWgoWGlJSAR8ATxdZSUpbVhwRWUoAFhtcClJOEFRWCBIGSE4PTVEAAQFPURoLTVVdSDNlFEhJRFYeQhZBAlZAClQ3 HTTP/1.1
Host: subcari.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://machinehunter644.netlify.app
DNT: 1
Connection: keep-alive
Referer: https://machinehunter644.netlify.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Apr 2024 14:10:57 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: https://machinehunter644.netlify.app
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: X-Requested-With
access-control-allow-credentials: true
access-control-max-age: 86400
set-cookie: AFFRLFhztF=1.1714313457; expires=Sun, 28-Apr-2024 14:10:57 GMT; Max-Age=86400; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ReNv78B7dYjKqeaHmWfKXJ6Wu238pc65GLGglD4JpIw2WgRu4cbDUW0oqr0i84l%2FZJjYRNK280gnfuececP3gSyrPtwMdZyad%2FdZCym4y2nCN36U7F7e990qXTHlYVo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87af6622bb8d56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

machinehunter644.netlify.app/cape-coast-font

3.72.140.173

200 OK

33 kB

URL User Request GET HTTP/2
machinehunter644.netlify.app/cape-coast-font
IP
3.72.140.173:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type

Size
33 kB (32628 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cape-coast-font HTTP/1.1
Host: machinehunter644.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=UTF-8
date: Sat, 27 Apr 2024 14:10:56 GMT
etag: "fb20b686e615454fb9f2f19208bd4a82-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HWFYA3P73WBDGJ6AW0CN12G1
X-Firefox-Spdy: h2

machinehunter644.netlify.app/style.css

3.72.140.173

200 OK

291 kB

URL GET HTTP/2
machinehunter644.netlify.app/style.css
IP
3.72.140.173:443
ASN
#16509 AMAZON-02

Requested by
https://machinehunter644.netlify.app/cape-coast-font
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65177)
Size
291 kB (290846 bytes)
Hash
46cee9987c1ab09a7bd48a0f63f8b052
44c4d20ba5a5a53ed3a4dca2a1e9eca2d339e342
7e36d8f2608342cbb81e8ea84cb35334b9669c31dca1285bd496a2a1f1cbfc9c

HTTP Headers

GET /style.css HTTP/1.1
Host: machinehunter644.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://machinehunter644.netlify.app/cape-coast-font
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/css; charset=UTF-8
date: Sat, 27 Apr 2024 14:10:56 GMT
etag: "51b6a9b4ea23d04392e3e18569b533ee-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HWFYA4299K783JQ6ABCNA8XY
X-Firefox-Spdy: h2

2exq7bvp9b-flywheel.netdna-ssl.com/wp-content/uploads/2019/05/Cape-Flattery-in-Neah-Bay.jpg

0.0.0.0

0 B

URL GET
2exq7bvp9b-flywheel.netdna-ssl.com/wp-content/uploads/2019/05/Cape-Flattery-in-Neah-Bay.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://machinehunter644.netlify.app/cape-coast-font

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/uploads/2019/05/Cape-Flattery-in-Neah-Bay.jpg HTTP/1.1
Host: 2exq7bvp9b-flywheel.netdna-ssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://machinehunter644.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

2exq7bvp9b-flywheel.netdna-ssl.com/wp-content/uploads/2019/05/Cape-Flattery-in-Neah-Bay.jpg

0.0.0.0

0 B

URL GET
2exq7bvp9b-flywheel.netdna-ssl.com/wp-content/uploads/2019/05/Cape-Flattery-in-Neah-Bay.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://machinehunter644.netlify.app/cape-coast-font

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/uploads/2019/05/Cape-Flattery-in-Neah-Bay.jpg HTTP/1.1
Host: 2exq7bvp9b-flywheel.netdna-ssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://machinehunter644.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

indejs.space/

0.0.0.0

0 B

URL GET
indejs.space/
IP
0.0.0.0:0
ASN
#0

Requested by
https://machinehunter644.netlify.app/cape-coast-font

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: indejs.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://machinehunter644.netlify.app
DNT: 1
Connection: keep-alive
Referer: https://machinehunter644.netlify.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate