Hagezi Threat Feed Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://www.profitablecreativeformat.com/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://www.profitablecreativeformat.com/
- Submitted IP / ASN
172.240.127.234 AS7979 · SERVERS-COM
- Final URL
- https://www.google.com/webhp?sca_esv=82729a62d7e47fe1&source=hp&ei=NCRZaeLeBeXMp84P1ozwcQ&iflsig=AOw8s4IAAAAAaVkyRFReWvZF3sFD0b6-YtETmN9UCP-J
- Final IP / ASN
- 142.250.74.36 AS15169 · GOOGLE
Final page
- Page title
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 272
- Observed hosts
- 8
- Script records
- 152
Estimated HTTP data
- Sent
- ~374.1 KB
- Received
- ~19.83 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2025-12-28 | 4.2 KB | 315.2 KB | 142.251.38.99 | |
| www.profitablecreativeformat.com 1 alerts | 3243121 | 2023-07-31 | 2023-08-01 | 2025-12-29 | 501 B | 166.7 KB | 172.240.108.76 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx:1.21.6 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| play.google.com | 48 | 1997-09-15 | 2013-05-30 | 2025-12-28 | 6.9 KB | 4.1 KB | 142.251.142.238 | |
| csp.withgoogle.com | 4614 | 2008-11-17 | 2015-10-29 | 2025-12-29 | 3.8 KB | 13.1 KB | 142.250.74.113 | |
| ogads-pa.clients6.google.com | 508 | 1997-09-15 | 2025-03-25 | 2025-12-28 | 13.8 KB | 10.1 KB | 142.250.74.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| google.com | 1 | 1997-09-15 | 2013-10-02 | 2025-12-29 | 548 B | 167.1 KB | 142.250.74.142 | Google Web Server Web servers Not recorded |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2025-12-28 | 320.5 KB | 17.43 MB | 142.250.74.36 | Google Web Server Web servers Not recorded HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2025-12-28 | 8.4 KB | 1.75 MB | 142.250.74.35 |