Report - css-heepay.com/

Report Overview

Visitedpublic

2025-07-21 10:07:14

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
css-heepay.com	unknown	2025-04-02	2025-07-21	2025-07-21	1.2 kB	5.3 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-21	medium	css-heepay.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

GET css-heepay.com/

188.114.96.1

403 Forbidden

1.2 kB

URL

css-heepay.com/

IP / ASN

188.114.96.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators

First Seen2025-05-07

Last Seen2025-07-21

Times Seen11

Size1.2 kB (1157 bytes)

MD59cbe0f23fafa07858db57562bb31333b

SHA1a1898614d9f348a79e134ea3b6de449f4070f909

SHA256b185a111bed5f1eab8275fde0a61f2af472bf260c1cdb0578b04b4ec78bcd9f1

Certificate Info

IssuerGoogle Trust Services

Subjectcss-heepay.com

FingerprintBB:EF:79:04:3D:E3:94:6F:D3:58:91:27:CC:EE:B6:F9:FF:29:74:48

ValiditySat, 31 May 2025 03:26:56 GMT - Fri, 29 Aug 2025 04:23:30 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: css-heepay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Mon, 21 Jul 2025 10:06:53 GMT
content-type: text/html
server: cloudflare
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Wfny9Px6DBR%2FRKairJYU1%2Bx61PTnjPgkl8aTlGZjilKZpdFc6W3V0Ql4ohRBWdkbUI%2BQgXDl96QGSxJZDtJ%2FhrG8VbtTSazlJUQcnA%3D%3D"}]}
content-encoding: br
cf-ray: 9629e35c1e1d7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET css-heepay.com/

188.114.96.1

403 Forbidden

1.2 kB

URL

css-heepay.com/

IP / ASN

188.114.96.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators

First Seen2025-05-07

Last Seen2025-07-21

Times Seen11

Size1.2 kB (1157 bytes)

MD59cbe0f23fafa07858db57562bb31333b

SHA1a1898614d9f348a79e134ea3b6de449f4070f909

SHA256b185a111bed5f1eab8275fde0a61f2af472bf260c1cdb0578b04b4ec78bcd9f1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: css-heepay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Mon, 21 Jul 2025 10:06:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
X-Powered-By: ASP.NET
Cf-Cache-Status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AdDknNoDUitmg7kxqdVS%2FFWWv1vVfvgD43s5Nc9IyZmkEtukal50S4HSNJuKAABet%2FFBVWZyETL8Gf04C%2FsmyDxvK8mQQBLdQusy8Q%3D%3D"}]}
Content-Encoding: gzip
CF-RAY: 9629e3602fbe56a5-OSL
alt-svc: h2=":443"; ma=60

GET css-heepay.com/favicon.ico

188.114.96.1

404 Not Found

1.2 kB

URL

css-heepay.com/favicon.ico

IP / ASN

188.114.96.1

#13335 CLOUDFLARENET

Requested byhttp://css-heepay.com/

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators

First Seen2025-04-07

Last Seen2025-08-01

Times Seen897

Size1.2 kB (1163 bytes)

MD5b95f02d7712377499e60763a74069631

SHA12a6ea7a8c7353bddd6bd7b487842da1feaa525cf

SHA2565da10042a026a0612186de79cd45da85dfb2e2d71e5749f92f10ae9f91871f68

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: css-heepay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://css-heepay.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Mon, 21 Jul 2025 10:06:54 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
X-Powered-By: ASP.NET
Cache-Control: max-age=14400
Cf-Cache-Status: MISS
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=SgntFTyJMRBJutSmsLnckFGO3OC0nncc8YpKnYdlIpjuiwO6%2F5m%2FDuHdnj%2BMflB%2FbRhzz7rRsKzzfdyjdlnHeZ%2F4R%2BU5i4qKziy9Ug%3D%3D"}]}
Content-Encoding: gzip
CF-RAY: 9629e362fc4f56a5-OSL
alt-svc: h2=":443"; ma=60