news/blog

other

English

_gat_gtag_UA_113168316_1

_gid

_ga_RCN33T5Y2P

The domain 'thundergolfer.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 13 characters in 'thundergolfer' containing four vowels alongside 9 consonants. Splitting it apart reveals two words: thunder, golfer. Expect 6.5 characters per word on average. No strong language cues emerged from the frequency lists.

useremail

html/1a/7d/1a7daa4a-0436-4000-af54-9cd40957a919.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

aa152601cd4f53f69f65ebfac2e33cc3f46d9641d89d866cebb017e101c673c8

0cfdd61b5d6d4bb2fcea320b5494473fe15dea235e6a8826de4e85a4b5b3e27a

6d0dfe2045a50c65dc202058f492257bb53fde1fc6e4c559beecaaeca8ca02e0

85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

be8ebca360b17777573b7b104d3637f52f3fb4d9fbce8e40b84210c8220f456a

e2ef8ed11205055db5965f8e83a612920f2bcfb1b3cd0724c6e7f36d675c172e

3cea0c4eb368dfc427b5acf7bef2ed56a90c8d8537b1911851385fb07157cf0c

814efe3a804369172bcbe26ec04da880e714efc81432ddc4ec5a6eae8c4711a8

8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f

evangelizing the analysis of metastable failure for years now

advanced correctness and reliability practices

viewport

A thorough review of a major cloud outage.

description

robots

author

keywords

More Than DNS: The 14 hour AWS us-east-1 outage

https://thundergolfer.com/blog/aws-us-east-1-outage-oct20

https://thundergolfer.com/images/aws_outage/together.png

twitter:card

twitter:site

twitter:title

twitter:description

twitter:url

twitter:image

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

NameCheap, Inc.

THUNDERGOLFER.COM

 window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag("config", "UA-113168316-1"); 

 /** * @param {String} HTML representing a single element * @return {Element} */ const htmlToElement = (html) => { var template = document.createElement("template"); /* Never return a text node of whitespace as the result */ html = html.trim(); template.innerHTML = html; return template.content.firstChild; }; let subscriptionSignupForm = ( elemSelector, subscriptionCreateEndpoint, wakeEndpoint ) => { let state = { loading: true, woke: false, success: false, }; let $form = document.querySelector(elemSelector); const $submitButton = $form.querySelector("input[type=submit]"); const errorMessageId = "subscription-signup-error"; const clearError = () => { $submitButton.classList.remove("error"); let errMsg = document.getElementById(errorMessageId); if (errMsg !== null) errMsg.outerHTML = ""; }; const showError = (err) => { $submitButton.classList.add("error"); const errorParaStyle = "color: #f70f1c; display: flex; align-items: center; margin-top: 1em;"; $form.appendChild( htmlToElement(` <p id="${errorMessageId}" style="${errorParaStyle}">${err}</p> `) ); }; const render = () => { if (state.loading) { $submitButton.classList.add("pulse"); $submitButton.innerText = "Wait…"; clearError(); } else if (state.success) { clearError(); $submitButton.classList.remove("pulse"); $submitButton.innerText = "Done!"; $submitButton.disabled = true; const successParaStyle = "color: rgb(21 128 61); display: flex; align-items: center; margin-top: 1em;"; const successSvgStyle = "height: 20px; padding-right: 4px"; $form.appendChild( htmlToElement(` <p style="${successParaStyle}"> <svg style="${successSvgStyle}" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20" fill="currentColor" class="mr-2 h-4 w-4"><path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm3.707-9.293a1 1 0 00-1.414-1.414L9 10.586 7.707 9.293a1 1 0 00-1.414 1.414l2 2a1 1 0 001.414 0l4-4z" clip-rule="evenodd"></path></svg> Hooray! You're now on the list. </p> `) ); } else if (state.error) { $submitButton.classList.remove("pulse"); $submitButton.disabled = false; showError(state.error); } else { $submitButton.classList.remove("pulse"); $submitButton.innerText = "Submit"; } }; $form.addEventListener("mouseover", (event) => { if (state.woke) return; state.woke = true; fetch(wakeEndpoint).then((response) => { if (!response.ok) { console.log("Failed to wake serverless endpoint."); } }); }); $form.addEventListener("submit", (event) => { event.preventDefault(); const formData = new FormData(event.target); const formProps = Object.fromEntries(formData); console.log("Form submitted!"); console.log(formProps); state.loading = true; render(); fetch(`${subscriptionCreateEndpoint}?email=${formProps.useremail}`) .then((response) => { state.loading = false; if (!response.ok) { state.error = `HTTP error! Apologies for the poor service (status: ${response.status}).`; render(); throw new Error(state.error); } else { state.error = null; } return response.json(); }) .then((data) => { state.success = true; render(); }); }); }; const endpointRootURL = "https://thundergolfer--thundergolferdotcom-email-subs-web.modal.run"; const subscribeEndpoint = `${endpointRootURL}/subscribe`; const wakeEndpoint = `${endpointRootURL}/wake`; subscriptionSignupForm("#subscribe-cta", subscribeEndpoint, wakeEndpoint); 

 anchors.options.visible = 'hover'; anchors.options.placement = 'left'; anchors.add('article h2, article h3, article h5, article h5, article h6'); 

X-UA-Compatible

Script

Open-Graph-Protocol

JQuery

Google-Tag-Manager

Google-Analytics

HTTP/3

GitHub Pages

Cloudflare Bot Management

Cloudflare

More Than DNS: The 14 hour AWS us-east-1 outage – Jonathon Belotti [thundergolfer]

Google

First-Party Tracking

✅ Low Risk - https://thundergolfer.com/blog/aws-us-east-1-outage-oct20

Requests	IP Address	Location	AS Autonomous System
8	188.114.97.3	United States	AS13335CLOUDFLARENET
3	142.250.185.195	United States	AS15169GOOGLE
2	142.250.184.200	United States	AS15169GOOGLE
2	192.178.170.95	United States	AS15169GOOGLE
1	104.16.79.73	United States	AS13335CLOUDFLARENET
1	216.239.34.36	United States	AS15169GOOGLE
1	104.17.25.14	United States	AS13335CLOUDFLARENET
1	104.19.231.99	United States	AS13335CLOUDFLARENET
1	142.250.185.142	United States	AS15169GOOGLE
1	172.217.18.10	United States	AS15169GOOGLE
21	30	-	-

Security Scan Report: thundergolfer.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History