Report - rb.gy/j50hvr

Report Overview

Submitted URL
rb.gy/j50hvr
IP
52.44.59.92
ASN
#14618 AMAZON-AES
Submitted
2024-05-10 20:34:34
Access
public
Website Title
lets.goturgf.com/banned.php?reason=4
Final URL
lets.goturgf.com/banned.php?reason=4
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rb.gy	103780	2019-09-17	2019-10-11	2024-05-07	466 B	303 B	52.44.59.92
lets.goturgf.com	unknown	2024-01-12	2024-01-16	2024-02-22	1.7 kB	2.3 kB	3.214.212.43

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 20:34:09	low	52.44.59.92	Client IP	ET INFO Observed URL Shortening Service SSL/TLS Cert (rb.gy)
2024-05-10 20:34:09	low	52.44.59.92	Client IP	ET INFO Observed URL Shortening Service SSL/TLS Cert (rb.gy)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	rb.gy/j50hvr	52.44.59.92	301 Moved Permanently	0 B
URL User Request GET HTTP/2 rb.gy/j50hvr IP 52.44.59.92:443 ASN #14618 AMAZON-AES Certificate IssuerAmazon Subjectrb.gy FingerprintDB:A6:0C:96:5D:05:26:D6:95:BF:CD:A8:79:39:3C:DA:CC:7E:93:A5 ValiditySat, 19 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /j50hvr HTTP/1.1 Host: rb.gy User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently date: Fri, 10 May 2024 20:34:09 GMT content-length: 0 location: https://lets.goturgf.com/tiny/lALpQ?subaff=Real-100 cache-control: no-cache, no-store expires: -1 engine: Rebrandly.redirect, version 2.1 strict-transport-security: max-age=15552000 X-Firefox-Spdy: h2`

	lets.goturgf.com/tiny/lALpQ?subaff=Real-100	3.214.212.43	302 Found	0 B
URL User Request GET HTTP/2 lets.goturgf.com/tiny/lALpQ?subaff=Real-100 IP 3.214.212.43:443 ASN #14618 AMAZON-AES Certificate IssuerAmazon Subjectmy.traffics2money.com Fingerprint6F:27:9F:B1:D0:B6:AE:3F:89:6B:93:1C:75:2A:E8:E5:20:F3:9D:D2 ValidityTue, 16 Jan 2024 00:00:00 GMT - Thu, 13 Feb 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /tiny/lALpQ?subaff=Real-100 HTTP/1.1 Host: lets.goturgf.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Fri, 10 May 2024 20:34:10 GMT content-type: text/html; charset=UTF-8 content-length: 0 location: http://lets.goturgf.com/banned.php?reason=4 set-cookie: AWSALB=acgPhvuvqOFmsJN/dXMV1bQ9qOfFb45RRcdVMiln5LDHcks16zdHmO2vOj07woaOCkJIUx0yPY5O7yaa3ySUJTS7Kcd2lubvWR2H6wQ5ktW9csKEdDlCTCgGEajI; Expires=Fri, 17 May 2024 20:34:09 GMT; Path=/ AWSALBCORS=acgPhvuvqOFmsJN/dXMV1bQ9qOfFb45RRcdVMiln5LDHcks16zdHmO2vOj07woaOCkJIUx0yPY5O7yaa3ySUJTS7Kcd2lubvWR2H6wQ5ktW9csKEdDlCTCgGEajI; Expires=Fri, 17 May 2024 20:34:09 GMT; Path=/; SameSite=None; Secure PHPSESSID=7bdvu7lvtftba02ev1kc3tcbbd; path=/ server: Apache/2.4.41 (Ubuntu) expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache access-control-allow-origin: * X-Firefox-Spdy: h2

	lets.goturgf.com/banned.php?reason=4	52.86.252.121	200 OK	66 B
URL User Request GET HTTP/1.1 lets.goturgf.com/banned.php?reason=4 IP 52.86.252.121:80 ASN #14618 AMAZON-AES File type ASCII text Size 66 B (66 bytes) Hash 27bc8143ed04b9e01c8f564d64ca3b87 cb49043e814f7ce09674bda55501077d23d9f10d de9350a2ade7022b7d7cfce9da0cab87e5a4b82b35cef0e6353c8401aa934f21 HTTP Headers GET /banned.php?reason=4 HTTP/1.1 Host: lets.goturgf.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: AWSALB=acgPhvuvqOFmsJN/dXMV1bQ9qOfFb45RRcdVMiln5LDHcks16zdHmO2vOj07woaOCkJIUx0yPY5O7yaa3ySUJTS7Kcd2lubvWR2H6wQ5ktW9csKEdDlCTCgGEajI; PHPSESSID=7bdvu7lvtftba02ev1kc3tcbbd Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 10 May 2024 20:34:10 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 66 Connection: keep-alive Set-Cookie: AWSALB=KxEM7odnsNMKPAzsrdh35IWYHjqh2NHs+SjSSsYEsxCczbwWa/7jLI8HTRNFRVgE4ldHIc35O8FjROFIFiCcBQpTmXFH/cJUNGSJIM/IvfVNTgHAudpRh46o1rdlB40D93bsCLoq3wmOud69C23GkPnzgaIxf4ofNG+HH01gz9iW5qlT5vUrHHPazQri2Q==; Expires=Fri, 17 May 2024 20:34:10 GMT; Path=/ AWSALBCORS=KxEM7odnsNMKPAzsrdh35IWYHjqh2NHs+SjSSsYEsxCczbwWa/7jLI8HTRNFRVgE4ldHIc35O8FjROFIFiCcBQpTmXFH/cJUNGSJIM/IvfVNTgHAudpRh46o1rdlB40D93bsCLoq3wmOud69C23GkPnzgaIxf4ofNG+HH01gz9iW5qlT5vUrHHPazQri2Q==; Expires=Fri, 17 May 2024 20:34:10 GMT; Path=/; SameSite=None Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Encoding: gzip

	lets.goturgf.com/favicon.ico	52.86.252.121	404 Not Found	3 B
URL GET HTTP/1.1 lets.goturgf.com/favicon.ico IP 52.86.252.121:80 ASN #14618 AMAZON-AES Requested by http://lets.goturgf.com/banned.php?reason=4 File type ASCII text, with no line terminators Size 3 B (3 bytes) Hash 4f4adcbf8c6f66dcfc8a3282ac2bf10a c35a9fc52bb556c79f8fa540df587a2bf465b940 6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b HTTP Headers GET /favicon.ico HTTP/1.1 Host: lets.goturgf.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://lets.goturgf.com/banned.php?reason=4 Cookie: AWSALB=KxEM7odnsNMKPAzsrdh35IWYHjqh2NHs+SjSSsYEsxCczbwWa/7jLI8HTRNFRVgE4ldHIc35O8FjROFIFiCcBQpTmXFH/cJUNGSJIM/IvfVNTgHAudpRh46o1rdlB40D93bsCLoq3wmOud69C23GkPnzgaIxf4ofNG+HH01gz9iW5qlT5vUrHHPazQri2Q==; PHPSESSID=7bdvu7lvtftba02ev1kc3tcbbd Pragma: no-cache Cache-Control: no-cache HTTP/1.1 404 Not Found Date: Fri, 10 May 2024 20:34:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: AWSALB=QYysPGTJK+TqHEi29NjPfX9iLcKhK2MJvKN2VQaK+YUaLZQPtHZfZLxY1LPzk20kHre2U965EG+ewE2LO9dZwTeN1p+n5rQ4ZePEcTvUIyc3KA4Vm/gWT/ICxGVRcO4rKFUXs2zqQ8DsVJu/+3JjUiEnWqbVtqt7jFLGfA+jRpiqLBk9wX1zzup9gR89Sw==; Expires=Fri, 17 May 2024 20:34:10 GMT; Path=/ AWSALBCORS=QYysPGTJK+TqHEi29NjPfX9iLcKhK2MJvKN2VQaK+YUaLZQPtHZfZLxY1LPzk20kHre2U965EG+ewE2LO9dZwTeN1p+n5rQ4ZePEcTvUIyc3KA4Vm/gWT/ICxGVRcO4rKFUXs2zqQ8DsVJu/+3JjUiEnWqbVtqt7jFLGfA+jRpiqLBk9wX1zzup9gR89Sw==; Expires=Fri, 17 May 2024 20:34:10 GMT; Path=/; SameSite=None Server: Apache/2.4.41 (Ubuntu)