Report - fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/

Report Overview

Submitted URL
fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/
IP
5.230.254.111
ASN
#12586 GHOSTnet GmbH
Submitted
2024-05-10 19:38:29
Access
public
Website Title
fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/
Final URL
fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fredautowheels.xyz	unknown	unknown	No data	No data	1.4 kB	349 B	5.230.254.111
href.li	36866	unknown	2012-05-22	2024-05-09	428 B	272 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 19:38:05	low	Client IP	192.0.78.27	ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)
2024-05-10 19:38:05	low	Client IP	192.0.78.27	ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/	5.230.254.111	500 Internal Server Error	22 B
URL User Request GET HTTP/1.1 fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/ IP 5.230.254.111:443 ASN #12586 GHOSTnet GmbH Certificate IssuerLet's Encrypt Subjectfredautowheels.xyz Fingerprint39:8A:6B:B6:52:71:0D:1D:4C:F5:C3:C6:B6:75:29:7F:13:99:13:6D ValidityThu, 09 May 2024 05:21:38 GMT - Wed, 07 Aug 2024 05:21:37 GMT File type ASCII text, with no line terminators Size 22 B (22 bytes) Hash 6aab5444a217195068e4b25509bc0c50 7b22eaf7eaa9b7e1f664a0632d3894d406fe7933 fc5525d427bfa27792d3a87411be241c047d07f07c18e2fc36bf00b1c2e33d07 HTTP Headers GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/ HTTP/1.1 Host: fredautowheels.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 500 Internal Server Error Date: Fri, 10 May 2024 19:38:05 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked`

	fredautowheels.xyz/favicon.ico	5.230.254.111		0 B
URL GET fredautowheels.xyz/favicon.ico IP 5.230.254.111:0 ASN #12586 GHOSTnet GmbH Requested by https://fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/ Certificate IssuerLet's Encrypt Subjectfredautowheels.xyz Fingerprint39:8A:6B:B6:52:71:0D:1D:4C:F5:C3:C6:B6:75:29:7F:13:99:13:6D ValidityThu, 09 May 2024 05:21:38 GMT - Wed, 07 Aug 2024 05:21:37 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: fredautowheels.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 Found location: https://href.li?https://example.com Date: Fri, 10 May 2024 19:38:05 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked`

	href.li/?https://example.com	0.0.0.0		0 B
URL GET href.li/?https://example.com IP 0.0.0.0:0 ASN #0 Requested by https://fredautowheels.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ZyZWRhdXRvd2hlZWxzLnh5eiIsImRvbWFpbiI6ImZyZWRhdXRvd2hlZWxzLnh5eiIsImtleSI6Im5Sbnd4R2JPd0NJMSIsInFyYyI6IiIsImlhdCI6MTcxNTM2OTg2MiwiZXhwIjoxNzE1MzY5OTgyfQ.UJBlEg2Cv1TZyhWdBTv7fDfCcHpR68EAsOumJ1VrqJI/ Certificate IssuerLet's Encrypt Subjecttls.automattic.com FingerprintB3:3A:A0:5F:B0:25:9D:4B:18:87:25:4F:9C:50:76:C2:30:4A:61:34 ValidityMon, 06 May 2024 01:30:15 GMT - Sun, 04 Aug 2024 01:30:14 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /?https://example.com HTTP/1.1 Host: href.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fredautowheels.xyz/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 10 May 2024 19:38:05 GMT content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000 vary: Accept-Encoding content-encoding: br x-ac: 3.arn _dca MISS alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (3)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers