Report - ekxji.app.link/CbeMZyDKkIb

Report Overview

Submitted URL
ekxji.app.link/CbeMZyDKkIb
IP
54.230.111.120
ASN
#16509 AMAZON-02
Submitted
2024-03-28 15:31:35
Access
public
Website Title
404 Not Found
Final URL
aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aruba.domino-id.it	unknown	unknown	No data	No data	1.5 kB	1.0 kB	105.146.173.236
ekxji.app.link	unknown	unknown	No data	No data	482 B	1.1 kB	54.230.111.102

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA	28 B	2024-02-12	2024-04-26
Pretty URL aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA IP 105.146.173.236 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-12 14:50:43 Last Seen2024-04-26 15:34:21 Times Seen13 Hash 35b8549a61800a488f1bac35cb5833d1 375c54074da85cbeaadcf1b2887379b2bfd48291 c26fabedd69de33920a3119a6d6a75ff5f9a1951da75d95685cc7101e51b8292 Loading...

HTTP Transactions (4)

	URL	IP	Response	Size
	aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA	105.146.173.236	200 OK	251 B
URL User Request GET HTTP/2 aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA IP 105.146.173.236:443 ASN #6713 Itissalat Al-MAGHRIB Certificate IssuerLet's Encrypt Subjectaruba.domino-id.it Fingerprint18:BB:BA:6F:BC:1C:3C:92:B1:FA:1F:E9:95:0F:E8:23:49:35:3B:A1 ValidityThu, 21 Mar 2024 04:22:35 GMT - Wed, 19 Jun 2024 04:22:34 GMT File type HTML document, ASCII text, with no line terminators Size 251 B (251 bytes) Hash 5cc6fae7488b99232875aad932ae688f 6fd35b167c14bd69efbef6f19b29bf8787c82fc3 e14c96197f1e00af9791d78be99d420677c87abff20c7ed74dedefd5339c1a1e HTTP Headers GET /index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA HTTP/1.1 Host: aruba.domino-id.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Thu, 28 Mar 2024 15:31:12 GMT content-type: text/html; charset=UTF-8 content-length: 251 set-cookie: PHPSESSID=oic1jf7nfb1iurrfkscr1k1m32; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache referrer-policy: no-referrer strict-transport-security: max-age=604800 X-Firefox-Spdy: h2`

	aruba.domino-id.it/index.php?antdbg	105.146.173.236	403 Forbidden	19 B
URL GET HTTP/2 aruba.domino-id.it/index.php?antdbg IP 105.146.173.236:443 ASN #6713 Itissalat Al-MAGHRIB Requested by https://aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA Certificate IssuerLet's Encrypt Subjectaruba.domino-id.it Fingerprint18:BB:BA:6F:BC:1C:3C:92:B1:FA:1F:E9:95:0F:E8:23:49:35:3B:A1 ValidityThu, 21 Mar 2024 04:22:35 GMT - Wed, 19 Jun 2024 04:22:34 GMT File type ASCII text, with no line terminators Size 19 B (19 bytes) Hash 765abf48d94d963af98c72ae7ab27275 9d8f91da07213e3e4e382edefdc2ad6cfbb97476 a8409c015310465a15dcd979eb47968313a5e4487c61a62c6e835d9f03ab042c HTTP Headers `GET /index.php?antdbg HTTP/1.1 Host: aruba.domino-id.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: PHPSESSID=oic1jf7nfb1iurrfkscr1k1m32 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 403 Forbidden date: Thu, 28 Mar 2024 15:31:12 GMT content-type: text/html; charset=iso-8859-1 content-length: 19 strict-transport-security: max-age=604800 X-Firefox-Spdy: h2`

	aruba.domino-id.it/favicon.ico	105.146.173.236	403 Forbidden	19 B
URL GET HTTP/2 aruba.domino-id.it/favicon.ico IP 105.146.173.236:443 ASN #6713 Itissalat Al-MAGHRIB Requested by https://aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA Certificate IssuerLet's Encrypt Subjectaruba.domino-id.it Fingerprint18:BB:BA:6F:BC:1C:3C:92:B1:FA:1F:E9:95:0F:E8:23:49:35:3B:A1 ValidityThu, 21 Mar 2024 04:22:35 GMT - Wed, 19 Jun 2024 04:22:34 GMT File type ASCII text, with no line terminators Size 19 B (19 bytes) Hash 765abf48d94d963af98c72ae7ab27275 9d8f91da07213e3e4e382edefdc2ad6cfbb97476 a8409c015310465a15dcd979eb47968313a5e4487c61a62c6e835d9f03ab042c HTTP Headers `GET /favicon.ico HTTP/1.1 Host: aruba.domino-id.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: PHPSESSID=oic1jf7nfb1iurrfkscr1k1m32 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 403 Forbidden date: Thu, 28 Mar 2024 15:31:12 GMT content-type: text/html; charset=iso-8859-1 content-length: 19 strict-transport-security: max-age=604800 X-Firefox-Spdy: h2`

	ekxji.app.link/CbeMZyDKkIb	54.230.111.102	307 Temporary Redirect	251 B
URL User Request GET HTTP/2 ekxji.app.link/CbeMZyDKkIb IP 54.230.111.102:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectappipv4.link Fingerprint0F:C1:C4:26:69:DF:1A:0E:D6:AF:7A:E6:78:A4:90:E1:27:6C:71:03 ValidityMon, 25 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT File type Size 251 B (251 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /CbeMZyDKkIb HTTP/1.1 Host: ekxji.app.link User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 307 Temporary Redirect location: https://aruba.domino-id.it/index.html?_branch_match_id=1301918858381296019&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAA8soKSkottLXT82uyMrUSywo0MvJzMvWd05K9Y2qdPHO9kwCAEou0ZAiAAAA server: openresty date: Thu, 28 Mar 2024 15:31:10 GMT set-cookie: _s=f98rHfTzclAttY%2Fh%2B5tl1lG4uN%2Bvqf8t704VXi7OxMCy33DlUJQKaS6z0v05en%2B3; Max-Age=31536000; Domain=.app.link; Path=/; Expires=Fri, 28 Mar 2025 15:31:10 GMT; Secure last-modified: Thu, 28 Mar 2024 15:31:10 GMT content-security-policy: frame-ancestors 'self' strict-transport-security: max-age=31536000; includeSubDomains accept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model x-cache: Miss from cloudfront via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: adk17kng5VVMffxi6dPo9OKkmbPyfjJfB1qbPhUaj3x6ugiDxHr12w== X-Firefox-Spdy: h2