Report - wf.mobibox.pt/api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA=

Report Overview

Visited public
2023-08-25 18:55:31
Tags
URL
wf.mobibox.pt/api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA=
Finishing URL
dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879
IP / ASN
195.22.8.9
#8426 Claranet Limited
Title
BiteGames

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
wf.mobibox.pt	unknown	2015-07-21	2017-06-27 04:02:12	2023-08-09 20:57:18	1.4 kB	140 kB	195.22.8.9
dcb.mobibox.pt	unknown	2015-07-21	2016-06-22 05:06:44	2023-08-24 13:19:09	2.0 kB	860 kB	195.22.8.9
	unknown				1.2 kB	470 B	52.210.137.205
notify.eyewitness.evina.com	337129	1999-05-30	2020-11-11 08:35:18	2023-08-22 10:38:46	1.1 kB	724 B	54.72.202.80
notify.dcbprotect.com	112896	2017-09-27	2018-06-07 00:28:10	2023-08-25 10:01:49	545 B	276 B	52.214.196.110

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-08-25 18:55:06	low	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-08-25 18:55:06	low	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-08-25 18:55:06	low	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-08-25 18:55:07	low	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-08-25 18:55:08	low	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-08-25 18:55:09	low	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-08-25 18:55:12	low	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879	ScriptElement	137 kB	2024-08-21	2024-08-21
Pretty URL dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 IP 195.22.8.9 ASN #8426 Claranet Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-21 08:04 Last Seen2024-08-21 08:04 Times Seen1 Hash 28a4f41dfd155578c8a84b00769e0b6c 0adca224753e5c50881719fb074a92c8739e0000 2701ea6e7c812b5e3c66f7865e90aa59ee4648e5023ff8cb031ddc1d8fa161ef Loading...

HTTP Transactions (12)

	URL	IP	Response	Size
	wf.mobibox.pt/api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA=	195.22.8.9		272 B
URL wf.mobibox.pt/api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA= IP 195.22.8.9:0 ASN #8426 Claranet Limited File type HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 272 B (272 bytes) Hash 4526702f3d9b24df4cdf71927c5a746d b5503b6dabd87f0a7142a09643649ff7c8172357 d6fd61b67c7ca446bf3c7fe8f4615c07e31b4c02c5205dd333ec32d34c3a1881 HTTP Headers GET /api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA= HTTP/1.1 Host: wf.mobibox.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found date: Fri, 25 Aug 2023 18:55:14 GMT server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34 pragma: no-cache content-length: 272 location: http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 X-Firefox-Spdy: h2`

	GET dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879	195.22.8.9	200 OK	139 kB
URL User Request GET HTTP/1.1 dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 IP 195.22.8.9:80 ASN #8426 Claranet Limited File type HTML document, ASCII text, with very long lines (65536), with no line terminators Size 139 kB (138981 bytes) Hash fdd7349ba183f251e7fdc1d530cf0c42 62eb23daf9a4e64e0075d49a998c8fa470e8d3ff 719fe7f4ff72697617a970bc88bc4449184573b497529d226c68ccd295c5e3e7 HTTP Headers `GET /api/wbHtmlIdentify?wbrmId=3156526879 HTTP/1.1 Host: dcb.mobibox.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 25 Aug 2023 18:55:14 GMT Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k mod_fcgid/2.3.9 Pragma: no-cache Content-Length: 138981 Content-type: text/html; charset=ISO-8859-1 Content-Security-Policy: frame-ancestors 'none' X-Frame-Options: DENY X-Content-Type-Options: nosniff`

	GET dcb.mobibox.pt/dcb/playwing/bitegames/generic/style.css	195.22.8.9	200 OK	827 B
URL GET HTTP/1.1 dcb.mobibox.pt/dcb/playwing/bitegames/generic/style.css IP 195.22.8.9:80 ASN #8426 Claranet Limited Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 File type ASCII text Size 827 B (827 bytes) Hash a1aa81486e3ede649ea0ddb857243a6c a402c5115714a8b90a84461ad8df808be490e6eb 378c70bc67be92e25aa0e4b79b972eb59cf827a832fb15229e31c1bdc90ea420 HTTP Headers `GET /dcb/playwing/bitegames/generic/style.css HTTP/1.1 Host: dcb.mobibox.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 25 Aug 2023 18:55:14 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34 Last-Modified: Thu, 23 Mar 2023 18:06:44 GMT ETag: "33b-5f79523a8b500" Accept-Ranges: bytes Content-Length: 827 Content-Type: text/css`

	GET dcb.mobibox.pt/dcb/playwing/bitegames/generic/img/bite_games_logo.png	195.22.8.9	200 OK	5.0 kB
URL GET HTTP/1.1 dcb.mobibox.pt/dcb/playwing/bitegames/generic/img/bite_games_logo.png IP 195.22.8.9:80 ASN #8426 Claranet Limited Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 File type PNG image data, 200 x 49, 8-bit/color RGBA, non-interlaced\012- data Size 5.0 kB (5019 bytes) Hash c9d23c35370e6141b7a20d3aa6423ecb 87cc3da88dc1b2227da65af550a6de3e3e4524a9 77116f2430fec3301b4df0a9f74e21dcc33787ab48e73da2a405221527011fd9 HTTP Headers `GET /dcb/playwing/bitegames/generic/img/bite_games_logo.png HTTP/1.1 Host: dcb.mobibox.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 25 Aug 2023 18:55:14 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34 Last-Modified: Tue, 14 Feb 2023 11:41:16 GMT ETag: "139b-5f4a770fe8f00" Accept-Ranges: bytes Content-Length: 5019 Content-Type: image/png`

	GET dcb.mobibox.pt/favicon.ico	195.22.8.9	200 OK	1.4 kB
URL GET HTTP/1.1 dcb.mobibox.pt/favicon.ico IP 195.22.8.9:80 ASN #8426 Claranet Limited Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data Size 1.4 kB (1406 bytes) Hash 9b67e7812870eee59390761c15c47c82 7ae47bdbcff27d8eb6787cd72d2cc44765e7536e 6dbcabc43f16c27075fcc80564453aaa783332f1bc6f6aff8729ee8f9d7423cd HTTP Headers `GET /favicon.ico HTTP/1.1 Host: dcb.mobibox.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 25 Aug 2023 18:55:15 GMT Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k mod_fcgid/2.3.9 Last-Modified: Mon, 07 Mar 2016 17:30:40 GMT ETag: "57e-52d78d2d43000" Accept-Ranges: bytes Content-Length: 1406 Content-Type: image/vnd.microsoft.icon`

	ws.dcbprotect.com:8080/	52.210.137.205		0 B
URL ws.dcbprotect.com:8080/ IP 52.210.137.205:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: ws.dcbprotect.com:8080 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: http://dcb.mobibox.pt Sec-WebSocket-Protocol: echo-protocol Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: UfflS/bw7pd15UJyRlgheA== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols upgrade: websocket connection: Upgrade sec-websocket-accept: vf7tY6J4C8KHjQFmKwg0CjFa4Ng= sec-websocket-protocol: echo-protocol origin: http://dcb.mobibox.pt date: Fri, 25 Aug 2023 18:55:14 GMT`

	GET dcb.mobibox.pt/dcb/playwing/bitegames/generic/img/provider-side-landing.png	195.22.8.9	200 OK	712 kB
URL GET HTTP/1.1 dcb.mobibox.pt/dcb/playwing/bitegames/generic/img/provider-side-landing.png IP 195.22.8.9:80 ASN #8426 Claranet Limited Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 File type PNG image data, 1087 x 612, 8-bit/color RGB, non-interlaced\012- data Size 712 kB (712022 bytes) Hash 844d73849aced56ce0dc98eb78b3bf8f 81cc6aebacf2fdeb365c0ca3b916a4301f60e990 cde95e3b7cbc5adf99366cfadea002e97343efc64c4c6a9cec412e209e4ae100 HTTP Headers `GET /dcb/playwing/bitegames/generic/img/provider-side-landing.png HTTP/1.1 Host: dcb.mobibox.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 25 Aug 2023 18:55:14 GMT Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k mod_fcgid/2.3.9 Last-Modified: Thu, 23 Mar 2023 14:04:18 GMT ETag: "add56-5f791c0a65c80" Accept-Ranges: bytes Content-Length: 712022 Content-Type: image/png`

	POST notify.eyewitness.evina.com/notify_cjv.php?token=A1104433578888758028460486820888226024262848264288	54.72.202.80	200 OK	20 B
URL POST HTTP/1.1 notify.eyewitness.evina.com/notify_cjv.php?token=A1104433578888758028460486820888226024262848264288 IP 54.72.202.80:443 ASN #16509 AMAZON-02 Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Certificate IssuerAmazon Subject.eyewitness.evina.com Fingerprint82:0D:95:BF:BB:C6:C8:E1:80:1E:95:78:EC:9D:FA:74:61:07:32:80 ValidityThu, 09 Feb 2023 00:00:00 GMT - Thu, 30 Nov 2023 23:59:59 GMT File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers POST /notify_cjv.php?token=A1104433578888758028460486820888226024262848264288 HTTP/1.1 Host: notify.eyewitness.evina.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: application/x-www-form-urlencoded Content-Length: 293 Origin: http://dcb.mobibox.pt DNT: 1 Connection: keep-alive Referer: http://dcb.mobibox.pt/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Fri, 25 Aug 2023 18:55:15 GMT Content-Length: 20 Connection: keep-alive`

	POST notify.eyewitness.evina.com/notify_cjv.php?token=A1104433578888758028460486820888226024262848264288	54.72.202.80	200 OK	20 B
URL POST HTTP/1.1 notify.eyewitness.evina.com/notify_cjv.php?token=A1104433578888758028460486820888226024262848264288 IP 54.72.202.80:443 ASN #16509 AMAZON-02 Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Certificate IssuerAmazon Subject.eyewitness.evina.com Fingerprint82:0D:95:BF:BB:C6:C8:E1:80:1E:95:78:EC:9D:FA:74:61:07:32:80 ValidityThu, 09 Feb 2023 00:00:00 GMT - Thu, 30 Nov 2023 23:59:59 GMT File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers POST /notify_cjv.php?token=A1104433578888758028460486820888226024262848264288 HTTP/1.1 Host: notify.eyewitness.evina.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: application/x-www-form-urlencoded Content-Length: 16289 Origin: http://dcb.mobibox.pt DNT: 1 Connection: keep-alive Referer: http://dcb.mobibox.pt/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Fri, 25 Aug 2023 18:55:15 GMT Content-Length: 20 Connection: keep-alive`

	POST notify.dcbprotect.com/A1104433578888758028460486820888226024262848264288	52.214.196.110	200 OK	20 B
URL POST HTTP/1.1 notify.dcbprotect.com/A1104433578888758028460486820888226024262848264288 IP 52.214.196.110:443 ASN #16509 AMAZON-02 Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Certificate IssuerAmazon Subject.eu-west-1.prd.dcbprotect.com Fingerprint8B:5E:1C:95:A9:70:BD:16:D6:23:40:BA:E0:B5:B9:7E:40:87:C8:77 ValidityFri, 17 Mar 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT File type gzip compressed data, max speed, from Unix\012- data Size 20 B (20 bytes) Hash a4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf HTTP Headers POST /A1104433578888758028460486820888226024262848264288 HTTP/1.1 Host: notify.dcbprotect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: application/x-www-form-urlencoded Content-Length: 8888 Origin: http://dcb.mobibox.pt DNT: 1 Connection: keep-alive Referer: http://dcb.mobibox.pt/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK date: Fri, 25 Aug 2023 18:55:15 GMT content-type: text/html; charset=UTF-8 access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-encoding: gzip transfer-encoding: chunked`

	GET ws.dcbprotect.com:8080/	52.210.137.205	101 Switching Protocols	0 B
URL GET HTTP/1.1 ws.dcbprotect.com:8080/ IP 52.210.137.205:8080 ASN #16509 AMAZON-02 Requested by http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 Certificate IssuerAmazon Subject.eu-west-1.prd.dcbprotect.com Fingerprint8B:5E:1C:95:A9:70:BD:16:D6:23:40:BA:E0:B5:B9:7E:40:87:C8:77 ValidityFri, 17 Mar 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: ws.dcbprotect.com:8080 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: http://dcb.mobibox.pt Sec-WebSocket-Protocol: echo-protocol Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: UfflS/bw7pd15UJyRlgheA== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols upgrade: websocket connection: Upgrade sec-websocket-accept: vf7tY6J4C8KHjQFmKwg0CjFa4Ng= sec-websocket-protocol: echo-protocol origin: http://dcb.mobibox.pt date: Fri, 25 Aug 2023 18:55:14 GMT`

	GET wf.mobibox.pt/api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA=	195.22.8.9	302 Found	139 kB
URL User Request GET HTTP/2 wf.mobibox.pt/api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA= IP 195.22.8.9:443 ASN #8426 Claranet Limited Certificate IssuerLet's Encrypt Subjectwf.mobibox.pt Fingerprint46:1A:E3:DD:83:50:79:3F:A0:90:04:EB:BB:12:8E:6B:9A:45:5B:47 ValidityMon, 10 Jul 2023 07:21:42 GMT - Sun, 08 Oct 2023 07:21:41 GMT File type Size 139 kB (138981 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /api/wbV2WebFlow?dcbReturnUrl=http://external-gateway.bgames.store/api/public/subscribeback/5013/30618700&dcbService=PRD_PLAYWING_PT_BITEGAMES_GENERIC&dcbAuth=cGxheXdpbmdwdGFwaSMyMDIzLTA4LTI1VDE4OjU0OjUyKzAwMDAjMzA2MTg3MDA= HTTP/1.1 Host: wf.mobibox.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found date: Fri, 25 Aug 2023 18:55:14 GMT server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34 pragma: no-cache content-length: 272 location: http://dcb.mobibox.pt/api/wbHtmlIdentify?wbrmId=3156526879 X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL POST HTTP/1.1

IP

ASN

Requested by

Certificate

File type