Report - rogeriocabral.com.br/?fbofduef/?auth=2

Report Overview

Visited public
2024-12-12 09:39:00
Tags
URL
rogeriocabral.com.br/?fbofduef/?auth=2
Finishing URL
example.com/
IP / ASN
94.131.98.171
#44477 Stark Industries Solutions Ltd
Title
Example Domain

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rogeriocabral.com.br	unknown	2003-12-27	2019-07-05	2023-01-01	492 B	179 B	94.131.98.171
example.com	9944	1995-08-14	2013-07-30	2024-12-07	895 B	2.1 kB	93.184.215.14
href.li	36866	unknown	2012-05-22	2024-12-06	482 B	12 kB	192.0.78.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-12 09:38:36	low	Client IP	192.0.78.27	ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	rogeriocabral.com.br/?fbofduef/?auth=2	94.131.98.171	302 Found	0 B
URL rogeriocabral.com.br/?fbofduef/?auth=2 IP 94.131.98.171:0 ASN #44477 Stark Industries Solutions Ltd File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /?fbofduef/?auth=2 HTTP/1.1 Host: rogeriocabral.com.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found location: https://href.li?https://example.com Date: Thu, 12 Dec 2024 09:38:36 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked`

	example.com/	93.184.215.14	200 OK	648 B
URL User Request GET HTTP/2 example.com/ IP 93.184.215.14:443 ASN #15133 EDGECAST Certificate IssuerDigiCert Inc Subjectwww.example.org Fingerprint4D:A2:5A:6D:5E:F6:2C:5F:95:C7:BD:0A:73:EA:3C:17:7B:36:99:9D ValidityTue, 30 Jan 2024 00:00:00 GMT - Sat, 01 Mar 2025 23:59:59 GMT File type HTML document, ASCII text Size 648 B (648 bytes) Hash 84238dfc8092e5d9c0dac8ef93371a07 4a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047 ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9 HTTP Headers `GET / HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes age: 572123 cache-control: max-age=604800 content-type: text/html; charset=UTF-8 date: Thu, 12 Dec 2024 09:38:37 GMT etag: "3147526947+gzip" expires: Thu, 19 Dec 2024 09:38:37 GMT last-modified: Thu, 17 Oct 2019 07:18:26 GMT server: ECAcc (nyd/D131) vary: Accept-Encoding x-cache: HIT content-length: 648 X-Firefox-Spdy: h2`

	example.com/favicon.ico	93.184.215.14	404 Not Found	648 B
URL GET HTTP/2 example.com/favicon.ico IP 93.184.215.14:443 ASN #15133 EDGECAST Requested by https://example.com/ Certificate IssuerDigiCert Inc Subjectwww.example.org Fingerprint4D:A2:5A:6D:5E:F6:2C:5F:95:C7:BD:0A:73:EA:3C:17:7B:36:99:9D ValidityTue, 30 Jan 2024 00:00:00 GMT - Sat, 01 Mar 2025 23:59:59 GMT File type HTML document, ASCII text Size 648 B (648 bytes) Hash 84238dfc8092e5d9c0dac8ef93371a07 4a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047 ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://example.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found content-encoding: gzip accept-ranges: bytes age: 447831 cache-control: max-age=604800 content-type: text/html date: Thu, 12 Dec 2024 09:38:37 GMT etag: "1088432560+gzip" expires: Thu, 19 Dec 2024 09:38:37 GMT last-modified: Sat, 12 Oct 2024 03:26:51 GMT server: ECAcc (nyd/D157) vary: Accept-Encoding x-cache: 404-HIT content-length: 648 X-Firefox-Spdy: h2`

	href.li/?https://example.com	192.0.78.27	200 OK	12 kB
URL href.li/?https://example.com IP 192.0.78.27:0 ASN #2635 AUTOMATTIC File type HTML document, ASCII text Size 12 kB (11451 bytes) Hash 0eb5f7cd507daba712ca57436c093e81 d931290189362d2b4c4f1529b1eda6d84ac4303d 7ddfe06ab75fcac1ee9065216103f4915d979ed468d989a1aa0fa6b8a2e827f6 HTTP Headers `GET /?https://example.com HTTP/1.1 Host: href.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Thu, 12 Dec 2024 09:38:36 GMT content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000 vary: Accept-Encoding content-encoding: br x-ac: 3.arn _dca MISS alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`