Report - 365fbq.com:2020/fbq/bet365.exe

Report Overview

Submitted URL
365fbq.com:2020/fbq/bet365.exe
IP
34.85.36.87
ASN
#15169 GOOGLE
Submitted
2023-06-06 00:05:46
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
365fbq.com:2020	unknown	unknown	No data	No data	402 B	306 B	34.85.36.87
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09	2023-06-05	338 B	1.2 kB	104.18.15.101
365fbq.com	unknown	2018-09-30	2018-12-25	2023-06-05	896 B	580 B	34.85.36.87

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-06 00:05:30	low	34.85.36.87	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	365fbq.com:2020/fbq/bet365.exe	34.85.36.87	302 Moved Temporarily	142 B
URL User Request GET HTTP/1.1 365fbq.com:2020/fbq/bet365.exe IP 34.85.36.87:2020 ASN #15169 GOOGLE File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 142 B (142 bytes) Hash 82c98e8e012b79c922655461171cc2fa 0828d79135573276005b04be42d79a8a3291292b 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c HTTP Headers `GET /fbq/bet365.exe HTTP/1.1 Host: 365fbq.com:2020 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Moved Temporarily Date: Tue, 06 Jun 2023 00:05:29 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://365fbq.com`

	zerossl.ocsp.sectigo.com/	104.18.15.101		727 B
URL zerossl.ocsp.sectigo.com/ IP 104.18.15.101:0 ASN #13335 CLOUDFLARENET File type data Size 727 B (727 bytes) Hash 10a8eb536c66a0f2276246410757bbea 00926f500b6f86f25d50864615f130121bb23d31 36488cfbebbecee2869c789b7505ee5d4dac228416e31a20cf8b6068f703abb4 HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 00:05:30 GMT Content-Type: application/ocsp-response Content-Length: 727 Connection: keep-alive Last-Modified: Sat, 03 Jun 2023 03:14:41 GMT Expires: Sat, 10 Jun 2023 03:14:40 GMT Etag: "00926f500b6f86f25d50864615f130121bb23d31" Cache-Control: max-age=356349,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7d2c67701bd5b524-OSL`

	365fbq.com/	34.85.36.87	403 Forbidden	150 B
URL User Request GET HTTP/2 365fbq.com/ IP 34.85.36.87:443 ASN #15169 GOOGLE Certificate IssuerZeroSSL Subject365fbq.com Fingerprint85:F1:4B:D0:AE:F5:03:1D:4F:6F:E2:E2:20:8A:66:5C:40:8E:2A:0C ValiditySun, 07 May 2023 00:00:00 GMT - Sat, 05 Aug 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 150 B (150 bytes) Hash 8b181bb6767bc5795dcf17341a387e5b b5e2a9fb1f8a4aad3c7127c769af4c780b47bef4 32cbc376cd769a26d108ae31678f975b863b7066e110c59d9a212c7281bd8c81 HTTP Headers `GET / HTTP/1.1 Host: 365fbq.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden date: Tue, 06 Jun 2023 00:05:30 GMT content-type: text/html; charset=utf-8 content-length: 150 X-Firefox-Spdy: h2`

	365fbq.com/favicon.ico	34.85.36.87	404 Not Found	150 B
URL GET HTTP/2 365fbq.com/favicon.ico IP 34.85.36.87:443 ASN #15169 GOOGLE Requested by https://365fbq.com/ Certificate IssuerZeroSSL Subject365fbq.com Fingerprint85:F1:4B:D0:AE:F5:03:1D:4F:6F:E2:E2:20:8A:66:5C:40:8E:2A:0C ValiditySun, 07 May 2023 00:00:00 GMT - Sat, 05 Aug 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 150 B (150 bytes) Hash 597ba0d4396e9c906225140ce907092c 28ae2ba65ccdb583d79f85b8cc9509fae697493b ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: 365fbq.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://365fbq.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found date: Tue, 06 Jun 2023 00:05:31 GMT content-type: text/html; charset=utf-8 content-length: 150 X-Firefox-Spdy: h2`