Network Analysis
Name | Response | Post-Analysis Lookup |
---|---|---|
braxsilcxfxc.net.br | 104.21.56.235 |
- UDP Requests
-
-
192.168.56.101:61479 164.124.101.2:53
-
192.168.56.101:62324 164.124.101.2:53
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:138 192.168.56.255:138
-
192.168.56.101:49152 239.255.255.250:3702
-
192.168.56.101:61480 239.255.255.250:3702
-
192.168.56.101:62445 239.255.255.250:1900
-
192.168.56.101:62447 239.255.255.250:3702
-
192.168.56.101:62449 239.255.255.250:3702
-
52.231.114.183:123 192.168.56.101:123
-
GET
200
https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0075978B50A566BA116EB25127B04829.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0075978B50A566BA116EB25127B04829.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2021 10:12:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d364613e54d715eaa1817d2e17b290f2f1616667148; expires=Sat, 24-Apr-21 10:12:28 GMT; path=/; domain=.braxsilcxfxc.net.br; HttpOnly; SameSite=Lax; Secure
Last-Modified: Wed, 24 Mar 2021 22:50:31 GMT
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
cf-request-id: 090a7817d300000534e322f000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=B%2BirhJZ5e1OuWeZVaJRx4VlIUc2yXvfjilY9zuTuUMhqJm4F8JPoH3hNzgbY%2Fa644uVrLnXNpRoClVM6VruDz4m1CGlHPwzB%2BGHzuJNljKydjpRl"}],"max_age":604800,"group":"cf-nel"}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575c6c88910534-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-3C7AAD4ED72F74438CD34BEC400D3DD3.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-3C7AAD4ED72F74438CD34BEC400D3DD3.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2021 10:12:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d9c3e3bee4d8c5cfa1e18b63ce4d89ac51616667150; expires=Sat, 24-Apr-21 10:12:30 GMT; path=/; domain=.braxsilcxfxc.net.br; HttpOnly; SameSite=Lax; Secure
Last-Modified: Wed, 24 Mar 2021 22:50:32 GMT
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
cf-request-id: 090a781edc00000534a1235000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=H4kOr5aqvpPGDPrHqcRm%2FHM77YenELg3gJTpkLvJvXsme9G%2FkvfxiPmjlvKOPt9AbwmGAOhE2XUPElhTlev4Cec7M%2BqPlHQ4qZ7OFNk3UM5Awz8g"}],"max_age":604800,"group":"cf-nel"}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575c77cd490534-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6628EEC24B586EA652FFAAC607AFBD2C.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6628EEC24B586EA652FFAAC607AFBD2C.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2021 10:12:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d2e23265e289d31fef815b5ee215bf15a1616667151; expires=Sat, 24-Apr-21 10:12:31 GMT; path=/; domain=.braxsilcxfxc.net.br; HttpOnly; SameSite=Lax; Secure
Last-Modified: Wed, 24 Mar 2021 22:50:33 GMT
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
cf-request-id: 090a78236500000534e8229000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=EnSDSpOPsejQOfiVFStFW%2B4GKlJf2NMDbbz64luOdwwJaJWUYQPN%2Fo85oijocf1bNX2805yOMdtQZD55QlOw5wTxgOp5MaMPunceJ2UCE4YM%2BSYz"}],"max_age":604800,"group":"cf-nel"}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575c7f0ae90534-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
301
http://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0075978B50A566BA116EB25127B04829.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0075978B50A566BA116EB25127B04829.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
Connection: Keep-Alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Mar 2021 10:12:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Mar 2021 11:12:27 GMT
Location: https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0075978B50A566BA116EB25127B04829.html
cf-request-id: 090a78153b0000eb2163847000000001
Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=HzLUPfvbYtSlWEzcjTgxFGOUFnjTdK%2F6s4Uu6BgQxKDZmby29jg%2Bt%2B1J6BCTfOP%2F7XBpiTpXSRdLG4nhmYPyb8R0nWqllQjFMpfmtjl%2BvV2eOgkf"}],"max_age":604800}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575c685fabeb21-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
301
http://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-3C7AAD4ED72F74438CD34BEC400D3DD3.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-3C7AAD4ED72F74438CD34BEC400D3DD3.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Mar 2021 10:12:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Mar 2021 11:12:29 GMT
Location: https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-3C7AAD4ED72F74438CD34BEC400D3DD3.html
cf-request-id: 090a781e4c0000eb2164abc000000001
Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=FLbem2v4%2Fibv1C%2BgiOOVtWvLNsOSDphp7COOj8D%2FJqojtNIYrKqeMS38zx01%2FEVjA4277o4uIfOFsp8qLqpA12rJLt7YCMW4OqGDxS5Lbf2czAj6"}],"max_age":604800}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575c76ed41eb21-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
301
http://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6628EEC24B586EA652FFAAC607AFBD2C.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6628EEC24B586EA652FFAAC607AFBD2C.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Mar 2021 10:12:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Mar 2021 11:12:31 GMT
Location: https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6628EEC24B586EA652FFAAC607AFBD2C.html
cf-request-id: 090a7822d80000eb21b82bc000000001
Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=XqnlhRacmpW3Ykfb%2F96KLQE8CdPLB5mryKtY10U%2BRbxKdi8IRaXc62MSkCEE%2FYQF186mU9k6wztURvi93aBw9A2dVyILONJiT%2BBb0FiMph3ozBz4"}],"max_age":604800}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575c7e28c0eb21-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Flow | SID | Signature | Category |
---|---|---|---|
TCP 192.168.56.101:49201 -> 104.21.56.235:443 | 906200056 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
Flow | Issuer | Subject | Fingerprint |
---|---|---|---|
TLSv1 192.168.56.101:49201 104.21.56.235:443 |
C=US, O=Cloudflare, Inc., CN=Cloudflare Inc ECC CA-3 | C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com | 7c:73:22:c7:d1:20:c3:53:b5:f5:08:fc:2f:c9:56:50:cd:a3:91:2d |
Snort Alerts
No Snort Alerts