Network Analysis
Name | Response | Post-Analysis Lookup |
---|---|---|
braxsilcxfxc.net.br | 172.67.137.252 |
- UDP Requests
-
-
192.168.56.101:61479 164.124.101.2:53
-
192.168.56.101:62324 164.124.101.2:53
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:138 192.168.56.255:138
-
192.168.56.101:49152 239.255.255.250:3702
-
192.168.56.101:61480 239.255.255.250:3702
-
192.168.56.101:62327 239.255.255.250:1900
-
192.168.56.101:62329 239.255.255.250:3702
-
192.168.56.101:62331 239.255.255.250:3702
-
52.231.114.183:123 192.168.56.101:123
-
GET
200
https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6D5C338B20CC9521BA9E3E8597574C38.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6D5C338B20CC9521BA9E3E8597574C38.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2021 10:14:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d56c7f2fd2a74ed6e1501c800bb18870f1616667281; expires=Sat, 24-Apr-21 10:14:41 GMT; path=/; domain=.braxsilcxfxc.net.br; HttpOnly; SameSite=Lax; Secure
Last-Modified: Wed, 24 Mar 2021 22:51:22 GMT
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
cf-request-id: 090a7a1e87000005341126a000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=HW%2BpBePekVpqWOyqcn8uWo9qgX1A4uVGRDY4D7LbyVL9zjgesURpYDW%2BQWgJ678ITe9lpPIERNXTBWXzuZb4xNqaeSCNwtcjYX%2B4fYkrl3tICfC9"}],"max_age":604800,"group":"cf-nel"}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575faa78250534-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-FA495F0F022FADED7A010F28C72F8A57.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-FA495F0F022FADED7A010F28C72F8A57.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2021 10:14:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dbb3f8ffb9fda2f8f2987b14916e73b271616667282; expires=Sat, 24-Apr-21 10:14:42 GMT; path=/; domain=.braxsilcxfxc.net.br; HttpOnly; SameSite=Lax; Secure
Last-Modified: Wed, 24 Mar 2021 22:51:23 GMT
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
cf-request-id: 090a7a252f00000534e589c000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=OsLOsoeGaguvtokClKpgIiAv1VtajHaa%2BUanJiSFpTIC%2FCk%2Fxpl86U2XluV0EThz3rYPgF7C%2B5%2FhvyTUiE6ePmfN1RHHc%2FFJXPWwRTUJIBq9%2BQrw"}],"max_age":604800,"group":"cf-nel"}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575fb51c6b0534-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-48F592BB547136A53419118581105564.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-48F592BB547136A53419118581105564.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 200 OK
Date: Thu, 25 Mar 2021 10:14:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d486be381d9b1946cf262e70cec994f151616667283; expires=Sat, 24-Apr-21 10:14:43 GMT; path=/; domain=.braxsilcxfxc.net.br; HttpOnly; SameSite=Lax; Secure
last-modified: Wed, 24 Mar 2021 22:51:24 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
cf-request-id: 090a7a29b600000534c6940000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=0Dk6MCwkokHBMj67aZbwVUyAndD4WEF%2F%2BMs8R4CoSZMPVwvi1bt%2Ft2jcU%2B3VjOaBQ%2BEz8AeLuZ1U7UUa3A%2FunE7mj5WbI7jmMpHCmaeCMOYM8SOW"}],"max_age":604800,"group":"cf-nel"}
NEL: {"max_age":604800,"report_to":"cf-nel"}
Server: cloudflare
CF-RAY: 63575fbc5af30534-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
301
http://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6D5C338B20CC9521BA9E3E8597574C38.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6D5C338B20CC9521BA9E3E8597574C38.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
Connection: Keep-Alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Mar 2021 10:14:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Mar 2021 11:14:40 GMT
Location: https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-6D5C338B20CC9521BA9E3E8597574C38.html
cf-request-id: 090a7a1bfb000005a29a8b2000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=OdZZoksDZmdIc4IX3fbO3ymgBZr6Xrxlc66xZ4etgfHDCK3ZyDuux%2FrQdN%2BcFhr5gqQKoJumIcbnhr7xRK97rAnCUkVxvWjDNpC0FYogPYHZYE0a"}],"max_age":604800,"group":"cf-nel"}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 63575fa6598d05a2-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
301
http://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-FA495F0F022FADED7A010F28C72F8A57.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-FA495F0F022FADED7A010F28C72F8A57.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Mar 2021 10:14:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Mar 2021 11:14:42 GMT
Location: https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-FA495F0F022FADED7A010F28C72F8A57.html
cf-request-id: 090a7a24a0000005a2a8003000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=4KHLnUaxTy3v%2BPe46TsJ%2BUfRx8uSIsJ6UhnZNXlU3ASwP1MUikOAp0JmU%2B6OVMRiUro1eM1ywOoWSYBFDFd%2F6OokfZvnyrLoMhd7ifZJGKH1zzih"}],"max_age":604800,"group":"cf-nel"}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 63575fb43b7605a2-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
301
http://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-48F592BB547136A53419118581105564.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-48F592BB547136A53419118581105564.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: braxsilcxfxc.net.br
HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Mar 2021 10:14:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 25 Mar 2021 11:14:43 GMT
Location: https://braxsilcxfxc.net.br/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-48F592BB547136A53419118581105564.html
cf-request-id: 090a7a2928000005a27998a000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=a1JayKmCvE%2Fs0n2wX1A5zvOryR6dHGUHeTiRfJ4Ay1baUKcKVYrnRSSBJPrgWjudOXbUSoEPMkO0XXXBtLVOo2Pjcp4G8RwQegkcOmAGwoaJO1xk"}],"max_age":604800,"group":"cf-nel"}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 63575fbb786a05a2-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Flow | SID | Signature | Category |
---|---|---|---|
TCP 192.168.56.101:49201 -> 104.21.56.235:443 | 906200056 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
Flow | Issuer | Subject | Fingerprint |
---|---|---|---|
TLSv1 192.168.56.101:49201 104.21.56.235:443 |
C=US, O=Cloudflare, Inc., CN=Cloudflare Inc ECC CA-3 | C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com | 7c:73:22:c7:d1:20:c3:53:b5:f5:08:fc:2f:c9:56:50:cd:a3:91:2d |
Snort Alerts
No Snort Alerts