Report - for.fbmediafor.com/?utm_medium=a19b6b471c659ac6f6a4acb9b6e462445c4e11bd&utm_campaign=camp_friendlybunny_fbmedia_bls&1=C%C3%A1lculo+financeiro+das+tesourarias++Bancos+e+empresas+(Portuguese+Edition).pdf&2=c11157&3=p33&cid=4qDkzvsS3pRiSrvL4ne35E&np=1

Report Overview

Visitedpublic

2025-08-02 14:29:00

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.superbmatch.beauty	unknown	2025-05-07	2025-07-01	2025-07-27	626 B	0 B	0.0.0.0
for.fbmediafor.com	unknown	2023-09-21	2023-11-16	2025-07-27	716 B	1.7 kB	108.178.23.115

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Detection System	Indicator	Verdict	Alert
Quad9 DNS	www.superbmatch.beauty	malicious	Sinkholed

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	for.fbmediafor.com/?utm_term=7533995055271378986&tid=57696e3332	ScriptElement	1.2 kB	2025-08-02	2025-08-02
URL for.fbmediafor.com/?utm_term=7533995055271378986&tid=57696e3332 IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded true Resource Info First Seen 2025-08-02 Last Seen 2025-08-02 Times Seen 1 Size 1.2 kB (1174 bytes) MD5 18d3d4a27abf2e75e6fb6536f3c6c2e1 SHA1 ad50270ba6a577592afb0509e857fb531df7d142 SHA256 d776fa3e29f802669f22cfba9764e08b5963396a053fb3c9f0fb089a2a12b056 Format Code Loading...

HTTP Transactions (2)

URL IP Response Size

GET www.superbmatch.beauty/?sl=5956664-13656&pub_click_id=M7533995055271378986&site=21505-63aba9af-125932c5&pub_sub_id=21505

0.0.0.0

0 B

URL User Request GET HTTP

www.superbmatch.beauty/?sl=5956664-13656&pub_click_id=M7533995055271378986&site=21505-63aba9af-125932c5&pub_sub_id=21505

IP / ASN

0.0.0.0

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-07

Times Seen5706937

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?sl=5956664-13656&pub_click_id=M7533995055271378986&site=21505-63aba9af-125932c5&pub_sub_id=21505 HTTP/1.1
Host: www.superbmatch.beauty
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://for.fbmediafor.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET for.fbmediafor.com/?utm_medium=a19b6b471c659ac6f6a4acb9b6e462445c4e11bd&utm_campaign=camp_friendlybunny_fbmedia_bls&1=C%C3%A1lculo+financeiro+das+tesourarias++Bancos+e+empresas+(Portuguese+Edition).pdf&2=c11157&3=p33&cid=4qDkzvsS3pRiSrvL4ne35E&np=1

108.178.23.115

200 OK

1.2 kB

URL User Request GET HTTPS

IP / ASN

108.178.23.115

#32475 SINGLEHOP-LLC

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (1164), with no line terminators

First Seen2025-08-02

Last Seen2025-08-02

Times Seen1

Size1.2 kB (1164 bytes)

MD5a093768ee5cceb75d7fcd55b3ee3859e

SHA18674525527db7b45ef1be7b8c6a68ae870abf25a

SHA256617d96bb64e956485b79df8cf116fa77569b00ebd9b4218bc5f5cfd518aa4df6

Certificate Info

IssuerLet's Encrypt

Subjectfor.fbmediafor.com

Fingerprint3C:D0:04:1C:F8:D2:FE:A8:7C:24:5D:2E:4C:D4:29:26:C3:E5:EA:D9

ValiditySat, 28 Jun 2025 03:15:04 GMT - Fri, 26 Sep 2025 03:15:03 GMT

Technology Fingerprints

Nginx (Web servers, Reverse proxies)

HTTP Headers

GET /?utm_medium=a19b6b471c659ac6f6a4acb9b6e462445c4e11bd&utm_campaign=camp_friendlybunny_fbmedia_bls&1=C%C3%A1lculo+financeiro+das+tesourarias++Bancos+e+empresas+(Portuguese+Edition).pdf&2=c11157&3=p33&cid=4qDkzvsS3pRiSrvL4ne35E&np=1 HTTP/1.1
Host: for.fbmediafor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 02 Aug 2025 14:28:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
refresh: 3; url=https://for.fbmediafor.com/?utm_term=7533995055271378986&tid=4d544e
accept-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version
strict-transport-security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443"; ma=604800; persist=1
content-encoding: gzip
X-Firefox-Spdy: h2