Report - shareandsaveportal.top/?qrc=info@slurpmail.net

Report Overview

Visited public
2025-05-01 13:12:54
Tags
URL
shareandsaveportal.top/?qrc=info@slurpmail.net
Finishing URL
example.com/
IP / ASN
193.8.215.9
#60781 LeaseWeb Netherlands B.V.
Title
Example Domain

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
href.li	36866	unknown	2012-05-22	2025-04-29	496 B	688 B	192.0.78.26
example.com	9944	1995-08-14	2013-07-30	2025-04-25	909 B	3.4 kB	23.215.0.138
shareandsaveportal.top	unknown	2025-04-30	2025-05-01	2025-05-01	514 B	597 B	193.8.215.9

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-01 13:12:22	low	Client IP	192.0.78.26	ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	href.li/?https://example.com	192.0.78.26	200 OK	416 B
URL User Request GET href.li/?https://example.com IP 192.0.78.26:443 ASN #2635 AUTOMATTIC Certificate IssuerLet's Encrypt Subjecttls.automattic.com Fingerprint5A:25:96:FC:C6:76:AA:51:5E:AD:A0:06:A7:6F:3A:46:64:01:9C:BA ValidityTue, 11 Mar 2025 20:39:19 GMT - Mon, 09 Jun 2025 20:39:18 GMT File type HTML document, ASCII text Size 416 B (416 bytes) Hash 0eb5f7cd507daba712ca57436c093e81 d931290189362d2b4c4f1529b1eda6d84ac4303d 7ddfe06ab75fcac1ee9065216103f4915d979ed468d989a1aa0fa6b8a2e827f6 HTTP Headers `GET /?https://example.com HTTP/1.1 Host: href.li User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Thu, 01 May 2025 13:12:22 GMT content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000 vary: Accept-Encoding content-encoding: br x-ac: 4.arn _dca MISS alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

	example.com/	23.215.0.138	200 OK	1.3 kB
URL User Request GET example.com/ IP 23.215.0.138:443 ASN #20940 Akamai International B.V. Certificate IssuerDigiCert Inc Subject.example.com Fingerprint31:0D:B7:AF:4B:2B:C9:04:0C:83:44:70:1A:CA:08:D0:C6:93:81:E3 ValidityWed, 15 Jan 2025 00:00:00 GMT - Thu, 15 Jan 2026 23:59:59 GMT File type HTML document, ASCII text Size 1.3 kB (1256 bytes) Hash 84238dfc8092e5d9c0dac8ef93371a07 4a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047 ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9 HTTP Headers `GET / HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK accept-ranges: bytes content-type: text/html etag: "84238dfc8092e5d9c0dac8ef93371a07:1736799080.121134" last-modified: Mon, 13 Jan 2025 20:11:20 GMT vary: Accept-Encoding content-encoding: gzip cache-control: max-age=1632 date: Thu, 01 May 2025 13:12:23 GMT alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" content-length: 648 X-Firefox-Spdy: h2`

	example.com/favicon.ico	23.215.0.138	404 Not Found	1.3 kB
URL GET example.com/favicon.ico IP 23.215.0.138:443 ASN #20940 Akamai International B.V. Requested by https://example.com/ Certificate IssuerDigiCert Inc Subject.example.com Fingerprint31:0D:B7:AF:4B:2B:C9:04:0C:83:44:70:1A:CA:08:D0:C6:93:81:E3 ValidityWed, 15 Jan 2025 00:00:00 GMT - Thu, 15 Jan 2026 23:59:59 GMT File type HTML document, ASCII text Size 1.3 kB (1256 bytes) Hash 84238dfc8092e5d9c0dac8ef93371a07 4a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047 ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://example.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/3 404 Not Found accept-ranges: bytes content-type: text/html etag: "84238dfc8092e5d9c0dac8ef93371a07:1736799080.121134" last-modified: Mon, 13 Jan 2025 20:11:20 GMT server: AkamaiNetStorage content-length: 1256 expires: Thu, 01 May 2025 13:12:23 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Thu, 01 May 2025 13:12:23 GMT alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" quic-version: 0x00000001`

	shareandsaveportal.top/?qrc=info@slurpmail.net	193.8.215.9	302 Found	416 B
URL User Request GET shareandsaveportal.top/?qrc=info@slurpmail.net IP 193.8.215.9:443 ASN #60781 LeaseWeb Netherlands B.V. Certificate IssuerLet's Encrypt Subjectshareandsaveportal.top Fingerprint22:33:CF:4B:D1:23:A7:C2:DF:E4:48:52:F6:C4:6D:AF:BB:F6:0C:EF ValidityWed, 30 Apr 2025 09:22:31 GMT - Tue, 29 Jul 2025 09:22:30 GMT File type Size 416 B (416 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /?qrc=info@slurpmail.net HTTP/1.1 Host: shareandsaveportal.top User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found location: https://href.li?https://example.com Date: Thu, 01 May 2025 13:12:22 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked`