Report - cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk

Report Overview

Visited public
2024-07-19 16:50:59
Tags
URL
cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip
Finishing URL
cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip
IP / ASN
213.13.26.154
#3243 Servicos De Comunicacoes E Multimedia S.A.
Title
MEO Cloud

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-18 18:12:17	1.6 kB	4.4 kB	23.36.76.226
cld.pt	962908	2012-09-17	2017-02-01 13:20:16	2023-03-28 08:02:33	2.2 kB	8.3 kB	213.13.26.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-07-19 16:50:33	medium	Client IP	213.13.26.153	ET INFO Observed Public Cloud Domain (cld .pt in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9242083e8854242dd63e09c963159384 d334a9ec53be29ce2d3bbc333205b970b84d63fc 927ae834d942951b3ea3f7199aca87d589dee465706a095bcf7131de85d37e1c HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "927AE834D942951B3EA3F7199ACA87D589DEE465706A095BCF7131DE85D37E1C" Last-Modified: Thu, 18 Jul 2024 07:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4271 Expires: Fri, 19 Jul 2024 18:01:44 GMT Date: Fri, 19 Jul 2024 16:50:33 GMT Connection: keep-alive`

	cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip	213.13.26.153	301 Moved Permanently	2.3 kB
URL User Request GET HTTP/1.1 cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip IP 213.13.26.153:80 ASN #3243 Servicos De Comunicacoes E Multimedia S.A. File type HTML document, ASCII text, with very long lines (762) Size 2.3 kB (2332 bytes) Hash 4ccb3a6a33fff93e1ed11004f4e9f852 bf2cf43ff5c714028b0a2a779f76635a10bf1b73 8451e10037fde9b326aeb594a210d0d08253e2474a2ab18b13db2be8bfe2037f HTTP Headers GET /dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip HTTP/1.1 Host: cld.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 NOT FOUND Server: nginx Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Content-Language: en Vary: Accept-Language, Cookie Date: Fri, 19 Jul 2024 16:50:33 GMT X-Frame-Options: SAMEORIGIN Content-Encoding: gzip`

	cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip	213.13.26.152	301 Moved Permanently	178 B
URL User Request GET HTTP/1.1 cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip IP 213.13.26.152:80 ASN #3243 Servicos De Comunicacoes E Multimedia S.A. File type HTML document, ASCII text, with CRLF line terminators Size 178 B (178 bytes) Hash cd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d HTTP Headers `GET /dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip HTTP/1.1 Host: cld.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 19 Jul 2024 16:50:34 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip`

	cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip	213.13.26.153	301 Moved Permanently	2.3 kB
URL User Request GET HTTP/1.1 cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip IP 213.13.26.153:80 ASN #3243 Servicos De Comunicacoes E Multimedia S.A. File type HTML document, ASCII text, with very long lines (762) Size 2.3 kB (2332 bytes) Hash 4ccb3a6a33fff93e1ed11004f4e9f852 bf2cf43ff5c714028b0a2a779f76635a10bf1b73 8451e10037fde9b326aeb594a210d0d08253e2474a2ab18b13db2be8bfe2037f HTTP Headers GET /dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip HTTP/1.1 Host: cld.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 NOT FOUND Server: nginx Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Content-Language: en Vary: Accept-Language, Cookie Date: Fri, 19 Jul 2024 16:50:34 GMT X-Frame-Options: SAMEORIGIN Content-Encoding: gzip`

	cld.pt/favicon.ico	213.13.26.153	404 NOT FOUND	2.3 kB
URL GET HTTP/1.1 cld.pt/favicon.ico IP 213.13.26.153:443 ASN #3243 Servicos De Comunicacoes E Multimedia S.A. Requested by https://cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip Certificate IssuerDigiCert Inc Subject.meocloud.pt Fingerprint9B:1C:87:94:5F:38:46:1F:A4:E3:7B:4B:76:32:1B:9A:20:48:F9:92 ValidityThu, 02 Nov 2023 00:00:00 GMT - Fri, 01 Nov 2024 23:59:59 GMT File type HTML document, ASCII text, with very long lines (762) Size 2.3 kB (2332 bytes) Hash 4ccb3a6a33fff93e1ed11004f4e9f852 bf2cf43ff5c714028b0a2a779f76635a10bf1b73 8451e10037fde9b326aeb594a210d0d08253e2474a2ab18b13db2be8bfe2037f HTTP Headers GET /favicon.ico HTTP/1.1 Host: cld.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://cld.pt/dl/download/31864dbd-ae17-49be-9eba-4bfdae5323dc/archivo.endesafactur-a4-simplex-tllk_b2303294942222422244454.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 NOT FOUND Server: nginx Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Content-Language: en Vary: Accept-Language, Cookie Date: Fri, 19 Jul 2024 16:50:34 GMT X-Frame-Options: SAMEORIGIN Content-Encoding: gzip`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7863 Expires: Fri, 19 Jul 2024 19:01:37 GMT Date: Fri, 19 Jul 2024 16:50:34 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7863 Expires: Fri, 19 Jul 2024 19:01:37 GMT Date: Fri, 19 Jul 2024 16:50:34 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7863 Expires: Fri, 19 Jul 2024 19:01:37 GMT Date: Fri, 19 Jul 2024 16:50:34 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7863 Expires: Fri, 19 Jul 2024 19:01:37 GMT Date: Fri, 19 Jul 2024 16:50:34 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers