Report - msstoragessystem.sbs/aadcdn.msftauth.net/~

Report Overview

Visitedpublic

2025-06-06 15:22:42

Tags

Submit Tags

URL

msstoragessystem.sbs/aadcdn.msftauth.net/~

Finishing URL

example.com/

IP / ASN

The Netherlands

193.5.65.190

#60781 LeaseWeb Netherlands B.V.

Title

Example Domain

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
example.com	9944	1995-08-14	2013-07-30	2025-06-05	909 B	3.4 kB	23.215.0.138
msstoragessystem.sbs	unknown	2025-06-03	2025-06-05	2025-06-05	510 B	597 B	193.5.65.190
href.li	36866	unknown	2012-05-22	2025-06-05	496 B	752 B	192.0.78.26

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-06-06 15:22:21	low	Client IP	192.0.78.26	ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	GET example.com/favicon.ico	23.215.0.138	404 Not Found	1.3 kB
URL example.com/favicon.ico IP / ASN 23.215.0.138 #20940 Akamai International B.V. Requested byhttps://example.com/ Resource Info File typeHTML document, ASCII text First Seen2023-04-05 Last Seen2025-08-02 Times Seen3193 Size1.3 kB (1256 bytes) MD584238dfc8092e5d9c0dac8ef93371a07 SHA14a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047 SHA256ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9 Certificate Info IssuerDigiCert Inc Subject.example.com Fingerprint31:0D:B7:AF:4B:2B:C9:04:0C:83:44:70:1A:CA:08:D0:C6:93:81:E3 ValidityWed, 15 Jan 2025 00:00:00 GMT - Thu, 15 Jan 2026 23:59:59 GMT HTTP Headers `GET /favicon.ico HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://example.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/3 404 Not Found accept-ranges: bytes content-type: text/html etag: "84238dfc8092e5d9c0dac8ef93371a07:1736799080.121134" last-modified: Mon, 13 Jan 2025 20:11:20 GMT server: AkamaiNetStorage content-length: 1256 expires: Fri, 06 Jun 2025 15:22:22 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Fri, 06 Jun 2025 15:22:22 GMT alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" quic-version: 0x00000001`

	GET msstoragessystem.sbs/aadcdn.msftauth.net/~	193.5.65.190	302 Found	416 B
URL msstoragessystem.sbs/aadcdn.msftauth.net/~ IP / ASN 193.5.65.190 #60781 LeaseWeb Netherlands B.V. Requested byN/A Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-03 Times Seen5619475 Size416 B (416 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectmsstoragessystem.sbs FingerprintB5:F2:42:4D:36:6A:D0:2E:D8:2C:24:87:80:15:76:C9:BD:67:27:8D ValidityTue, 03 Jun 2025 15:58:01 GMT - Mon, 01 Sep 2025 15:58:00 GMT HTTP Headers `GET /aadcdn.msftauth.net/~ HTTP/1.1 Host: msstoragessystem.sbs User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found location: https://href.li?https://example.com Date: Fri, 06 Jun 2025 15:22:21 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked`

	GET href.li/?https://example.com	192.0.78.26	200 OK	416 B
URL href.li/?https://example.com IP / ASN 192.0.78.26 #2635 AUTOMATTIC Requested byN/A Resource Info File typeHTML document, ASCII text First Seen2023-05-10 Last Seen2025-07-31 Times Seen732 Size416 B (416 bytes) MD50eb5f7cd507daba712ca57436c093e81 SHA1d931290189362d2b4c4f1529b1eda6d84ac4303d SHA2567ddfe06ab75fcac1ee9065216103f4915d979ed468d989a1aa0fa6b8a2e827f6 Certificate Info IssuerLet's Encrypt Subjecttls.automattic.com Fingerprint45:2E:9F:35:E7:19:5C:78:CA:2A:BD:08:C0:E8:92:D4:31:AB:DA:C9 ValidityMon, 12 May 2025 19:41:16 GMT - Sun, 10 Aug 2025 19:41:15 GMT HTTP Headers `GET /?https://example.com HTTP/1.1 Host: href.li User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 06 Jun 2025 15:22:21 GMT content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000 vary: Accept-Encoding content-encoding: br x-ac: 4.arn _dca MISS server-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=0.109 alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

	GET example.com/	23.215.0.138	200 OK	1.3 kB
URL example.com/ IP / ASN 23.215.0.138 #20940 Akamai International B.V. Requested byN/A Resource Info File typeHTML document, ASCII text First Seen2023-04-05 Last Seen2025-08-02 Times Seen3193 Size1.3 kB (1256 bytes) MD584238dfc8092e5d9c0dac8ef93371a07 SHA14a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047 SHA256ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9 Certificate Info IssuerDigiCert Inc Subject.example.com Fingerprint31:0D:B7:AF:4B:2B:C9:04:0C:83:44:70:1A:CA:08:D0:C6:93:81:E3 ValidityWed, 15 Jan 2025 00:00:00 GMT - Thu, 15 Jan 2026 23:59:59 GMT HTTP Headers `GET / HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK accept-ranges: bytes content-type: text/html etag: "84238dfc8092e5d9c0dac8ef93371a07:1736799080.121134" last-modified: Mon, 13 Jan 2025 20:11:20 GMT vary: Accept-Encoding content-encoding: gzip cache-control: max-age=2080 date: Fri, 06 Jun 2025 15:22:22 GMT alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" content-length: 648 X-Firefox-Spdy: h2`