Report - us-api.mimecast.com.kb4.io/XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221

Report Overview

Visited public
2023-10-30 13:51:58
Tags
URL
us-api.mimecast.com.kb4.io/XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221
Finishing URL
about:privatebrowsing
IP / ASN
3.222.151.207
#14618 AMAZON-AES
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
us-api.mimecast.com.kb4.io	166786	2013-12-04	2015-09-23 22:48:08	2023-10-26 20:29:15	835 B	678 B	3.225.166.69

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-30 13:51:42	low	Client IP	Internal IP	ET POLICY Observed DNS Query to KnowBe4 Simulated Phish Domain (kb4 .io)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	us-api.mimecast.com.kb4.io/XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221	3.225.166.69	200 OK	43 B
URL User Request GET HTTP/2 us-api.mimecast.com.kb4.io/XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221 IP 3.225.166.69:443 ASN #14618 AMAZON-AES Certificate IssuerAmazon Subjectsecured-login.net Fingerprint32:52:A1:88:27:D8:BD:09:7C:18:BA:B9:C9:27:F8:17:09:E9:DA:73 ValidityThu, 27 Jul 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers GET /XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221 HTTP/1.1 Host: us-api.mimecast.com.kb4.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Mon, 30 Oct 2023 13:51:41 GMT content-type: image/gif content-length: 43 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: no-referrer-when-downgrade content-disposition: attachment content-transfer-encoding: binary cache-control: private etag: W/"a065920df8cc4016d67c3a464be90099" content-security-policy: x-request-id: 96fd587b-8252-4aeb-b922-3eb87bac3c72 x-runtime: 0.046231 strict-transport-security: max-age=63113904; includeSubDomains; preload X-Firefox-Spdy: h2

us-api.mimecast.com.kb4.io/XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221

3.225.166.69

200 OK

43 B

URL User Request GET HTTP/2
us-api.mimecast.com.kb4.io/XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221
IP
3.225.166.69:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectsecured-login.net
Fingerprint32:52:A1:88:27:D8:BD:09:7C:18:BA:B9:C9:27:F8:17:09:E9:DA:73
ValidityThu, 27 Jul 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7

HTTP Headers

GET /XY2pSNVJUaDBVV0pVTW5BdmJIWlZlR3AxWWtJM1dqaFBXazFzZWpKTmRGVk5lVFkzUldKS1oyNXJSRkJ0VlVVMlQyb3lhVWsxU2tKMlRsZFRVV2hLYkdkWWFrTktlbEV3Vkd0RFkwWkNTM1l3YW5Bd2FFWkhjbXRhSzJ4YWNrSTFMMjVFYzJGVmEyVnNabEV3YVVKa1ZHVlJVekpIYm10TFFXbFZVVkJIYnlzdExVcElhakJXTkhoNlZEaDFlSFU0V25jeGFYZERiM2M5UFE9PS0tODM1MzI4ZDc4MzI0OGJhODljNjgzMmJkNzllOGVmMTEyOWFkZTc1Yg==?cid=1774554221 HTTP/1.1
Host: us-api.mimecast.com.kb4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 30 Oct 2023 13:51:41 GMT
content-type: image/gif
content-length: 43
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer-when-downgrade
content-disposition: attachment
content-transfer-encoding: binary
cache-control: private
etag: W/"a065920df8cc4016d67c3a464be90099"
content-security-policy: 
x-request-id: 96fd587b-8252-4aeb-b922-3eb87bac3c72
x-runtime: 0.046231
strict-transport-security: max-age=63113904; includeSubDomains; preload
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers