Report - urldefense.com/v3

Report Overview

Visited public
2023-10-16 12:45:01
Tags
URL
urldefense.com/v3
Finishing URL
urldefense.com/v3
IP / ASN
52.71.28.102
#14618 AMAZON-AES
Title
Proofpoint Targeted Attack Protection

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.sectigo.com	487	2018-08-16	2019-11-29 12:50:24	2023-10-15 22:59:10	330 B	964 B	104.18.14.101
urldefense.com	61470	2017-09-08	2015-04-27 18:20:15	2023-10-15 17:06:08	2.8 kB	33 kB	52.6.56.188

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

	URL	IP	Response	Size
	ocsp.sectigo.com/	104.18.14.101		472 B
URL ocsp.sectigo.com/ IP 104.18.14.101:0 ASN #13335 CLOUDFLARENET File type data Size 472 B (472 bytes) Hash 5b7850e7d86d18af07bc288c14be7c00 590333c674f6541239c795d4bc5a5b742fe4c402 4f64b4ef8ab071d4f6e29b6d03472855db0903a05f9b9fd27c265ec914032305 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Mon, 16 Oct 2023 12:44:44 GMT Content-Type: application/ocsp-response Content-Length: 472 Connection: keep-alive Last-Modified: Sun, 15 Oct 2023 10:12:42 GMT Expires: Sun, 22 Oct 2023 10:12:41 GMT Etag: "590333c674f6541239c795d4bc5a5b742fe4c402" Cache-Control: max-age=508766,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8170651a0cea56c6-OSL`

	urldefense.com/v3	52.6.56.188	404 Not Found	2.0 kB
URL User Request GET HTTP/2 urldefense.com/v3 IP 52.6.56.188:443 ASN #14618 AMAZON-AES Certificate IssuerSectigo Limited Subjectwww.urldefense.com FingerprintE5:20:37:B4:E3:E2:83:BE:A8:99:C5:4D:2A:2F:E0:F1:C8:F1:F0:F2 ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (312) Size 2.0 kB (2008 bytes) Hash e8041a80331c38e7c1accb76fe3096d6 9b26f455451639a3f1b33f033fea34e06420b5d2 c81c0fd7123bb57a229ddf3ef6633db5da601ee5bb367008eb4d45d117e4fc1e HTTP Headers `GET /v3 HTTP/1.1 Host: urldefense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found date: Mon, 16 Oct 2023 12:44:44 GMT content-length: 2008 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	urldefense.com/v3	52.6.56.188	404 Not Found	2.0 kB
URL User Request GET HTTP/2 urldefense.com/v3 IP 52.6.56.188:443 ASN #14618 AMAZON-AES Certificate IssuerSectigo Limited Subjectwww.urldefense.com FingerprintE5:20:37:B4:E3:E2:83:BE:A8:99:C5:4D:2A:2F:E0:F1:C8:F1:F0:F2 ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (312) Size 2.0 kB (2008 bytes) Hash e8041a80331c38e7c1accb76fe3096d6 9b26f455451639a3f1b33f033fea34e06420b5d2 c81c0fd7123bb57a229ddf3ef6633db5da601ee5bb367008eb4d45d117e4fc1e HTTP Headers `GET /v3 HTTP/1.1 Host: urldefense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found date: Mon, 16 Oct 2023 12:44:44 GMT content-length: 2008 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	urldefense.com/jasset/stylesheets/common.css	52.6.56.188	200 OK	848 B
URL GET HTTP/2 urldefense.com/jasset/stylesheets/common.css IP 52.6.56.188:443 ASN #14618 AMAZON-AES Requested by https://urldefense.com/v3 Certificate IssuerSectigo Limited Subjectwww.urldefense.com FingerprintE5:20:37:B4:E3:E2:83:BE:A8:99:C5:4D:2A:2F:E0:F1:C8:F1:F0:F2 ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT File type ASCII text Size 848 B (848 bytes) Hash 2fec9ca2be9c015e692928eb54429ca1 ead795b071563a70fb00600551ddf1c7b2e2d07d 080218e94b8fbe62ab1cba4465cd549a03737e69c25f4fc375da5ad9dc58dc35 HTTP Headers `GET /jasset/stylesheets/common.css HTTP/1.1 Host: urldefense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://urldefense.com/v3 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Mon, 16 Oct 2023 12:44:45 GMT content-type: text/css content-length: 848 vary: Accept-Encoding, User-Agent content-encoding: gzip x-robots-tag: noindex, nofollow x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN content-security-policy: default-src 'self'; X-Firefox-Spdy: h2`

	urldefense.com/jasset/images/proofpoint_logo.jpeg	52.6.56.188	200 OK	21 kB
URL GET HTTP/2 urldefense.com/jasset/images/proofpoint_logo.jpeg IP 52.6.56.188:443 ASN #14618 AMAZON-AES Requested by https://urldefense.com/v3 Certificate IssuerSectigo Limited Subjectwww.urldefense.com FingerprintE5:20:37:B4:E3:E2:83:BE:A8:99:C5:4D:2A:2F:E0:F1:C8:F1:F0:F2 ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Macintosh), datetime=2015:10:01 15:42:26], baseline, precision 8, 187x64, components 1\012- data Size 21 kB (20820 bytes) Hash 2354ae0c3b30ed5a5a6ce13853946cde 62a4edf895f221d051b6b7509490f64721a15ccd c3161b65da3da019547fbc4072e5e7da13c1fabce048107019fefc72de02e21a HTTP Headers `GET /jasset/images/proofpoint_logo.jpeg HTTP/1.1 Host: urldefense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://urldefense.com/v3 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Mon, 16 Oct 2023 12:44:45 GMT content-type: image/jpeg content-length: 20820 x-robots-tag: noindex, nofollow x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN content-security-policy: default-src 'self'; X-Firefox-Spdy: h2`

	urldefense.com/jasset/images/warning.png	52.6.56.188	200 OK	4.8 kB
URL GET HTTP/2 urldefense.com/jasset/images/warning.png IP 52.6.56.188:443 ASN #14618 AMAZON-AES Requested by https://urldefense.com/v3 Certificate IssuerSectigo Limited Subjectwww.urldefense.com FingerprintE5:20:37:B4:E3:E2:83:BE:A8:99:C5:4D:2A:2F:E0:F1:C8:F1:F0:F2 ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data Size 4.8 kB (4803 bytes) Hash b69b8937c432c824243f1ff03fe4a169 cff98abe81fe41b5a2faf269cb0f6859b616ed51 8a552613c9b52a23149a7cefe7c15c321e62162aed70e9a736e6c96bbb07bc5f HTTP Headers `GET /jasset/images/warning.png HTTP/1.1 Host: urldefense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://urldefense.com/v3 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Mon, 16 Oct 2023 12:44:45 GMT content-type: image/png content-length: 4803 x-robots-tag: noindex, nofollow x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN content-security-policy: default-src 'self'; X-Firefox-Spdy: h2`

	urldefense.com/jasset/images/favicon.ico	52.6.56.188	200 OK	894 B
URL GET HTTP/2 urldefense.com/jasset/images/favicon.ico IP 52.6.56.188:443 ASN #14618 AMAZON-AES Requested by https://urldefense.com/v3 Certificate IssuerSectigo Limited Subjectwww.urldefense.com FingerprintE5:20:37:B4:E3:E2:83:BE:A8:99:C5:4D:2A:2F:E0:F1:C8:F1:F0:F2 ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel\012- data Size 894 B (894 bytes) Hash f5c7f1aa9aeb0dfa465c2fc4b66d8837 f219efd04fca7aec4395d2910861329c164c9e22 111f2d2e3de93de285f0aad6b78fcfb36bdb6d0eef4ce75491fe586e631e0c4c HTTP Headers `GET /jasset/images/favicon.ico HTTP/1.1 Host: urldefense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://urldefense.com/v3 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Mon, 16 Oct 2023 12:44:45 GMT content-type: image/x-icon content-length: 894 x-robots-tag: noindex, nofollow x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN content-security-policy: default-src 'self'; X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers