Report - link.queens.org

Report Overview

Submitted URL
link.queens.org
IP
64.75.214.28
ASN
#395618 QUEENS-HEALTH-SYSTEM
Submitted
2024-05-08 21:29:39
Access
public
Website Title
Unsupported Web Browser
Final URL
link.queens.org/QueensLink/common/epic_login.asp
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.netsolssl.com	8381	2005-01-31	2012-05-20	2024-05-07	330 B	1.1 kB	172.64.149.23
link.queens.org	unknown	unknown	No data	No data	3.5 kB	9.6 kB	64.75.214.28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	unknown	93 B	2024-05-08	2024-05-08
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2024-05-08 23:29:45 Last Seen2024-05-08 23:29:45 Times Seen1 Hash af1ee3bced52fc9acbac1eee0e892fb6 320c2a2108bd6a0fa4d794730d266a10df4b464c f210b5df9aa1a3aafd2eb56e3c83f36be2eca8a4920f9315ad5ca48390b57f8d Loading...

HTTP Transactions (6)

	URL	IP	Response	Size
	ocsp.netsolssl.com/	172.64.149.23		599 B
URL ocsp.netsolssl.com/ IP 172.64.149.23:0 ASN #13335 CLOUDFLARENET File type data Size 599 B (599 bytes) Hash c9b249a9434e9de63cd844e3440b5fc7 00acfb475557b8af0d6a8d42f30e6e5a76f6279e 28541be133c7897f8d2a7a6421592627a1483f54a4d201926155ff5e2808dd60 HTTP Headers `POST / HTTP/1.1 Host: ocsp.netsolssl.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 08 May 2024 21:29:14 GMT Content-Type: application/ocsp-response Content-Length: 599 Connection: keep-alive Last-Modified: Mon, 06 May 2024 09:58:02 GMT Expires: Mon, 13 May 2024 09:58:01 GMT Etag: "00acfb475557b8af0d6a8d42f30e6e5a76f6279e" Cache-Control: max-age=389926,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 880c8b46ff29712b-OSL`

	link.queens.org/	64.75.214.28	302 Redirect	158 B
URL User Request GET HTTP/1.1 link.queens.org/ IP 64.75.214.28:443 ASN #395618 QUEENS-HEALTH-SYSTEM Certificate IssuerNetwork Solutions L.L.C. Subjectlink.queens.org FingerprintED:19:9A:EE:2E:69:20:5E:7C:C3:33:16:8C:87:24:5D:12:EF:2C:01 ValidityTue, 26 Sep 2023 00:00:00 GMT - Sat, 26 Oct 2024 23:59:59 GMT File type HTML document, ASCII text Size 158 B (158 bytes) Hash e9e3b44ffeb6edeca7c32311c05cd788 6e115c8af48f7bd45e7e27968f3fb334a150b83f f2803d3378fc76ae1ca24b5881aaf9eff14596c10d78287f77147fc5e2c3bc08 HTTP Headers `GET / HTTP/1.1 Host: link.queens.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Redirect Content-Type: text/html; charset=UTF-8 Location: https://link.queens.org/QueensLink/ Date: Wed, 08 May 2024 21:29:14 GMT Content-Length: 158 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload Set-Cookie: LBPersistenceQueensLink=rd1o00000000000000000000ffff0a7319e0o443; path=/; Httponly; Secure; SameSite=none TS01d61230=01dd4efaa23066308d89f0d9945abcc849d90d7c728708d39b6cb619940831bde4f45372fb6ea1d757020fe42c4bb5739d5ede85ac509cf6dd2fcbd37f47c19952273f88f5; Path=/; Domain=.link.queens.org

	link.queens.org/QueensLink/	64.75.214.28	302 Object moved	154 B
URL User Request GET HTTP/1.1 link.queens.org/QueensLink/ IP 64.75.214.28:443 ASN #395618 QUEENS-HEALTH-SYSTEM Certificate IssuerNetwork Solutions L.L.C. Subjectlink.queens.org FingerprintED:19:9A:EE:2E:69:20:5E:7C:C3:33:16:8C:87:24:5D:12:EF:2C:01 ValidityTue, 26 Sep 2023 00:00:00 GMT - Sat, 26 Oct 2024 23:59:59 GMT File type HTML document, ASCII text Size 154 B (154 bytes) Hash dc59d0b8e6c0b3e200d0bb39d9d9e097 de4407392f318a838f2ec6b0743a4343fa7fd265 ba6983afb4c966ce141ea06bd444d1fecae65a1deeafd1cdb50876008c8cc3b1 HTTP Headers GET /QueensLink/ HTTP/1.1 Host: link.queens.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: LBPersistenceQueensLink=rd1o00000000000000000000ffff0a7319e0o443; TS01d61230=01dd4efaa23066308d89f0d9945abcc849d90d7c728708d39b6cb619940831bde4f45372fb6ea1d757020fe42c4bb5739d5ede85ac509cf6dd2fcbd37f47c19952273f88f5 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 302 Object moved Cache-Control: private Content-Type: text/html Location: /QueensLink/common/epic_login.asp Date: Wed, 08 May 2024 21:29:14 GMT Content-Length: 154 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload Set-Cookie: ASPSESSIONIDCEBTABAR=APMLDPNANIDDJFCMFCEJBBEJ; secure; path=/ TS01d61230=01dd4efaa2dfa8705d654929bb0f90fce0900628338708d39b6cb619940831bde4f45372fb6ea1d757020fe42c4bb5739d5ede85acddb005533a79dbb3d6015882fd98e77619d038faf36d8445befeabe58f27fa3c; Path=/; Domain=.link.queens.org

	link.queens.org/QueensLink/common/epic_login.asp	64.75.214.28	200 OK	5.9 kB
URL User Request GET HTTP/1.1 link.queens.org/QueensLink/common/epic_login.asp IP 64.75.214.28:443 ASN #395618 QUEENS-HEALTH-SYSTEM Certificate IssuerNetwork Solutions L.L.C. Subjectlink.queens.org FingerprintED:19:9A:EE:2E:69:20:5E:7C:C3:33:16:8C:87:24:5D:12:EF:2C:01 ValidityTue, 26 Sep 2023 00:00:00 GMT - Sat, 26 Oct 2024 23:59:59 GMT File type HTML document, ASCII text, with very long lines (369), with CRLF line terminators Size 5.9 kB (5866 bytes) Hash 01654e872cbc0014e7f4908010532e1d 86995bb8681d244ae46f239fb126a14bfb072ebb 657399e4c1bc42c191baee9939aa87a3f18b355a7e41f615e48386cc38766633 HTTP Headers GET /QueensLink/common/epic_login.asp HTTP/1.1 Host: link.queens.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: LBPersistenceQueensLink=rd1o00000000000000000000ffff0a7319e0o443; TS01d61230=01dd4efaa2dfa8705d654929bb0f90fce0900628338708d39b6cb619940831bde4f45372fb6ea1d757020fe42c4bb5739d5ede85acddb005533a79dbb3d6015882fd98e77619d038faf36d8445befeabe58f27fa3c; ASPSESSIONIDCEBTABAR=APMLDPNANIDDJFCMFCEJBBEJ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Cache-Control: no-store, no-cache Content-Type: text/html Expires: Wed, 01 Jan 1997 10:00:00 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=16070400; includeSubDomains; preload Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' epic.com *.epic.com data: blob:; Date: Wed, 08 May 2024 21:29:14 GMT Content-Length: 5866`

	link.queens.org/favicon.ico	64.75.214.28	302 Redirect	169 B
URL GET HTTP/1.1 link.queens.org/favicon.ico IP 64.75.214.28:443 ASN #395618 QUEENS-HEALTH-SYSTEM Requested by https://link.queens.org/QueensLink/common/epic_login.asp Certificate IssuerNetwork Solutions L.L.C. Subjectlink.queens.org FingerprintED:19:9A:EE:2E:69:20:5E:7C:C3:33:16:8C:87:24:5D:12:EF:2C:01 ValidityTue, 26 Sep 2023 00:00:00 GMT - Sat, 26 Oct 2024 23:59:59 GMT File type HTML document, ASCII text Size 169 B (169 bytes) Hash 519748a9747f015e0b47ed0aa1c6746f 17be2dda91f1a89ab8b821da414647d6188880bc ee1a4918b4d7f3d0e0ad0cb14ce7adb0cab0270ea27127e1e44e6489c628b244 HTTP Headers GET /favicon.ico HTTP/1.1 Host: link.queens.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://link.queens.org/QueensLink/common/epic_login.asp Cookie: LBPersistenceQueensLink=rd1o00000000000000000000ffff0a7319e0o443; TS01d61230=01dd4efaa2dfa8705d654929bb0f90fce0900628338708d39b6cb619940831bde4f45372fb6ea1d757020fe42c4bb5739d5ede85acddb005533a79dbb3d6015882fd98e77619d038faf36d8445befeabe58f27fa3c; ASPSESSIONIDCEBTABAR=APMLDPNANIDDJFCMFCEJBBEJ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 Redirect Content-Type: text/html; charset=UTF-8 Location: https://link.queens.org/QueensLink/favicon.ico Date: Wed, 08 May 2024 21:29:15 GMT Content-Length: 169 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload`

	link.queens.org/QueensLink/favicon.ico	64.75.214.28	404 Not Found	1.2 kB
URL GET HTTP/1.1 link.queens.org/QueensLink/favicon.ico IP 64.75.214.28:443 ASN #395618 QUEENS-HEALTH-SYSTEM Requested by https://link.queens.org/QueensLink/common/epic_login.asp Certificate IssuerNetwork Solutions L.L.C. Subjectlink.queens.org FingerprintED:19:9A:EE:2E:69:20:5E:7C:C3:33:16:8C:87:24:5D:12:EF:2C:01 ValidityTue, 26 Sep 2023 00:00:00 GMT - Sat, 26 Oct 2024 23:59:59 GMT File type HTML document, ASCII text, with CRLF line terminators Size 1.2 kB (1245 bytes) Hash 5343c1a8b203c162a3bf3870d9f50fd4 04b5b886c20d88b57eea6d8ff882624a4ac1e51d dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f HTTP Headers GET /QueensLink/favicon.ico HTTP/1.1 Host: link.queens.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://link.queens.org/QueensLink/common/epic_login.asp DNT: 1 Connection: keep-alive Cookie: LBPersistenceQueensLink=rd1o00000000000000000000ffff0a7319e0o443; TS01d61230=01dd4efaa2dfa8705d654929bb0f90fce0900628338708d39b6cb619940831bde4f45372fb6ea1d757020fe42c4bb5739d5ede85acddb005533a79dbb3d6015882fd98e77619d038faf36d8445befeabe58f27fa3c; ASPSESSIONIDCEBTABAR=APMLDPNANIDDJFCMFCEJBBEJ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Content-Type: text/html Date: Wed, 08 May 2024 21:29:15 GMT Content-Length: 1245 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload`