Report - go.techtalksummits.com/l/984411/2024-05-08/2w1fpd/984411/171=

Report Overview

Submitted URL
go.techtalksummits.com/l/984411/2024-05-08/2w1fpd/984411/171=
IP
34.237.219.119
ASN
#14618 AMAZON-AES
Submitted
2024-05-10 05:47:00
Access
public
Website Title
KB4_080524.png (PNG Image, 600 × 200 pixels)
Final URL
storage.pardot.com/984411/1715201871fhFwUAwp/KB4_080524.png
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
go.techtalksummits.com	unknown	2015-11-02	2022-05-24	2024-03-07	515 B	735 B	3.92.120.28
storage.pardot.com	10646	2007-01-30	2012-09-05	2024-05-09	984 B	53 kB	54.230.111.34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 05:46:34	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-10 05:46:35	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-10 05:46:36	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-10 05:46:48	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-10 05:46:54	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-10 05:46:56	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-10 05:46:56	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	go.techtalksummits.com/l/984411/2024-05-08/2w1fpd/984411/171=	3.92.120.28	302 Found	143 B
URL User Request GET HTTP/1.1 go.techtalksummits.com/l/984411/2024-05-08/2w1fpd/984411/171= IP 3.92.120.28:443 ASN #14618 AMAZON-AES Certificate IssuerLet's Encrypt Subjectgo.techtalksummits.com Fingerprint7E:94:79:A7:2F:47:D0:BA:A6:87:BD:46:2A:D8:8C:5E:E8:7B:A7:E9 ValidityThu, 14 Mar 2024 07:03:11 GMT - Wed, 12 Jun 2024 07:03:10 GMT File type HTML document, ASCII text, with no line terminators Size 143 B (143 bytes) Hash e11b494913a1dc772001231ce56f3bb2 7ac217077fd9182dfc6816d26a5e92fc06f57c62 f060533af3669a4dec3878f06c8b8d07aec79ce6a310e6f65fa4352953b9d09d HTTP Headers `GET /l/984411/2024-05-08/2w1fpd/984411/171= HTTP/1.1 Host: go.techtalksummits.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Date: Fri, 10 May 2024 05:46:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 143 Connection: keep-alive set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 location: https://storage.pardot.com/984411/1715201871fhFwUAwp/KB4_080524.png p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml" x-robots-tag: none cache-control: max-age=600 expires: Fri, 10 May 2024 05:56:35 GMT vary: Accept-Encoding,User-Agent content-encoding: gzip X-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5

	storage.pardot.com/984411/1715201871fhFwUAwp/KB4_080524.png	54.230.111.34	200 OK	52 kB
URL User Request GET HTTP/2 storage.pardot.com/984411/1715201871fhFwUAwp/KB4_080524.png IP 54.230.111.34:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectstorage.pardot.com Fingerprint8F:76:7F:CB:C4:3B:27:66:06:17:DB:F8:B7:14:AE:CA:90:1E:68:04 ValidityMon, 25 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT File type PNG image data, 600 x 200, 8-bit/color RGBA, non-interlaced Size 52 kB (51918 bytes) Hash 861e89b9b72587b60cfff520d5ca9e30 4c6b69d921598a6f8de1516dfafcefee73c48370 57fdaa682f259c40ade70c11ed543de65781d4799a938a11231fb3e275090b09 HTTP Headers `GET /984411/1715201871fhFwUAwp/KB4_080524.png HTTP/1.1 Host: storage.pardot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: image/png; charset=binary content-length: 51918 date: Thu, 09 May 2024 17:30:17 GMT x-amz-replication-status: COMPLETED last-modified: Wed, 08 May 2024 20:57:52 GMT etag: "861e89b9b72587b60cfff520d5ca9e30" x-amz-server-side-encryption: AES256 x-robots-tag: none x-amz-version-id: WcHklXStQG06mehHPiigEdSKt9FWTNHv accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: AedDFX7uUi8VYzyPv6wXnSZeF68IfhIw3CGzG0yMjZoyEXFvxPkvVA== age: 44179 X-Firefox-Spdy: h2

	storage.pardot.com/favicon.ico	54.230.111.34	403 Forbidden	243 B
URL GET HTTP/2 storage.pardot.com/favicon.ico IP 54.230.111.34:443 ASN #16509 AMAZON-02 Requested by https://storage.pardot.com/984411/1715201871fhFwUAwp/KB4_080524.png Certificate IssuerAmazon Subjectstorage.pardot.com Fingerprint8F:76:7F:CB:C4:3B:27:66:06:17:DB:F8:B7:14:AE:CA:90:1E:68:04 ValidityMon, 25 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT File type XML document, ASCII text, with no line terminators Size 243 B (243 bytes) Hash 8721920c6812270e122196ca15c8354c 9b692f609e9408e4aa7d5151eef1b4a370124507 c43e067477ca5cf64688e9e809cdb515c9156f8a069bf6ddaadad44c8c396d06 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: storage.pardot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://storage.pardot.com/984411/1715201871fhFwUAwp/KB4_080524.png Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-type: application/xml server: AmazonS3 date: Fri, 10 May 2024 05:46:35 GMT x-cache: Error from cloudfront via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: bsSj9UaZEVhEWD6BAnqfF1TBAAW6LUx924lP5iZurRCq3gLp1EaPcA== X-Firefox-Spdy: h2`