Report - www.obfuscatednarwhal.lat/Qg-itog~8WSg_681f0f65/C/

Report Overview

Visited public
2023-09-23 18:42:35
Tags
URL
www.obfuscatednarwhal.lat/Qg-itog~8WSg_681f0f65/C/
Finishing URL
about:privatebrowsing
IP / ASN
142.93.255.59
#14061 DIGITALOCEAN-ASN
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.obfuscatednarwhal.lat	unknown	2023-09-22	2023-09-23 20:30:17	2023-09-23 20:30:17	422 B	923 B	142.93.255.59
www.innovaiqs.com	unknown	2023-04-19	2023-04-20 09:47:36	2023-09-18 22:17:18	1.3 kB	912 B	34.102.195.19
ocsp.starfieldtech.com	6616	2003-03-06	2012-06-22 20:08:50	2023-09-23 05:15:20	672 B	5.3 kB	192.124.249.22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-23 18:42:19	high	142.93.255.59	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	www.obfuscatednarwhal.lat/Qg-itog~8WSg_681f0f65/C/	142.93.255.59	302 Found	384 B
URL User Request GET HTTP/1.1 www.obfuscatednarwhal.lat/Qg-itog~8WSg_681f0f65/C/ IP 142.93.255.59:80 ASN #14061 DIGITALOCEAN-ASN File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 384 B (384 bytes) Hash 8ba1b2c7c449164d5707306eb95c848d 9a812fa677ecbb483f3454a0c64597f53e57d3ed dbb46ecee378969a4cfd179db0a3023940a7edf31ac077870770f11583867d4f HTTP Headers `GET /Qg-itog~8WSg_681f0f65/C/ HTTP/1.1 Host: www.obfuscatednarwhal.lat User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Date: Sat, 23 Sep 2023 18:42:19 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0 Location: https://www.innovaiqs.com/integration/optizmo/?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J Content-Length: 384 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1

	www.innovaiqs.com/integration/optizmo/?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J	34.102.195.19	301 Moved Permanently	209 B
URL User Request GET HTTP/2 www.innovaiqs.com/integration/optizmo/?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J IP 34.102.195.19:443 ASN #15169 GOOGLE Certificate IssuerStarfield Technologies, Inc. Subject4682track.com Fingerprint57:87:C4:B7:77:E5:07:1F:BD:DF:42:21:08:C7:13:2C:F4:21:D4:BE ValidityTue, 29 Aug 2023 12:21:24 GMT - Sun, 29 Sep 2024 12:21:24 GMT File type HTML document, ASCII text Size 209 B (209 bytes) Hash facc01c99fbb39e41e4534ac9b5835b3 a25e3cb35514498fc9ec5db55eeab642ff9be5aa 7cf2c89f619dca1a2519a7f1f5e68a747b41e68f65ed2562205af28f82027e96 HTTP Headers GET /integration/optizmo/?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J HTTP/1.1 Host: www.innovaiqs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 301 Moved Permanently server: nginx date: Sat, 23 Sep 2023 18:42:20 GMT content-type: text/html; charset=utf-8 content-length: 209 location: /integration/optizmo?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	ocsp.starfieldtech.com/	192.124.249.22		2.1 kB
URL ocsp.starfieldtech.com/ IP 192.124.249.22:0 ASN #30148 SUCURI-SEC File type data Size 2.1 kB (2148 bytes) Hash fe0c43ab249894a211edf25f6f1d5cce fa98ecfef9ac1b518ee8d8764e2c03c5e763f6e5 78e8b22010d0905deaa5f5dfcdbd1e942f1b538437b2e5b1183d907681c9e79a HTTP Headers `POST / HTTP/1.1 Host: ocsp.starfieldtech.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 75 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Sat, 23 Sep 2023 18:42:20 GMT Content-Type: application/ocsp-response Content-Length: 2148 Connection: keep-alive X-Sucuri-ID: 19022 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Sat, 23 Sep 2023 13:25:10 GMT Expires: Sun, 24 Sep 2023 13:25:10 GMT ETag: "fa98ecfef9ac1b518ee8d8764e2c03c5e763f6e5" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"`

	www.innovaiqs.com/integration/optizmo?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J	34.102.195.19	204 No Content	0 B
URL User Request GET HTTP/2 www.innovaiqs.com/integration/optizmo?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J IP 34.102.195.19:443 ASN #15169 GOOGLE Certificate IssuerStarfield Technologies, Inc. Subject4682track.com Fingerprint57:87:C4:B7:77:E5:07:1F:BD:DF:42:21:08:C7:13:2C:F4:21:D4:BE ValidityTue, 29 Aug 2023 12:21:24 GMT - Sun, 29 Sep 2024 12:21:24 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /integration/optizmo?_redir=CiQAgbOb1UKD1GIwYG6Y2c-Az_N2TZuz9oyLpH50sMHgGlvPjssSdQAmTxWfAwq1s600XB0-D9EDT5HQlLpahaUf9Kdv80RgK0-uMqhtL8ZL1umUpAhBGaKSEj-VxiyR_pIZA1Wcw6oPpAgY4J HTTP/1.1 Host: www.innovaiqs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 204 No Content server: nginx date: Sat, 23 Sep 2023 18:42:20 GMT accept-ch: Sec-Ch-Ua-Platform-Version vary: Origin x-eflow-request-id: 358c8996-e31d-4182-9a75-d88f4068132c via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	ocsp.starfieldtech.com/	192.124.249.41		2.1 kB
URL ocsp.starfieldtech.com/ IP 192.124.249.41:0 ASN #30148 SUCURI-SEC File type data Size 2.1 kB (2148 bytes) Hash fe0c43ab249894a211edf25f6f1d5cce fa98ecfef9ac1b518ee8d8764e2c03c5e763f6e5 78e8b22010d0905deaa5f5dfcdbd1e942f1b538437b2e5b1183d907681c9e79a HTTP Headers `POST / HTTP/1.1 Host: ocsp.starfieldtech.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 75 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Sat, 23 Sep 2023 18:42:21 GMT Content-Type: application/ocsp-response Content-Length: 2148 Connection: keep-alive X-Sucuri-ID: 19041 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Sat, 23 Sep 2023 13:25:10 GMT Expires: Sun, 24 Sep 2023 13:25:10 GMT ETag: "fa98ecfef9ac1b518ee8d8764e2c03c5e763f6e5" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"`