Report Overview

  1. Visited public
    2024-05-21 04:11:26
    Tags
  2. URL

    gregdsgfh.dns04.com/auth.php?screen/na/authorize?response_type=code&client_id=zc001&state=&scope=openid&_gl=11li7pmi_gamtc0njiwmte2ni4xnjy5mzy5mdg0_ga_bkkp87cx6tmty3nze1ndeync4xljaumty3nze1ndeyni41oc4wlja

  3. Finishing URL

    gregdsgfh.dns04.com/news?q=Invalid%20url!%20/auth.php?screen/na/authorize?response_type=code&client_id=zc001&state=&scope=openid&_gl=11li7pmi_gamtc0njiwmte2ni4xnjy5mzy5mdg0_ga_bkkp87cx6tmty3nze1ndeync4xljaumty3nze1ndeyni41oc4wlja

  4. IP / ASN
    198.55.123.185

    #8100 ASN-QUADRANET-GLOBAL

    Title
    Fox News World RSS Feed - essejmxyc.octagram.eu.com
  5. Suspicious - DynDNS domain

Detections
urlquery
4
Network Intrusion Detection
6
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
feeds.foxnews.com1603821995-06-212012-05-24 21:32:562024-04-18 14:10:59
moxie.foxnews.com8681451995-06-212022-02-24 13:15:582024-05-14 16:41:26
gregdsgfh.dns04.comunknown2001-03-202023-06-15 03:24:132023-06-15 20:36:34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 198.55.123.185
mediumClient IP 198.55.123.185
mediumClient IP 198.55.123.185
mediumClient IP 198.55.123.185
mediumClient IP 198.55.123.185
mediumClient IP 198.55.123.185

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (1)

HTTP Transactions (5)

URLIPResponseSize
GET gregdsgfh.dns04.com/auth.php?screen/na/authorize?response_type=code&client_id=zc001&state=&scope=openid&_gl=11li7pmi_gamtc0njiwmte2ni4xnjy5mzy5mdg0_ga_bkkp87cx6tmty3nze1ndeync4xljaumty3nze1ndeyni41oc4wlja
198.55.123.185308 Permanent Redirect258 B
GET gregdsgfh.dns04.com/news?q=Invalid%20url!%20/auth.php?screen/na/authorize?response_type=code&client_id=zc001&state=&scope=openid&_gl=11li7pmi_gamtc0njiwmte2ni4xnjy5mzy5mdg0_ga_bkkp87cx6tmty3nze1ndeync4xljaumty3nze1ndeyni41oc4wlja
198.55.123.185 3.2 kB
GET feeds.foxnews.com/foxnews/world
151.101.194.132301 Moved Permanently0 B
GET moxie.foxnews.com/google-publisher/world.xml
23.52.23.45200 OK46 kB
GET gregdsgfh.dns04.com/favicon.ico
198.55.123.185404 Not Found0 B