Report - testitsslicensestore.s3.eu-west-1.amazonaws.com/PTMessage.txt

Report Overview

Visited public
2023-09-24 21:29:41
Tags
URL
testitsslicensestore.s3.eu-west-1.amazonaws.com/PTMessage.txt
Finishing URL
about:privatebrowsing
IP / ASN
52.218.89.48
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m01.amazontrust.com	unknown	2007-05-11	2022-10-12 22:43:53	2023-09-24 00:31:38	340 B	942 B	143.204.48.16
testitsslicensestore.s3.eu-west-1.amazonaws.com	unknown	unknown	No data	No data	517 B	410 B	52.218.97.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-24 21:29:28	high	35.205.61.67	Client IP	ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	ocsp.r2m01.amazontrust.com/	143.204.48.16		471 B
URL ocsp.r2m01.amazontrust.com/ IP 143.204.48.16:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash e567be967384772fce21e716cd8ac37d 5729ea92becb42b67db9e8e909d912baf2a327b5 c48f0876bc945bddff701d3fb97f066753b2356d88eed67d873cdc006bc4b375 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=7200 Date: Sun, 24 Sep 2023 21:29:24 GMT Last-Modified: Sun, 24 Sep 2023 19:42:44 GMT Server: ECAcc (ska/F7A5) X-Cache: Miss from cloudfront Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: Y3C3ult11Czz1L5oJZT6bVJP8hL-643SbMJGwk1HpyXSozVhHvUEkQ== Age: 6400`

	testitsslicensestore.s3.eu-west-1.amazonaws.com/PTMessage.txt	52.218.97.3	200 OK	0 B
URL User Request GET HTTP/1.1 testitsslicensestore.s3.eu-west-1.amazonaws.com/PTMessage.txt IP 52.218.97.3:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subject.s3-eu-west-1.amazonaws.com Fingerprint70:78:AF:E8:24:A8:0B:8D:2D:33:0C:F5:85:CB:FD:CB:DC:CE:F8:21 ValidityMon, 10 Jul 2023 00:00:00 GMT - Fri, 31 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /PTMessage.txt HTTP/1.1 Host: testitsslicensestore.s3.eu-west-1.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK x-amz-id-2: 3fa1y53dh2311MXmNCimpfyiYX0PHRnHv9F66l3GmUcfaAirW1hzzaqtTgPqjaicl8Gks6PYqyI= x-amz-request-id: JHBX0CX43AR8MSAW Date: Sun, 24 Sep 2023 21:29:25 GMT Last-Modified: Thu, 29 Sep 2022 15:30:45 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" x-amz-version-id: eMdtn3poPGMIdQqc.yrXtRgkeoOp3bW1 Accept-Ranges: bytes Content-Type: application/txt Server: AmazonS3 Content-Length: 0`