covidkibris.com Threat Intelligence and Information

Jan 17, 2022 domainpage

Dig Results

  • Got answer:
  • -»HEADER«- opcode: QUERY, status: NOERROR, id: 63244
  • flags: qr rd ra QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
  • OPT PSEUDOSECTION:
  • EDNS: version: 0, flags: udp: 1232
  • QUESTION SECTION:
  • covidkibris.com. IN A
  • ANSWER SECTION:
  • covidkibris.com. 14367 IN A 109.232.216.139
  • Query time: 64 msec
  • SERVER: 192.168.1.153(192.168.1.1)
  • WHEN: Wed Jan 19 10:11:59 UTC 2022
  • MSG SIZE rcvd: 60

DNS Records

  • SOA cpns1.turhost.com 37.230.110.110
  • NS cpns2.turhost.com 37.230.111.111

Whois Data

  • Domain Name: COVIDKIBRIS.COM
  • Registry Domain ID: 2636745757_DOMAIN_COM-VRSN
  • Registrar URL: http://www.turhost.com/domain
  • Updated Date: 2021-08-27T01:04:05Z
  • Creation Date: 2021-08-27T01:04:05Z
  • Registry Expiry Date: 2022-08-27T01:04:05Z
  • Registrar: Aerotek Bilisim Sanayi ve Ticaret AS
  • Registrar IANA ID: 1534
  • Registrar Abuse Contact Email: registrar_abuse@aerotek.com.tr
  • Registrar Abuse Contact Phone: +902623245555
  • Name Server: CPNS1.TURHOST.COM
  • Name Server: CPNS2.TURHOST.COM
  • DNSSEC: unsigned
  • Domain Name: COVIDKIBRIS.COM
  • Registry Domain ID: 2636745757_DOMAIN_COM-VRSN
  • Registrar URL:
  • Updated Date: 2021-10-26T02:16:34Z
  • Creation Date: 2021-08-27T01:04:05Z
  • Registrar Registration Expiration Date: 2022-08-27T01:04:05Z
  • Registrar: Aerotek Bilisim Sanayi ve Ticaret AS
  • Registrar IANA ID: 1534
  • Registry Registrant ID: Not Available From Registry
  • Registrant Name: Domain Admin
  • Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)
  • Registrant Street: 10 Corporate Drive
  • Registrant City: Burlington
  • Registrant State/Province: MA
  • Registrant Postal Code: 01803
  • Registrant Country: US
  • Registrant Phone: +1.8022274003
  • Registrant Phone Ext:
  • Registrant Fax:
  • Registrant Fax Ext:
  • Registrant Email: contact@privacyprotect.org
  • Registry Admin ID: Not Available From Registry
  • Admin Name: Domain Admin
  • Admin Organization: Privacy Protect, LLC (PrivacyProtect.org)
  • Admin Street: 10 Corporate Drive
  • Admin City: Burlington
  • Admin State/Province: MA
  • Admin Postal Code: 01803
  • Admin Country: US
  • Admin Phone: +1.8022274003
  • Admin Phone Ext:
  • Admin Fax:
  • Admin Fax Ext:
  • Admin Email: contact@privacyprotect.org
  • Registry Tech ID: Not Available From Registry
  • Tech Name: Domain Admin
  • Tech Organization: Privacy Protect, LLC (PrivacyProtect.org)
  • Tech Street: 10 Corporate Drive
  • Tech City: Burlington
  • Tech State/Province: MA
  • Tech Postal Code: 01803
  • Tech Country: US
  • Tech Phone: +1.8022274003
  • Tech Phone Ext:
  • Tech Fax:
  • Tech Fax Ext:
  • Tech Email: contact@privacyprotect.org
  • Name Server: cpns1.turhost.com
  • Name Server: cpns2.turhost.com
  • DNSSEC: Unsigned
  • Registrar Abuse Contact Email: logicbox@aerotek.com.tr
  • Registrar Abuse Contact Phone: +90.2623245555
  • Registration Service Provided By: AEROTEK
  • http://privacyprotect.org/contact. We have a stringent abuse policy and any

SSL Certificate Information

  • Certificate:
  • Data:
  • Version: 3 (0x2)
  • Serial Number:
  • 03:9c:a5:b2:4c:82:ca:9e:23:4a:b3:53:8d:c5:d9:1d:88:5c
  • Signature Algorithm: sha256WithRSAEncryption
  • Issuer: C = US, O = Let’s Encrypt, CN = R3
  • Validity
  • Not Before: Dec 1 01:09:40 2021 GMT
  • Not After : Mar 1 01:09:39 2022 GMT
  • Subject: CN = www.market.citatif.com
  • Subject Public Key Info:
  • Public Key Algorithm: rsaEncryption
  • RSA Public-Key: (2048 bit)
  • Modulus:
  • 00:c9:3b:8f:35:96:0f:43:08:bf:ff:0a:44:45:af:
  • fe:d4:ef:2b:27:09:09:5c:cd:6c:60:5e:c1:ff:91:
  • 15:53:da:d2:36:68:7c:24:86:a2:85:85:4c:05:4d:
  • 38:61:8b:fd:88:40:88:78:7d:e7:f4:92:e7:7b:60:
  • 18:0d:8d:bc:52:0d:88:5f:98:82:80:80:1b:dd:34:
  • d0:f1:7a:51:53:9f:0d:fb:26:7c:e4:c8:80:59:2f:
  • 61:51:4e:9a:24:b4:3c:07:bc:3e:b2:40:80:c3:27:
  • d9:1c:6f:83:bd:9f:ae:b2:5b:6d:ae:02:8d:70:dc:
  • b5:71:35:cd:c5:97:c7:7d:9e:86:79:12:c3:df:32:
  • c6:84:69:0b:15:d5:04:1f:3a:a3:da:d8:75:1d:b0:
  • 07:33:93:a4:55:91:bc:54:fb:69:43:a2:42:9c:77:
  • 20:0c:86:25:f9:c4:1f:48:aa:cb:be:4f:15:78:4f:
  • 9b:62:26:29:37:bc:bb:8b:db:db:05:e7:fb:e0:82:
  • 41:49:60:c6:db:13:70:48:11:0a:03:b5:93:3a:a6:
  • ed:91:65:f4:64:45:c2:64:0c:6c:b0:b9:ea:69:57:
  • 3b:e4:d3:1e:a8:1e:b4:6d:49:5c:af:79:33:5a:ac:
  • 56:40:de:73:58:69:6d:83:3d:71:8a:f8:c9:72:9e:
  • 8b:cf
  • Exponent: 65537 (0x10001)
  • X509v3 extensions:
  • X509v3 Key Usage: critical
  • Digital Signature, Key Encipherment
  • X509v3 Extended Key Usage:
  • TLS Web Server Authentication, TLS Web Client Authentication
  • X509v3 Basic Constraints: critical
  • CA:FALSE
  • X509v3 Subject Key Identifier:
  • 7E:3B:AC:38:D6:13:66:BF:A4:A1:2B:AA:DE:59:0B:C9:F4:2A:C1:44
  • X509v3 Authority Key Identifier:
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
  • Authority Information Access:
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
  • X509v3 Subject Alternative Name:
  • DNS:.citatif.com, DNS:.covidkibris.com, DNS:*.keatup.com, DNS:citatif.com, DNS:covidkibris.com, DNS:keatup.com, DNS:keatup.com.citatif.com, DNS:www.citatif.citatif.com, DNS:www.covidkibris.citatif.com, DNS:www.keatup.com.citatif.com, DNS:www.library.citatif.com, DNS:www.market.citatif.com
  • X509v3 Certificate Policies:
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.44947.1.1.1
  • CPS: http://cps.letsencrypt.org
  • CT Precertificate SCTs:
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
  • 11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
  • Timestamp : Dec 1 02:09:40.498 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:92:AC:5C:A3:B1:6D:96:EF:94:8C:B9:
  • A0:90:E4:B1:CF:71:45:AC:40:43:B1:F1:F7:EE:0E:E5:
  • 93:41:E4:40:15:02:20:4F:CF:25:B6:5E:8D:D4:25:7C:
  • 21:5B:1D:DA:5B:24:5F:6C:BE:0B:87:39:15:C4:B9:94:
  • AB:34:9C:EB:7F:6D:AD
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
  • 4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
  • Timestamp : Dec 1 02:09:40.939 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:70:14:FA:B4:F7:43:2C:C6:F5:A2:C2:29:
  • 93:3C:D2:FC:8F:D9:54:F6:E2:C8:7A:1D:E4:A7:87:C5:
  • 44:0F:12:2F:02:20:78:F5:44:DE:EE:C2:55:52:67:CD:
  • 43:1F:A4:1D:D4:07:C3:B3:DA:0D:BA:85:1A:66:C6:EA:
  • B5:7A:AC:65:B7:79
  • Signature Algorithm: sha256WithRSAEncryption
  • 4a:2c:bb:5f:eb:ce:41:93:9e:ba:65:a9:ee:47:d1:e2:55:cd:
  • a0:9a:f9:d6:3b:a2:e3:4c:bc:c1:7c:89:fd:13:ea:fa:55:e8:
  • 1d:87:b9:77:24:4b:58:f6:04:a7:7f:e7:c4:9a:08:f8:14:6d:
  • 16:ba:e1:e9:9f:0d:cf:1a:72:c8:9b:f2:74:4f:2d:59:93:73:
  • bb:fe:76:77:0f:b1:08:2b:0b:cc:55:f8:e6:2c:9d:0f:9a:99:
  • c5:be:93:38:78:f8:5e:99:e2:f0:83:38:d2:98:d4:c3:98:d1:
  • de:69:a7:a2:3a:d5:0b:a2:49:78:7b:9a:4a:4f:86:78:5d:f4:
  • 55:a6:b3:1b:3f:9b:e2:f3:14:0d:d4:d5:f6:03:c1:90:df:bb:
  • 57:05:cb:d6:dc:96:6a:4e:b6:45:79:30:32:da:aa:11:a1:3b:
  • 55:6b:9e:50:19:86:1e:cc:fe:bf:b9:89:fe:9d:1c:1a:1c:6c:
  • 09:61:5e:3e:71:77:4b:0b:22:e8:75:c5:b0:a1:d9:4f:4c:cd:
  • 04:62:4f:22:bb:38:c3:f4:ba:b7:8a:0a:2f:13:18:13:d0:95:
  • 3f:fd:e8:91:15:5f:24:32:42:1e:41:d3:cf:ff:5c:9a:68:80:
  • c3:17:c3:2e:e0:ea:1d:27:8d:91:d2:4b:ff:0c:ac:19:29:91:
  • 85:9e:48:3a

Sitemap

Technologies

*** Virustotal ***

*** WayBackMachine ***

Share on: