Report - appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim

Report Overview

Submitted URL
appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
IP
82.156.94.17
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited
Submitted
2024-04-16 04:20:32
Access
public
Website Title
Sign in to your account
Final URL
appservies02342-1321331581.cos.ap-beijing.myqcloud.com/206c8efe-9b98-4cdb-8b8c-3855c2cf9642
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
appservies02342-1321331581.cos.ap-beijing.myqcloud.com	unknown	2013-04-24	2024-02-18	2024-03-04	539 B	199 kB	82.156.94.45
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-15	492 B	6.9 kB	104.17.24.14
aadcdn.msftauth.net	1455	2018-10-25	2018-11-19	2024-04-15	4.2 kB	27 kB	152.199.23.37
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-15	374 B	31 kB	151.101.2.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-15	medium	appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim	Outlook

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.1.1.min.js	87 kB	2023-03-07	2024-04-29
Pretty URL code.jquery.com/jquery-3.1.1.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-29 18:55:28 Times Seen264562 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

	appservies02342-1321331581.cos.ap-beijing.myqcloud.com/206c8efe-9b98-4cdb-8b8c-3855c2cf9642	7.2 kB	2024-02-19	2024-04-16
Pretty URL appservies02342-1321331581.cos.ap-beijing.myqcloud.com/206c8efe-9b98-4cdb-8b8c-3855c2cf9642 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-19 00:12:47 Last Seen2024-04-16 06:20:33 Times Seen3 Hash d2aa5286c31863170ece7819a61346b9 57253da07f8de3120b56f3f37a153fcd3e918155 2a360c5858d90f73d79f1be98fdab338ce1672b0565ca7cf53cbca9324126823 Loading...

	appservies02342-1321331581.cos.ap-beijing.myqcloud.com/206c8efe-9b98-4cdb-8b8c-3855c2cf9642	1.6 kB	2024-02-19	2024-04-16
Pretty URL appservies02342-1321331581.cos.ap-beijing.myqcloud.com/206c8efe-9b98-4cdb-8b8c-3855c2cf9642 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-19 00:12:47 Last Seen2024-04-16 06:20:33 Times Seen3 Hash abe1452cc4b76508d48118d2fa33df4d 237d59e46e15f56640dc940dce2acd93cf3de483 bc4184c9ae715289bfc620ef8dabedfd8d9f402c6f6d8cf7ca6a46132d3626b0 Loading...

HTTP Transactions (12)

URL IP Response Size

appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim

82.156.94.45

198 kB

URL
appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
IP
82.156.94.45:0
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited

File type
HTML document, ASCII text, with very long lines (65309)
Size
198 kB (198160 bytes)
Hash
4be46fd4ce0bed4652abe1e193517c69
75a6a6ea8fc6d707736a45a3bd2f35b968039364
14844d77c34d346e06ef0ca0166b2bd9f29e9cb900f174b446415aedf1cc3013

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /cummon/update-agreements/claim HTTP/1.1
Host: appservies02342-1321331581.cos.ap-beijing.myqcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 198160
Connection: keep-alive
Accept-Ranges: bytes
Date: Tue, 16 Apr 2024 04:20:07 GMT
ETag: "4be46fd4ce0bed4652abe1e193517c69"
Last-Modified: Fri, 16 Feb 2024 18:13:36 GMT
Server: tencent-cos
x-cos-hash-crc64ecma: 15440875190973069685
x-cos-request-id: NjYxZGZjNzdfYmQ0ZTQ0MGJfN2JmNF8xNDg1ZDU=
x-cos-server-side-encryption: AES256

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css

104.17.24.14

200 OK

5.9 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (372)
Size
5.9 kB (5884 bytes)
Hash
c495654869785bc3df60216616814ad1
0140952c64e3f2b74ef64e050f2fe86eab6624c8
36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:20:09 GMT
content-type: text/css; charset=utf-8
content-length: 5884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 280678
expires: Sun, 06 Apr 2025 04:20:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vr4HiLDeR16K6c7BtDUlXL4C7HdQhzf9XwxgowsOAxiBy3toEEphiunsLB4F4qYGpTj0Wnj3dWZL6zb%2BXOi3fVGN0JkPcoRMHIZaWx7qM2lB20e0TAzM333xzYDr6q0qDIn7KUPb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875161960f3756bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/picker_more_7568a43cf440757c55d2e7f51557ae1f.svg

152.199.23.37

200 OK

257 B

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/picker_more_7568a43cf440757c55d2e7f51557ae1f.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
257 B (257 bytes)
Hash
7568a43cf440757c55d2e7f51557ae1f
55c22ca98b5cdced134f6e24205c288845312a2d
b7fcd37eaafe3f08647ed072d5289eadfff6c660a26cdef31532b3fcfb4a0bb2

HTTP Headers

GET /ests/2.1/content/images/picker_more_7568a43cf440757c55d2e7f51557ae1f.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 574173
cache-control: public, max-age=604800
content-md5: K28EA/F25txr6jQahXym+g==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D641015563B044
last-modified: Fri, 02 Nov 2018 20:25:30 GMT
server: ECAcc (ska/F739)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: bad97dec-e01e-0001-127c-8a7124000000
x-ms-version: 2009-09-19
content-length: 257
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg

152.199.23.37

200 OK

1.4 kB

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.4 kB (1435 bytes)
Hash
ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

HTTP Headers

GET /ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 53268
cache-control: public, max-age=604800
content-md5: nzaLxFgP7ZB3dfMcaybWzw==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D64101507E84BD
last-modified: Fri, 02 Nov 2018 20:25:22 GMT
server: ECAcc (ska/F695)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 5e230d99-601e-0071-5d39-8f8324000000
x-ms-version: 2009-09-19
content-length: 1435
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg

152.199.23.37

200 OK

263 B

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
263 B (263 bytes)
Hash
2b5d393db04a5e6e1f739cb266e65b4c
6a435df5cac3d58ccad655fe022ccf3dd4b9b721
16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6

HTTP Headers

GET /ests/2.1/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 599061
cache-control: public, max-age=604800
content-md5: /a3y/mpA+HRaVAiPACrsog==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D641014C1EFD89
last-modified: Fri, 02 Nov 2018 20:25:14 GMT
server: ECAcc (ska/F6A7)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 4dfcfc47-501e-003e-1042-8ad92a000000
x-ms-version: 2009-09-19
content-length: 263
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg

152.199.23.37

200 OK

276 B

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
276 B (276 bytes)
Hash
a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58

HTTP Headers

GET /ests/2.1/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 80612
cache-control: public, max-age=604800
content-md5: TjUQkZ0p0Y7rbj6LJofS9Q==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D6410144A4CB90
last-modified: Fri, 02 Nov 2018 20:25:02 GMT
server: ECAcc (ska/F68B)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e8458877-401e-004f-05f9-8e0028000000
x-ms-version: 2009-09-19
content-length: 276
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg

152.199.23.37

200 OK

252 B

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
252 B (252 bytes)
Hash
635a63d500a92a0b8497cdc58d0f66b1
a32eba4b4d139e8da52c5801a13c1ee222b2b882
61d7ccc5d2c41bf86be6cefb0063405067849ba64e9f219f60596ef09a54a942

HTTP Headers

GET /ests/2.1/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 574173
cache-control: public, max-age=604800
content-md5: GapJ5vNFgRzr6JUAPI/Pxw==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D641014BCAFCCD
last-modified: Fri, 02 Nov 2018 20:25:14 GMT
server: ECAcc (ska/F6A1)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 8b4e1e54-701e-00b8-4a7c-8a7473000000
x-ms-version: 2009-09-19
content-length: 252
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/picker_account_add_56e73414003cdb676008ff7857343074.svg

152.199.23.37

200 OK

184 B

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/picker_account_add_56e73414003cdb676008ff7857343074.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
184 B (184 bytes)
Hash
56e73414003cdb676008ff7857343074
9ed7a58cd0e81e9689ac8c6d548a47d0185e0fdc
749f85621d92a5b31b2a377a8c385a36d48a83327dad9a8a8da93cd831b8c9a2

HTTP Headers

GET /ests/2.1/content/images/picker_account_add_56e73414003cdb676008ff7857343074.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 574173
cache-control: public, max-age=604800
content-md5: ykuOnMaTo0vw2Gx/ZceiPg==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D6410153A20B4B
last-modified: Fri, 02 Nov 2018 20:25:27 GMT
server: ECAcc (ska/F6CA)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 69bdbb54-601e-0035-017c-8afc3d000000
x-ms-version: 2009-09-19
content-length: 184
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/picker_account_aad_9de70d1c5191d1852a0d5aac28b44a6c.svg

152.199.23.37

200 OK

394 B

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/picker_account_aad_9de70d1c5191d1852a0d5aac28b44a6c.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
394 B (394 bytes)
Hash
9de70d1c5191d1852a0d5aac28b44a6c
f4f64f5cbdbe6d1115c10a7f9ccb8828e6b67cae
5d3357bd875b7335ace42e8ee3a64578e4253bed1a4e279109de403eedae3a69

HTTP Headers

GET /ests/2.1/content/images/picker_account_aad_9de70d1c5191d1852a0d5aac28b44a6c.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 574173
cache-control: public, max-age=604800
content-md5: Sm6wIsHj8wthIZkm/aQWhA==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D64101535909BA
last-modified: Fri, 02 Nov 2018 20:25:26 GMT
server: ECAcc (ska/F79C)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 8ecdc941-001e-005b-027c-8a1c02000000
x-ms-version: 2009-09-19
content-length: 394
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.1.1.min.js

151.101.2.137

200 OK

30 kB

URL GET HTTP/2
code.jquery.com/jquery-3.1.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32030)
Size
30 kB (30070 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 16 Apr 2024 04:20:09 GMT
age: 18440609
x-served-by: cache-lga21947-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 87154
x-timer: S1713241209.368143,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg

152.199.23.37

200 OK

673 B

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
673 B (673 bytes)
Hash
bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68

HTTP Headers

GET /ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1888381
cache-control: public, max-age=31536000
content-md5: DhdidjYrlCeaRJJRG/y9mA==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D7B029B6833F84
last-modified: Thu, 13 Feb 2020 02:09:09 GMT
server: ECAcc (ska/F6CF)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 048e1288-101e-00be-0788-7e8e7f000000
x-ms-version: 2009-09-19
content-length: 673
X-Firefox-Spdy: h2

aadcdn.msftauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico

152.199.23.37

200 OK

17 kB

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://appservies02342-1321331581.cos.ap-beijing.myqcloud.com/cummon/update-agreements/claim
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Size
17 kB (17174 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

HTTP Headers

GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 92738
cache-control: public, max-age=604800
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Tue, 16 Apr 2024 04:20:09 GMT
etag: 0x8D641014D44D8FD
last-modified: Fri, 02 Nov 2018 20:25:16 GMT
server: ECAcc (ska/F77B)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: f37ae205-a01e-0081-5add-8e2671000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type