Report - www.outlook-internal.com/c?a=Dx7lL-fGRf8&t=Cg

Report Overview

Submitted URL
www.outlook-internal.com/c?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU
IP
35.173.158.127
ASN
#14618 AMAZON-AES
Submitted
2024-04-17 07:12:57
Access
public
Website Title
Group PSA Peugeot Citroen Automobile Sa
Final URL
mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.outlook-internal.com	unknown	2015-02-10	2015-10-30	2023-07-21	440 B	713 B	18.235.211.121
mpsa.securitytraining.io	unknown	2014-07-09	2021-06-03	2023-06-29	3.9 kB	134 kB	18.235.211.121
s3.amazonaws.com	unknown	2005-08-18	2020-05-13	2024-03-23	487 B	119 kB	52.217.164.64

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	mpsa.securitytraining.io/assets/training-6ba900348273ccf62b0a1e0d9f4ee56a060c0affec3ba7f54ad38888c452f0e0.js	332 kB	2023-03-09	2024-04-17
Pretty URL mpsa.securitytraining.io/assets/training-6ba900348273ccf62b0a1e0d9f4ee56a060c0affec3ba7f54ad38888c452f0e0.js IP 18.235.211.121 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 08:27:39 Last Seen2024-04-17 09:12:57 Times Seen3 Hash 08289622dd035b3901c4ad5e95563340 e1948d32d1db0328f372939cb1f5cb995b04952f a766213f223b330805e3060fcbb7e365db3de92bc9056979f7393d1269c3f774 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	www.outlook-internal.com/c?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU	18.235.211.121	302 Found	155 B
URL User Request GET HTTP/1.1 www.outlook-internal.com/c?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU IP 18.235.211.121:80 ASN #14618 AMAZON-AES File type HTML document, ASCII text, with no line terminators Size 155 B (155 bytes) Hash 11be3d33e4706fc984ff3882cc30b0ab 2d71d8637ac1032262a23302eeade9c3979da7ce 71b958f9f9339f0ee3cbc89ed1a114fea2c2fed53568d3b656d3bddb6dd76f2b HTTP Headers `GET /c?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU HTTP/1.1 Host: www.outlook-internal.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Date: Wed, 17 Apr 2024 07:12:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Location: https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU Cache-Control: no-cache X-Request-Id: 1a5b3ef7-18dd-4b33-9f70-48ae181b6192 X-Runtime: 0.021689

	mpsa.securitytraining.io/assets/font-awesome.min.css	18.235.211.121	200 OK	22 kB
URL GET HTTP/2 mpsa.securitytraining.io/assets/font-awesome.min.css IP 18.235.211.121:443 ASN #14618 AMAZON-AES Requested by https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU Certificate IssuerDigiCert Inc Subjectsecuritytraining.io FingerprintAB:89:1E:CA:9C:B5:42:68:1A:F3:CF:E4:BE:04:3C:4F:14:FC:1F:D6 ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT File type ASCII text, with very long lines (21822) Size 22 kB (21984 bytes) Hash feda974a77ea5783b8be673f142b7c88 b71d1c7c315b67c614563382d1c2a868ac14d729 0fb1bbca73646e8e2b93c82e8d8b219647b13d4b440c48e338290b9a685b8de1 HTTP Headers GET /assets/font-awesome.min.css HTTP/1.1 Host: mpsa.securitytraining.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU DNT: 1 Connection: keep-alive Cookie: _prs_session=WHQxVmlYVWZsNzIvbkRrN1hWTjJ4ZHQyc00vc2V2TkR1UElyNk5aaHFDQnYyVHB0U3EwZXp1b1V2V0g3SnhVN1hmNkNQQ1hnSFZDWnUxeGUwOUlOa0NOS1JwQ2xTby9tQmswTEFQMGtUMkFJY2xIQlROLzFaNzRyb1U2aHo0STNaVERDYWFlUFRHejZucTlrNG5Hb053PT0tLUJvUVQ1eGZKWGZoQ3RGdWhGREVJVXc9PQ%3D%3D--0cf6b9ce9e4ed089e4102875ea6fb4f3c747eff4 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK date: Wed, 17 Apr 2024 07:12:34 GMT content-type: text/css content-length: 21984 last-modified: Fri, 09 Feb 2024 13:52:54 GMT X-Firefox-Spdy: h2`

	mpsa.securitytraining.io/assets/training-a179dcd4cced71034bee3aa983eef65c76e8907d56f13136d6a78ef90d6ded1c.css	18.235.211.121	200 OK	254 B
URL GET HTTP/2 mpsa.securitytraining.io/assets/training-a179dcd4cced71034bee3aa983eef65c76e8907d56f13136d6a78ef90d6ded1c.css IP 18.235.211.121:443 ASN #14618 AMAZON-AES Requested by https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU Certificate IssuerDigiCert Inc Subjectsecuritytraining.io FingerprintAB:89:1E:CA:9C:B5:42:68:1A:F3:CF:E4:BE:04:3C:4F:14:FC:1F:D6 ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT File type ASCII text, with very long lines (423) Size 254 B (254 bytes) Hash 87005280520f229dfe15a99ab125a234 778a0862c2523eed0db96d8a10564b335300ac13 c1e795084c5d472fff2892d2ca2b5f94a0ac8585dff38b16764165a883221275 HTTP Headers GET /assets/training-a179dcd4cced71034bee3aa983eef65c76e8907d56f13136d6a78ef90d6ded1c.css HTTP/1.1 Host: mpsa.securitytraining.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU DNT: 1 Connection: keep-alive Cookie: _prs_session=WHQxVmlYVWZsNzIvbkRrN1hWTjJ4ZHQyc00vc2V2TkR1UElyNk5aaHFDQnYyVHB0U3EwZXp1b1V2V0g3SnhVN1hmNkNQQ1hnSFZDWnUxeGUwOUlOa0NOS1JwQ2xTby9tQmswTEFQMGtUMkFJY2xIQlROLzFaNzRyb1U2aHo0STNaVERDYWFlUFRHejZucTlrNG5Hb053PT0tLUJvUVQ1eGZKWGZoQ3RGdWhGREVJVXc9PQ%3D%3D--0cf6b9ce9e4ed089e4102875ea6fb4f3c747eff4 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK date: Wed, 17 Apr 2024 07:12:34 GMT content-type: text/css content-length: 254 last-modified: Fri, 09 Feb 2024 14:01:45 GMT vary: Accept-Encoding content-encoding: gzip X-Firefox-Spdy: h2`

	mpsa.securitytraining.io/assets/training-6ba900348273ccf62b0a1e0d9f4ee56a060c0affec3ba7f54ad38888c452f0e0.js	18.235.211.121	200 OK	95 kB
URL GET HTTP/2 mpsa.securitytraining.io/assets/training-6ba900348273ccf62b0a1e0d9f4ee56a060c0affec3ba7f54ad38888c452f0e0.js IP 18.235.211.121:443 ASN #14618 AMAZON-AES Requested by https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU Certificate IssuerDigiCert Inc Subjectsecuritytraining.io FingerprintAB:89:1E:CA:9C:B5:42:68:1A:F3:CF:E4:BE:04:3C:4F:14:FC:1F:D6 ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (32766) Size 95 kB (94817 bytes) Hash 08289622dd035b3901c4ad5e95563340 e1948d32d1db0328f372939cb1f5cb995b04952f a766213f223b330805e3060fcbb7e365db3de92bc9056979f7393d1269c3f774 HTTP Headers GET /assets/training-6ba900348273ccf62b0a1e0d9f4ee56a060c0affec3ba7f54ad38888c452f0e0.js HTTP/1.1 Host: mpsa.securitytraining.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU DNT: 1 Connection: keep-alive Cookie: _prs_session=WHQxVmlYVWZsNzIvbkRrN1hWTjJ4ZHQyc00vc2V2TkR1UElyNk5aaHFDQnYyVHB0U3EwZXp1b1V2V0g3SnhVN1hmNkNQQ1hnSFZDWnUxeGUwOUlOa0NOS1JwQ2xTby9tQmswTEFQMGtUMkFJY2xIQlROLzFaNzRyb1U2aHo0STNaVERDYWFlUFRHejZucTlrNG5Hb053PT0tLUJvUVQ1eGZKWGZoQ3RGdWhGREVJVXc9PQ%3D%3D--0cf6b9ce9e4ed089e4102875ea6fb4f3c747eff4 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK date: Wed, 17 Apr 2024 07:12:34 GMT content-type: application/javascript content-length: 94817 last-modified: Fri, 09 Feb 2024 14:01:45 GMT vary: Accept-Encoding content-encoding: gzip X-Firefox-Spdy: h2`

	s3.amazonaws.com/public-prs-symc/mpsa/uploads/000/000/139/original/disappointed.png	52.217.164.64	200 OK	118 kB
URL GET HTTP/1.1 s3.amazonaws.com/public-prs-symc/mpsa/uploads/000/000/139/original/disappointed.png IP 52.217.164.64:443 ASN #16509 AMAZON-02 Requested by https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU Certificate IssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT File type PNG image data, 431 x 470, 8-bit/color RGB, non-interlaced Size 118 kB (118110 bytes) Hash 4565300ad03593bd3042d09aca6d1e33 e7903fd6402d882ccc8697ace3b0c330e606928a c2cd59242e0ceeb792b8a82db5f81f5a578597757087d6fc1df45f5d3045ad18 HTTP Headers `GET /public-prs-symc/mpsa/uploads/000/000/139/original/disappointed.png HTTP/1.1 Host: s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mpsa.securitytraining.io/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK x-amz-id-2: IvRt4ZrhHVSi/56acfHHPBDbsiS/swtn+mseU5PMQCRvEQIJJ9QUIGbdDS7Wj4m5x9284RKDE/Y= x-amz-request-id: MZ885QSA7HFD16WJ Date: Wed, 17 Apr 2024 07:12:35 GMT Last-Modified: Sat, 17 Jul 2021 04:40:31 GMT ETag: "4565300ad03593bd3042d09aca6d1e33" x-amz-server-side-encryption: AES256 x-amz-version-id: 4IblhznK.8MtGvZkpvMzJNLZmZq99BmV Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 118110`

	mpsa.securitytraining.io/favicon.ico	18.235.211.121	200 OK	0 B
URL GET HTTP/2 mpsa.securitytraining.io/favicon.ico IP 18.235.211.121:443 ASN #14618 AMAZON-AES Requested by https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU Certificate IssuerDigiCert Inc Subjectsecuritytraining.io FingerprintAB:89:1E:CA:9C:B5:42:68:1A:F3:CF:E4:BE:04:3C:4F:14:FC:1F:D6 ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: mpsa.securitytraining.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU DNT: 1 Connection: keep-alive Cookie: _prs_session=WHQxVmlYVWZsNzIvbkRrN1hWTjJ4ZHQyc00vc2V2TkR1UElyNk5aaHFDQnYyVHB0U3EwZXp1b1V2V0g3SnhVN1hmNkNQQ1hnSFZDWnUxeGUwOUlOa0NOS1JwQ2xTby9tQmswTEFQMGtUMkFJY2xIQlROLzFaNzRyb1U2aHo0STNaVERDYWFlUFRHejZucTlrNG5Hb053PT0tLUJvUVQ1eGZKWGZoQ3RGdWhGREVJVXc9PQ%3D%3D--0cf6b9ce9e4ed089e4102875ea6fb4f3c747eff4 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK date: Wed, 17 Apr 2024 07:12:34 GMT content-type: image/vnd.microsoft.icon content-length: 0 last-modified: Fri, 09 Feb 2024 13:52:54 GMT X-Firefox-Spdy: h2`

	mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU	18.235.211.121	200 OK	15 kB
URL User Request GET HTTP/2 mpsa.securitytraining.io/training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU IP 18.235.211.121:443 ASN #14618 AMAZON-AES Certificate IssuerDigiCert Inc Subjectsecuritytraining.io FingerprintAB:89:1E:CA:9C:B5:42:68:1A:F3:CF:E4:BE:04:3C:4F:14:FC:1F:D6 ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT File type data Size 15 kB (15389 bytes) Hash 2405840d6f36cc7cdfa6bfc0fe6fd1de 6404f8fdb994bcf662d317a529a43e732f7758ff 383fc9437d797d49961bd6353153a0c8f9fde8a1c00b8749e5f662c816dee040 HTTP Headers GET /training?a=Dx7lL-fGRf8&t=Cg_j9ktgDKRPLPsNMwenPWvfOHU HTTP/1.1 Host: mpsa.securitytraining.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Wed, 17 Apr 2024 07:12:33 GMT content-type: text/html; charset=utf-8 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin etag: W/"ade769e89d3cfe6cc434aac047c687bf" cache-control: max-age=0, private, must-revalidate set-cookie: _prs_session=WHQxVmlYVWZsNzIvbkRrN1hWTjJ4ZHQyc00vc2V2TkR1UElyNk5aaHFDQnYyVHB0U3EwZXp1b1V2V0g3SnhVN1hmNkNQQ1hnSFZDWnUxeGUwOUlOa0NOS1JwQ2xTby9tQmswTEFQMGtUMkFJY2xIQlROLzFaNzRyb1U2aHo0STNaVERDYWFlUFRHejZucTlrNG5Hb053PT0tLUJvUVQ1eGZKWGZoQ3RGdWhGREVJVXc9PQ%3D%3D--0cf6b9ce9e4ed089e4102875ea6fb4f3c747eff4; domain=.securitytraining.io; path=/; HttpOnly x-request-id: 29131c21-9543-4d56-82bf-77d29ae34cf2 x-runtime: 0.024794 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN