Report - l.a.starbucks.com/rts/go2.aspx?h=453676&tp=i-1NGB-Ij-1TV-9yMIA3-1o-EAKD7-1c-8k7WZx-lAJux4h914-1SaPwv&pi=KZQaKjVvElzpflcuNzqrdb-ygKSqFnHqTXlZBinAj7o&x=kshelton@victoria.com%7c9137088679%7c5673&hp2=eb265274c625b559a54f9b4b9b92ef9d0ada0ad07f36db01b31eb81aeb955b6f

Report Overview

Submitted URL
l.a.starbucks.com/rts/go2.aspx?h=453676&tp=i-1NGB-Ij-1TV-9yMIA3-1o-EAKD7-1c-8k7WZx-lAJux4h914-1SaPwv&pi=KZQaKjVvElzpflcuNzqrdb-ygKSqFnHqTXlZBinAj7o&x=kshelton@victoria.com%7c9137088679%7c5673&hp2=eb265274c625b559a54f9b4b9b92ef9d0ada0ad07f36db01b31eb81aeb955b6f
IP
173.213.4.70
ASN
#53316 ASN-CHEETA-MAIL
Submitted
2024-04-25 20:00:11
Access
public
Website Title
Starbucks
Final URL
x.a.starbucks.com/ats/go.aspx?cr=1161&fm=27&mg=-2147483648&cn=-2147483648&s_email=kshelton%40victoria.com&s_sublistname=COI+-+Active+Subscribers&s_ms_orig_src=coi_campaign&s_ms_updt_src=coi_campaign
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
x.a.starbucks.com	unknown	1993-10-25	2020-09-23	2024-02-26	1.5 kB	4.3 kB	173.213.4.70
l.a.starbucks.com	752957	1993-10-25	2020-09-23	2023-12-16	714 B	8.8 kB	173.213.4.70
i.a.starbucks.com	44958	1993-10-25	2020-10-06	2024-01-27	921 B	24 kB	184.86.11.162

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	x.a.starbucks.com/ats/show.aspx?cr=1161&fm=27&email=kshelton@victoria.com&MessageID=9137088679&CampaignID=5673&source=coi_campaign	173.213.4.70		896 B
URL x.a.starbucks.com/ats/show.aspx?cr=1161&fm=27&email=kshelton@victoria.com&MessageID=9137088679&CampaignID=5673&source=coi_campaign IP 173.213.4.70:0 ASN #53316 ASN-CHEETA-MAIL File type XML 1.0 document, ASCII text, with CRLF line terminators Size 896 B (896 bytes) Hash 7fb4c992d3275baf98232fbd6883518c 07232f5f5a9f5a129e56684f8d7ecc2d22f3bff1 0831796d1ac9aa083f2cfdbff389feb17ce213c38c5a3d53117cd94ea73f3660 HTTP Headers GET /ats/show.aspx?cr=1161&fm=27&email=kshelton@victoria.com&MessageID=9137088679&CampaignID=5673&source=coi_campaign HTTP/1.1 Host: x.a.starbucks.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 X-Powered-By: Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE SERVER: Date: Thu, 25 Apr 2024 19:59:46 GMT Content-Length: 896 Set-Cookie: BIGipServercnv_ats_ssl_pool=!2seYnBXE84QUrSNTD46Ou1ZcfpSQnQlyboWiL/I9OCwxwTr+FBKiB7Qi0eIHE9xLT7B2KwC5QnYimi8=; path=/; Httponly; Secure`

	x.a.starbucks.com/ats/go.aspx?cr=1161&fm=27&mg=-2147483648&cn=-2147483648&s_email=kshelton%40victoria.com&s_sublistname=COI+-+Active+Subscribers&s_ms_orig_src=coi_campaign&s_ms_updt_src=coi_campaign	173.213.4.70	200 OK	2.6 kB
URL User Request GET HTTP/1.1 x.a.starbucks.com/ats/go.aspx?cr=1161&fm=27&mg=-2147483648&cn=-2147483648&s_email=kshelton%40victoria.com&s_sublistname=COI+-+Active+Subscribers&s_ms_orig_src=coi_campaign&s_ms_updt_src=coi_campaign IP 173.213.4.70:443 ASN #53316 ASN-CHEETA-MAIL Certificate IssuerSectigo Limited Subjecta.starbucks.com Fingerprint55:90:39:43:9F:59:81:C4:F2:04:3A:29:BB:8F:76:CD:C1:97:C0:99 ValidityFri, 01 Mar 2024 00:00:00 GMT - Sat, 01 Mar 2025 23:59:59 GMT File type XML 1.0 document, ASCII text, with CRLF line terminators Size 2.6 kB (2586 bytes) Hash 07653d6c9ef1c3c4fb86e04b64abc1ed 6626e95447a7b9244e68b6c7191d4116dfed5b7d 81e4347eb4a1655880f744cb3b938a8654ace17161e46172c57fcde7b8b790f2 HTTP Headers GET /ats/go.aspx?cr=1161&fm=27&mg=-2147483648&cn=-2147483648&s_email=kshelton%40victoria.com&s_sublistname=COI+-+Active+Subscribers&s_ms_orig_src=coi_campaign&s_ms_updt_src=coi_campaign HTTP/1.1 Host: x.a.starbucks.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://x.a.starbucks.com/ats/show.aspx?cr=1161&fm=27&email=kshelton@victoria.com&MessageID=9137088679&CampaignID=5673&source=coi_campaign Cookie: BIGipServercnv_ats_ssl_pool=!2seYnBXE84QUrSNTD46Ou1ZcfpSQnQlyboWiL/I9OCwxwTr+FBKiB7Qi0eIHE9xLT7B2KwC5QnYimi8= Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 X-Powered-By: Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE SERVER: Date: Thu, 25 Apr 2024 19:59:47 GMT Content-Length: 2586`

	l.a.starbucks.com/rts/go2.aspx?h=453676&tp=i-1NGB-Ij-1TV-9yMIA3-1o-EAKD7-1c-8k7WZx-lAJux4h914-1SaPwv&pi=KZQaKjVvElzpflcuNzqrdb-ygKSqFnHqTXlZBinAj7o&x=kshelton@victoria.com%7c9137088679%7c5673&hp2=eb265274c625b559a54f9b4b9b92ef9d0ada0ad07f36db01b31eb81aeb955b6f	173.213.4.70		8.3 kB
URL l.a.starbucks.com/rts/go2.aspx?h=453676&tp=i-1NGB-Ij-1TV-9yMIA3-1o-EAKD7-1c-8k7WZx-lAJux4h914-1SaPwv&pi=KZQaKjVvElzpflcuNzqrdb-ygKSqFnHqTXlZBinAj7o&x=kshelton@victoria.com%7c9137088679%7c5673&hp2=eb265274c625b559a54f9b4b9b92ef9d0ada0ad07f36db01b31eb81aeb955b6f IP 173.213.4.70:0 ASN #53316 ASN-CHEETA-MAIL File type data Size 8.3 kB (8260 bytes) Hash 21b99084df4ad5dc69347f5d775d0c34 32249b74c0f51c622ac98fa50cbb54eeba8f0441 48cddbf2d13f5f6ed554e2ec82e84d0bb124e52adab1a1b5d7cfa9eaef5c7c41 HTTP Headers GET /rts/go2.aspx?h=453676&tp=i-1NGB-Ij-1TV-9yMIA3-1o-EAKD7-1c-8k7WZx-lAJux4h914-1SaPwv&pi=KZQaKjVvElzpflcuNzqrdb-ygKSqFnHqTXlZBinAj7o&x=kshelton@victoria.com%7c9137088679%7c5673&hp2=eb265274c625b559a54f9b4b9b92ef9d0ada0ad07f36db01b31eb81aeb955b6f HTTP/1.1 Host: l.a.starbucks.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 302 Found Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Location: https://x.a.starbucks.com/ats/show.aspx?cr=1161&fm=27&email=kshelton@victoria.com&MessageID=9137088679&CampaignID=5673&source=coi_campaign Server: X-Powered-By: Date: Thu, 25 Apr 2024 19:59:46 GMT Set-Cookie: ASP.NET_SessionId=weybrtumh1r5f5katgqyu3jm; path=/; HttpOnly; SameSite=Lax BIGipServercnv_ats_ssl_pool=!b5SXyvE7KSWi/aVTD46Ou1ZcfpSQnZ74foBhyDpt/UU+sEnoe+PmUBnbLzwcNunlvu3uEktfQs/kfqg=; path=/; Httponly; Secure

	i.a.starbucks.com/wpm/1161/ContentUploads/coi_form/favicon_16x6.png	184.86.11.162	200 OK	478 B
URL GET HTTP/1.1 i.a.starbucks.com/wpm/1161/ContentUploads/coi_form/favicon_16x6.png IP 184.86.11.162:443 ASN #16625 AKAMAI-AS Requested by https://x.a.starbucks.com/ats/go.aspx?cr=1161&fm=27&mg=-2147483648&cn=-2147483648&s_email=kshelton%40victoria.com&s_sublistname=COI+-+Active+Subscribers&s_ms_orig_src=coi_campaign&s_ms_updt_src=coi_campaign Certificate IssuerLet's Encrypt Subjectwpm.ccmp.eu Fingerprint18:E0:3E:60:40:3E:1B:F5:60:7E:71:99:68:EF:01:95:C2:2E:32:4F ValidityTue, 02 Apr 2024 14:02:53 GMT - Mon, 01 Jul 2024 14:02:52 GMT File type RIFF (little-endian) data, Web/P image Size 478 B (478 bytes) Hash 3b74787b9dec9be9b8d53f4c689dca74 e08401141848f90ed3a8b1612b5c5935fce108f0 2533c26f49fde849546739c789370bf1e4e23acb2d2382400c4ddee1b15506f1 HTTP Headers `GET /wpm/1161/ContentUploads/coi_form/favicon_16x6.png HTTP/1.1 Host: i.a.starbucks.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://x.a.starbucks.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 08 Jan 2021 15:45:43 GMT Accept-Ranges: bytes ETag: "411af352d5e5d61:0" Server: X-Powered-By: Access-Control-Allow-Origin: * Content-Length: 478 Date: Thu, 25 Apr 2024 19:59:47 GMT Connection: keep-alive`

	i.a.starbucks.com/wpm/1161/ContentUploads/coi_form/sb_logo.png	184.86.11.162	200 OK	23 kB
URL GET HTTP/1.1 i.a.starbucks.com/wpm/1161/ContentUploads/coi_form/sb_logo.png IP 184.86.11.162:443 ASN #16625 AKAMAI-AS Requested by https://x.a.starbucks.com/ats/go.aspx?cr=1161&fm=27&mg=-2147483648&cn=-2147483648&s_email=kshelton%40victoria.com&s_sublistname=COI+-+Active+Subscribers&s_ms_orig_src=coi_campaign&s_ms_updt_src=coi_campaign Certificate IssuerLet's Encrypt Subjectwpm.ccmp.eu Fingerprint18:E0:3E:60:40:3E:1B:F5:60:7E:71:99:68:EF:01:95:C2:2E:32:4F ValidityTue, 02 Apr 2024 14:02:53 GMT - Mon, 01 Jul 2024 14:02:52 GMT File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Size 23 kB (22957 bytes) Hash 800aa652d11285c50109b8dc1d260d37 46c88711675bcd1db19b91d375c7c89f89635d1d 1df9cb69f9f19afd6ab40f4f205a83ad8ad549b32f482bfe83a8c6cc17ce5ad0 HTTP Headers `GET /wpm/1161/ContentUploads/coi_form/sb_logo.png HTTP/1.1 Host: i.a.starbucks.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://x.a.starbucks.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 07 Jan 2021 18:52:41 GMT Accept-Ranges: bytes ETag: "4b1b274726e5d61:0" Server: X-Powered-By: Access-Control-Allow-Origin: * Content-Length: 22957 Date: Thu, 25 Apr 2024 19:59:47 GMT Connection: keep-alive`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers