| dondugoat.com/m2msn.office.edu/365Validation/index.php/ | 68.178.247.43 | 200 OK | 1.4 kB |
URL User Request GET HTTP/2dondugoat.com/m2msn.office.edu/365Validation/index.php/ IP68.178.247.43:443 ASN#398101 GO-DADDY-COM-LLC
CertificateIssuerLet's Encrypt Subjectcpanel.dondugoat.com Fingerprint53:DA:CF:3D:75:62:36:D0:D8:4C:2B:65:11:EA:E9:27:32:36:84:78 ValidityWed, 06 Mar 2024 00:19:13 GMT - Tue, 04 Jun 2024 00:19:12 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (383) Hash6842541b41eacb01e686aac273ab0f16 f4d048bfec556f193329edbcd8bc9aea30861ae7 526a5006428b62cdf55bc53d2f35eba1d2053a8bf1b657f213521977954d4120
Analyzer | Verdict | Alert | PhishTank | phishing | Other | Quad9 DNS | malicious | Sinkholed |
GET /m2msn.office.edu/365Validation/index.php/ HTTP/1.1
Host: dondugoat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=efd1c1b077f7cd3471001ae36442d83c; path=/
vary: Accept-Encoding
content-encoding: br
content-length: 1429
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 09:38:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg | 13.107.213.53 | 200 OK | 1.4 kB |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://dondugoat.com/m2msn.office.edu/365Validation/index.php/ CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dondugoat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 09:38:07 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=604800
content-encoding: gzip
last-modified: Fri, 02 Nov 2018 20:25:31 GMT
etag: 0x8D64101560D5E58
x-ms-request-id: 7244f5a7-801e-006e-1c03-9605a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T093807Z-16c4f695cc5xhgjd1y09e49aqw000000073g000000001u2c
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
x-cache-info: L1_T2
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_5ac590ee72bfe06a7cecfd75b588ad73.svg | 13.107.213.53 | 200 OK | 263 B |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_5ac590ee72bfe06a7cecfd75b588ad73.svg IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://dondugoat.com/m2msn.office.edu/365Validation/index.php/ CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash5ac590ee72bfe06a7cecfd75b588ad73 dda2cb89a241bc424746d8cf2a22a35535094611 6075736ea9c281d69c4a3d78ff97bb61b9416a5809919babe5a0c5596f99aaea
GET /ests/2.1/content/images/ellipsis_white_5ac590ee72bfe06a7cecfd75b588ad73.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dondugoat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 09:38:07 GMT
content-type: image/svg+xml
content-length: 263
cache-control: public, max-age=604800
content-encoding: gzip
last-modified: Fri, 02 Nov 2018 20:25:24 GMT
etag: 0x8D64101521A1ED5
x-ms-request-id: 73e1bb59-401e-005e-1405-9624b0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T093807Z-16c4f695cc5xhgjd1y09e49aqw000000073g000000001u2b
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
x-cache-info: L1_T2
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg | 13.107.213.53 | 200 OK | 263 B |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://dondugoat.com/m2msn.office.edu/365Validation/index.php/ CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash2b5d393db04a5e6e1f739cb266e65b4c 6a435df5cac3d58ccad655fe022ccf3dd4b9b721 16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6
GET /ests/2.1/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dondugoat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 09:38:07 GMT
content-type: image/svg+xml
content-length: 263
cache-control: public, max-age=604800
content-encoding: gzip
last-modified: Fri, 02 Nov 2018 20:25:23 GMT
etag: 0x8D641015168A4FB
x-ms-request-id: aaadc5aa-801e-0016-7672-94afb0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T093807Z-16c4f695cc5xhgjd1y09e49aqw000000073g000000001u2d
x-fd-int-roxy-purgeid: 0
x-cache-info: L1_T2
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dondugoat.com/m2msn.office.edu/365Validation/index.php/login_files/main.css | 68.178.247.43 | 200 OK | 1.4 kB |
URL GET HTTP/2dondugoat.com/m2msn.office.edu/365Validation/index.php/login_files/main.css IP68.178.247.43:443 ASN#398101 GO-DADDY-COM-LLC
Requested byhttps://dondugoat.com/m2msn.office.edu/365Validation/index.php/ CertificateIssuerLet's Encrypt Subjectcpanel.dondugoat.com Fingerprint53:DA:CF:3D:75:62:36:D0:D8:4C:2B:65:11:EA:E9:27:32:36:84:78 ValidityWed, 06 Mar 2024 00:19:13 GMT - Tue, 04 Jun 2024 00:19:12 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (383) Hash6842541b41eacb01e686aac273ab0f16 f4d048bfec556f193329edbcd8bc9aea30861ae7 526a5006428b62cdf55bc53d2f35eba1d2053a8bf1b657f213521977954d4120
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /m2msn.office.edu/365Validation/index.php/login_files/main.css HTTP/1.1
Host: dondugoat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dondugoat.com/m2msn.office.edu/365Validation/index.php/
Cookie: PHPSESSID=efd1c1b077f7cd3471001ae36442d83c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: br
content-length: 1429
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 09:38:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico | 13.107.213.53 | 200 OK | 17 kB |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://dondugoat.com/m2msn.office.edu/365Validation/index.php/ CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dondugoat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 09:38:07 GMT
content-type: image/x-icon
content-length: 17174
cache-control: public, max-age=604800
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-ms-request-id: 3a80a4f5-701e-0055-49cd-9401a7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T093807Z-16c4f695cc5xhgjd1y09e49aqw000000073g000000001u2f
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dondugoat.com/m2msn.office.edu/365Validation/index.php/login_files/bg_sm.jpg | 68.178.247.43 | 200 OK | 1.7 kB |
URL GET HTTP/2dondugoat.com/m2msn.office.edu/365Validation/index.php/login_files/bg_sm.jpg IP68.178.247.43:443 ASN#398101 GO-DADDY-COM-LLC
Requested byhttps://dondugoat.com/m2msn.office.edu/365Validation/index.php/ CertificateIssuerLet's Encrypt Subjectcpanel.dondugoat.com Fingerprint53:DA:CF:3D:75:62:36:D0:D8:4C:2B:65:11:EA:E9:27:32:36:84:78 ValidityWed, 06 Mar 2024 00:19:13 GMT - Tue, 04 Jun 2024 00:19:12 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (383) Hash6842541b41eacb01e686aac273ab0f16 f4d048bfec556f193329edbcd8bc9aea30861ae7 526a5006428b62cdf55bc53d2f35eba1d2053a8bf1b657f213521977954d4120
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /m2msn.office.edu/365Validation/index.php/login_files/bg_sm.jpg HTTP/1.1
Host: dondugoat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dondugoat.com/m2msn.office.edu/365Validation/index.php/
Cookie: PHPSESSID=efd1c1b077f7cd3471001ae36442d83c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
content-length: 1740
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 09:38:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| dondugoat.com/m2msn.office.edu/365Validation/index.php/login_files/bg_lg.jpg | 68.178.247.43 | 200 OK | 1.7 kB |
URL GET HTTP/2dondugoat.com/m2msn.office.edu/365Validation/index.php/login_files/bg_lg.jpg IP68.178.247.43:443 ASN#398101 GO-DADDY-COM-LLC
Requested byhttps://dondugoat.com/m2msn.office.edu/365Validation/index.php/ CertificateIssuerLet's Encrypt Subjectcpanel.dondugoat.com Fingerprint53:DA:CF:3D:75:62:36:D0:D8:4C:2B:65:11:EA:E9:27:32:36:84:78 ValidityWed, 06 Mar 2024 00:19:13 GMT - Tue, 04 Jun 2024 00:19:12 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (383) Hash6842541b41eacb01e686aac273ab0f16 f4d048bfec556f193329edbcd8bc9aea30861ae7 526a5006428b62cdf55bc53d2f35eba1d2053a8bf1b657f213521977954d4120
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /m2msn.office.edu/365Validation/index.php/login_files/bg_lg.jpg HTTP/1.1
Host: dondugoat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dondugoat.com/m2msn.office.edu/365Validation/index.php/
Cookie: PHPSESSID=efd1c1b077f7cd3471001ae36442d83c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
content-length: 1740
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 09:38:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|