Report - 5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/ef3e177a-917b-48c9-8234-def21330f3ed

Report Overview

Visited public
2023-12-06 15:58:35
Tags
phishing microsoft outlook
URL
5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/ef3e177a-917b-48c9-8234-def21330f3ed
Finishing URL
5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/af1fa9cd-1f4c-4835-b277-b1131a6616ca
IP / ASN
188.114.96.1
#13335 CLOUDFLARENET
Title
Sign in to your account
Phishing - Microsoft Outlook

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-06 08:09:09	407 B	32 kB	142.250.74.42
5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev	unknown	unknown	No data	No data	552 B	85 kB	188.114.96.1
aadcdn.msauth.net	1421	2018-10-25	2018-11-19 11:50:03	2023-12-05 18:12:18	2.4 kB	44 kB	13.107.246.53
logincdn.msauth.net	2330	2018-10-25	2019-04-23 03:13:28	2023-12-05 18:12:45	1.4 kB	4.0 kB	192.229.221.185

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-12-06	medium	5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/ef3e177a-917b-48c9-8234-def21330f3ed	Outlook

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/af1fa9cd-1f4c-4835-b277-b1131a6616ca	ScriptElement	150 kB	2023-12-06	2024-08-20
Pretty URL 5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/af1fa9cd-1f4c-4835-b277-b1131a6616ca IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-06 01:58 Last Seen2024-08-20 16:37 Times Seen38 Hash 561c17dac3febf68d3db56133f365f9b 2dc7baded5a2939ca29c6199349a9a89f4be6cb7 e77553881a6a3c79d1fbdb44cadca14719cbc9de316051b5981fdc361e95e29a Loading...

	unknown	EventHandler	16 B	2023-04-10	2025-05-10
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 21:05 Last Seen2025-05-10 17:10 Times Seen1847 Hash 35cbe67c28f248a0eda182fcd963bb07 d8ab6c8b6cbd09e6f35cdd9cf423590155fce997 749c737310ca23809bb32db69b1bfb5125b2b695b01814e0ef1d0025fe239d77 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-11
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 142.250.74.42 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 09:27 Times Seen108930 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	unknown	ScriptElement	64 kB	2023-12-06	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-06 01:58 Last Seen2024-08-20 16:37 Times Seen38 Hash 043490398bdb5c08abaccdbf82ae4c84 6bf56b52bef235480ff3828cd18aa2966836bca9 a91d2caaa445c65bcd6c31deb3a1bfae7edda97b628d64d57ad061ecf7707c2a Loading...

		Size	First Seen	Last Seen
	#1 Eval - 3778ac99496f77d73835d8e6997d990b	112 kB	2023-12-06 01:58	2024-08-20 16:37
Pretty Observations First Seen2023-12-06 01:58 Last Seen2024-08-20 16:37 Times Seen38 Hash 3778ac99496f77d73835d8e6997d990b 5ebb445773912cd76263f44ad25655aa6ac1e989 06ea4f051515247b6b1eb358fa41446d43f0b214ff65f6b330d054e845c9497e Loading...

		Size	First Seen	Last Seen
	#1 Write - cb828f5d7b24bf59bca5ad04c03c8ad4	66 kB	2023-12-06 01:58	2024-08-20 16:37
Pretty Observations First Seen2023-12-06 01:58 Last Seen2024-08-20 16:37 Times Seen38 Hash cb828f5d7b24bf59bca5ad04c03c8ad4 9b47c5ecb29778ab7f30fd0e030493e1b117f743 56b7797ddcfd06524e0854b3ad0926fed877f624f09b2146a6f60dbfb296dbe1 Loading...

HTTP Transactions (10)

URL IP Response Size

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

142.250.74.42

31 kB

URL
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
142.250.74.42:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (65451)
Size
31 kB (31021 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 10:15:01 GMT
expires: Wed, 04 Dec 2024 10:15:01 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 106997
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/ef3e177a-917b-48c9-8234-def21330f3ed

188.114.96.1

84 kB

URL
5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/ef3e177a-917b-48c9-8234-def21330f3ed
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65430)
Size
84 kB (83966 bytes)
Hash
ed4d24cfa4819ca3dfb47a78340fdef5
9be28b25b231d6c5558ae15591dd564153652371
6f0e4c9457efa456bd4e97a574dccd667fc4b080dd0333e21601890912501e11

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /ef3e177a-917b-48c9-8234-def21330f3ed HTTP/1.1
Host: 5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:58:18 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"20d92a6bfb269932da4e2586d773bc25"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W7%2B%2BpeeLXaDNLTNVhDo75U8sSG4VEaWjCCr6TZAR60DWuZrr4O0191nFA%2BE0F3Flp9kODS1%2BB%2FVnnMzVHOoH07NRiXhD9DRzXXKucMcVpXSqEIhHNKDFvHMYcNtX5nJ7oGkHC9k7rZROf7UlRE1gxkNz2Mt4bODfsubcNPlZX6tOdyhu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315bac5ab6756b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_wixdbz3ubznoegxpcgkfog2.css

13.107.246.53

20 kB

URL
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_wixdbz3ubznoegxpcgkfog2.css
IP
13.107.246.53:0
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (61177)
Size
20 kB (19750 bytes)
Hash
5a25dd6f3dd40593681065e908691fa2
2f0d8a2c1c76b8b6d5354240907d353701aa11b7
a96b2b12489a80eafe62cc4bcc04cb367e2b54efc3039e484211c7deec12c0b8

HTTP Headers

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_wixdbz3ubznoegxpcgkfog2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 19750
content-type: text/css
content-encoding: gzip
content-md5: /7H4IR1YAHBHDqgAZw2T1Q==
last-modified: Tue, 18 Aug 2020 21:44:27 GMT
etag: 0x8D843BFE1586E6F
x-cache: TCP_REMOTE_HIT
x-ms-request-id: a27b89c3-201e-0045-7a85-256368000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0GppwZQAAAAD71xgt3BDdT6w+gT58m/rfQU1TMDRFREdFMTkxNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0GppwZQAAAACFYXhyFT9xQa6XUsSw0v/zU1ZHMjBFREdFMDUyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Wed, 06 Dec 2023 15:58:18 GMT
X-Firefox-Spdy: h2

aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico

13.107.246.53

17 kB

URL
aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
13.107.246.53:0
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Size
17 kB (17174 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

HTTP Headers

GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 17174
content-type: image/x-icon
content-md5: EuPayFgGHQiAI7K9SOL6lg==
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-cache: TCP_HIT
x-ms-request-id: a3635bc7-b01e-0010-0dac-248751000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0nXRtZQAAAAACdQCdRIYeT5xCLIv2eCoGQU1TMDRFREdFMTgxNgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0G5pwZQAAAAAS6m059FzORokJPIJgCLQZU1ZHMjBFREdFMDUyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Wed, 06 Dec 2023 15:58:18 GMT
X-Firefox-Spdy: h2

aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg

13.107.246.53

1.4 kB

URL
aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
IP
13.107.246.53:0
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators
Size
1.4 kB (1435 bytes)
Hash
ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

HTTP Headers

GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 1435
content-type: image/svg+xml
content-encoding: gzip
content-md5: nzaLxFgP7ZB3dfMcaybWzw==
last-modified: Fri, 17 Jan 2020 19:28:38 GMT
etag: 0x8D79B8373CB2849
x-cache: TCP_HIT
x-ms-request-id: 63b71444-d01e-0052-6a5c-240244000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0ullvZQAAAADCRv0kJJXdTJRMqXiBrwEBQU1TMDRFREdFMTkwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0G5pwZQAAAACrlCLo0Yy8SI2PfLCIOGPHU1ZHMjBFREdFMDUyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Wed, 06 Dec 2023 15:58:19 GMT
X-Firefox-Spdy: h2

aadcdn.msauth.net/shared/1.0/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg

13.107.246.53

252 B

URL
aadcdn.msauth.net/shared/1.0/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg
IP
13.107.246.53:0
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (900), with no line terminators
Size
252 B (252 bytes)
Hash
635a63d500a92a0b8497cdc58d0f66b1
a32eba4b4d139e8da52c5801a13c1ee222b2b882
61d7ccc5d2c41bf86be6cefb0063405067849ba64e9f219f60596ef09a54a942

HTTP Headers

GET /shared/1.0/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 252
content-type: image/svg+xml
content-encoding: gzip
content-md5: GapJ5vNFgRzr6JUAPI/Pxw==
last-modified: Fri, 17 Jan 2020 19:28:37 GMT
etag: 0x8D79B83739D7D79
x-cache: TCP_HIT
x-ms-request-id: 1d5be04e-001e-0003-75e9-254a75000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0h4xtZQAAAACJYHAL5LPLRqd1TFrCj1LtQU1TMDRFREdFMTgxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0G5pwZQAAAAASBWL461Y3SoGhghqTtzRSU1ZHMjBFREdFMDUyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Wed, 06 Dec 2023 15:58:19 GMT
X-Firefox-Spdy: h2

aadcdn.msauth.net/shared/1.0/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg

13.107.246.53

200 OK

263 B

URL GET HTTP/2
aadcdn.msauth.net/shared/1.0/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
IP
13.107.246.53:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/ef3e177a-917b-48c9-8234-def21330f3ed
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (915), with no line terminators
Size
263 B (263 bytes)
Hash
2b5d393db04a5e6e1f739cb266e65b4c
6a435df5cac3d58ccad655fe022ccf3dd4b9b721
16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6

HTTP Headers

GET /shared/1.0/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 263
content-type: image/svg+xml
content-encoding: gzip
content-md5: /a3y/mpA+HRaVAiPACrsog==
last-modified: Fri, 17 Jan 2020 19:28:37 GMT
etag: 0x8D79B83737D1C56
x-cache: TCP_HIT
x-ms-request-id: f1069b20-601e-0081-4a72-264b24000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0h4xtZQAAAAB/JjJvWTX/TJx2njCntiqCQU1TMDRFREdFMTkxMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0G5pwZQAAAACbj0S+JyQOQa6XleQ78xFwU1ZHMjBFREdFMDUyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Wed, 06 Dec 2023 15:58:19 GMT
X-Firefox-Spdy: h2

logincdn.msauth.net/shared/1.0/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg

192.229.221.185

263 B

URL
logincdn.msauth.net/shared/1.0/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
IP
192.229.221.185:0
ASN
#15133 EDGECAST

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (915), with no line terminators
Size
263 B (263 bytes)
Hash
2b5d393db04a5e6e1f739cb266e65b4c
6a435df5cac3d58ccad655fe022ccf3dd4b9b721
16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6

HTTP Headers

GET /shared/1.0/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 9960769
cache-control: public, max-age=31536000
content-md5: /a3y/mpA+HRaVAiPACrsog==
content-type: image/svg+xml
date: Wed, 06 Dec 2023 15:58:19 GMT
etag: 0x8D79ED29CB2C46E
last-modified: Wed, 22 Jan 2020 00:32:50 GMT
server: ECAcc (ska/F7B8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 1ca30d69-301e-0099-29c5-cd40ca000000
x-ms-version: 2009-09-19
content-length: 263
X-Firefox-Spdy: h2

logincdn.msauth.net/shared/1.0/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg

192.229.221.185

200 OK

252 B

URL GET HTTP/2
logincdn.msauth.net/shared/1.0/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg
IP
192.229.221.185:443
ASN
#15133 EDGECAST

Requested by
https://5b9817ed34ce6f94206baf620b19bbc349847a4.pages.dev/ef3e177a-917b-48c9-8234-def21330f3ed
Certificate
IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
FingerprintAF:EB:E8:D6:8A:D6:D5:DF:17:8C:0E:CB:4E:EA:B9:23:51:37:24:F6
ValidityThu, 02 Nov 2023 23:14:23 GMT - Sun, 27 Oct 2024 23:14:23 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (900), with no line terminators
Size
252 B (252 bytes)
Hash
635a63d500a92a0b8497cdc58d0f66b1
a32eba4b4d139e8da52c5801a13c1ee222b2b882
61d7ccc5d2c41bf86be6cefb0063405067849ba64e9f219f60596ef09a54a942

HTTP Headers

GET /shared/1.0/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15561808
cache-control: public, max-age=31536000
content-md5: GapJ5vNFgRzr6JUAPI/Pxw==
content-type: image/svg+xml
date: Wed, 06 Dec 2023 15:58:19 GMT
etag: 0x8D79ED29C78BE93
last-modified: Wed, 22 Jan 2020 00:32:50 GMT
server: ECAcc (ska/F768)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 78c3c385-d01e-0062-42d4-9a511b000000
x-ms-version: 2009-09-19
content-length: 252
X-Firefox-Spdy: h2

logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg

192.229.221.185

1.4 kB

URL
logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
IP
192.229.221.185:0
ASN
#15133 EDGECAST

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators
Size
1.4 kB (1435 bytes)
Hash
ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

HTTP Headers

GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 28150456
cache-control: public, max-age=31536000
content-md5: nzaLxFgP7ZB3dfMcaybWzw==
content-type: image/svg+xml
date: Wed, 06 Dec 2023 15:58:19 GMT
etag: 0x8D79ED29CF0C29A
last-modified: Wed, 22 Jan 2020 00:32:50 GMT
server: ECAcc (ska/F7B5)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: fd0c0cdd-301e-0034-1256-28f450000000
x-ms-version: 2009-09-19
content-length: 1435
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type