Report - reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750

Report Overview

Visited public
2023-10-23 09:46:18
Tags
URL
reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750
Finishing URL
reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0
IP / ASN
20.40.108.241
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Title
Egress Web Access

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
reader.egress.com	201332	1998-11-27	2014-03-19 17:44:18	2023-10-17 16:16:39	7.4 kB	115 kB	20.40.108.241
ocsp.r2m01.amazontrust.com	unknown	2007-05-11	2022-10-12 22:43:53	2023-10-23 01:55:40	340 B	942 B	143.204.53.97
swstyle.s3.amazonaws.com	666032	unknown	2014-10-10 13:29:10	2023-02-16 15:14:48	397 B	2.6 kB	3.5.19.125

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0	ScriptElement	0 B	0001-01-01	2025-05-19
Pretty URL reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 IP 20.40.108.241 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-19 03:11 Times Seen4727471 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	EventHandler	74 B	2024-08-21	2024-08-21
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2024-08-21 03:45 Last Seen2024-08-21 03:45 Times Seen1 Hash c1cf9bd307c6fecd36efe50860037f6a fd93b4a9f2991896700d26d15a971fc9bfc2e7f0 944db02644a341a35e9029b1a985cfc4fc8d8b3ade29814147097b1cfd46f5d9 Loading...

	unknown	EventHandler	70 B	2024-08-21	2024-08-21
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2024-08-21 03:45 Last Seen2024-08-21 03:45 Times Seen1 Hash 96e795ec283cbfcbacaa55e9e64a4632 c938432f7ed7f84cf9c326a7976196557c3d34eb 394eb86ce73ead0854b5ce7e9220d6352ddfaf7ba4f3f9a8ebf03dac5ab5dea1 Loading...

	reader.egress.com/ScriptResource.axd?d=DLRNOI8KTEqlJUfVFZhroCFtlMKVuWC5N3HZK8a7JyWA2UmFUXovJB_UNCbCfbFkjVnczRrRCDm_1M8eKLhFfxGvZDk7Xxi1r9jF6_BAksmoJABv3gxAhDruh32lG5u_JuGeSQnM614JI0I9K83FHvA3f7qXwd5hNnN756WwhA7X27xwTXqD8mMlVbYTrafou5ztQyfgTVyHXh8Yuo0BcBIfZL_H0zj1xz-jVGHW5_EVCYkYDy9AfMwSOI3K6Sn4N8BOyPOkGupbJjn5hpWJPX2gOaNVPcVpE3ZPeDwrv6a5Ni_fgqQyuHTHjR_6-TYFM-2_aBKiZYElhyDqxpi5BeDlB-SD7k_iZqArrZrgT2LXygKd1NbRx6OFL5976A7epbdiLnRm--UBrF3gEH9jXXqHBOpxryRZZ0AX6bWOvZcUGeTlOjewhZh5tQjFq0tV7wECsqeOJhejCQl7Q8h5dLX8igvi60kZo2x-Zf0DeCaw7hauVn4fquhXeOQaYL3OscJ_SvCLQrW1d2nqL0TmW4uw416eMtZ3GxUGSREPWARzwPWTHCOUg39PqfIvK81WkjSlq2WrNEO23BorJdzfb8A9XRrCuan_HiiQde731J2LCIDTBwE9rQB2qpF-GWSfkVyx3VencUq3kq5sx4ugSfavMZXS1uIAjffNdZkbg1GVXcpS0	ScriptElement	197 kB	2024-08-21	2024-08-21
Pretty URL reader.egress.com/ScriptResource.axd?d=DLRNOI8KTEqlJUfVFZhroCFtlMKVuWC5N3HZK8a7JyWA2UmFUXovJB_UNCbCfbFkjVnczRrRCDm_1M8eKLhFfxGvZDk7Xxi1r9jF6_BAksmoJABv3gxAhDruh32lG5u_JuGeSQnM614JI0I9K83FHvA3f7qXwd5hNnN756WwhA7X27xwTXqD8mMlVbYTrafou5ztQyfgTVyHXh8Yuo0BcBIfZL_H0zj1xz-jVGHW5_EVCYkYDy9AfMwSOI3K6Sn4N8BOyPOkGupbJjn5hpWJPX2gOaNVPcVpE3ZPeDwrv6a5Ni_fgqQyuHTHjR_6-TYFM-2_aBKiZYElhyDqxpi5BeDlB-SD7k_iZqArrZrgT2LXygKd1NbRx6OFL5976A7epbdiLnRm--UBrF3gEH9jXXqHBOpxryRZZ0AX6bWOvZcUGeTlOjewhZh5tQjFq0tV7wECsqeOJhejCQl7Q8h5dLX8igvi60kZo2x-Zf0DeCaw7hauVn4fquhXeOQaYL3OscJ_SvCLQrW1d2nqL0TmW4uw416eMtZ3GxUGSREPWARzwPWTHCOUg39PqfIvK81WkjSlq2WrNEO23BorJdzfb8A9XRrCuan_HiiQde731J2LCIDTBwE9rQB2qpF-GWSfkVyx3VencUq3kq5sx4ugSfavMZXS1uIAjffNdZkbg1GVXcpS0 IP 20.40.108.241 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-21 03:45 Last Seen2024-08-21 03:45 Times Seen1 Hash 1917e5be8143704eae6f1c327525e8ed eee911c6422e330f927c89d2115e16fb2c3eb6d3 a94e8dcb4ec3f8c5aa69414842fa6e0ee671b9b17bcf219b649ff688ca0525cc Loading...

HTTP Transactions (13)

	URL	IP	Response	Size
	reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750	20.40.108.241	302 Found	185 B
URL User Request GET HTTP/2 reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750 IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 185 B (185 bytes) Hash afa406ebd3b269a9f8303d89fab25824 98c13bbe7f9cabb2c77947b72030c134dfc575af d1a55d575b53cb5e6e853c08298246b291d693881072fa04f1a14e48685c7514 HTTP Headers `GET /p/0e5e4e9bac563086b21081fa52aa3750 HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found cache-control: no-cache, no-store pragma: no-cache content-type: text/html; charset=utf-8 expires: -1 location: https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 set-cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; path=/; secure; HttpOnly; SameSite=None date: Mon, 23 Oct 2023 09:46:00 GMT content-length: 185 X-Firefox-Spdy: h2

	reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0	20.40.108.241	200 OK	5.3 kB
URL User Request GET HTTP/2 reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1524), with CRLF line terminators Size 5.3 kB (5304 bytes) Hash 4a669e4a2859830de5baa94036659b91 ec091a607e54757cd1186c9837dc70160110f9d3 824efbe6b30172ecbe0f1db77442be8d08c481bfd58bf16e2a2e791952125b14 HTTP Headers GET /p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: no-cache, no-store pragma: no-cache content-type: text/html; charset=utf-8 content-encoding: gzip expires: -1 vary: Accept-Encoding server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 set-cookie: waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1; domain=reader.egress.com; expires=Wed, 23-Oct-2024 09:46:00 GMT; path=/; secure; HttpOnly; SameSite=None date: Mon, 23 Oct 2023 09:46:00 GMT content-length: 5304 X-Firefox-Spdy: h2

	reader.egress.com/App_Themes/Default/css.axd?t=Default&b=default&v=30FLNDxKoIi8iglctmi5bN1VJyc1	20.40.108.241	200 OK	9.4 kB
URL GET HTTP/2 reader.egress.com/App_Themes/Default/css.axd?t=Default&b=default&v=30FLNDxKoIi8iglctmi5bN1VJyc1 IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 9.4 kB (9382 bytes) Hash 1214183464a2be78a25b54a1395a46c9 7b63297026ed5bd7f7566d3e2d88065934e64bb8 70dc9e4094270dbbee922a9284e8fd48dacca6bc08de9141bf4408a6eb3f28ea HTTP Headers GET /App_Themes/Default/css.axd?t=Default&b=default&v=30FLNDxKoIi8iglctmi5bN1VJyc1 HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: public content-type: text/css content-encoding: gzip expires: Sun, 29 Oct 2023 08:33:23 GMT last-modified: Sun, 22 Oct 2023 08:33:23 GMT server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 9382 X-Firefox-Spdy: h2`

	reader.egress.com/App_Themes/css.axd?t=ajtcss&v=30FLNDxKoIi8iglctmi5bN1VJyc1	20.40.108.241	200 OK	3.6 kB
URL GET HTTP/2 reader.egress.com/App_Themes/css.axd?t=ajtcss&v=30FLNDxKoIi8iglctmi5bN1VJyc1 IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type ASCII text, with CRLF, LF line terminators Size 3.6 kB (3623 bytes) Hash c3424316842544d9fc079e6595f6bc22 0232ebe7d2e589b3b1dfec179cee15b0d7bf37cd 265c1076d4d18079d8d4fc2ecfdb75bf1ece0a7b3764650d260cc741b6df5b11 HTTP Headers GET /App_Themes/css.axd?t=ajtcss&v=30FLNDxKoIi8iglctmi5bN1VJyc1 HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: public content-type: text/css content-encoding: gzip expires: Sun, 29 Oct 2023 08:33:23 GMT last-modified: Sun, 22 Oct 2023 08:33:23 GMT server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 3623 X-Firefox-Spdy: h2`

	reader.egress.com/ScriptResource.axd?d=DLRNOI8KTEqlJUfVFZhroCFtlMKVuWC5N3HZK8a7JyWA2UmFUXovJB_UNCbCfbFkjVnczRrRCDm_1M8eKLhFfxGvZDk7Xxi1r9jF6_BAksmoJABv3gxAhDruh32lG5u_JuGeSQnM614JI0I9K83FHvA3f7qXwd5hNnN756WwhA7X27xwTXqD8mMlVbYTrafou5ztQyfgTVyHXh8Yuo0BcBIfZL_H0zj1xz-jVGHW5_EVCYkYDy9AfMwSOI3K6Sn4N8BOyPOkGupbJjn5hpWJPX2gOaNVPcVpE3ZPeDwrv6a5Ni_fgqQyuHTHjR_6-TYFM-2_aBKiZYElhyDqxpi5BeDlB-SD7k_iZqArrZrgT2LXygKd1NbRx6OFL5976A7epbdiLnRm--UBrF3gEH9jXXqHBOpxryRZZ0AX6bWOvZcUGeTlOjewhZh5tQjFq0tV7wECsqeOJhejCQl7Q8h5dLX8igvi60kZo2x-Zf0DeCaw7hauVn4fquhXeOQaYL3OscJ_SvCLQrW1d2nqL0TmW4uw416eMtZ3GxUGSREPWARzwPWTHCOUg39PqfIvK81WkjSlq2WrNEO23BorJdzfb8A9XRrCuan_HiiQde731J2LCIDTBwE9rQB2qpF-GWSfkVyx3VencUq3kq5sx4ugSfavMZXS1uIAjffNdZkbg1GVXcpS0	20.40.108.241	200 OK	44 kB
URL GET HTTP/2 reader.egress.com/ScriptResource.axd?d=DLRNOI8KTEqlJUfVFZhroCFtlMKVuWC5N3HZK8a7JyWA2UmFUXovJB_UNCbCfbFkjVnczRrRCDm_1M8eKLhFfxGvZDk7Xxi1r9jF6_BAksmoJABv3gxAhDruh32lG5u_JuGeSQnM614JI0I9K83FHvA3f7qXwd5hNnN756WwhA7X27xwTXqD8mMlVbYTrafou5ztQyfgTVyHXh8Yuo0BcBIfZL_H0zj1xz-jVGHW5_EVCYkYDy9AfMwSOI3K6Sn4N8BOyPOkGupbJjn5hpWJPX2gOaNVPcVpE3ZPeDwrv6a5Ni_fgqQyuHTHjR_6-TYFM-2_aBKiZYElhyDqxpi5BeDlB-SD7k_iZqArrZrgT2LXygKd1NbRx6OFL5976A7epbdiLnRm--UBrF3gEH9jXXqHBOpxryRZZ0AX6bWOvZcUGeTlOjewhZh5tQjFq0tV7wECsqeOJhejCQl7Q8h5dLX8igvi60kZo2x-Zf0DeCaw7hauVn4fquhXeOQaYL3OscJ_SvCLQrW1d2nqL0TmW4uw416eMtZ3GxUGSREPWARzwPWTHCOUg39PqfIvK81WkjSlq2WrNEO23BorJdzfb8A9XRrCuan_HiiQde731J2LCIDTBwE9rQB2qpF-GWSfkVyx3VencUq3kq5sx4ugSfavMZXS1uIAjffNdZkbg1GVXcpS0 IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type Unicode text, UTF-8 (with BOM) text, with very long lines (26662), with CRLF, LF line terminators Size 44 kB (44513 bytes) Hash baf15c8229bd347266212f446b954cca c4a4922425cc718d7a3c3e2d5da423ae5545f69c 8d6b9a2eb5b89267184ca6d7910a0624513ee97a110bd3ff3d0389dd692104eb HTTP Headers GET /ScriptResource.axd?d=DLRNOI8KTEqlJUfVFZhroCFtlMKVuWC5N3HZK8a7JyWA2UmFUXovJB_UNCbCfbFkjVnczRrRCDm_1M8eKLhFfxGvZDk7Xxi1r9jF6_BAksmoJABv3gxAhDruh32lG5u_JuGeSQnM614JI0I9K83FHvA3f7qXwd5hNnN756WwhA7X27xwTXqD8mMlVbYTrafou5ztQyfgTVyHXh8Yuo0BcBIfZL_H0zj1xz-jVGHW5_EVCYkYDy9AfMwSOI3K6Sn4N8BOyPOkGupbJjn5hpWJPX2gOaNVPcVpE3ZPeDwrv6a5Ni_fgqQyuHTHjR_6-TYFM-2_aBKiZYElhyDqxpi5BeDlB-SD7k_iZqArrZrgT2LXygKd1NbRx6OFL5976A7epbdiLnRm--UBrF3gEH9jXXqHBOpxryRZZ0AX6bWOvZcUGeTlOjewhZh5tQjFq0tV7wECsqeOJhejCQl7Q8h5dLX8igvi60kZo2x-Zf0DeCaw7hauVn4fquhXeOQaYL3OscJ_SvCLQrW1d2nqL0TmW4uw416eMtZ3GxUGSREPWARzwPWTHCOUg39PqfIvK81WkjSlq2WrNEO23BorJdzfb8A9XRrCuan_HiiQde731J2LCIDTBwE9rQB2qpF-GWSfkVyx3VencUq3kq5sx4ugSfavMZXS1uIAjffNdZkbg1GVXcpS0 HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: public content-type: application/x-javascript content-encoding: gzip expires: Mon, 21 Oct 2024 08:33:23 GMT last-modified: Sun, 22 Oct 2023 08:33:23 GMT server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 44513 X-Firefox-Spdy: h2`

	reader.egress.com/images/logo.png	20.40.108.241	200 OK	5.8 kB
URL GET HTTP/2 reader.egress.com/images/logo.png IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type PNG image data, 241 x 60, 8-bit/color RGBA, non-interlaced\012- data Size 5.8 kB (5825 bytes) Hash 866ca40c4eebd747f0c3ce91186fb023 d14eda8dfa2d22c01475d34b92791c6cc2e89030 269a167f1c3c2eac44b7ddb4c0f51b59030e9df9c3bb5cba402a86f63ed07f51 HTTP Headers GET /images/logo.png HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: max-age=10800 content-type: image/png last-modified: Mon, 31 Jul 2023 10:02:16 GMT accept-ranges: bytes etag: "044a81596c3d91:0" server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 5825 X-Firefox-Spdy: h2`

	ocsp.r2m01.amazontrust.com/	143.204.53.97		471 B
URL ocsp.r2m01.amazontrust.com/ IP 143.204.53.97:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash cbc046798c8b12e9875ae9714bd6e0d2 1144a4490829c20a2e155a804efeaf4080c50bf3 26a6ebbb2561bdcc20c31616144c900fe3ed925983406b176ff075086c6805b4 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=7200 Date: Mon, 23 Oct 2023 09:46:01 GMT Last-Modified: Mon, 23 Oct 2023 08:41:26 GMT Server: ECAcc (ska/F7B0) X-Cache: Miss from cloudfront Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: AEUwmdtHJMI9UBtHUndUdtaeXqg0T4gvbzALMu0WCH2nVDn9pECi9A== Age: 3875`

	swstyle.s3.amazonaws.com/wa/bupa/style.css	3.5.19.125	200 OK	2.2 kB
URL GET HTTP/1.1 swstyle.s3.amazonaws.com/wa/bupa/style.css IP 3.5.19.125:443 ASN #14618 AMAZON-AES Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerAmazon Subject.s3.amazonaws.com FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1 ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 2.2 kB (2205 bytes) Hash 7f921a99ea5f1433a30d1498c4e45de4 d8e0740c3b61195289a3b1a0b69b874b94a65e3e 180ceac3fa70adf783b705b9d9fd885f9aaa8cc529912fed8c3ec240daf590b1 HTTP Headers `GET /wa/bupa/style.css HTTP/1.1 Host: swstyle.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK x-amz-id-2: JwCjCDtvWdKt1Y8g3GxDXo2Ej6oABCV2hWfdlsW2sVGrYXR1q3oWB8ruz/4+SbmepT2KV4MrntCRvBhCJzvlCA== x-amz-request-id: 9Y64RH1J9HYQ47DB Date: Mon, 23 Oct 2023 09:46:03 GMT Last-Modified: Thu, 21 Nov 2013 16:14:45 GMT ETag: "7f921a99ea5f1433a30d1498c4e45de4" x-amz-meta-cb-modifiedtime: Fri, 08 Nov 2013 14:34:26 GMT Accept-Ranges: bytes Content-Type: text/css Server: AmazonS3 Content-Length: 2205`

	reader.egress.com/images/print.css	20.40.108.241	200 OK	178 B
URL GET HTTP/2 reader.egress.com/images/print.css IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 178 B (178 bytes) Hash 241c98f170b659643d8f90c4d53bc088 2d4ea0baa30da89d08273a6e39f2bb4abfc7d447 c5caf334ac5a35705496e524da9a3f9be3f72754b8a896640f4c0c51577cd512 HTTP Headers GET /images/print.css HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: max-age=10800 content-type: text/css content-encoding: gzip last-modified: Mon, 31 Jul 2023 10:02:16 GMT accept-ranges: bytes etag: "044a81596c3d91:0" vary: Accept-Encoding server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 178 X-Firefox-Spdy: h2`

	reader.egress.com/images/switchlogomini.gif	20.40.108.241	200 OK	1.2 kB
URL GET HTTP/2 reader.egress.com/images/switchlogomini.gif IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type GIF image data, version 89a, 20 x 20\012- data Size 1.2 kB (1176 bytes) Hash b67e4fead6c896f10ef595edd66f6c22 6c5067543824496ecd47157edd9a9b6cb958c1fc 2b6fef9cc8924b275911f2ce06a27d5abd9aad3faa8173079c0ba5c037b863db HTTP Headers GET /images/switchlogomini.gif HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/App_Themes/Default/css.axd?t=Default&b=default&v=30FLNDxKoIi8iglctmi5bN1VJyc1 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: max-age=10800 content-type: image/gif last-modified: Mon, 31 Jul 2023 10:02:16 GMT accept-ranges: bytes etag: "044a81596c3d91:0" server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 1176 X-Firefox-Spdy: h2`

	reader.egress.com/images/register.gif	20.40.108.241	200 OK	2.9 kB
URL GET HTTP/2 reader.egress.com/images/register.gif IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type GIF image data, version 89a, 80 x 80\012- data Size 2.9 kB (2875 bytes) Hash 69cf9ba409e83a33be71f711973b537d 3fe7677e276f7fa397214814e0dc550b6973081a 1a15949543bc52bbebfe2fe8804d34706d3b1b28c493ef834374de546ea8f413 HTTP Headers GET /images/register.gif HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/App_Themes/Default/css.axd?t=Default&b=default&v=30FLNDxKoIi8iglctmi5bN1VJyc1 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: max-age=10800 content-type: image/gif last-modified: Mon, 31 Jul 2023 10:02:16 GMT accept-ranges: bytes etag: "044a81596c3d91:0" server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 2875 X-Firefox-Spdy: h2`

	reader.egress.com/images/signin.gif	20.40.108.241	200 OK	1.8 kB
URL GET HTTP/2 reader.egress.com/images/signin.gif IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type GIF image data, version 89a, 80 x 80\012- data Size 1.8 kB (1814 bytes) Hash 34dcd4e3c5d1e940cfd0de539e9134b4 d0ce6d12831237c488d2520262837109f38133bd 16ea6c975a4615609be166598d3040e1f9aece2bc397ef283e8ceac288c4a4a8 HTTP Headers GET /images/signin.gif HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/App_Themes/Default/css.axd?t=Default&b=default&v=30FLNDxKoIi8iglctmi5bN1VJyc1 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK cache-control: max-age=10800 content-type: image/gif last-modified: Mon, 31 Jul 2023 10:02:16 GMT accept-ranges: bytes etag: "044a81596c3d91:0" server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 1814 X-Firefox-Spdy: h2`

	reader.egress.com/favicon.ico	20.40.108.241	200 OK	34 kB
URL GET HTTP/2 reader.egress.com/favicon.ico IP 20.40.108.241:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 Certificate IssuerSectigo Limited Subject.reader.egress.com Fingerprint97:92:88:74:AD:63:87:C5:53:F9:3A:8C:1B:EE:D3:EA:CD:81:2E:7A ValidityThu, 19 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data Size 34 kB (34494 bytes) Hash 4f53a4840eab0a1fd82bb9f4cb388cdb 7d4edab028c163303d156267addad766c0fe57ac 044c36aa3d92818e2f83ac8123113b3c794ffbcb0177ff6cf9a5a6b8af2a01de HTTP Headers GET /favicon.ico HTTP/1.1 Host: reader.egress.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reader.egress.com/p/0e5e4e9bac563086b21081fa52aa3750?wa-ui=0 DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=l1qrqpulm24w2q1ostl3tpeb; waoptions=d=1da0595bafc7ffd-c9be9015e34c4c98a22f4a76f6aec2b4&v=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK content-type: image/x-icon last-modified: Mon, 31 Jul 2023 10:02:16 GMT accept-ranges: bytes etag: "044a81596c3d91:0" server: Microsoft-IIS/10.0 x-content-type-options: nosniff referrer-policy: same-origin x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 date: Mon, 23 Oct 2023 09:46:01 GMT content-length: 34494 X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2