Report - ingepipe-peru.com/notion/?original=Ylc5MmFXRnVkRzh1WTI5dCxUR2x6WVE9PSxiR2x6WVM1dFkyTnZkMkZ1

Report Overview

Visited public
2023-09-18 06:41:45
Tags
Submit Tags
URL
ingepipe-peru.com/notion/?original=Ylc5MmFXRnVkRzh1WTI5dCxUR2x6WVE9PSxiR2x6WVM1dFkyTnZkMkZ1
Finishing URL
tasks.office.com/
IP / ASN
50.31.188.119
#23352 SERVERCENTRAL
Title
Microsoft Planner

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ingepipe-peru.com	unknown	2020-12-28	2021-01-23 21:17:30	2023-09-17 02:14:41	547 B	17 kB	50.31.188.119
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2023-09-03 06:47:12	443 B	819 B	142.250.74.132
t1.gstatic.com	unknown	2008-02-11	2013-05-07 00:57:20	2023-09-17 19:40:24	1.0 kB	2.5 kB	142.250.74.68
tasks.office.com	12879	1999-04-20	2015-07-07 21:37:59	2023-09-18 04:16:52	5.6 kB	34 kB	13.107.9.200
login.microsoftonline.com	25	2002-07-09	2017-02-19 08:06:40	2019-07-18 10:58:27	609 B	2.1 kB	20.190.177.146

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-18 06:41:37	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	moz-extension://94b86a3e-a8f5-4509-b451-a3e524e5069f/injections/js/bug1731825-office365-email-handling-prompt-autohide.js		995 B	2023-04-11	2025-07-16
Pretty URL moz-extension://94b86a3e-a8f5-4509-b451-a3e524e5069f/injections/js/bug1731825-office365-email-handling-prompt-autohide.js IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 22:15 Last Seen2025-07-16 09:19 Times Seen52677 Hash 7c873167b5d35fd9f6690071701d4669 f897afe9818a00a80e98bdbc67e7f67343f89378 014e00e9c71f02f5892cda29da8fd08058817ebd57a12cfee75236874f4e889a Loading...

	tasks.office.com/content/161690740751_scripts/DefaultSignIn.min.js	ScriptElement	17 kB	2023-03-11	2025-05-14
Pretty URL tasks.office.com/content/161690740751_scripts/DefaultSignIn.min.js IP 13.107.9.200 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 08:39 Last Seen2025-05-14 16:57 Times Seen13 Hash 30523f1cb010d42d38851fe280346d8a c68a45d15777e67641ccad71d45a631a1a9903a2 586dfd0ecaffe298f8fc50796d50f50735c008f8109bfacff7241e2457b56bd2 Loading...

	tasks.office.com/	ScriptElement	0 B	0001-01-01	2025-07-16
Pretty URL tasks.office.com/ IP 13.107.9.200 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-07-16 09:21 Times Seen5434583 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (13)

	URL	IP	Response	Size
	GET ingepipe-peru.com/notion/?original=Ylc5MmFXRnVkRzh1WTI5dCxUR2x6WVE9PSxiR2x6WVM1dFkyTnZkMkZ1	50.31.188.119	200 OK	17 kB
URL User Request GET HTTP/2 ingepipe-peru.com/notion/?original=Ylc5MmFXRnVkRzh1WTI5dCxUR2x6WVE9PSxiR2x6WVM1dFkyTnZkMkZ1 IP 50.31.188.119:443 ASN #23352 SERVERCENTRAL Certificate IssuercPanel, Inc. Subjectingepipe-peru.com FingerprintF7:0A:1D:89:A2:A3:FB:98:43:70:FC:C2:E6:18:B2:80:B0:B5:61:E4 ValidityThu, 17 Aug 2023 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65034), with CRLF line terminators Size 17 kB (16680 bytes) Hash 6792d81a989955125252a09dabd56923 c0fee06f39e43f757710de2a8af486c18b4a37a6 6915bfb23a12e483728fcdc580652a9992e70cacb03668d67bfea65d52f09372 HTTP Headers GET /notion/?original=Ylc5MmFXRnVkRzh1WTI5dCxUR2x6WVE9PSxiR2x6WVM1dFkyTnZkMkZ1 HTTP/1.1 Host: ingepipe-peru.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: text/html; charset=UTF-8 content-length: 16680 content-encoding: br vary: Accept-Encoding date: Mon, 18 Sep 2023 06:41:27 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

	GET www.google.com/s2/favicons?domain=google.com	142.250.74.132	301 Moved Permanently	330 B
URL GET HTTP/2 www.google.com/s2/favicons?domain=google.com IP 142.250.74.132:443 ASN #15169 GOOGLE Requested by https://ingepipe-peru.com/notion/?original=Ylc5MmFXRnVkRzh1WTI5dCxUR2x6WVE9PSxiR2x6WVM1dFkyTnZkMkZ1 Certificate IssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators Size 330 B (330 bytes) Hash d4def0c0de7ac541950045ae3d215736 f66c1c19a843889f1ea7a3f8de28dd3af1535122 82faf781871f5414ebc84d1ec251fa6b8d7b43203218ae50815fb6bc5513add1 HTTP Headers `GET /s2/favicons?domain=google.com HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://ingepipe-peru.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://google.com&size=16 x-content-type-options: nosniff server: sffe content-length: 330 x-xss-protection: 0 date: Mon, 18 Sep 2023 06:38:16 GMT expires: Mon, 18 Sep 2023 07:08:16 GMT cache-control: public, max-age=1800 content-type: text/html; charset=UTF-8 age: 192 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://google.com&size=16	142.250.74.68		400 B
URL t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://google.com&size=16 IP 142.250.74.68:0 ASN #15169 GOOGLE File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Size 400 B (400 bytes) Hash ad6a9230add1febf1060c544f9a19690 8bb1f3c585ea9614f10ed239fe59dbc07680c6f3 22e711f0e036325e547946a55cf86f27e601c5192191afba7943dd15de8adc28 HTTP Headers `GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://google.com&size=16 HTTP/1.1 Host: t1.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://ingepipe-peru.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-location: https://www.google.com/images/branding/product/1x/gsa_android_144dp.png content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="media-favicon" report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]} content-length: 400 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Fri, 15 Sep 2023 11:47:49 GMT expires: Fri, 22 Sep 2023 11:47:49 GMT cache-control: public, max-age=604800 age: 240819 last-modified: Tue, 17 Mar 2020 10:46:56 GMT content-type: image/png alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET tasks.office.com/	13.107.9.200	200 OK	2.2 kB
URL User Request GET HTTP/2 tasks.office.com/ IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators Size 2.2 kB (2236 bytes) Hash 188e28a026631704af0f1c6bc5b6651e d4f9eeb8e716d2de4b4b8e94c396ba957a938ab3 ded4909facdb91107ca2068f971c5359d2b25f4c497cff2c46551e9dbae9a926 HTTP Headers GET / HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://ingepipe-peru.com/ Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK cache-control: no-cache, no-store pragma: no-cache content-length: 2236 content-type: text/html; charset=utf-8 content-encoding: gzip expires: -1 vary: Accept-Encoding p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" set-cookie: PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; domain=tasks.office.com; expires=Sun, 17-Dec-2023 06:41:31 GMT; path=/; samesite=none; secure; HttpOnly __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1; path=/; samesite=none; secure; HttpOnly x-proxyfe: TodoFrontEndBox_IN_8 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-correlationid: 497d8fb4-2a4d-4b20-a49c-1603624443ff x-usersessionid: 497d8fb4-2a4d-4b20-a49c-1603624443ff x-tasks-correlationid: c57cbace-5549-44e0-8a3e-efbcc2cd117e x-officefe: TodoFrontEndBox_IN_8 x-officeversion: 16.0.16907.40751 x-officecluster: neu-000.tasks.osi.office.net content-security-policy: frame-ancestors 'none'; x-frame-options: Deny x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: B1715444ADB94BB6B7466A0EFDEB6910 Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:31Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET tasks.office.com/content/161690740751_images/sign_in_icons.png	13.107.9.200	200 OK	2.3 kB
URL GET HTTP/2 tasks.office.com/content/161690740751_images/sign_in_icons.png IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type PNG image data, 426 x 28, 8-bit/color RGBA, non-interlaced\012- data Size 2.3 kB (2320 bytes) Hash a7e1fbb4f32e186b97380f4cac30fa3f f77965e2964cfce45e10f68569b7968e6aedb0e0 308c6278df0e22d254772c6f43f062b0bafeee6dd191d117e86eff237ae05bc8 HTTP Headers GET /content/161690740751_images/sign_in_icons.png HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tasks.office.com/ DNT: 1 Connection: keep-alive Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: max-age=63072000 content-length: 2320 content-type: image/png last-modified: Thu, 07 Sep 2023 06:25:14 GMT accept-ranges: bytes etag: "041a3f54e1d91:0" x-proxyfe: TodoFrontEndBox_IN_5 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: FA13FB21CA54409CB8BC83AD818FFCC2 Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:32Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET tasks.office.com/content/161690740751_images/PlannerLogo100x100.png	13.107.9.200	200 OK	899 B
URL GET HTTP/2 tasks.office.com/content/161690740751_images/PlannerLogo100x100.png IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data Size 899 B (899 bytes) Hash d6f06274c734178174195d13a1ca349d 6bd3f91fc1415d672918efeeedb4449bf9d72a0b adc158e28eaaa4260898b6deba012dc5a7dabf2b81f4e0f37f291bf7c5f62bd2 HTTP Headers GET /content/161690740751_images/PlannerLogo100x100.png HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tasks.office.com/ DNT: 1 Connection: keep-alive Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: max-age=63072000 content-length: 899 content-type: image/png last-modified: Thu, 07 Sep 2023 06:25:14 GMT accept-ranges: bytes etag: "041a3f54e1d91:0" x-proxyfe: TodoFrontEndBox_IN_12 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 192F3180CF1E490A8650DCDE1FD2BE78 Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:32Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET tasks.office.com/content/161690740751_css//Plex.css	13.107.9.200	200 OK	6.3 kB
URL GET HTTP/2 tasks.office.com/content/161690740751_css//Plex.css IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type Unicode text, UTF-8 text, with CRLF line terminators Size 6.3 kB (6348 bytes) Hash 7053349a4cb8c214a9a215dc5c793f98 144e9afc8f29701565d6ae6f195217cb3cf216d4 262d76533e94d5d0ea546ff171af380fc02d20ed081ce7bdb33e1ef84ead31ca HTTP Headers GET /content/161690740751_css//Plex.css HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tasks.office.com/ DNT: 1 Connection: keep-alive Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: max-age=63072000 content-length: 6348 content-type: text/css content-encoding: gzip last-modified: Thu, 07 Sep 2023 06:25:14 GMT accept-ranges: bytes etag: "041a3f54e1d91:0" vary: Accept-Encoding x-proxyfe: TodoFrontEndBox_IN_16 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: AFF3779A317C4C5082C046D5569D4573 Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:32Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET tasks.office.com/content/161690740751_scripts/DefaultSignIn.min.js	13.107.9.200	200 OK	3.5 kB
URL GET HTTP/2 tasks.office.com/content/161690740751_scripts/DefaultSignIn.min.js IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type ASCII text, with very long lines (16668), with no line terminators Size 3.5 kB (3476 bytes) Hash 30523f1cb010d42d38851fe280346d8a c68a45d15777e67641ccad71d45a631a1a9903a2 586dfd0ecaffe298f8fc50796d50f50735c008f8109bfacff7241e2457b56bd2 HTTP Headers GET /content/161690740751_scripts/DefaultSignIn.min.js HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tasks.office.com/ DNT: 1 Connection: keep-alive Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: max-age=63072000 content-length: 3476 content-type: application/javascript content-encoding: gzip last-modified: Thu, 07 Sep 2023 06:25:14 GMT accept-ranges: bytes etag: "041a3f54e1d91:0" vary: Accept-Encoding x-proxyfe: TodoFrontEndBox_IN_11 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 5EFF9135A9884010B5BB93240AA584DA Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:32Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET tasks.office.com/content/161690740751_images/spinner-highlander.gif	13.107.9.200	200 OK	4.1 kB
URL GET HTTP/2 tasks.office.com/content/161690740751_images/spinner-highlander.gif IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type GIF image data, version 89a, 32 x 32\012- data Size 4.1 kB (4128 bytes) Hash e4ba8e5c7eb8b6080aadb62c29bbf737 28895f7d00816fedbd3ef0421c4036bb7142aa6a e80a223dd9da882b676fd9dc610b0018288fb1c3be056e49b6123a7fbdff5019 HTTP Headers GET /content/161690740751_images/spinner-highlander.gif HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tasks.office.com/ DNT: 1 Connection: keep-alive Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: max-age=63072000 content-length: 4128 content-type: image/gif last-modified: Thu, 07 Sep 2023 06:25:14 GMT accept-ranges: bytes etag: "041a3f54e1d91:0" x-proxyfe: TodoFrontEndBox_IN_1 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 8B1A68FD758F4620AA7021346CB0287A Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:32Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET tasks.office.com/content/161690740751_images/microsoft_logo.png	13.107.9.200	200 OK	1.1 kB
URL GET HTTP/2 tasks.office.com/content/161690740751_images/microsoft_logo.png IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type PNG image data, 75 x 16, 8-bit/color RGBA, non-interlaced\012- data Size 1.1 kB (1140 bytes) Hash d35994de7f7227d1c6f490a045e41984 225669c9af61a4939b183d5c39782401dbdcbedd 32abe3755e545ef8060ac6d4dd739f3367bcd0d0c6a5f5dea3babac2bf299a7c HTTP Headers GET /content/161690740751_images/microsoft_logo.png HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tasks.office.com/ DNT: 1 Connection: keep-alive Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: max-age=63072000 content-length: 1140 content-type: image/png last-modified: Thu, 07 Sep 2023 06:25:14 GMT accept-ranges: bytes etag: "041a3f54e1d91:0" x-proxyfe: TodoFrontEndBox_IN_9 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 11124E5A3A6F48178CE524F281836D77 Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:32Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET tasks.office.com/favicon.ico	13.107.9.200	200 OK	7.9 kB
URL GET HTTP/2 tasks.office.com/favicon.ico IP 13.107.9.200:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerMicrosoft Corporation Subjecttasks.office.com Fingerprint9D:D7:FC:FE:4A:51:16:22:73:C2:35:07:49:D5:7D:78:06:80:9E:C0 ValidityWed, 26 Jul 2023 05:27:27 GMT - Thu, 27 Jun 2024 23:59:59 GMT File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel\012- data Size 7.9 kB (7886 bytes) Hash cbf6d19080a05181dd8f2d5398b6edf7 f7311b603879d68fa757d0d96ab4b9f575a450de 5e47336a5d05a0fcceaed7bc3b2cbf98f17a8e6abac2d38a2fa93a8dcf042d27 HTTP Headers GET /favicon.ico HTTP/1.1 Host: tasks.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tasks.office.com/ DNT: 1 Connection: keep-alive Cookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; PlannerWebSessionId=ae886fbe-e565-4869-bd3a-f5a9a13b3155; __RequestVerificationToken=u2g1opUixLtBZl_FsUKz7boNhS6ILMYKd4DLTJ_T2fFmC_Yv9hX3_EqFsksG2XejiIeA0pWmmaGxyvMVEGA8u0qg2M-hT0DkU4kZ6oyrxMI1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK cache-control: max-age=63072000 content-length: 7886 content-type: image/x-icon last-modified: Thu, 07 Sep 2023 06:25:14 GMT accept-ranges: bytes etag: "041a3f54e1d91:0" x-proxyfe: TodoFrontEndBox_IN_8 x-proxycluster: neu-000.tasks.osi.office.net x-proxyversion: 16.0.16907.40751 x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 584985B9F9884EBCBD8FCC46E157BFC2 Ref B: HEL01EDGE0409 Ref C: 2023-09-18T06:41:32Z date: Mon, 18 Sep 2023 06:41:31 GMT X-Firefox-Spdy: h2

	GET login.microsoftonline.com/savedusers?wreply=https://tasks.office.com/landing&appid=09abbdfd-ed23-44ee-a2d9-a627aa1c90f3	20.190.177.146	200 OK	1.0 kB
URL GET HTTP/1.1 login.microsoftonline.com/savedusers?wreply=https://tasks.office.com/landing&appid=09abbdfd-ed23-44ee-a2d9-a627aa1c90f3 IP 20.190.177.146:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://tasks.office.com/ Certificate IssuerDigiCert Inc Subjectstamp2.login.microsoftonline.com FingerprintB8:EC:FA:34:DB:AA:B7:DE:F3:A0:CE:69:06:5C:14:E0:D0:28:69:40 ValidityTue, 22 Aug 2023 00:00:00 GMT - Thu, 22 Aug 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size 1.0 kB (1024 bytes) Hash 05ed94709f0bf58eba3d79dd8d8d9774 2d6addb1ef9c1bdf1df2be6277c68275c0de1604 3a78b51b93233d7c0b41850d5667cb0783728260ed7e400d6dfc0837c369436b HTTP Headers GET /savedusers?wreply=https://tasks.office.com/landing&appid=09abbdfd-ed23-44ee-a2d9-a627aa1c90f3 HTTP/1.1 Host: login.microsoftonline.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tasks.office.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: b2b8d0c6-53f7-4397-a6ad-4d209ed85300 x-ms-ests-server: 2.1.16314.5 - SEC ProdSlices Referrer-Policy: strict-origin-when-cross-origin X-XSS-Protection: 0 Set-Cookie: fpc=At1oQBN-H9NEgP6BcfX8qVQ; expires=Wed, 18-Oct-2023 06:41:32 GMT; path=/; secure; HttpOnly; SameSite=None esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPE6YUrZ3ufcK7sMAT1nCNa1DuPGXzwfHHK8KjSjtCGesmV6_hfmPVE3DS6Lu3zo-eCfirzys3nu5CmyHTKZJ0QSYvgQqFST01CjNtmyhUiSByPWQfHD2d404u--LNxYI6jwQnMhQEVNUzD4tDFbJNpIXCay9I9T0fxGTNXuvSQBMgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Mon, 18 Sep 2023 06:41:31 GMT Content-Length: 1024

	GET t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://google.com&size=16	142.250.74.68	200 OK	400 B
URL GET HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://google.com&size=16 IP 142.250.74.68:443 ASN #15169 GOOGLE Requested by https://ingepipe-peru.com/notion/?original=Ylc5MmFXRnVkRzh1WTI5dCxUR2x6WVE9PSxiR2x6WVM1dFkyTnZkMkZ1 Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Size 400 B (400 bytes) Hash ad6a9230add1febf1060c544f9a19690 8bb1f3c585ea9614f10ed239fe59dbc07680c6f3 22e711f0e036325e547946a55cf86f27e601c5192191afba7943dd15de8adc28 HTTP Headers `GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://google.com&size=16 HTTP/1.1 Host: t1.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://ingepipe-peru.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-location: https://www.google.com/images/branding/product/1x/gsa_android_144dp.png content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="media-favicon" report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]} content-length: 400 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Fri, 15 Sep 2023 11:47:49 GMT expires: Fri, 22 Sep 2023 11:47:49 GMT cache-control: public, max-age=604800 age: 240819 last-modified: Tue, 17 Mar 2020 10:46:56 GMT content-type: image/png alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by