Report - email.linuxfoundation.org/e3t/Ctc/RI+113/cZw--04/VWcmdD2Y2J3MW4q5ZY_1qJZlSW7swsJQ56GXL2KqRg3qgyTW8wLKSR6lZ3kxW7qLcQG2t1Dr6VCRHZn9kP_cxW8cQZpw2cJKpRW8qT8KH5MpLt8VRLxf14dkXlmW1jLd7K1PF6T8W2t2kNb1cCNdmW8xtS1f5KndJhW50wsrx5sX5tjW669zNV8p0-SKW2QbP318hy5Y9W303L3h7dxZmBW3HzNPx5-v-LlN3-xXd5ky5hZW3xXy5P92cG0GW6SlZ_H5_5lmpN5WmpT-SfFfFW6Rrj2j255JG6N4sb8k5vv9VFN8nTsyG8R3S5W2k3_gR4mYXYVW1jqKDP6YKff_W4RfD4q6mkC5DW4yjsQz1tTv52W7zHSy520chCvW53d2w43Mw1P1W7rHb-x3sfqHXW3nqV0g4YDV7

Report Overview

Visited public
2023-12-05 15:16:06
Tags
linkedin microsoft phishing
URL
email.linuxfoundation.org/e3t/Ctc/RI+113/cZw--04/VWcmdD2Y2J3MW4q5ZY_1qJZlSW7swsJQ56GXL2KqRg3qgyTW8wLKSR6lZ3kxW7qLcQG2t1Dr6VCRHZn9kP_cxW8cQZpw2cJKpRW8qT8KH5MpLt8VRLxf14dkXlmW1jLd7K1PF6T8W2t2kNb1cCNdmW8xtS1f5KndJhW50wsrx5sX5tjW669zNV8p0-SKW2QbP318hy5Y9W303L3h7dxZmBW3HzNPx5-v-LlN3-xXd5ky5hZW3xXy5P92cG0GW6SlZ_H5_5lmpN5WmpT-SfFfFW6Rrj2j255JG6N4sb8k5vv9VFN8nTsyG8R3S5W2k3_gR4mYXYVW1jqKDP6YKff_W4RfD4q6mkC5DW4yjsQz1tTv52W7zHSy520chCvW53d2w43Mw1P1W7rHb-x3sfqHXW3nqV0g4YDV7_f74XymY04
Finishing URL
www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
IP / ASN
199.60.103.225
#209242 Cloudflare London, LLC
Title
LinkedIn Login, Sign in | LinkedIn
Phishing - LinkedIn

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
email.linuxfoundation.org	525579	2002-01-08	2020-12-08 18:23:50	2023-12-01 21:07:29	1.3 kB	44 kB	199.60.103.225
www.linkedin.com	608	2002-11-02	2015-06-18 18:10:03	2023-12-05 05:24:07	35 kB	44 kB	13.107.42.14
static.licdn.com	12070	2011-02-24	2012-10-18 10:55:00	2023-12-05 07:32:29	6.8 kB	305 kB	23.36.76.210
ponf.linkedin.com	18578	2002-11-02	2020-12-13 16:52:45	2023-12-05 07:32:29	858 B	306 B	144.2.9.1
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-12-05 06:14:20	1.0 kB	56 kB	216.58.207.227
platform.linkedin.com	3785	2002-11-02	2012-05-21 15:08:59	2023-12-05 07:32:30	739 B	43 kB	23.36.76.121
play.google.com	34	1997-09-15	2013-05-31 01:24:35	2023-12-05 11:25:49	1.1 kB	1.6 kB	142.250.74.78
accounts.google.com	81	1997-09-15	2016-03-20 13:44:49	2023-12-05 09:21:53	1.3 kB	118 kB	173.194.73.84

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-05 15:15:55	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:55	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:56	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:56	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:56	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:56	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:56	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:56	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:57	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:57	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:59	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:15:59	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:16:02	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-12-05 15:16:02	low	Client IP	64.233.164.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	From	Size	First Seen	Last Seen
	static.licdn.com/sc/h/179r7h6dytjlclq68a906sd4s	ScriptElement	74 kB	2023-11-17	2024-08-20
Pretty URL static.licdn.com/sc/h/179r7h6dytjlclq68a906sd4s IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-17 02:19 Last Seen2024-08-20 19:11 Times Seen478 Hash 1a385461f30e3f360d31f242fd6b3d98 0c0d69d3d866e93732265776ae44fd02db855d99 f89934ac0709430477b8a664f72035461a08e79aab91944d71d695660d810c13 Loading...

	static.licdn.com/sc/h/es8jfua30moj789rlzkfx9heo	ScriptElement	249 kB	2023-11-01	2024-08-21
Pretty URL static.licdn.com/sc/h/es8jfua30moj789rlzkfx9heo IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-01 21:18 Last Seen2024-08-21 10:10 Times Seen535 Hash a041ea63e8e2c42dba82d2650b617e66 d8f25b3c769df6ec8ecc2dab2d4a67f255bc9956 bd3580fa64a24a72f97df0f382cb2d529568062394f30db2ade926fc2c92f814 Loading...

	static.licdn.com/sc/h/4k6diadsezedadhkq4uxfxss1	ScriptElement	186 kB	2023-03-07	2025-03-29
Pretty URL static.licdn.com/sc/h/4k6diadsezedadhkq4uxfxss1 IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:41 Last Seen2025-03-29 17:55 Times Seen4449 Hash 7554ae17c5023ecc6d0ffc1e8775bc2f 37b39540102e29993f710047ed89bbe3b47a3a2b 6101eea4239ded7503b74732d078de0de0e31d9465de3876b1641802dd299200 Loading...

	platform.linkedin.com/litms/utag/checkpoint-frontend/utag.js?cb=1701789300000	ScriptElement	134 kB	2023-08-18	2023-12-14
Pretty URL platform.linkedin.com/litms/utag/checkpoint-frontend/utag.js?cb=1701789300000 IP 23.36.76.121 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-18 02:59 Last Seen2023-12-14 05:26 Times Seen914 Hash db6c2bc7d90fd8644a138ef1a5a12261 9d8caf31e893a4b8e423ba663f7cc3d1f0eafe6a 48b3ee4a9140dc93948400bce8c0dd6ee916abab061d2d4ff3e36af63f8f9851 Loading...

	static.licdn.com/sc/h/ccg6j0toh362m9pa9exs90nin	ScriptElement	2.2 kB	2023-08-22	2024-08-21
Pretty URL static.licdn.com/sc/h/ccg6j0toh362m9pa9exs90nin IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-22 04:35 Last Seen2024-08-21 10:10 Times Seen1138 Hash 68225657c41b94dfdd7669563fa18c80 58e43494bc31122f06fcb3aa3764be2883d0618f 72bccd36c17aa93a7bb553557626bb720be60cde2357d817bd03af6be67cf08e Loading...

	static.licdn.com/sc/h/1gpe377m8n1eq73qveizv5onv	ScriptElement	39 kB	2023-03-07	2025-05-10
Pretty URL static.licdn.com/sc/h/1gpe377m8n1eq73qveizv5onv IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03 Last Seen2025-05-10 15:51 Times Seen3343 Hash f5629c31bca5301ab5980247effef360 f61db978aa8c26a7001df3f7600515b9f07f5231 c852b1105eb000028e9b27677996f8d4773daa31fa1aaf663cb6ae3a6857a50a Loading...

	accounts.google.com/_/gsi/_/js/k=gsi.gsi.en_US.l0gW8cfNiGI.O/am=AFCA/d=1/rs=AF0KOtUvd_mdMjORi1qJhR-dbm4LFQVGQg/m=credential_button_library	ScriptElement	107 kB	2023-12-05	2024-08-20
Pretty URL accounts.google.com/_/gsi/_/js/k=gsi.gsi.en_US.l0gW8cfNiGI.O/am=AFCA/d=1/rs=AF0KOtUvd_mdMjORi1qJhR-dbm4LFQVGQg/m=credential_button_library IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 00:18 Last Seen2024-08-20 16:45 Times Seen53 Hash 9334fbc8b32233fa291834a3a84ccb7a 0c2e96f450c895f3031a0e31932402aae2381951 e51581cb944e0c007fcf8fca56aaa20152af6122d5a919d4c9f827812b8296c8 Loading...

	accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US	ScriptElement	107 kB	2023-12-05	2024-08-20
Pretty URL accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US IP 173.194.73.84 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 00:18 Last Seen2024-08-20 16:45 Times Seen53 Hash be123e418f0f5e27f797df84ff3fd68b c3635f4c2eb37e565959b95489f26af5fa4f4aec 4c9879f4e913e147e1227d4d22374d8f225e5145d0b2f6ace8c6025c5543b850 Loading...

	static.licdn.com/sc/h/8z6rxr4cu3kb0bf0f6w0l7uvs	ScriptElement	260 kB	2023-11-28	2023-12-11
Pretty URL static.licdn.com/sc/h/8z6rxr4cu3kb0bf0f6w0l7uvs IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-28 00:34 Last Seen2023-12-11 22:01 Times Seen136 Hash 2d65d654153b49b1b18d8f4321ca5082 744f406fafd5882170510fe3e91c566e2b4bea61 60b563ab65efeb6eadf0b815d1808c01b7b71287c4415f357a8701dbc3c47fd3 Loading...

	static.licdn.com/sc/h/2y3qdqw0xpfk3qo1agmkdpn7x	ScriptElement	95 kB	2023-10-13	2024-08-21
Pretty URL static.licdn.com/sc/h/2y3qdqw0xpfk3qo1agmkdpn7x IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 04:40 Last Seen2024-08-21 04:55 Times Seen785 Hash a950a7a2748f3b6c2be4446130954fbc 96da4e74d53dd697dfda847448997cf621a475c7 5d10ba7adf9cc820eccc13113fc116160254aa5adfeff8e79d62edba4bc52fb4 Loading...

	static.licdn.com/sc/h/473v2cdto9klp3y6gfjcs28u2	ScriptElement	76 kB	2023-10-13	2024-11-21
Pretty URL static.licdn.com/sc/h/473v2cdto9klp3y6gfjcs28u2 IP 23.36.76.210 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 04:40 Last Seen2024-11-21 00:06 Times Seen2296 Hash 77476e9f4544d16e10921cb9d56067f3 22677d2df42eec873802245ec72bbd8b6896f324 fb9b509d020c4c45ad497de7c4f7d1b22b4e7dc62339927fbf7e32e227932cb7 Loading...

HTTP Transactions (49)

URL IP Response Size

www.linkedin.com/company/10851358/admin/?utm_campaign=Hyperledger%20Monthly%20Newsletter%20&utm_medium=email&_hsmi=285163859&_hsenc=p2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE&utm_content=285165450&utm_source=hs_email

13.107.42.14

302 Found

0 B

URL User Request GET HTTP/2
www.linkedin.com/company/10851358/admin/?utm_campaign=Hyperledger%20Monthly%20Newsletter%20&utm_medium=email&_hsmi=285163859&_hsenc=p2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE&utm_content=285165450&utm_source=hs_email
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

GET /company/10851358/admin/?utm_campaign=Hyperledger%20Monthly%20Newsletter%20&utm_medium=email&_hsmi=285163859&_hsenc=p2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE&utm_content=285165450&utm_source=hs_email HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
set-cookie: JSESSIONID=ajax:3932613539395490804; Domain=.www.linkedin.com; Path=/; Secure; SameSite=None
lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; Domain=.linkedin.com; Expires=Wed, 04-Dec-2024 15:15:48 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; Domain=.www.linkedin.com; Expires=Wed, 04-Dec-2024 15:15:48 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; Domain=.linkedin.com; Expires=Sun, 02 Jun 2024 15:15:48 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; Expires=Wed, 06 Dec 2023 15:15:48 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ v.clarity.ms/collect *.microsoft.com *.adnxs.com *.tealiumiq.com; script-src 'report-sample' 'sha256-th47JTnh6tX15SUn/I+GGmsOSXpa7dh5Skner77gxlY=' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=gg
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLWdim57JB3/wjFpPA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BC1BCE3310554883BEE931F781430FB8 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:48Z
date: Tue, 05 Dec 2023 15:15:48 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email

13.107.42.14

200 OK

13 kB

URL User Request GET HTTP/2
www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (39847)
Size
13 kB (13035 bytes)
Hash
3908447673abc68a0fdd6740096ba83b
40067b3f6f93eb57200edc01cc3637b1732fbfcf
6da67615afda25f4bd2181df0d7e4e1ffe40f978f7218db5e2ba98dd36116991

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

GET /uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 13035
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: Thu, 01 Jan 1970 00:00:00 GMT
last-modified: Mon, 04 Dec 2023 15:05:52 PST
vary: Accept-Encoding
set-cookie: li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; Max-Age=31536000; Expires=Wed, 04 Dec 2024 15:15:49 GMT; SameSite=None; Path=/; Domain=.www.linkedin.com; Secure; HTTPOnly
bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 04-Dec-2024 15:15:49 GMT; SameSite=None
bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; domain=.www.linkedin.com; Path=/; Secure; Expires=Wed, 04-Dec-2024 15:15:49 GMT; HttpOnly; SameSite=None
x-fs-uuid: 00060bc4b5a0ddaccb8a2f107e66ef62
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ v.clarity.ms/collect *.microsoft.com *.adnxs.com *.tealiumiq.com; script-src 'report-sample' 'sha256-th47JTnh6tX15SUn/I+GGmsOSXpa7dh5Skner77gxlY=' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=grl
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLWg3azLii8QfmbvYg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C2804D4AE09B47479808D423177B29B7 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:48Z
date: Tue, 05 Dec 2023 15:15:48 GMT
X-Firefox-Spdy: h2

static.licdn.com/sc/h/1sjpgjk18flzq8du4cxjl13ch

23.36.76.210

200 OK

24 kB

URL GET HTTP/2
static.licdn.com/sc/h/1sjpgjk18flzq8du4cxjl13ch
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
24 kB (24081 bytes)
Hash
67415238a0ed99286f8261e4a6cdfbe5
86ebb0bbd60d8d6bbdc80aa60bc809f17fa9f6d3
7c3190461704d64cb2fb3bbe447902518dcc8a93536e10b7d3475b8ecb836152

HTTP Headers

GET /sc/h/1sjpgjk18flzq8du4cxjl13ch HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Play
expires: Thu, 19 Sep 2024 19:13:14 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
content-encoding: br
x-li-static-content: 1
content-type: text/css
x-li-fabric: prod-ltx1
x-content-type-options: nosniff
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-fs-uuid: 000605cf2acee7d545711ff787bf461b
x-li-source-fabric: prod-lor1
x-li-pop: prod-lor1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYFzyrO59VFcR/3h79GGw==
content-length: 24081
remote-cache-status: TCP_HIT, TCP_HIT
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/179r7h6dytjlclq68a906sd4s

23.36.76.210

200 OK

22 kB

URL GET HTTP/2
static.licdn.com/sc/h/179r7h6dytjlclq68a906sd4s
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (41541)
Size
22 kB (22037 bytes)
Hash
1a385461f30e3f360d31f242fd6b3d98
0c0d69d3d866e93732265776ae44fd02db855d99
f89934ac0709430477b8a664f72035461a08e79aab91944d71d695660d810c13

HTTP Headers

GET /sc/h/179r7h6dytjlclq68a906sd4s HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Play
expires: Fri, 15 Nov 2024 20:01:01 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 00060a4a7a9bee2498434f67c7b7709b
x-li-fabric: prod-lor1
x-content-type-options: nosniff
x-li-pop: prod-lor1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYKSnqb7iSYQ09nx7dwmw==
content-length: 22037
remote-cache-status: TCP_HIT
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/es8jfua30moj789rlzkfx9heo

23.36.76.210

200 OK

64 kB

URL GET HTTP/2
static.licdn.com/sc/h/es8jfua30moj789rlzkfx9heo
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
64 kB (64122 bytes)
Hash
a041ea63e8e2c42dba82d2650b617e66
d8f25b3c769df6ec8ecc2dab2d4a67f255bc9956
bd3580fa64a24a72f97df0f382cb2d529568062394f30db2ade926fc2c92f814

HTTP Headers

GET /sc/h/es8jfua30moj789rlzkfx9heo HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Play
expires: Thu, 31 Oct 2024 16:42:04 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 00060919f37e604d4645fbf7febc72c6
x-li-fabric: prod-lor1
x-content-type-options: nosniff
x-li-pop: prod-lor1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYJGfN+YE1GRfv3/rxyxg==
content-length: 64122
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/ccg6j0toh362m9pa9exs90nin

23.36.76.210

200 OK

776 B

URL GET HTTP/2
static.licdn.com/sc/h/ccg6j0toh362m9pa9exs90nin
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (2164), with no line terminators
Size
776 B (776 bytes)
Hash
68225657c41b94dfdd7669563fa18c80
58e43494bc31122f06fcb3aa3764be2883d0618f
72bccd36c17aa93a7bb553557626bb720be60cde2357d817bd03af6be67cf08e

HTTP Headers

GET /sc/h/ccg6j0toh362m9pa9exs90nin HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Play
expires: Tue, 20 Aug 2024 22:09:59 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 0006037623aac0dedd6a34bb903e50da
x-li-fabric: prod-lor1
x-content-type-options: nosniff
x-li-pop: prod-lor1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYDdiOqwN7dajS7kD5Q2g==
content-length: 776
remote-cache-status: TCP_HIT, TCP_HIT
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/8z6rxr4cu3kb0bf0f6w0l7uvs

23.36.76.210

200 OK

57 kB

URL GET HTTP/2
static.licdn.com/sc/h/8z6rxr4cu3kb0bf0f6w0l7uvs
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size
57 kB (57041 bytes)
Hash
2d65d654153b49b1b18d8f4321ca5082
744f406fafd5882170510fe3e91c566e2b4bea61
60b563ab65efeb6eadf0b815d1808c01b7b71287c4415f357a8701dbc3c47fd3

HTTP Headers

GET /sc/h/8z6rxr4cu3kb0bf0f6w0l7uvs HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Play
expires: Tue, 26 Nov 2024 19:29:35 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 00060b27527334dd4e2347ad3ba87f1a
x-li-fabric: prod-lva1
x-content-type-options: nosniff
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYLJ1JzNN1OI0etO6h/Gg==
content-length: 57041
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/473v2cdto9klp3y6gfjcs28u2

23.36.76.210

200 OK

16 kB

URL GET HTTP/2
static.licdn.com/sc/h/473v2cdto9klp3y6gfjcs28u2
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
C source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size
16 kB (15685 bytes)
Hash
77476e9f4544d16e10921cb9d56067f3
22677d2df42eec873802245ec72bbd8b6896f324
fb9b509d020c4c45ad497de7c4f7d1b22b4e7dc62339927fbf7e32e227932cb7

HTTP Headers

GET /sc/h/473v2cdto9klp3y6gfjcs28u2 HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Play
expires: Wed, 09 Oct 2024 21:59:08 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 00060763d0eb2aa8bf576ed88f93c8ed
x-li-fabric: prod-ltx1
x-content-type-options: nosniff
x-li-pop: prod-ltx1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYHY9DrKqi/V27Yj5PI7Q==
content-length: 15685
remote-cache-status: TCP_HIT, TCP_HIT
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/2y3qdqw0xpfk3qo1agmkdpn7x

23.36.76.210

200 OK

27 kB

URL GET HTTP/2
static.licdn.com/sc/h/2y3qdqw0xpfk3qo1agmkdpn7x
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size
27 kB (26826 bytes)
Hash
a950a7a2748f3b6c2be4446130954fbc
96da4e74d53dd697dfda847448997cf621a475c7
5d10ba7adf9cc820eccc13113fc116160254aa5adfeff8e79d62edba4bc52fb4

HTTP Headers

GET /sc/h/2y3qdqw0xpfk3qo1agmkdpn7x HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Play
expires: Wed, 09 Oct 2024 22:24:14 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 000607642ab0a0b7a1819fbe797d498a
x-li-fabric: prod-ltx1
x-content-type-options: nosniff
x-li-pop: prod-ltx1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYHZCqwoLehgZ++eX1Jig==
content-length: 26826
remote-cache-status: TCP_HIT, TCP_HIT
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/9lb1g1kp916tat669q9r5g2kz

23.36.76.210

799 B

URL GET
static.licdn.com/sc/h/9lb1g1kp916tat669q9r5g2kz
IP
23.36.76.210:0
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
799 B (799 bytes)
Hash
3d0e5c05903cec0bc8e3fe0cda552745
1b513503c65572f0787a14cc71018bd34f11b661
42a498dc5f62d81801f8e753fc9a50af5bc1aabda8ab8b2960dce48211d7c023

HTTP Headers

GET /sc/h/9lb1g1kp916tat669q9r5g2kz HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 18 Jan 2024 14:35:22 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
x-datastream-cache-status: 1
x-akamai-ew-subworker: 8096267
server: Play
content-encoding: br
x-li-static-content: 1
content-type: image/x-icon
x-fs-uuid: a74a955909787716b02ac8cbcd2a0000
x-li-fabric: prod-ltx1
x-li-pop: prod-eda6
x-li-proto: http/1.1
x-li-uuid: p0qVWQl4dxawKsjLzSoAAA==
content-length: 799
remote-cache-status: TCP_HIT
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/55ggxxse8uyjdh2x78ht3j40q

23.36.76.210

5.5 kB

URL GET
static.licdn.com/sc/h/55ggxxse8uyjdh2x78ht3j40q
IP
23.36.76.210:0
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
PNG image data, 114 x 114, 8-bit/color RGBA, non-interlaced\012- data
Size
5.5 kB (5491 bytes)
Hash
e3eae9467d41fa15bc1d2a03a4d47a53
2cdb3230a055bc0b402bdcd4415553c964da1a35
7ebe33084a6e722927ef76ff3c583b1bae3ff27b6a48bf921d5de4aeebb56c62

HTTP Headers

GET /sc/h/55ggxxse8uyjdh2x78ht3j40q HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Mon, 13 Nov 2023 10:13:14 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
x-datastream-cache-status: 1
x-akamai-ew-subworker: 8096267
server: Play
content-encoding: br
x-li-static-content: 1
content-type: image/png
x-fs-uuid: 04c00bc5fda47716f0f06b3bc32a0000
x-li-fabric: prod-ltx1
x-li-pop: prod-eda6
x-li-proto: http/1.1
x-li-uuid: BMALxf2kdxbw8Gs7wyoAAA==
content-length: 5491
remote-cache-status: TCP_HIT
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 841
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLWsvHBTkAjKQwcdhQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 365659F7A6CA4D26A94E275D0EA5822B Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:49Z
date: Tue, 05 Dec 2023 15:15:49 GMT
content-length: 0
X-Firefox-Spdy: h2

static.licdn.com/sc/h/4k6diadsezedadhkq4uxfxss1

23.36.76.210

200 OK

64 kB

URL GET HTTP/2
static.licdn.com/sc/h/4k6diadsezedadhkq4uxfxss1
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1354)
Size
64 kB (63716 bytes)
Hash
7554ae17c5023ecc6d0ffc1e8775bc2f
37b39540102e29993f710047ed89bbe3b47a3a2b
6101eea4239ded7503b74732d078de0de0e31d9465de3876b1641802dd299200

HTTP Headers

GET /sc/h/4k6diadsezedadhkq4uxfxss1 HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 15 Feb 2024 18:40:07 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
server: Play
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-li-fabric: prod-lor1
x-fs-uuid: 0005e66469e783f1b384bdbac2cc6845
x-li-source-fabric: prod-ltx1
x-li-pop: prod-ltx1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAXmZGnng/GzhL26wsxoRQ==
content-length: 63716
remote-cache-status: TCP_HIT
x-datastream-cache-status: 1
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/1gpe377m8n1eq73qveizv5onv

23.36.76.210

200 OK

13 kB

URL GET HTTP/2
static.licdn.com/sc/h/1gpe377m8n1eq73qveizv5onv
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (7566)
Size
13 kB (13154 bytes)
Hash
f5629c31bca5301ab5980247effef360
f61db978aa8c26a7001df3f7600515b9f07f5231
c852b1105eb000028e9b27677996f8d4773daa31fa1aaf663cb6ae3a6857a50a

HTTP Headers

GET /sc/h/1gpe377m8n1eq73qveizv5onv HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 11 Jul 2024 01:03:57 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
x-datastream-cache-status: 1
server: Play
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 0a9d6ce11f5bad16b00010e0be2a0000
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: prod-eda6
x-li-proto: http/1.1
x-li-uuid: Cp1s4R9brRawABDgvioAAA==
content-length: 13154
remote-cache-status: TCP_HIT
x-akamai-ew-subworker: 8096267
date: Tue, 05 Dec 2023 15:15:49 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/9lb1g1kp916tat669q9r5g2kz

23.36.76.210

0 B

URL GET
static.licdn.com/sc/h/9lb1g1kp916tat669q9r5g2kz
IP
23.36.76.210:0
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

HEAD /sc/h/9lb1g1kp916tat669q9r5g2kz HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.linkedin.com/
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 18 Jan 2024 14:35:22 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
x-datastream-cache-status: 1
x-akamai-ew-subworker: 8096267
server: Play
content-encoding: br
x-li-static-content: 1
content-type: image/x-icon
x-fs-uuid: a74a955909787716b02ac8cbcd2a0000
x-li-fabric: prod-ltx1
x-li-pop: prod-eda6
x-li-proto: http/1.1
x-li-uuid: p0qVWQl4dxawKsjLzSoAAA==
content-length: 799
remote-cache-status: TCP_HIT
date: Tue, 05 Dec 2023 15:15:50 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/55ggxxse8uyjdh2x78ht3j40q

23.36.76.210

0 B

URL GET
static.licdn.com/sc/h/55ggxxse8uyjdh2x78ht3j40q
IP
23.36.76.210:0
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

HEAD /sc/h/55ggxxse8uyjdh2x78ht3j40q HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.linkedin.com/
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Mon, 13 Nov 2023 10:13:14 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
x-datastream-cache-status: 1
x-akamai-ew-subworker: 8096267
server: Play
content-encoding: br
x-li-static-content: 1
content-type: image/png
x-fs-uuid: 04c00bc5fda47716f0f06b3bc32a0000
x-li-fabric: prod-ltx1
x-li-pop: prod-eda6
x-li-proto: http/1.1
x-li-uuid: BMALxf2kdxbw8Gs7wyoAAA==
content-length: 5491
remote-cache-status: TCP_HIT
date: Tue, 05 Dec 2023 15:15:50 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/4k6diadsezedadhkq4uxfxss1

23.36.76.210

200 OK

0 B

URL GET HTTP/2
static.licdn.com/sc/h/4k6diadsezedadhkq4uxfxss1
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

HEAD /sc/h/4k6diadsezedadhkq4uxfxss1 HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.linkedin.com/
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 15 Feb 2024 18:40:07 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
server: Play
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-li-fabric: prod-lor1
x-fs-uuid: 0005e66469e783f1b384bdbac2cc6845
x-li-source-fabric: prod-ltx1
x-li-pop: prod-ltx1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAXmZGnng/GzhL26wsxoRQ==
content-length: 63716
remote-cache-status: TCP_HIT
x-datastream-cache-status: 1
date: Tue, 05 Dec 2023 15:15:50 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

static.licdn.com/sc/h/1gpe377m8n1eq73qveizv5onv

23.36.76.210

200 OK

0 B

URL GET HTTP/2
static.licdn.com/sc/h/1gpe377m8n1eq73qveizv5onv
IP
23.36.76.210:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectstatic-exp1.licdn.com
FingerprintA4:83:15:AF:E8:24:5C:22:E6:8D:67:8F:10:52:F1:9D:B4:3A:90:23
ValidityFri, 17 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

HEAD /sc/h/1gpe377m8n1eq73qveizv5onv HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.linkedin.com/
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 11 Jul 2024 01:03:57 GMT
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
cache-control: max-age=31536000, immutable
x-datastream-cache-status: 1
server: Play
content-encoding: br
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 0a9d6ce11f5bad16b00010e0be2a0000
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: prod-eda6
x-li-proto: http/1.1
x-li-uuid: Cp1s4R9brRawABDgvioAAA==
content-length: 13154
remote-cache-status: TCP_HIT
x-akamai-ew-subworker: 8096267
date: Tue, 05 Dec 2023 15:15:50 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1694
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLWwugHDOCGCxZHSHQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 53D4401B1EC94319ADB6B49B3292D19B Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:49Z
date: Tue, 05 Dec 2023 15:15:49 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1694
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLWwz+yNqzMd3XwKaA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1CA62916798E4E17ACF8289F02920D91 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:49Z
date: Tue, 05 Dec 2023 15:15:49 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3438
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLWyhDV+bsN+6LmDHg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: EAA09B96FD124297B1B68C446AE44F2F Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/cookie-consent/

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/cookie-consent/
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /cookie-consent/ HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 74
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; Max-Age=15552000; Expires=Sun, 02 Jun 2024 15:15:50 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 04-Dec-2024 15:15:50 GMT; SameSite=None
bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; domain=.www.linkedin.com; Path=/; Secure; Expires=Wed, 04-Dec-2024 15:15:50 GMT; HttpOnly; SameSite=None
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.microsoft.com *.adnxs.com; script-src 'report-sample' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-3RIGhhApBii1KY+aW1xk7kFyoQY8vSVE5DfT7E9SJUc=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' 'sha256-wy4DvlEW9PHPIGvQJW6Wv4woBSa/0LJHs8LHsBVVXCs=' 'sha256-065A0cJTDQ+hyKvufSL/flW02hIbgLndOINLRWux6To=' 'sha256-Ga5SLB8hPdWUE8Wb6LgZ05D9Z5vrdLAaPbDBW2m3BI8=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=default
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLWyXM7vzLdChH8qWw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0ADAF865D4A04308BAFAAFC7CB772003 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Csrf-Token: ajax:3932613539395490804
Content-Length: 1677
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW0TRtT0xisOAnsxQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D9F526F151F0441992B6B326C5C1007C Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Csrf-Token: ajax:3932613539395490804
Content-Length: 830
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW0V2U+CWT3iXH1Ag==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5D4BB6815CB24996827B6C598F586923 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

ponf.linkedin.com/pixel/tracking.png?reqid=72080d49-7dda-482a-adda-09529f889bcc&pageInstance=urn%3Ali%3Apage%3Acheckpoint_lg_uasLogin%3B+qobRBCyToyHXF6hNSeuNA%3D%3D&js=enabled

144.2.9.1

502 Bad Gateway

157 B

URL GET HTTP/2
ponf.linkedin.com/pixel/tracking.png?reqid=72080d49-7dda-482a-adda-09529f889bcc&pageInstance=urn%3Ali%3Apage%3Acheckpoint_lg_uasLogin%3B+qobRBCyToyHXF6hNSeuNA%3D%3D&js=enabled
IP
144.2.9.1:443
ASN
#14413 LINKEDIN

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectponf.linkedin.com
Fingerprint2D:44:F8:1B:0A:DA:84:FE:D5:86:76:F7:5F:F8:46:AE:90:96:11:7F
ValidityTue, 21 Feb 2023 00:00:00 GMT - Tue, 20 Feb 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
157 B (157 bytes)
Hash
b7ef5cabaf52d9e3aa9a29fe42aeca9a
c6e573d2662d3a8368f3928eb53f76e368ba7375
400f588c140f9220eb5691868625139f6dde7a547489f52499f0e80085797cfb

HTTP Headers

GET /pixel/tracking.png?reqid=72080d49-7dda-482a-adda-09529f889bcc&pageInstance=urn%3Ali%3Apage%3Acheckpoint_lg_uasLogin%3B+qobRBCyToyHXF6hNSeuNA%3D%3D&js=enabled HTTP/1.1
Host: ponf.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Cookie: lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 502 Bad Gateway
server: nginx/1.20.1
date: Tue, 05 Dec 2023 15:15:21 GMT
content-type: text/html
content-length: 157
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Csrf-Token: ajax:3932613539395490804
Content-Length: 945
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW2Qs5YeRCcwLx/7A==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A5F7398CD0044AD896459B8174D6A3B1 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf

216.58.207.227

200 OK

27 kB

URL GET HTTP/2
fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google Sans MediumRegularGoogle;GoogleSans-Medium\012- data
Size
27 kB (27431 bytes)
Hash
9ecc1a07aa9e5e87f04d31b49ca09897
a030a565d2168e505861d6f1de260dc1adf8b77b
ebeace42646aa327b1fa6225f70120658993d4796cc9103484a6f068d3a58a6d

HTTP Headers

GET /s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27431
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:36:53 GMT
expires: Thu, 28 Nov 2024 21:36:53 GMT
cache-control: public, max-age=31536000
age: 495537
last-modified: Mon, 22 Apr 2019 23:43:31 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf

216.58.207.227

200 OK

27 kB

URL GET HTTP/2
fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google SansRegularGoogle;GoogleSans-RegularGoogle\012- data
Size
27 kB (27191 bytes)
Hash
20f7180ebc95ade510a7fbd4cbdc35b6
6cfc5afa73095577a20461de09d2a8f4b34d80e0
8087cf253743d85d9153ba12ce624c2e460e966c40a61928b3a036a2d452f45a

HTTP Headers

GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27191
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:18:29 GMT
expires: Tue, 03 Dec 2024 23:18:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2019 23:42:54 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 57441
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 11363
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW4YQUHzgsmd8TohA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7EE06D10F97F4324B3B6285CC444E7A7 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 931
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW7vZJ+CQ3Q4hfJyw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2B540880D4FD42009E4D3B7FCD4D9DC7 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1844
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW7mTjlmDpgzYrPYA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A4EF93D88F50484AB0AE617247E42E81 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/litms/api/metadata/user

13.107.42.14

200 OK

226 B

URL GET HTTP/2
www.linkedin.com/litms/api/metadata/user
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type
JSON data\012- , ASCII text, with very long lines (345), with no line terminators
Size
226 B (226 bytes)
Hash
ccb8e9f87744d3b614cadf7b951ae5ea
da1e0528d0b7377a965b569dae93a8ea0e8dbacb
6b6676ca025aaa38464ebd3b1a6c642e3d7feef94b66595fa183f0d76da5f222

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

GET /litms/api/metadata/user HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 226
content-type: application/json
content-encoding: gzip
expires: Thu, 01 Jan 1970 00:00:00 GMT
vary: Origin,Accept-Encoding
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.microsoft.com *.adnxs.com; script-src 'report-sample' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-3RIGhhApBii1KY+aW1xk7kFyoQY8vSVE5DfT7E9SJUc=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' 'sha256-wy4DvlEW9PHPIGvQJW6Wv4woBSa/0LJHs8LHsBVVXCs=' 'sha256-065A0cJTDQ+hyKvufSL/flW02hIbgLndOINLRWux6To=' 'sha256-Ga5SLB8hPdWUE8Wb6LgZ05D9Z5vrdLAaPbDBW2m3BI8=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=default
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW8RSP97xFmEuxPsA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D21B43BBB4F5421B928697A8E9707CCF Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:50 GMT
X-Firefox-Spdy: h2

platform.linkedin.com/litms/utag/checkpoint-frontend/utag.js?cb=1701789300000

23.36.76.121

200 OK

42 kB

URL GET HTTP/2
platform.linkedin.com/litms/utag/checkpoint-frontend/utag.js?cb=1701789300000
IP
23.36.76.121:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectplatform.linkedin.com
Fingerprint4B:93:3D:B1:BC:00:2B:2E:AE:1F:AE:FD:0C:60:BD:19:AB:04:FE:CC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (34128)
Size
42 kB (42150 bytes)
Hash
db6c2bc7d90fd8644a138ef1a5a12261
9d8caf31e893a4b8e423ba663f7cc3d1f0eafe6a
48b3ee4a9140dc93948400bce8c0dd6ee916abab061d2d4ff3e36af63f8f9851

HTTP Headers

GET /litms/utag/checkpoint-frontend/utag.js?cb=1701789300000 HTTP/1.1
Host: platform.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Cookie: lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
etag: "71241f0ee72cd18e2f5e1857de0e15da39ffa878"
server: Play
accept-ranges: bytes
cache-control: max-age=300
last-modified: Sat, 02 Dec 2023 16:52:02 GMT
content-encoding: gzip
content-type: application/javascript; charset=utf-8
x-li-fabric: prod-ltx1
x-content-type-options: nosniff
x-li-pop: prod-ltx1-x
x-li-proto: http/1.1
x-li-uuid: AAYLw+8NVeH18/p+S89sMQ==
content-length: 42150
date: Tue, 05 Dec 2023 15:15:50 GMT
vary: Accept-Encoding
x-cdn-client-ip-version: IPV4
x-cdn: AKAM
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Csrf-Token: ajax:3932613539395490804
Content-Length: 10031
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTswOzE3MDE3ODkzNDg7MjswMjH/Tn1kHrGPMUANOhgRR+9eJ8ZH7BinDG9bc3PHnnISvw==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLW9DELic5GiD2NkOQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 73EC275784644A4490F9F3DCF89E48F9 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:51 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Csrf-Token: ajax:3932613539395490804
Content-Length: 810
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLXAqpad0fwMp5grqA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F9D76125C6844FDCA67FEF0F96A80234 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:50Z
date: Tue, 05 Dec 2023 15:15:51 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 828
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLXJcns2M5S9xx1BJg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 53A720FFBCB24BF9852066C074199163 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:51Z
date: Tue, 05 Dec 2023 15:15:51 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/platform-telemetry/li/apfcDf

13.107.42.14

400 Bad Request

0 B

URL POST HTTP/2
www.linkedin.com/platform-telemetry/li/apfcDf
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /platform-telemetry/li/apfcDf HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 5138
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 400 Bad Request
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLXMAGYgw+oOlW9t9Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C54F8C8C16D44B14A2813AEC8F1356BE Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:51Z
date: Tue, 05 Dec 2023 15:15:51 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/platform-telemetry/li/apfcDf

13.107.42.14

400 Bad Request

0 B

URL POST HTTP/2
www.linkedin.com/platform-telemetry/li/apfcDf
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /platform-telemetry/li/apfcDf HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 5138
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 400 Bad Request
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLXPY4kgAaHfFjfJUg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DCF66B4B6AAD43D7B30EE09D06770550 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:51Z
date: Tue, 05 Dec 2023 15:15:51 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 828
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLXn+mgbv9/ATCkn2g==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: AD6C3573F2E54CB6BCB44403691ACC55 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:53Z
date: Tue, 05 Dec 2023 15:15:53 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 828
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLYGdPPV9a8+T8PRcA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5DA065F39610476B91DFDC6E2832F4F4 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:55Z
date: Tue, 05 Dec 2023 15:15:55 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 828
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLYk8n3u4lPl1ycrDw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 30D9359288B04615903B641BF5083CA2 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:57Z
date: Tue, 05 Dec 2023 15:15:57 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 828
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLZDgN1OHYoVN58gyQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5A6EA0DE37804BF4A84E4BDA9817B086 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:15:59Z
date: Tue, 05 Dec 2023 15:15:59 GMT
content-length: 0
X-Firefox-Spdy: h2

play.google.com/log?format=json&hasfast=true&authuser=0

142.250.74.78

200 OK

0 B

URL POST HTTP/2
play.google.com/log?format=json&hasfast=true&authuser=0
IP
142.250.74.78:443
ASN
#15169 GOOGLE

Requested by
https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 05 Dec 2023 15:16:00 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+309; expires=Thu, 04-Dec-2025 15:16:00 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 05 Dec 2023 15:16:00 GMT
cache-control: private
X-Firefox-Spdy: h2

play.google.com/log?format=json&hasfast=true&authuser=0

142.250.74.78

200 OK

131 B

URL POST HTTP/2
play.google.com/log?format=json&hasfast=true&authuser=0
IP
142.250.74.78:443
ASN
#15169 GOOGLE

Requested by
https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
131 B (131 bytes)
Hash
ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358

HTTP Headers

POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 453
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 05 Dec 2023 15:16:00 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+467; expires=Thu, 04-Dec-2025 15:16:00 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 05 Dec 2023 15:16:00 GMT
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 828
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLZh+cjQNsS6XLb42Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 3EE0B234C468430CA5A770C86982FEBA Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:16:01Z
date: Tue, 05 Dec 2023 15:16:01 GMT
content-length: 0
X-Firefox-Spdy: h2

www.linkedin.com/li/track

13.107.42.14

200 OK

0 B

URL POST HTTP/2
www.linkedin.com/li/track
IP
13.107.42.14:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerDigiCert Inc
Subjectwww.linkedin.com
FingerprintDD:64:0D:6C:03:1D:AA:A9:68:F2:FB:0C:02:7A:52:34:27:C9:FD:D9
ValidityFri, 03 Nov 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - LinkedIn

HTTP Headers

POST /li/track HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 828
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Cookie: JSESSIONID=ajax:3932613539395490804; lang=v=2&lang=en-us; bcookie="v=2&bd74dd27-3b1f-4903-8364-35bb31ed5708"; bscookie="v=1&202312051515485aad9ab9-b5fb-460a-8c1b-15cb97504528AQFs4Blifg9ruAILaWdSKg33ewpTsn5V"; li_gc=MTs0MjsxNzAxNzg5MzUwOzI7MDIxIPLaGqZIrQYCLNMF5M8VbUgYIeC4EwLPuL4Ps1GymrM=; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2661:u=1:x=1:i=1701789348:t=1701875748:v=2:sig=AQE5cOhQ6gChAIb4Afjg66Piln2e691P"; li_rm=AQEr2B7BubZynQAAAYw6jLSIZ7QM8kRyGLk4q5q9wR6HoEP1gha5YsvhkDXiG0Jq26EtD7vGFNf5RJPXsZeRqS1CVvtEVQ6bPfcvUpUze9D4w35UjduXj6Q-; li_alerts=e30=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/plain; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; frame-ancestors 'none'; form-action 'none'
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYLxLaAgUSabHrhjq/7Fw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 768E2BB749CF478CB1CDCAA0F1BADF42 Ref B: OSL30EDGE0216 Ref C: 2023-12-05T15:16:03Z
date: Tue, 05 Dec 2023 15:16:03 GMT
content-length: 0
X-Firefox-Spdy: h2

accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US

173.194.73.84

200 OK

116 kB

URL GET HTTP/2
accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US
IP
173.194.73.84:443
ASN
#15169 GOOGLE

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintF3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8
ValidityMon, 20 Nov 2023 08:09:49 GMT - Mon, 12 Feb 2024 08:09:48 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7754)
Size
116 kB (115692 bytes)
Hash
c5ca24f51875783767e417c1f2d92100
800e65ee5273ba31c707275dc9b6a38a9d9043e5
7fad23f72bbcf2afe708cb2a94143b650feeadbbf6af6e8d96f8b0c0e514f9ea

HTTP Headers

GET /gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=302&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_355998_473488&as=OhltObHtaw154J9ZqJAfAg&hl=en_US HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 05 Dec 2023 15:15:50 GMT
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: same-site
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-1XOOehwfmBMa4a9D85N4vQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

accounts.google.com/gsi/status?client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&as=OhltObHtaw154J9ZqJAfAg

173.194.73.84

200 OK

40 B

URL GET HTTP/2
accounts.google.com/gsi/status?client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&as=OhltObHtaw154J9ZqJAfAg
IP
173.194.73.84:443
ASN
#15169 GOOGLE

Requested by
https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10851358%2Fadmin%2F%3Futm_campaign%3DHyperledger%2520Monthly%2520Newsletter%2520%26utm_medium%3Demail%26_hsmi%3D285163859%26_hsenc%3Dp2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE%26utm_content%3D285165450%26utm_source%3Dhs_email
Certificate
IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintF3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8
ValidityMon, 20 Nov 2023 08:09:49 GMT - Mon, 12 Feb 2024 08:09:48 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
90027421d82b77ee059bae6325fb7a36
38081858c285de5ce87cc5af7ac095c049b6137e
8dde2eb946190420a0579825dca41f1dcf35ea613e3af43ff2198e584a7678d7

HTTP Headers

GET /gsi/status?client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&as=OhltObHtaw154J9ZqJAfAg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
access-control-allow-origin: https://www.linkedin.com
access-control-allow-credentials: true
access-control-allow-methods: GET
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 05 Dec 2023 15:15:50 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-AfvayrkAGEBVXpX6iW0pOw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

email.linuxfoundation.org/events/public/v1/encoded/track/tc/RI+113/cZw--04/VWcmdD2Y2J3MW4q5ZY_1qJZlSW7swsJQ56GXL2KqRg3qgyTW8wLKSR6lZ3kxW7qLcQG2t1Dr6VCRHZn9kP_cxW8cQZpw2cJKpRW8qT8KH5MpLt8VRLxf14dkXlmW1jLd7K1PF6T8W2t2kNb1cCNdmW8xtS1f5KndJhW50wsrx5sX5tjW669zNV8p0-SKW2QbP318hy5Y9W303L3h7dxZmBW3HzNPx5-v-LlN3-xXd5ky5hZW3xXy5P92cG0GW6SlZ_H5_5lmpN5WmpT-SfFfFW6Rrj2j255JG6N4sb8k5vv9VFN8nTsyG8R3S5W2k3_gR4mYXYVW1jqKDP6YKff_W4RfD4q6mkC5DW4yjsQz1tTv52W7zHSy520chCvW53d2w43Mw1P1W7rHb-x3sfqHXW3nqV0g4YDV7_f74XymY04?_ud=e784eb7b-a260-4d74-9e13-381a2c56dc1f&_jss=1&_fl=8&_pl=5&_hc=48&_lg=en-US,en&_plt=Linux%20x86_64&_scr=1280,1024

199.60.103.225

307 Temporary Redirect

42 kB

URL User Request GET HTTP/3
email.linuxfoundation.org/events/public/v1/encoded/track/tc/RI+113/cZw--04/VWcmdD2Y2J3MW4q5ZY_1qJZlSW7swsJQ56GXL2KqRg3qgyTW8wLKSR6lZ3kxW7qLcQG2t1Dr6VCRHZn9kP_cxW8cQZpw2cJKpRW8qT8KH5MpLt8VRLxf14dkXlmW1jLd7K1PF6T8W2t2kNb1cCNdmW8xtS1f5KndJhW50wsrx5sX5tjW669zNV8p0-SKW2QbP318hy5Y9W303L3h7dxZmBW3HzNPx5-v-LlN3-xXd5ky5hZW3xXy5P92cG0GW6SlZ_H5_5lmpN5WmpT-SfFfFW6Rrj2j255JG6N4sb8k5vv9VFN8nTsyG8R3S5W2k3_gR4mYXYVW1jqKDP6YKff_W4RfD4q6mkC5DW4yjsQz1tTv52W7zHSy520chCvW53d2w43Mw1P1W7rHb-x3sfqHXW3nqV0g4YDV7_f74XymY04?_ud=e784eb7b-a260-4d74-9e13-381a2c56dc1f&_jss=1&_fl=8&_pl=5&_hc=48&_lg=en-US,en&_plt=Linux%20x86_64&_scr=1280,1024
IP
199.60.103.225:443
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerGoogle Trust Services LLC
Subjectemail.linuxfoundation.org
FingerprintE3:D7:CB:B1:1D:D4:DE:50:42:97:D4:ED:A5:3D:04:92:82:FA:67:5A
ValidityMon, 20 Nov 2023 15:54:05 GMT - Sun, 18 Feb 2024 15:54:04 GMT

File type

Size
42 kB (42280 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /events/public/v1/encoded/track/tc/RI+113/cZw--04/VWcmdD2Y2J3MW4q5ZY_1qJZlSW7swsJQ56GXL2KqRg3qgyTW8wLKSR6lZ3kxW7qLcQG2t1Dr6VCRHZn9kP_cxW8cQZpw2cJKpRW8qT8KH5MpLt8VRLxf14dkXlmW1jLd7K1PF6T8W2t2kNb1cCNdmW8xtS1f5KndJhW50wsrx5sX5tjW669zNV8p0-SKW2QbP318hy5Y9W303L3h7dxZmBW3HzNPx5-v-LlN3-xXd5ky5hZW3xXy5P92cG0GW6SlZ_H5_5lmpN5WmpT-SfFfFW6Rrj2j255JG6N4sb8k5vv9VFN8nTsyG8R3S5W2k3_gR4mYXYVW1jqKDP6YKff_W4RfD4q6mkC5DW4yjsQz1tTv52W7zHSy520chCvW53d2w43Mw1P1W7rHb-x3sfqHXW3nqV0g4YDV7_f74XymY04?_ud=e784eb7b-a260-4d74-9e13-381a2c56dc1f&_jss=1&_fl=8&_pl=5&_hc=48&_lg=en-US,en&_plt=Linux%20x86_64&_scr=1280,1024 HTTP/1.1
Host: email.linuxfoundation.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=KB6Kv.OrCV66kqJ2giLB5WQWGkTg9u5VcxzKUntszEQ-1701789348-0-ASKT9g5TzqVUOllU35poXUc2kfOJHU4NqQKx6JxYX7Lt2xCQgGp53iPKEErmU/nMmHNqQssULsHZuTe9Qfwo/LU=; __cfruid=5de2bc12aefa413e45abbb408aae751f1d748ae8-1701789348
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 307 Temporary Redirect
date: Tue, 05 Dec 2023 15:15:48 GMT
location: https://www.linkedin.com/company/10851358/admin/?utm_campaign=Hyperledger%20Monthly%20Newsletter%20&utm_medium=email&_hsmi=285163859&_hsenc=p2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE&utm_content=285165450&utm_source=hs_email
cf-ray: 830d3f239d920b31-OSL
cf-cache-status: MISS
link: <https://www.linkedin.com/company/10851358/admin/?utm_campaign=Hyperledger%20Monthly%20Newsletter%20&utm_medium=email&_hsmi=285163859&_hsenc=p2ANqtz--bO2WkKLu13-0RdBZY0R7C_trWZrvqUt_g-p0-F8yH_pzi4ZXpu0uqcv3v30skjvH0bVEJBvTT751WD5xwXNr2A7OR4DnroweDFQQmFgmIPCFYfuE&utm_content=285165450&utm_source=hs_email>; rel="canonical"
strict-transport-security: max-age=31536000
vary: origin, Accept-Encoding
access-control-allow-credentials: false
content-security-policy: upgrade-insecure-requests
referrer-policy: no-referrer
x-content-type-options: nosniff
x-envoy-upstream-service-time: 35
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-served-by-pod: iad02/event-tracking-td/envoy-proxy-5bb8974fb5-jg6dk
x-evy-trace-virtual-host: all
x-hs-https-only: worker
x-hubspot-correlation-id: 5884ba83-6a06-46f2-ac87-6479554c15f9
x-request-id: 5884ba83-6a06-46f2-ac87-6479554c15f9
x-robots-tag: none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1dlPC9BKV5XaSkZfmbquItEHWcUOKaWyxUUAOGCiUm4L9KsUYOUKxDUeDIZu2oFm%2FYstsLXl2NI7PiukHt9pELi9uS7AP49blqOwg9jjgTonJxFln%2BN5yDPWEk2sO9LYF9KPR%2FBLnQgCghQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by