Report - its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html

Report Overview

Submitted URL
its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html
IP
45.140.185.180
ASN
#51167 Contabo GmbH
Submitted
2024-04-24 09:39:26
Access
public
Website Title
Sign In
Final URL
its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
its.webplay.lgcmoba.com	unknown	2021-10-06	2024-04-13	2024-04-13	1.6 kB	22 kB	45.140.185.180
aadcdn.msauthimages.net	4795	2018-11-12	2019-08-14	2024-04-22	1.1 kB	64 kB	152.199.21.175

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html	332 B	2023-03-26	2024-04-24
Pretty URL its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html IP 45.140.185.180 ASN #51167 Contabo GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 13:08:32 Last Seen2024-04-24 11:39:28 Times Seen4 Hash a640fd25c34558209d4457a35e2b0b86 a2f9d256b845075e4aee5a687850b6545672a520 463ad3beefe396c9feadbf34b58472a185d1ca59b56e1e6b16aa8cb0166460ef Loading...

	its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html	3.2 kB	2023-03-26	2024-04-24
Pretty URL its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html IP 45.140.185.180 ASN #51167 Contabo GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 13:08:32 Last Seen2024-04-24 11:39:29 Times Seen4 Hash 65628b03e78329586a25b09c536e9798 a6e2cbb2f550025235d77172bdcd3ea17598777d d4e4a3cb9539aafd2c08bc76856f37ceb1c2ca429ccfa3012f6c3f8ce8444dc6 Loading...

HTTP Transactions (5)

	URL	IP	Response	Size
	its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html	45.140.185.180	200 OK	13 kB
URL User Request GET HTTP/1.1 its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html IP 45.140.185.180:443 ASN #51167 Contabo GmbH Certificate IssuerLet's Encrypt Subjectits.webplay.lgcmoba.com Fingerprint11:0B:0C:AE:3C:5D:D6:70:00:38:56:84:8D:CE:71:4D:DD:DE:BA:7E ValiditySat, 06 Apr 2024 08:36:14 GMT - Fri, 05 Jul 2024 08:36:13 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (931) Size 13 kB (13205 bytes) Hash ce83c5e9f5c13b762c4cb1d9c0c3d42f 04d64858824dbea5ab3e5669a7f042d5c1ea1320 e642678e5056c3168e34dc36952e4f719c15ae314732e9e4e97e5970c0795c5b HTTP Headers GET /archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html HTTP/1.1 Host: its.webplay.lgcmoba.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 09:39:02 GMT Content-Type: text/html Content-Length: 13205 Connection: keep-alive Last-Modified: Mon, 22 Apr 2024 15:46:43 GMT Accept-Ranges: bytes`

	its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/style.css	45.140.185.180	200 OK	7.4 kB
URL GET HTTP/1.1 its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/style.css IP 45.140.185.180:443 ASN #51167 Contabo GmbH Requested by https://its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html Certificate IssuerLet's Encrypt Subjectits.webplay.lgcmoba.com Fingerprint11:0B:0C:AE:3C:5D:D6:70:00:38:56:84:8D:CE:71:4D:DD:DE:BA:7E ValiditySat, 06 Apr 2024 08:36:14 GMT - Fri, 05 Jul 2024 08:36:13 GMT File type Unicode text, UTF-8 text Size 7.4 kB (7425 bytes) Hash 547f2c11d337470ec466403e29117853 16fe4562fb7fe5e2b3a04c1e39561b644f463216 694b38c762564d1292ab27d4a32aaa6166299b28d20df601438c35b186c061e8 HTTP Headers GET /archgroup.com/&adfs/ls/style.css HTTP/1.1 Host: its.webplay.lgcmoba.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 09:39:02 GMT Content-Type: text/css Content-Length: 7425 Connection: keep-alive Last-Modified: Wed, 18 May 2022 17:19:39 GMT Accept-Ranges: bytes`

	its.webplay.lgcmoba.com/favicon.ico	45.140.185.180	404 Not Found	315 B
URL GET HTTP/1.1 its.webplay.lgcmoba.com/favicon.ico IP 45.140.185.180:443 ASN #51167 Contabo GmbH Requested by https://its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html Certificate IssuerLet's Encrypt Subjectits.webplay.lgcmoba.com Fingerprint11:0B:0C:AE:3C:5D:D6:70:00:38:56:84:8D:CE:71:4D:DD:DE:BA:7E ValiditySat, 06 Apr 2024 08:36:14 GMT - Fri, 05 Jul 2024 08:36:13 GMT File type HTML document, ASCII text Size 315 B (315 bytes) Hash a34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: its.webplay.lgcmoba.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Date: Wed, 24 Apr 2024 09:39:02 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: keep-alive`

	aadcdn.msauthimages.net/dbd5a2dd-k5ovme0zr5amavvbomzhcwrnufusnoqhmzhybzpbrde/logintenantbranding/0/illustration?ts=637227667706661535	152.199.21.175	200 OK	58 kB
URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-k5ovme0zr5amavvbomzhcwrnufusnoqhmzhybzpbrde/logintenantbranding/0/illustration?ts=637227667706661535 IP 152.199.21.175:443 ASN #15133 EDGECAST Requested by https://its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html Certificate IssuerMicrosoft Corporation Subjectaadcdn.msauthimages.net Fingerprint3B:14:C7:84:64:65:A8:46:3C:B4:7E:B7:F2:A1:AF:6B:8F:EF:17:E5 ValidityThu, 11 Jan 2024 12:14:02 GMT - Sun, 05 Jan 2025 12:14:02 GMT File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced Size 58 kB (58083 bytes) Hash 0786aa79f9c42c9d5f6d1d463c7f2a4b f5cf19be61c010966c52bf7d53f6b0b97f3c84d7 145bd7d0f70b8b970f7de75d5e50ed50cf9553b9567c3a92f90b6930eab200d2 HTTP Headers GET /dbd5a2dd-k5ovme0zr5amavvbomzhcwrnufusnoqhmzhybzpbrde/logintenantbranding/0/illustration?ts=637227667706661535 HTTP/1.1 Host: aadcdn.msauthimages.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://its.webplay.lgcmoba.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding cache-control: public, max-age=86400 content-md5: B4aqefnELJ1fbR1GPH8qSw== content-type: image/* date: Wed, 24 Apr 2024 09:39:02 GMT etag: 0x8D7E3300729CC3A last-modified: Sat, 18 Apr 2020 00:32:51 GMT server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: beda3ceb-d01e-0052-2b2b-963f0a000000 x-ms-version: 2009-09-19 content-length: 58083 X-Firefox-Spdy: h2

	aadcdn.msauthimages.net/dbd5a2dd-k5ovme0zr5amavvbomzhcwrnufusnoqhmzhybzpbrde/logintenantbranding/0/bannerlogo?ts=637227667722606754	152.199.21.175	200 OK	4.9 kB
URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-k5ovme0zr5amavvbomzhcwrnufusnoqhmzhybzpbrde/logintenantbranding/0/bannerlogo?ts=637227667722606754 IP 152.199.21.175:443 ASN #15133 EDGECAST Requested by https://its.webplay.lgcmoba.com/archgroup.com/&adfs/ls/client-request-id=7c724&wa=wsignin10.html Certificate IssuerMicrosoft Corporation Subjectaadcdn.msauthimages.net Fingerprint3B:14:C7:84:64:65:A8:46:3C:B4:7E:B7:F2:A1:AF:6B:8F:EF:17:E5 ValidityThu, 11 Jan 2024 12:14:02 GMT - Sun, 05 Jan 2025 12:14:02 GMT File type PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced Size 4.9 kB (4913 bytes) Hash fa74cb3ba2456a00f4347beaf6eba9a1 020809b85d64d3792705e95b001017a83096302e 9dbb95b316bc34b720fa31390085ff8da59ccb4fd55f64dddc135524c8e6b432 HTTP Headers GET /dbd5a2dd-k5ovme0zr5amavvbomzhcwrnufusnoqhmzhybzpbrde/logintenantbranding/0/bannerlogo?ts=637227667722606754 HTTP/1.1 Host: aadcdn.msauthimages.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://its.webplay.lgcmoba.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding cache-control: public, max-age=86400 content-md5: +nTLO6JFagD0NHvq9uupoQ== content-type: image/* date: Wed, 24 Apr 2024 09:39:02 GMT etag: 0x8D7E33007FE8DF9 last-modified: Sat, 18 Apr 2020 00:32:52 GMT server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: db21fc1e-601e-0057-7d2b-96edd1000000 x-ms-version: 2009-09-19 content-length: 4913 X-Firefox-Spdy: h2