| fadata-login.microsoftonline.kkowxqjvskbtnuhq.click/Applicationview/c92a31aadd9f5f2d5219488f033d00ff/6616c1b8114f59865d3c4885 | 209.38.146.44 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/1.1fadata-login.microsoftonline.kkowxqjvskbtnuhq.click/Applicationview/c92a31aadd9f5f2d5219488f033d00ff/6616c1b8114f59865d3c4885 IP209.38.146.44:443
CertificateIssuerLet's Encrypt Subjectkkowxqjvskbtnuhq.click Fingerprint51:90:FD:24:2D:E7:9D:63:E7:5E:62:50:78:AF:6B:6A:E1:90:5E:40 ValidityWed, 17 Apr 2024 18:13:17 GMT - Tue, 16 Jul 2024 18:13:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /Applicationview/c92a31aadd9f5f2d5219488f033d00ff/6616c1b8114f59865d3c4885 HTTP/1.1
Host: fadata-login.microsoftonline.kkowxqjvskbtnuhq.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Location: https://onedrive.live.com/milen.glushkov@fadata.eu
Vary: Origin
Date: Fri, 19 Apr 2024 04:16:00 GMT
Content-Length: 0
|
| onedrive.live.com/milen.glushkov@fadata.eu | 13.107.139.11 | 404 Not Found | 2.6 kB |
URL User Request GET HTTP/2onedrive.live.com/milen.glushkov@fadata.eu IP13.107.139.11:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerMicrosoft Corporation Subjectonedrive.com Fingerprint74:60:B4:06:AB:E1:E4:E4:BC:D5:29:ED:EC:F2:EC:D4:C3:67:DD:8A ValidityFri, 29 Mar 2024 05:42:16 GMT - Mon, 24 Mar 2025 05:42:16 GMT
File typeHTML document, ASCII text, with very long lines (560), with CRLF line terminators Hash418d9172b00b23336e7fed220ab678ac f48f594208b2ec3435cb3fa4ac6f95380c27176e 659d89ee1a9bcd94e7887d8c5c6227125a9f88b0e5d382712b87711b7ef9f2c4
GET /milen.glushkov@fadata.eu HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 2614
content-type: text/html; charset=utf-8
expires: -1
set-cookie: E=P:PKzmaydg3Ig=:c+bxVI7m08ZIWyBGHKp5ht/06N/crAZi7azs/mVnOfY=:F; domain=.live.com; path=/
xid=d12224a1-452c-4d5c-b2f0-43a556e22a29&&ODSP-ODWEB-ODCF&147; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Fri, 19-Apr-2024 02:36:01 GMT; path=/
wla42=; domain=live.com; expires=Fri, 26-Apr-2024 04:16:01 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 795f98b668-2wtfm
x-odwebserver: eurwesteur637265-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 465C66B3F5D94173961BE24B6F8118BB Ref B: SVG20EDGE0309 Ref C: 2024-04-19T04:16:00Z
date: Fri, 19 Apr 2024 04:16:00 GMT
X-Firefox-Spdy: h2
|
| onedrive.live.com/milen.glushkov@fadata.eu | 13.107.139.11 | 404 Not Found | 2.6 kB |
URL User Request GET HTTP/2onedrive.live.com/milen.glushkov@fadata.eu IP13.107.139.11:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerMicrosoft Corporation Subjectonedrive.com Fingerprint74:60:B4:06:AB:E1:E4:E4:BC:D5:29:ED:EC:F2:EC:D4:C3:67:DD:8A ValidityFri, 29 Mar 2024 05:42:16 GMT - Mon, 24 Mar 2025 05:42:16 GMT
File typeHTML document, ASCII text, with very long lines (560), with CRLF line terminators Hash418d9172b00b23336e7fed220ab678ac f48f594208b2ec3435cb3fa4ac6f95380c27176e 659d89ee1a9bcd94e7887d8c5c6227125a9f88b0e5d382712b87711b7ef9f2c4
GET /milen.glushkov@fadata.eu HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: E=P:PKzmaydg3Ig=:c+bxVI7m08ZIWyBGHKp5ht/06N/crAZi7azs/mVnOfY=:F; xid=d12224a1-452c-4d5c-b2f0-43a556e22a29&&ODSP-ODWEB-ODCF&147; xidseq=1; wla42=
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 2614
content-type: text/html; charset=utf-8
expires: -1
set-cookie: E=P:PFgCbCdg3Ig=:J9bM2l/q81mLHRUkqXkk9a1xiq3d7PTdt7uF4QBTC8Y=:F; domain=.live.com; path=/
xidseq=2; domain=.live.com; path=/
LD=; domain=.live.com; expires=Fri, 19-Apr-2024 02:36:01 GMT; path=/
wla42=; domain=live.com; expires=Fri, 26-Apr-2024 04:16:01 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 795f98b668-2wtfm
x-odwebserver: eurwesteur637265-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 08CD872501FD4582AC87C7512A5C97D0 Ref B: SVG20EDGE0309 Ref C: 2024-04-19T04:16:01Z
date: Fri, 19 Apr 2024 04:16:00 GMT
X-Firefox-Spdy: h2
|
| p.sfx.ms/images/favicon.ico | 20.101.246.164 | 200 OK | 7.9 kB |
URL GET HTTP/1.1p.sfx.ms/images/favicon.ico IP20.101.246.164:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://onedrive.live.com/milen.glushkov@fadata.eu CertificateIssuerMicrosoft Corporation Subjectonedrive.com FingerprintE9:FF:31:7F:0C:79:4E:6C:11:09:23:F9:09:E5:77:ED:06:E0:4D:ED ValiditySun, 11 Feb 2024 21:04:50 GMT - Wed, 05 Feb 2025 21:04:50 GMT
File typeMS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel Hash604adfb53677b5ca4f910ffb131b3e7c 5f1a0fb4e4ad3707e591ce16352158263488ed70 24638331466a52bb66f912090e7a9cc9e3df2236e39c187c9409104526b472b0
GET /images/favicon.ico HTTP/1.1
Host: p.sfx.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=86400
Content-Type: image/x-icon
Last-Modified: Fri, 19 Jan 2024 16:05:42 GMT
Accept-Ranges: bytes
ETag: "0cf185af14ada1:0"
Server: Microsoft-IIS/10.0
X-MSNServer: bfd6775f7-2m272
X-ODWebServer: eurwesteur107255-odwebp
Date: Fri, 19 Apr 2024 04:16:01 GMT
Content-Length: 7886
|