Report - 3.215.162.76/

Report Overview

Submitted URL
3.215.162.76/
IP
3.215.162.76
ASN
#14618 AMAZON-AES
Submitted
2024-05-08 12:47:28
Access
public
Website Title
ZS - Sign In
Final URL
idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=fln.zsservices.com
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
3.215.162.76	unknown	unknown	2023-07-01	2024-03-18	850 B	865 B	3.215.162.76
idm.zsservices.com	unknown	unknown	No data	No data	9.9 kB	267 kB	143.204.55.7
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-05-07	676 B	1.7 kB	143.204.53.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	3.215.162.76	Sinkholed
2024-05-08	medium	3.215.162.76	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=fln.zsservices.com	0 B	2023-03-07	2024-05-20
Pretty URL idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=fln.zsservices.com IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 00:21:07 Times Seen37847199 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=imYb-5Zdc9p-nGNdDyPULd5ynSXDxy8WYJefX7xPTr1-MHsnGBC6aYhgQh_4RVlX817H1l1tRXjc2p4NIGpPoD2L1Ko1&t=638460238960000000	23 kB	2023-03-07	2024-05-20
Pretty URL idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=imYb-5Zdc9p-nGNdDyPULd5ynSXDxy8WYJefX7xPTr1-MHsnGBC6aYhgQh_4RVlX817H1l1tRXjc2p4NIGpPoD2L1Ko1&t=638460238960000000 IP 143.204.55.7 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-20 00:21:20 Times Seen44137 Hash 90ea7274f19755002360945d54c2a0d7 647b5d8bf7d119a2c97895363a07a0c6eb8cd284 40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db Loading...

	idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=cnk3bH9rI2RrFDtzeua9Z3MPt1iSo8BiuoMFa4zbueUyzVijGCqkgRKhrGlDMARaDc4gp82-y31eMNXhSyPDwDCgdgU1&t=638460238960000000	3.0 kB	2023-03-07	2024-05-19
Pretty URL idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=cnk3bH9rI2RrFDtzeua9Z3MPt1iSo8BiuoMFa4zbueUyzVijGCqkgRKhrGlDMARaDc4gp82-y31eMNXhSyPDwDCgdgU1&t=638460238960000000 IP 143.204.55.7 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:41:26 Last Seen2024-05-19 00:10:35 Times Seen841 Hash a870b45ac5d6b0d4e18c4829c7b660b4 2d3ca0e1f19efdeb9b2dd3dcffb17f8aba118aa0 144524233f795d6a425b76f7ae5c0bb622b5f67e2e6ae73532ad526528ca07cf Loading...

HTTP Transactions (18)

URL IP Response Size

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
8cda0655017992e53d806ae90e8c4e90
0c78a905cbda14e5936a386525846f0b6ce6b64c
12da8d6f8b7a0c61ecabbda55201d1d132ea88c6d6a1b2159fdd9893352ffd11

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 12:47:03 GMT
Server: ECAcc (amb/6AFD)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7rYN0A1c22-7TwzwrC7LCmIkFePm0c-JXdZ0kQbxy9DjrzvWb8ClQw==

3.215.162.76/

3.215.162.76

302 Found

134 B

URL User Request GET HTTP/2
3.215.162.76/
IP
3.215.162.76:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectfln.zsservices.com
Fingerprint36:8C:11:90:F6:EE:0F:71:88:3D:2E:A4:45:06:B6:8F:76:76:E6:7E
ValidityFri, 03 May 2024 00:00:00 GMT - Mon, 02 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
134 B (134 bytes)
Hash
4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 3.215.162.76
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Wed, 08 May 2024 12:47:03 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://3.215.162.76:443/

3.215.162.76/

3.215.162.76

302 Found

0 B

URL User Request GET HTTP/2
3.215.162.76/
IP
3.215.162.76:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectfln.zsservices.com
Fingerprint36:8C:11:90:F6:EE:0F:71:88:3D:2E:A4:45:06:B6:8F:76:76:E6:7E
ValidityFri, 03 May 2024 00:00:00 GMT - Mon, 02 Jun 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 3.215.162.76
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 08 May 2024 12:47:05 GMT
content-length: 0
location: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
server: Kestrel
cache-control: no-cache,no-store
expires: -1
pragma: no-cache
set-cookie: .AspNetCore.Session=CfDJ8LM8zisOxKtBnsCHpJ4TUWypwoPaGGqXKrUUSv0OZPBXK9sZyJOIAH6upFZwqdXAbER0w9jyigeq4PjUYfW1HoVVbqTYkICp3vYZfETT2WFtillZROBGS6zqFDW9WEqNpFtPgADNSSlHYLXEOyIQTrXlj8mKr3Mjz5TzjhfrjYiC; path=/; samesite=lax; httponly
X-Firefox-Spdy: h2

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
e5243bfbbd56a2e922a21b75852a274b
006834acc4c8337c504059cbe23986ee2583c9c3
4c18dc22f1f044c12b62aa4f1ccaeaf3513a178e336119a72d182810b264a8b4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 12:47:06 GMT
Server: ECAcc (amb/6B04)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eA-jDpk4XCaRrOEpILePyYmeNELVimZ88q4o5xe4aRY5Bw_Ju9S-rA==

idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com

143.204.55.7

9.0 kB

URL
idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
IP
143.204.55.7:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (376), with CRLF line terminators
Size
9.0 kB (9025 bytes)
Hash
3bc63fd883b3c0c87cb2d21bd53b8020
0259c5c7eabf547cff4e29e240c4b9618da29580
60f52b770a1b4eaf3520351a12e7903c01f99ff8bd47041d655c7a6f88864f98

HTTP Headers

GET /Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 9025
server: CloudFront
date: Wed, 08 May 2024 12:47:06 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
x-authenticated-user: 
x-frame-options: DENY
set-cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; domain=.zsservices.com; path=/; secure; HttpOnly; SameSite=Lax
SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==; domain=.zsservices.com; expires=Wed, 08-May-2024 12:48:06 GMT; path=/; secure; HttpOnly; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 043FwTWh8pWWcYpti4VrcxWgkUNXl2D4qGUXCKF5VoFMlE-VVDG0Ug==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=cnk3bH9rI2RrFDtzeua9Z3MPt1iSo8BiuoMFa4zbueUyzVijGCqkgRKhrGlDMARaDc4gp82-y31eMNXhSyPDwDCgdgU1&t=638460238960000000

143.204.55.7

200 OK

3.0 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=cnk3bH9rI2RrFDtzeua9Z3MPt1iSo8BiuoMFa4zbueUyzVijGCqkgRKhrGlDMARaDc4gp82-y31eMNXhSyPDwDCgdgU1&t=638460238960000000
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
3.0 kB (3005 bytes)
Hash
a870b45ac5d6b0d4e18c4829c7b660b4
2d3ca0e1f19efdeb9b2dd3dcffb17f8aba118aa0
144524233f795d6a425b76f7ae5c0bb622b5f67e2e6ae73532ad526528ca07cf

HTTP Headers

GET /Falcon/IdentityManager/app/Web/WebResource.axd?d=cnk3bH9rI2RrFDtzeua9Z3MPt1iSo8BiuoMFa4zbueUyzVijGCqkgRKhrGlDMARaDc4gp82-y31eMNXhSyPDwDCgdgU1&t=638460238960000000 HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 3005
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
cache-control: public
expires: Thu, 08 May 2025 12:47:07 GMT
last-modified: Thu, 14 Mar 2024 14:38:16 GMT
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UXkoomRUo7n2SNv7FfVnk9FKUkMgphs03uSC0yBX9Bv4oeAkOS2SCw==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app//Web/images/cobrand-logo-2.png

143.204.55.7

200 OK

43 B

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app//Web/images/cobrand-logo-2.png
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /Falcon/IdentityManager/app//Web/images/cobrand-logo-2.png HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 43
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Mon, 25 Apr 2016 06:19:09 GMT
accept-ranges: bytes
etag: "847ef260ba9ed11:0"
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rBpimtw2NmVyZTzyPbApdxvYk_J1TxU24cQuYN1CajG0HoAZCIUhug==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app//Web/images/cobrand-logo.png

143.204.55.7

200 OK

3.7 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app//Web/images/cobrand-logo.png
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
PNG image data, 275 x 217, 8-bit/color RGBA, non-interlaced
Size
3.7 kB (3724 bytes)
Hash
e54b862fb439e44f52f462a1bde11e9a
4fa7af2018760c03aa69108f303c1f68ca645720
18f9adfaddb4797db7470c934f1662186aeb8daad5eda80196de965d0ab31f51

HTTP Headers

GET /Falcon/IdentityManager/app//Web/images/cobrand-logo.png HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 3724
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Wed, 10 Jun 2020 09:06:00 GMT
accept-ranges: bytes
etag: "8af8d5c63fd61:0"
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
pragma: no-cache
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k24ZpNOKIKjqnAXrZVc3Z80gmmtnGrc_bCjQXY_znQdnRKtO98y4HQ==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/styles/password-strength.css?v=6329

143.204.55.7

200 OK

1.2 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/styles/password-strength.css?v=6329
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
ASCII text, with CRLF, LF line terminators
Size
1.2 kB (1171 bytes)
Hash
ccb3dcc8ee821ff105250d22e48e4e04
d2d3af3084904a3e6ec0b186d361358794964c24
45bcd43ff8698d272005c1bc6e00ac51d4776611019f5a5005737753b27e056a

HTTP Headers

GET /Falcon/IdentityManager/app/Web/styles/password-strength.css?v=6329 HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 1171
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Wed, 31 Jul 2019 05:04:10 GMT
accept-ranges: bytes
etag: "c85fc6635d47d51:0"
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Oo9rkgj5c-KE-ntoX0qTK94uNsljL9wuJrLih60WjtTn5zf8LGl8ZQ==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=imYb-5Zdc9p-nGNdDyPULd5ynSXDxy8WYJefX7xPTr1-MHsnGBC6aYhgQh_4RVlX817H1l1tRXjc2p4NIGpPoD2L1Ko1&t=638460238960000000

143.204.55.7

200 OK

23 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/WebResource.axd?d=imYb-5Zdc9p-nGNdDyPULd5ynSXDxy8WYJefX7xPTr1-MHsnGBC6aYhgQh_4RVlX817H1l1tRXjc2p4NIGpPoD2L1Ko1&t=638460238960000000
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
23 kB (23063 bytes)
Hash
90ea7274f19755002360945d54c2a0d7
647b5d8bf7d119a2c97895363a07a0c6eb8cd284
40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db

HTTP Headers

GET /Falcon/IdentityManager/app/Web/WebResource.axd?d=imYb-5Zdc9p-nGNdDyPULd5ynSXDxy8WYJefX7xPTr1-MHsnGBC6aYhgQh_4RVlX817H1l1tRXjc2p4NIGpPoD2L1Ko1&t=638460238960000000 HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 23063
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
cache-control: public
expires: Thu, 08 May 2025 12:47:07 GMT
last-modified: Thu, 14 Mar 2024 14:38:16 GMT
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lOx1gqZPFsgf881TOZoynGw-wj81kMSog2O12Rt9N6l7qnPCu536nA==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/themes/user/app-login.css?v=6329

143.204.55.7

200 OK

97 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/themes/user/app-login.css?v=6329
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (460)
Size
97 kB (97335 bytes)
Hash
3d6a46470899367f814b90a7f2591439
5854510431542fd511064c22ace10d73e2ff8ce5
0f1a7b61e05a044291384bcb0cc65ab781b74a660440f6f19d22ba431180c195

HTTP Headers

GET /Falcon/IdentityManager/app/Web/zsui/themes/user/app-login.css?v=6329 HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 97335
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Tue, 05 Dec 2017 10:12:02 GMT
accept-ranges: bytes
etag: "ec78d77eb16dd31:0"
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qsbZfhT18KMneIqInhNndAQ198SfkZa0ReSsWKjM7drWqtQq-1AJtw==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app//Web/images/blank-poweredby.png

143.204.55.7

200 OK

43 B

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app//Web/images/blank-poweredby.png
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /Falcon/IdentityManager/app//Web/images/blank-poweredby.png HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 43
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Tue, 20 Aug 2019 11:04:20 GMT
accept-ranges: bytes
etag: "30517d44757d51:0"
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zhAsrVVUZMidcG23UPcjOv1ColRDafd7etLlQ5F3gQRkBnxW0l-FQg==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/lib/fonts/Roboto-Bold.woff2

143.204.55.7

200 OK

19 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/lib/fonts/Roboto-Bold.woff2
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18824, version 1.0
Size
19 kB (18824 bytes)
Hash
9e2973bc64fba18fcbd082570cb4de94
b52536d150ef34956d8723d6e2cdb66015fcb50e
a8667242609050a2f497446481778b791bba44b89868f0587c54c7873c3020d7

HTTP Headers

GET /Falcon/IdentityManager/app/Web/zsui/lib/fonts/Roboto-Bold.woff2 HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/themes/user/app-login.css?v=6329
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff2
content-length: 18824
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Tue, 11 Oct 2016 22:02:08 GMT
accept-ranges: bytes
etag: "e8e6111cb24d21:0"
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8R_sETMU0PPjYHOst7pBjbqDJlusxeMYOWtoW4cOWyH6-TWN9aRSsg==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/themes/user/tilebg.png

143.204.55.7

200 OK

14 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/themes/user/tilebg.png
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
PNG image data, 267 x 360, 8-bit/color RGBA, non-interlaced
Size
14 kB (13941 bytes)
Hash
a574ed49f25aa0ddea1ca1eda45ee57d
8d93c24861170812ecadf2698811b49d8c3c7251
5dae37f64487cccc8e86ae75cd62ec000d4a6be4e5631fb719070dd956e56147

HTTP Headers

GET /Falcon/IdentityManager/app/Web/zsui/themes/user/tilebg.png HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/themes/user/app-login.css?v=6329
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 13941
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Wed, 01 Jun 2016 20:55:33 GMT
accept-ranges: bytes
etag: "7a6dd7f047bcd11:0"
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TZVWlkh_leNVuYrn2tlSg_txruoQ3ksOKOtxDym6j8kpouJWFdjGvQ==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/lib/fonts/Roboto-Regular.woff2

143.204.55.7

200 OK

64 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/lib/fonts/Roboto-Regular.woff2
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 64184, version 2.0
Size
64 kB (64184 bytes)
Hash
b2a6341ae7440130ec4b4b186aff8413
a18bcf95ada923da31f176137b8add02b0ba60f3
fdffd706005defc7e4f5e07cac7cc371c5bb0b0c895e5ec7c16c1ea0baa43f59

HTTP Headers

GET /Falcon/IdentityManager/app/Web/zsui/lib/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app/Web/zsui/themes/user/app-login.css?v=6329
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff2
content-length: 64184
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
last-modified: Tue, 11 Oct 2016 22:02:08 GMT
accept-ranges: bytes
etag: "e8e6111cb24d21:0"
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lEcecYahMBYzM27Lu6Lf1hVpiL28_wEzOvGb9LihVXIFEB4s9_Nczg==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app//Web/favicon.ico

143.204.55.7

302 Found

223 B

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app//Web/favicon.ico
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
223 B (223 bytes)
Hash
b94e0be048f7399c738990c33e209202
3026e4b48e67e918c552b4c15916dbda8ce9b4ac
db15515811dcb89bf2346b9666ba293478c172a9aedfdfd9338ecfbf3ff4ce73

HTTP Headers

GET /Falcon/IdentityManager/app//Web/favicon.ico HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 223
server: CloudFront
date: Wed, 08 May 2024 12:47:07 GMT
cache-control: private
location: /Falcon/IdentityManager/app/Web/login.aspx?ReturnUrl=%2fFalcon%2fIdentityManager%2fapp%2fWeb%2ffavicon.ico
x-authenticated-user: 
x-frame-options: DENY
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u-UW5zZ4Ry1Hnc1uEXsNgRjZGzA1lTF-3Fa12exOCTbWvyrVIIw6Ew==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app/Web/login.aspx?ReturnUrl=%2fFalcon%2fIdentityManager%2fapp%2fWeb%2ffavicon.ico

143.204.55.7

200 OK

9.1 kB

URL GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app/Web/login.aspx?ReturnUrl=%2fFalcon%2fIdentityManager%2fapp%2fWeb%2ffavicon.ico
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Requested by
https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (376), with CRLF line terminators
Size
9.1 kB (9069 bytes)
Hash
e0fec860f879761b8fc7d55338349f52
c572131e1ce8628abe45b2a940bd34d6626c17fa
3a6b474fea504a2a65e6efe4759d85f82b371a582d2a6eda449b958a2c9f6106

HTTP Headers

GET /Falcon/IdentityManager/app/Web/login.aspx?ReturnUrl=%2fFalcon%2fIdentityManager%2fapp%2fWeb%2ffavicon.ico HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
DNT: 1
Connection: keep-alive
Cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 9069
server: CloudFront
date: Wed, 08 May 2024 12:47:08 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
x-authenticated-user: 
x-frame-options: DENY
set-cookie: SessionAliveToken=fGMxZGYwOTRjLWViNDQtNDgzNC1hZDBjLTU3MDhhM2FlOTcxZXw1LzgvMjAyNCAxMjo0ODowOCBQTQ==; domain=.zsservices.com; expires=Wed, 08-May-2024 12:48:08 GMT; path=/; secure; HttpOnly; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WcKljzhAGgvA608c0dJUoWTQ5jHlfDDx7SQjDzaXq5InKioHxi9mFg==
X-Firefox-Spdy: h2

idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com

143.204.55.7

200 OK

9.0 kB

URL User Request GET HTTP/2
idm.zsservices.com/Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com
IP
143.204.55.7:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectidm.zsservices.com
Fingerprint66:AC:4E:FB:9E:9F:DE:AF:20:93:F8:07:4A:B0:F3:B6:2F:4A:AB:B5
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (9696), with no line terminators
Size
9.0 kB (9025 bytes)
Hash
e53cee66ef0065990757607f9561b162
85b05b0bc6937947adb96c18c381861f611f6118
742e245612ec64f729161552b81d82cec27f0d640ebc4811202d6b586d58b292

HTTP Headers

GET /Falcon/IdentityManager/app//Web/Login.aspx?ReturnUrl=http://fln.zsservices.com HTTP/1.1
Host: idm.zsservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 9025
server: CloudFront
date: Wed, 08 May 2024 12:47:06 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
x-authenticated-user: 
x-frame-options: DENY
set-cookie: Falcon_Session=t0v2znq3fnlpqn3e4j0mvydt; domain=.zsservices.com; path=/; secure; HttpOnly; SameSite=Lax
SessionAliveToken=fGRhNDgyMmYyLWI2ZWYtNDM2OS1hOWM2LWM0M2IzZjk3NTE3Znw1LzgvMjAyNCAxMjo0ODowNiBQTQ==; domain=.zsservices.com; expires=Wed, 08-May-2024 12:48:06 GMT; path=/; secure; HttpOnly; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-ua-compatible: IE=8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline', frame-ancestors *.zsservices.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com *.lightning.com
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 043FwTWh8pWWcYpti4VrcxWgkUNXl2D4qGUXCKF5VoFMlE-VVDG0Ug==
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers