Report Overview

  1. Submitted URL

    1drv.ms/f/s!BLNPU5Mh69Ki7yWvIy4QrbYTyc4B?e=FcTXbh6hSEySJ5jHGYB0bQ&at=9

  2. IP

    13.107.42.12

    ASN

    #8068 MICROSOFT-CORP-MSN-AS-BLOCK

  3. Submitted

    2024-05-10 19:07:16

    Access

    public

  4. Website Title

    Pedro - OneDrive

  5. Final URL

    onedrive.live.com/?authkey=%21Aq8jLhCtthPJzgE&id=A2D2EB2193534FB3%2114245&cid=A2D2EB2193534FB3

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
static2.sharepointonline.com21492005-03-212017-01-292024-05-09
api.onedrive.com15731998-06-082015-03-062024-05-07
storage.live.com1621994-12-282012-06-202024-05-06
login.live.com791994-12-282012-05-212024-05-09
browser.events.data.microsoft.com2901991-05-022018-05-252024-05-09
1drv.ms626492013-08-282016-02-292024-05-10
res-1.cdn.office.net10931994-11-142020-12-082024-05-09
onedrive.live.com22511994-12-282014-02-192024-05-09
ecs.office.com1151999-04-202020-01-252024-05-02

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumres-1.cdn.office.net/shellux/suiteux.shell.plus.d1fb7af21b6f874b96a0.jsDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (292)

HTTP Transactions (86)

URLIPResponseSize
1drv.ms/f/s!BLNPU5Mh69Ki7yWvIy4QrbYTyc4B?e=FcTXbh6hSEySJ5jHGYB0bQ&at=9
13.107.42.12301 Moved Permanently0 B
onedrive.live.com/redir?resid=A2D2EB2193534FB3!14245&authkey=!Aq8jLhCtthPJzgE&ithint=folder&e=FcTXbh6hSEySJ5jHGYB0bQ&at=9
13.107.137.11302 Found249 B
onedrive.live.com/?id=A2D2EB2193534FB3!14245&resid=A2D2EB2193534FB3!14245&ithint=folder&authkey=!Aq8jLhCtthPJzgE&cid=a2d2eb2193534fb3
13.107.137.11200 OK156 kB
onedrive.live.com/_layouts/15/images/odbfavicon.ico?rev=47
13.107.137.11200 OK974 B
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/plt.listviewdataprefetch.js
23.73.4.86200 OK67 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/25.js
23.73.4.86200 OK2.1 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/18.js
23.73.4.86200 OK2.9 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/16.js
23.73.4.86200 OK2.9 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/26.js
23.73.4.86200 OK2.6 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/70.js
23.73.4.86200 OK12 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/109.js
23.73.4.86200 OK5.0 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/38.js
23.73.4.86200 OK6.1 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/127.js
23.73.4.86200 OK12 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/53.js
23.73.4.86200 OK10 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/80.js
23.73.4.86200 OK6.5 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/86.js
23.73.4.86200 OK8.2 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/64.js
23.73.4.86200 OK107 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/62.js
23.73.4.86200 OK127 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/spwebworker.js
23.73.4.86200 OK45 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/68.js
23.73.4.86200 OK72 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/65.js
23.73.4.86200 OK22 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/67.js
23.73.4.86200 OK17 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/179.js
23.73.4.86200 OK15 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/184.js
23.73.4.86200 OK12 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/186.js
23.73.4.86200 OK6.2 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/319.js
23.73.4.86200 OK112 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/odclightspeed-b10aaea8.js
23.73.4.86200 OK85 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/en-us/initial.resx.js
23.73.4.86200 OK17 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/23.js
23.73.4.86200 OK3.6 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/24.js
23.73.4.86200 OK6.2 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/8.js
23.73.4.86200 OK4.6 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/14.js
23.73.4.86200 OK4.3 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/en-us/deferred.resx.js
23.73.4.86200 OK23 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/1.js
23.73.4.86200 OK2.9 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/0.js
23.73.4.86200 OK8.1 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/2.js
23.73.4.86200 OK1.9 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/3.js
23.73.4.86200 OK2.4 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/7.js
23.73.4.86200 OK2.7 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/29.js
23.73.4.86200 OK5.4 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/30.js
23.73.4.86200 OK2.6 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/31.js
23.73.4.86200 OK3.7 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/32.js
23.73.4.86200 OK1.8 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/60.js
23.73.4.86200 OK12 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/84.js
23.73.4.86200 OK3.4 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/58.js
23.73.4.86200 OK4.2 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/82.js
23.73.4.86200 OK2.8 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/59.js
23.73.4.86200 OK2.4 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/88.js
23.73.4.86200 OK18 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/66.js
23.73.4.86200 OK5.9 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/69.js
23.73.4.86200 OK4.3 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/89.js
23.73.4.86200 OK4.0 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/63.js
23.73.4.86200 OK3.0 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/93.js
23.73.4.86200 OK2.5 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/99.js
23.73.4.86200 OK138 kB
res-1.cdn.office.net/files/fabric-cdn-prod_20240312.001/onedrive-assets/onedrive-font-face-definitions.css
23.73.4.86200 OK757 B
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/en-us/ondemand.resx.js
23.73.4.86200 OK79 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/92.js
23.73.4.86200 OK4.0 kB
res-1.cdn.office.net/shellux/api/shellbootstrapper/consumer/oneshell?noext
23.73.4.86200 OK46 kB
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.003/odclightspeedwebpack.manifest/356.js
23.73.4.86200 OK4.7 kB
res-1.cdn.office.net/files/sp-client/odsp-media-31bb81ba/fluenthybridfont/odsp-next-icons-e7cdf803.woff
23.73.4.86200 OK25 kB
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
23.46.120.123200 OK36 kB
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
23.46.120.123200 OK32 kB
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us?bucketId=0
23.73.4.86200 OK6.0 kB
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
23.46.120.123200 OK36 kB
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
23.46.120.123200 OK32 kB
res-1.cdn.office.net/shellux/en/shellstrings.52af792134b43bb66ac6fb020ec0b324.json
23.73.4.86200 OK5.2 kB
res-1.cdn.office.net/shellux/suiteux.shell.responsive.b4cbc5203b4c7fc99e43.js
23.73.4.86200 OK13 kB
res-1.cdn.office.net/shellux/suiteux.shell.consappdata.335c10b99bc183e8b891.js
23.73.4.86200 OK3.4 kB
api.onedrive.com/v1.0/drives/a2d2eb2193534fb3/items/A2D2EB2193534FB3!14245/children?%24top=100&orderby=folder%2Cname&%24expand=thumbnails%2Clenses%2Ctags&select=*%2Cocr%2CwebDavUrl%2CsharepointIds%2CisRestricted%2CcommentSettings%2CspecialFolder%2CcontainingDrivePolicyScenarioViewpoint&ump=1&authKey=!Aq8jLhCtthPJzgE
13.107.42.12200 OK1.4 kB
res-1.cdn.office.net/shellux/suiteux.shell.core.3cafff1d085a9d68cd15.js
23.73.4.86200 OK76 kB
api.onedrive.com/v1.0/drives/a2d2eb2193534fb3/items/A2D2EB2193534FB3!14245?%24select=*%2CsharepointIds%2CwebDavUrl%2CcontainingDrivePolicyScenarioViewpoint&%24expand=thumbnails&ump=1&authKey=!Aq8jLhCtthPJzgE
13.107.42.12200 OK702 B
res-1.cdn.office.net/files/fabric-cdn-prod_20240312.001/assets/item-types/32/docx.svg
23.73.4.86200 OK562 B
ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=ShellDocuments&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=UnAuth&UPN=UnAuth
52.113.194.132200 OK295 B
res-1.cdn.office.net/files/sp-client/odsp-media-31bb81ba/fluenthybridfont/odsp-next-icons-6-8638bcd6.woff
23.73.4.86200 OK16 kB
res-1.cdn.office.net/files/sp-client/odsp-media-31bb81ba/fluenthybridfont/odsp-next-icons-5-16b3eaa3.woff
23.73.4.86200 OK16 kB
res-1.cdn.office.net/shellux/suiteux.shell.plus.d1fb7af21b6f874b96a0.js
23.73.4.86200 OK47 kB
res-1.cdn.office.net/shellux/suiteux.shell.otellogging.6d1f8c2444955ff9be1e.js
23.73.4.86200 OK33 kB
res-1.cdn.office.net/shellux/suiteux.shell.mast.cbaf46b67d51a579c798.js
23.73.4.86200 OK39 kB
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1715368010053
13.105.28.32302 Found0 B
login.live.com/login.srf?wa=wsignin1.0&rpsnv=151&ct=1715368010&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
20.190.177.22200 OK11 kB
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
13.89.179.11200 OK0 B
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
13.89.179.11200 OK0 B
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
13.89.179.11200 OK9 B
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
13.89.179.11200 OK11 B
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
13.89.179.11200 OK0 B
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
13.89.179.11200 OK9 B