| sandiegocoe.net/LandingPage/Index/122 |  20.118.138.128 | 200 OK | 7.0 kB |
URL User Request GET HTTP/2sandiegocoe.net/LandingPage/Index/122 IP20.118.138.128:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerSectigo Limited Subjectredherring.dev Fingerprint3E:40:60:83:F0:6A:D6:AF:8A:44:BA:FA:C8:D3:BB:19:8D:A6:A9:09 ValidityTue, 26 Mar 2024 00:00:00 GMT - Sat, 26 Apr 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5761), with CRLF line terminators Hash426e68576a3812fe588e568829690d0a 2e6817dd029c4e94c9c0ad2f02f48afd3a4d8822 7445c2d34d6d0fa4f7c400359300138e66845783327c976bd56b532a42990416
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /LandingPage/Index/122 HTTP/1.1
Host: sandiegocoe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Tue, 23 Apr 2024 04:00:49 GMT
server: Microsoft-IIS/10.0
cache-control: no-cache, no-store
content-encoding: gzip
pragma: no-cache
set-cookie: .AspNetCore.Antiforgery.cdV5uW_Ejgc=CfDJ8JlYq48dxahKgO7pFSK28Etjyn9-6WSM1ZYXUViHX_EGQxlc6glgjd2Y1xRXV4E7c87orsS-XNVfgLM9aYoTlkHVRprvLvWJbtanTIvkS43glmFh4ll9W2S6N1lHqScb40wZ1WxB5CdJrES0stSptCg; path=/; secure; samesite=strict; httponly
ARRAffinity=5a03bb185be0afa108d5f564015ac51ab3be6392be611aebfb46182c2f125b9f;Path=/;HttpOnly;Secure;Domain=sandiegocoe.net
ARRAffinitySameSite=5a03bb185be0afa108d5f564015ac51ab3be6392be611aebfb46182c2f125b9f;Path=/;HttpOnly;SameSite=None;Secure;Domain=sandiegocoe.net
vary: Accept-Encoding
strict-transport-security: max-age=2592000
request-context: appId=cid-v1:143d6b8a-57fa-4117-be71-eb6cf7585928
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| cdn.sdcoe.net/bootstrap/v4.3.1/css/bootstrap.min.css | 198.133.204.61 | 200 OK | 23 kB |
URL GET HTTP/1.1cdn.sdcoe.net/bootstrap/v4.3.1/css/bootstrap.min.css IP198.133.204.61:443
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerGoDaddy.com, Inc. Subject*.sdcoe.net FingerprintC5:2B:AC:C3:D7:24:4B:FE:77:6D:FB:E4:47:E3:70:C1:38:F1:8F:77 ValidityTue, 26 Mar 2024 17:57:26 GMT - Sun, 27 Apr 2025 17:57:26 GMT
File typeASCII text, with very long lines (65324) Hasha15c2ac3234aa8f6064ef9c1f7383c37 6e10354828454898fda80f55f3decb347fd9ed21 60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36
GET /bootstrap/v4.3.1/css/bootstrap.min.css HTTP/1.1
Host: cdn.sdcoe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sandiegocoe.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 08 Apr 2019 17:03:26 GMT
Accept-Ranges: bytes
ETag: "0324fb2ceed41:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Tue, 23 Apr 2024 04:00:51 GMT
Content-Length: 23227
Set-Cookie: BIGipServerCDN-Pool=738371776.20480.0000; path=/; Httponly; Secure
|
|
| cdn.sdcoe.net/jquery/production/jquery.js | 198.133.204.61 | 200 OK | 81 kB |
URL GET HTTP/1.1cdn.sdcoe.net/jquery/production/jquery.js IP198.133.204.61:443
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerGoDaddy.com, Inc. Subject*.sdcoe.net FingerprintC5:2B:AC:C3:D7:24:4B:FE:77:6D:FB:E4:47:E3:70:C1:38:F1:8F:77 ValidityTue, 26 Mar 2024 17:57:26 GMT - Sun, 27 Apr 2025 17:57:26 GMT
File typeJavaScript source, ASCII text Hash6a07da9fae934baf3f749e876bbfdd96 46a436eba01c79acdb225757ed80bf54bad6416b d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
GET /jquery/production/jquery.js HTTP/1.1
Host: cdn.sdcoe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sandiegocoe.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 10 Oct 2018 16:06:26 GMT
Accept-Ranges: bytes
ETag: "06d4e32b360d41:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Tue, 23 Apr 2024 04:00:51 GMT
Content-Length: 80710
Set-Cookie: BIGipServerCDN-Pool=738371776.20480.0000; path=/; Httponly; Secure
|
|
| sandiegocoe.net/favicon.ico | 20.118.138.128 | 200 OK | 1.8 kB |
URL GET HTTP/2sandiegocoe.net/favicon.ico IP20.118.138.128:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerSectigo Limited Subjectredherring.dev Fingerprint3E:40:60:83:F0:6A:D6:AF:8A:44:BA:FA:C8:D3:BB:19:8D:A6:A9:09 ValidityTue, 26 Mar 2024 00:00:00 GMT - Sat, 26 Apr 2025 23:59:59 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash91d770d45f5987010a80759f5394d46e c72fbf2a979ee4e42cae3f6c15aba7a33b3a6848 b4af9ef76a6d27c559cecdb388e38ae174a83fd165e532d5b782ea4cefa9433a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /favicon.ico HTTP/1.1
Host: sandiegocoe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sandiegocoe.net/LandingPage/Index/122
Cookie: .AspNetCore.Antiforgery.cdV5uW_Ejgc=CfDJ8JlYq48dxahKgO7pFSK28Etjyn9-6WSM1ZYXUViHX_EGQxlc6glgjd2Y1xRXV4E7c87orsS-XNVfgLM9aYoTlkHVRprvLvWJbtanTIvkS43glmFh4ll9W2S6N1lHqScb40wZ1WxB5CdJrES0stSptCg; ARRAffinity=5a03bb185be0afa108d5f564015ac51ab3be6392be611aebfb46182c2f125b9f; ARRAffinitySameSite=5a03bb185be0afa108d5f564015ac51ab3be6392be611aebfb46182c2f125b9f; ai_user=ReEjuxzGRoOPOQ8Sd//LV/|2024-04-23T04:00:50.656Z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
date: Tue, 23 Apr 2024 04:00:51 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
etag: "1da0381a386466c"
last-modified: Fri, 20 Oct 2023 18:17:09 GMT
content-length: 1772
strict-transport-security: max-age=2592000
request-context: appId=cid-v1:143d6b8a-57fa-4117-be71-eb6cf7585928
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| logincdn.msauth.net/16.000.29100.2/images/favicon.ico | 13.107.246.53 | 200 OK | 17 kB |
URL GET HTTP/2logincdn.msauth.net/16.000.29100.2/images/favicon.ico IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerMicrosoft Corporation Subjectidentitycdn.msauth.net Fingerprint15:1B:3E:26:F4:4A:EE:1C:C2:40:74:BB:BD:AE:20:E4:35:B0:40:40 ValidityWed, 17 Jan 2024 06:03:21 GMT - Sat, 11 Jan 2025 06:03:21 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /16.000.29100.2/images/favicon.ico HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sandiegocoe.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 04:00:52 GMT
content-type: image/x-icon
content-length: 17174
cache-control: public, max-age=31536000
last-modified: Sat, 03 Jul 2021 00:55:18 GMT
etag: 0x8D93DBD3A55C481
x-ms-request-id: 90875e37-501e-0057-4b32-9557a3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240423T040051Z-16c4f695cc5rfvs2nkzu5z9xsc00000000fg000000003wma
x-fd-int-roxy-purgeid: 67912908
x-cache: TCP_MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| westus3-1.in.applicationinsights.azure.com//v2/track | 20.150.130.241 | 200 OK | 0 B |
URL POST HTTP/2westus3-1.in.applicationinsights.azure.com//v2/track IP20.150.130.241:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerMicrosoft Corporation Subjectin.applicationinsights.azure.com Fingerprint21:DB:90:F9:04:8F:42:FD:BE:B1:7B:4B:85:DA:68:73:46:2F:DB:36 ValidityMon, 15 Apr 2024 17:30:28 GMT - Thu, 10 Apr 2025 17:30:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS //v2/track HTTP/1.1
Host: westus3-1.in.applicationinsights.azure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://sandiegocoe.net/
Origin: https://sandiegocoe.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-headers: Origin,X-Requested-With,Content-Name,Content-Type,Accept,Cache-Control,Sdk-Context
access-control-allow-methods: POST
access-control-max-age: 3600
date: Tue, 23 Apr 2024 04:00:52 GMT
X-Firefox-Spdy: h2
|
|
| westus3-1.in.applicationinsights.azure.com//v2/track | 20.150.130.241 | 200 OK | 10 kB |
URL POST HTTP/2westus3-1.in.applicationinsights.azure.com//v2/track IP20.150.130.241:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerMicrosoft Corporation Subjectin.applicationinsights.azure.com Fingerprint21:DB:90:F9:04:8F:42:FD:BE:B1:7B:4B:85:DA:68:73:46:2F:DB:36 ValidityMon, 15 Apr 2024 17:30:28 GMT - Thu, 10 Apr 2025 17:30:28 GMT
Hashf80923f8ea8263d4ac5511c2a530a976 ebc8848b4c6bb00143e8653de3545dbaa2aae467 b842538ab57a76795cb07f21aa2e96dd6da9cac83c1a9d13bcd20f8f17d8a5ba
POST //v2/track HTTP/1.1
Host: westus3-1.in.applicationinsights.azure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 1574
Origin: https://sandiegocoe.net
DNT: 1
Connection: keep-alive
Referer: https://sandiegocoe.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
date: Tue, 23 Apr 2024 04:00:52 GMT
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg | 13.107.213.53 | 200 OK | 3.7 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashd633a913e6f3b1f45774b9874dfc85e0 5ba1344048578062c93cfddfdf8458477eaca476 c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sandiegocoe.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 04:00:50 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 17 Jan 2020 19:28:38 GMT
etag: 0x8D79B8373CB2849
x-ms-request-id: 173b80b0-a01e-0050-227a-9486ad000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240423T040050Z-16c4f695cc54rz7xga6xfvddx000000005bg000000000hs4
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| js.monitor.azure.com/scripts/b/ai.2.min.js | 13.107.213.53 | 200 OK | 123 kB |
URL GET HTTP/2js.monitor.azure.com/scripts/b/ai.2.min.js IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sandiegocoe.net/LandingPage/Index/122 CertificateIssuerMicrosoft Corporation Subjectjs.monitor.azure.com FingerprintDD:47:44:23:11:4B:FF:38:78:DD:22:21:3B:26:E6:50:05:D5:C2:3F ValidityMon, 18 Mar 2024 20:01:57 GMT - Thu, 13 Mar 2025 20:01:57 GMT
File typeJavaScript source, ASCII text, with very long lines (65409) Size123 kB (123063 bytes) Hash30f39ae5d1d05a439046a7640510b486 716efa29594edae8832bb8b12e7fb19bc06e06fe bde9be4cbe799089a419225f87c2a9986043f6c7cb55853aaadab7200713f136
GET /scripts/b/ai.2.min.js HTTP/1.1
Host: js.monitor.azure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sandiegocoe.net
DNT: 1
Connection: keep-alive
Referer: https://sandiegocoe.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 04:00:50 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: public, max-age=1800, immutable, no-transform
last-modified: Wed, 20 Mar 2024 17:31:27 GMT
x-ms-request-id: 91bf954e-201e-00b4-5973-9142c7000000
x-ms-version: 2009-09-19
x-ms-meta-aijssdksrc: [cdn]/scripts/b/ai.2.8.18.min.js
x-ms-meta-aijssdkver: 2.8.18
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-aijssdksrc,x-ms-meta-aijssdkver,x-ms-meta-lastmodified,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240423T040050Z-16c4f695cc5zbb4tvsgh6u01tc00000005fg0000000013nv
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|