| pub-d172ccfab50c4eb3b25bcfe4c60bd498.r2.dev/auhindex/ple12index.html |  104.18.3.35 | 200 OK | 518 kB |
URL User Request GET HTTP/1.1pub-d172ccfab50c4eb3b25bcfe4c60bd498.r2.dev/auhindex/ple12index.html IP104.18.3.35:443
CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
File typeHTML document, ASCII text, with very long lines (23074) Size518 kB (518107 bytes) Hashf8670f265b18125b596571e7dab93d95 0744c2ad17b644b7122d109db9f28495d0462c0e 0fa2212497b78b5d080f9d422df709529636c53f7e3e6d62fb06bfc102079b88
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Suspicious Javascript code | | OpenPhish | phishing | Office365 | | PhishTank | phishing | Other |
GET /auhindex/ple12index.html HTTP/1.1
Host: pub-d172ccfab50c4eb3b25bcfe4c60bd498.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 05:18:41 GMT
Content-Type: text/html
Content-Length: 518107
Connection: keep-alive
Accept-Ranges: bytes
ETag: "f8670f265b18125b596571e7dab93d95"
Last-Modified: Wed, 03 Apr 2024 12:44:30 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ee4573b98e56c5-OSL
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js |  142.250.74.74 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP142.250.74.74:443
Requested byhttps://pub-d172ccfab50c4eb3b25bcfe4c60bd498.r2.dev/auhindex/ple12index.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d172ccfab50c4eb3b25bcfe4c60bd498.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:53:06 GMT
expires: Fri, 02 May 2025 01:53:06 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 271536
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
IP 40.126.53.18:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-d172ccfab50c4eb3b25bcfe4c60bd498.r2.dev/auhindex/ple12index.html CertificateIssuerDigiCert Inc Subjectlogin.live.com Fingerprint82:2F:20:E4:BD:99:37:36:52:F8:AF:FC:4D:86:73:BA:3A:7A:65:3E ValidityFri, 29 Mar 2024 00:00:00 GMT - Sat, 29 Mar 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (23787) Hash915219c7a5082543d0eb071783fafc58 2218fb0d0618a9a11a15df594fbde6634e9f4361 5e0c0437df81d7b390be48acedb5ab97fbd5d3f0d6805fac979e55c07cafd022
GET / HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://pub-d172ccfab50c4eb3b25bcfe4c60bd498.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Sun, 05 May 2024 05:17:42 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C522_BL2
x-ms-request-id: c3dca324-149d-46a9-80ca-a3d7c8417d9b
PPServer: PPV: 30 H: BL02EPF0001D81A V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=cbe058e71f1c4c4f9972aa24b24a7f3e; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=N<=1714886322&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSCC=91.90.42.154-NO; expires=Fri, 30-May-2025 05:18:42 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-a2f9d830-a884-4826-8d6b-b3e8cf029a27; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DrLjJAm9AEkJ5qOtdUtOL22SJjssUbnDqjb0cvIACLtU8WMF6GzVv2y4f7CAu8It4IGjONZ86ZNime5u3LEZIDZCNMB9EQOBLjMmX0djJ8p3tE*orUR6I5gnIA54OoAkHC*ikmjEAzQbueouKDpIvw4$; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Sun, 05 May 2024 05:18:42 GMT
Content-Length: 10678
|