Report - aubinfo.com/wp-login.php?redirect

Report Overview

Submitted URL
aubinfo.com/wp-login.php?redirect_to=https://aubinfo.com/
IP
216.194.122.136
ASN
#13767 DATABANK-DFW
Submitted
2024-04-18 11:50:11
Access
public
Website Title
Sign In with Auth0
Final URL
auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aubinfo.com	unknown	2020-06-08	2020-06-08	2024-03-18	1.5 kB	3.7 kB	216.194.122.136
auth.theaub.org	unknown	2023-03-30	2023-08-23	2024-03-19	13 kB	19 kB	104.19.168.24
register.theaub.org	unknown	2023-03-30	2023-06-23	2024-03-19	415 B	5.2 kB	172.99.216.2
cdn.auth0.com	9952	2012-10-18	2017-04-20	2024-04-17	754 B	1.3 MB	54.230.82.48

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	aubinfo.com	Sinkholed
2024-04-18	medium	aubinfo.com	Sinkholed
2024-04-18	medium	aubinfo.com	Sinkholed
2024-04-18	medium	aubinfo.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	cdn.auth0.com/js/lock/12.1/lock.min.js	1.2 MB	2023-10-06	2024-04-18
Pretty URL cdn.auth0.com/js/lock/12.1/lock.min.js IP 54.230.82.48 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-06 15:38:03 Last Seen2024-04-18 13:50:12 Times Seen4 Hash acd41e2192d9683fc39b7e3a29d1e8ab ccdc27f0624a7bc750974a030954134e546c5d15 a28d0707925d5a69a705d6f766545d621218c8cfbebb78a14d2a3cd770c22594 Loading...

	auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1	0 B	2023-03-07	2024-04-30
Pretty URL auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1 IP 104.19.168.24 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 23:47:42 Times Seen37231861 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.auth0.com/js/lock/12.1.0/en.js	7.0 kB	2023-05-24	2024-04-18
Pretty URL cdn.auth0.com/js/lock/12.1.0/en.js IP 54.230.82.48 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-24 19:23:44 Last Seen2024-04-18 13:50:12 Times Seen11 Hash bcbf740cd8a652fc01809dedc83e09e9 a984eb847246e188bc8d975d3064dcce9dfa9b6d 4b8e1578e14f20ccaee0c0c80f5420d5d2c48ffd8bb3edd0573010719fad5be8 Loading...

	auth.theaub.org/client/kCk6saxikcocDeSYKaJEad5JPcuASuzz.js?t1713440991185	402 B	2024-03-18	2024-04-18
Pretty URL auth.theaub.org/client/kCk6saxikcocDeSYKaJEad5JPcuASuzz.js?t1713440991185 IP 104.19.168.24 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-18 05:53:38 Last Seen2024-04-18 13:50:12 Times Seen3 Hash 9c675e6cc74dacffe07d368259d098ad 9e8db7a6a8e1a2daebc46120d9668837a09e6574 f0ced239ad69f60267f0cb4ad99a1d79fcf6db4acbb6f5a32f223f9155f44f23 Loading...

HTTP Transactions (17)

URL IP Response Size

aubinfo.com/wp-login.php?redirect_to=https://aubinfo.com/

216.194.122.136

302 Found

0 B

URL User Request GET HTTP/2
aubinfo.com/wp-login.php?redirect_to=https://aubinfo.com/
IP
216.194.122.136:443
ASN
#13767 DATABANK-DFW

Certificate
IssuerLet's Encrypt
Subjectaubinfo.com
FingerprintAA:E2:CB:85:2C:B6:FF:85:3C:A9:D7:DF:93:69:C3:07:29:26:49:39
ValidityThu, 11 Apr 2024 21:49:56 GMT - Wed, 10 Jul 2024 21:49:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-login.php?redirect_to=https://aubinfo.com/ HTTP/1.1
Host: aubinfo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
x-redirect-by: WordPress
set-cookie: PHPSESSID=c23a873ea43bf93795554db3184b44a9; path=/; secure; HttpOnly
wordpress_test_cookie=WP%20Cookie%20check; path=/; secure
auth0_state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiJlZWJiMWM4OTUzNzdjYTVmYTViMGFlNWI4M2MwZTc3ZDcyOWM4OWM4ZTVlNjJjMmExM2Y4ZjE5OTQ0ZDkyZWYzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9; expires=Thu, 18-Apr-2024 12:49:48 GMT; Max-Age=3600; path=/; HttpOnly
auth0_nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f; expires=Thu, 18-Apr-2024 12:49:48 GMT; Max-Age=3600; path=/; HttpOnly
location: https://auth.theaub.org/authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiJlZWJiMWM4OTUzNzdjYTVmYTViMGFlNWI4M2MwZTc3ZDcyOWM4OWM4ZTVlNjJjMmExM2Y4ZjE5OTQ0ZDkyZWYzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Thu, 18 Apr 2024 11:49:44 GMT
server: Apache
X-Firefox-Spdy: h2

auth.theaub.org/authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiJlZWJiMWM4OTUzNzdjYTVmYTViMGFlNWI4M2MwZTc3ZDcyOWM4OWM4ZTVlNjJjMmExM2Y4ZjE5OTQ0ZDkyZWYzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9

104.19.168.24

302 Found

1.0 kB

URL User Request GET HTTP/2
auth.theaub.org/authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiJlZWJiMWM4OTUzNzdjYTVmYTViMGFlNWI4M2MwZTc3ZDcyOWM4OWM4ZTVlNjJjMmExM2Y4ZjE5OTQ0ZDkyZWYzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9
IP
104.19.168.24:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
HTML document, ASCII text, with very long lines (1018), with no line terminators
Size
1.0 kB (1018 bytes)
Hash
018252899a3479890e8935917dedda10
25868e2ad0fb7b91448e79aa3b1d08340229a6f2
c38f98aa70e7165db845faae2d590dc2b794ccd069d69f64d9cf6d1007dae8cb

HTTP Headers

GET /authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiJlZWJiMWM4OTUzNzdjYTVmYTViMGFlNWI4M2MwZTc3ZDcyOWM4OWM4ZTVlNjJjMmExM2Y4ZjE5OTQ0ZDkyZWYzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9 HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 18 Apr 2024 11:49:50 GMT
content-type: text/html; charset=utf-8
content-length: 1018
location: /login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
cf-ray: 87646f0b49bc7127-OSL
cf-cache-status: DYNAMIC
cache-control: no-store, max-age=0, no-transform
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept, Accept-Encoding
pragma: no-cache
set-cookie: did=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:50 GMT; HttpOnly; Secure; SameSite=None
auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; Path=/; Expires=Sun, 21 Apr 2024 11:49:50 GMT; HttpOnly; Secure; SameSite=None
did_compat=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:50 GMT; HttpOnly; Secure
auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; Path=/; Expires=Sun, 21 Apr 2024 11:49:50 GMT; HttpOnly; Secure
x-auth0-requestid: 7deb21b28cd666442ad5
x-content-type-options: nosniff
x-ratelimit-limit: 100
x-ratelimit-remaining: 99
x-ratelimit-reset: 1713440991
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

auth.theaub.org/usernamepassword/challenge

104.19.168.24

200 OK

18 B

URL POST HTTP/3
auth.theaub.org/usernamepassword/challenge
IP
104.19.168.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
JSON text data
Size
18 B (18 bytes)
Hash
dc3016814761dc49b136bef202590e2e
f5fb38c7f8722790e4a901762d866439d1d15963
8376431f05ed0574aa914db9f36153ed5837a067d6d3450847c49d89b37ad1bf

HTTP Headers

POST /usernamepassword/challenge HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Content-Type: application/json
Auth0-Client: eyJuYW1lIjoibG9jay5qcy11bHAiLCJ2ZXJzaW9uIjoiMTIuMS4wIiwiZW52Ijp7ImF1dGgwLmpzLXVscCI6IjkuMjIuMCIsImF1dGgwLmpzIjoiOS4yMi4wIn19
Content-Length: 174
Origin: https://auth.theaub.org
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; did_compat=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:49:51 GMT
content-type: application/json; charset=utf-8
content-length: 18
cf-ray: 87646f12fde0b518-OSL
cf-cache-status: DYNAMIC
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
etag: W/"12-9fs4x/hyJ5DkqQF2LYZkOdHRWWM"
strict-transport-security: max-age=31536000; includeSubDomains
x-auth0-requestid: d1022280bf778e6abf96
x-content-type-options: nosniff
x-ratelimit-limit: 100
x-ratelimit-remaining: 99
x-ratelimit-reset: 1713440992
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

auth.theaub.org/passwordless/challenge

104.19.168.24

200 OK

18 B

URL POST HTTP/3
auth.theaub.org/passwordless/challenge
IP
104.19.168.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
JSON text data
Size
18 B (18 bytes)
Hash
dc3016814761dc49b136bef202590e2e
f5fb38c7f8722790e4a901762d866439d1d15963
8376431f05ed0574aa914db9f36153ed5837a067d6d3450847c49d89b37ad1bf

HTTP Headers

POST /passwordless/challenge HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Content-Type: application/json
Auth0-Client: eyJuYW1lIjoibG9jay5qcy11bHAiLCJ2ZXJzaW9uIjoiMTIuMS4wIiwiZW52Ijp7ImF1dGgwLmpzLXVscCI6IjkuMjIuMCIsImF1dGgwLmpzIjoiOS4yMi4wIn19
Content-Length: 174
Origin: https://auth.theaub.org
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; did_compat=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:49:51 GMT
content-type: application/json; charset=utf-8
content-length: 18
cf-ray: 87646f12fde6b518-OSL
cf-cache-status: DYNAMIC
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
etag: W/"12-9fs4x/hyJ5DkqQF2LYZkOdHRWWM"
strict-transport-security: max-age=31536000; includeSubDomains
x-auth0-requestid: 7e5232fdbf22cc730c54
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

auth.theaub.org/user/ssodata

104.19.168.24

404 Not Found

0 B

URL GET HTTP/3
auth.theaub.org/user/ssodata
IP
104.19.168.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /user/ssodata HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; did_compat=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 11:49:51 GMT
content-length: 0
cf-ray: 87646f133e67b518-OSL
cf-cache-status: DYNAMIC
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
strict-transport-security: max-age=31536000; includeSubDomains
x-auth0-requestid: b37b5119c5ca8cd3c777
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

aubinfo.com/

216.194.122.136

0 B

URL
aubinfo.com/
IP
216.194.122.136:0
ASN
#13767 DATABANK-DFW

Certificate
IssuerLet's Encrypt
Subjectaubinfo.com
FingerprintAA:E2:CB:85:2C:B6:FF:85:3C:A9:D7:DF:93:69:C3:07:29:26:49:39
ValidityThu, 11 Apr 2024 21:49:56 GMT - Wed, 10 Jul 2024 21:49:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: aubinfo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Thu, 18 Apr 2024 11:49:47 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Redirect-By: WordPress
Set-Cookie: PHPSESSID=a941cebb3fd5711ed4acee1f7e56eadd; path=/; secure; HttpOnly
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://aubinfo.com/
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8

auth.theaub.org/favicon.ico

104.19.168.24

404 Not Found

9 B

URL GET HTTP/3
auth.theaub.org/favicon.ico
IP
104.19.168.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
9d1ead73e678fa2f51a70a933b0bf017
d205cbd6783332a212c5ae92d73c77178c2d2f28
0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; did_compat=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 11:49:51 GMT
content-type: text/plain; charset=utf-8
content-length: 9
cf-ray: 87646f157ad9b518-OSL
cf-cache-status: HIT
age: 4
cache-control: public, max-age=300
etag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-auth0-not-found: 1
x-auth0-requestid: 09efab68f3225202f3cc
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400

172.99.216.2

200 OK

4.9 kB

URL GET HTTP/2
register.theaub.org/images/aub-security-nobackground.png
IP
172.99.216.2:443
ASN
#13767 DATABANK-DFW

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerGlobalSign nv-sa
Subjectregister.theaub.org
Fingerprint77:B5:C6:F6:5F:86:7F:6A:52:80:2B:FC:84:58:1F:7A:73:88:AF:F4
ValidityThu, 22 Jun 2023 23:16:22 GMT - Tue, 23 Jul 2024 23:16:21 GMT

File type
PNG image data, 135 x 100, 8-bit/color RGBA, non-interlaced
Size
4.9 kB (4949 bytes)
Hash
db34d9cdfb7696bf959d25f9ebea2732
e82b2fe41138af1dd8feed5d6b2e807cb5104449
f423645b0a851e802fab52a28a31c04147d5ed0cc5bd4f336fb2b5ebd0ee301f

HTTP Headers

GET /images/aub-security-nobackground.png HTTP/1.1
Host: register.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 14 Aug 2023 20:04:44 GMT
accept-ranges: bytes
etag: "862b7c91eaced91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Thu, 18 Apr 2024 11:49:51 GMT
content-length: 4949
X-Firefox-Spdy: h2

aubinfo.com/

216.194.122.136

0 B

URL
aubinfo.com/
IP
216.194.122.136:0
ASN
#13767 DATABANK-DFW

Certificate
IssuerLet's Encrypt
Subjectaubinfo.com
FingerprintAA:E2:CB:85:2C:B6:FF:85:3C:A9:D7:DF:93:69:C3:07:29:26:49:39
ValidityThu, 11 Apr 2024 21:49:56 GMT - Wed, 10 Jul 2024 21:49:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: aubinfo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
set-cookie: PHPSESSID=4bd30d2365c26cd53f1095edb2463085; path=/; secure; HttpOnly
location: https://aubinfo.com/wp-login.php?redirect_to=https%3A%2F%2Faubinfo.com%2F
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Thu, 18 Apr 2024 11:49:50 GMT
server: Apache
X-Firefox-Spdy: h2

aubinfo.com/wp-login.php?redirect_to=https%3A%2F%2Faubinfo.com%2F

216.194.122.136

0 B

URL
aubinfo.com/wp-login.php?redirect_to=https%3A%2F%2Faubinfo.com%2F
IP
216.194.122.136:0
ASN
#13767 DATABANK-DFW

Certificate
IssuerLet's Encrypt
Subjectaubinfo.com
FingerprintAA:E2:CB:85:2C:B6:FF:85:3C:A9:D7:DF:93:69:C3:07:29:26:49:39
ValidityThu, 11 Apr 2024 21:49:56 GMT - Wed, 10 Jul 2024 21:49:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-login.php?redirect_to=https%3A%2F%2Faubinfo.com%2F HTTP/1.1
Host: aubinfo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
x-redirect-by: WordPress
set-cookie: PHPSESSID=5f1b8d4b0788be6abf2fc131db3afed5; path=/; secure; HttpOnly
wordpress_test_cookie=WP%20Cookie%20check; path=/; secure
auth0_state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiIyYzdjNmQxYTY3YmRiMTQzYTRiNzg0M2JmNjA2MjE2ZWY0YzVkMzgyYWNlMjY2MzRhOTY1MDIxMDcwZTZiZTQzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9; expires=Thu, 18-Apr-2024 12:49:56 GMT; Max-Age=3600; path=/; HttpOnly
auth0_nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e; expires=Thu, 18-Apr-2024 12:49:56 GMT; Max-Age=3600; path=/; HttpOnly
location: https://auth.theaub.org/authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiIyYzdjNmQxYTY3YmRiMTQzYTRiNzg0M2JmNjA2MjE2ZWY0YzVkMzgyYWNlMjY2MzRhOTY1MDIxMDcwZTZiZTQzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Thu, 18 Apr 2024 11:49:53 GMT
server: Apache
X-Firefox-Spdy: h2

auth.theaub.org/authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiIyYzdjNmQxYTY3YmRiMTQzYTRiNzg0M2JmNjA2MjE2ZWY0YzVkMzgyYWNlMjY2MzRhOTY1MDIxMDcwZTZiZTQzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9

104.19.167.24

477 B

URL
auth.theaub.org/authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiIyYzdjNmQxYTY3YmRiMTQzYTRiNzg0M2JmNjA2MjE2ZWY0YzVkMzgyYWNlMjY2MzRhOTY1MDIxMDcwZTZiZTQzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9
IP
104.19.167.24:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
ASCII text, with very long lines (477), with no line terminators
Size
477 B (477 bytes)
Hash
ef943c7ad7b5c40fdd6b8da1b9834852
f4daa1bb2009b8d53c2763383c7370f754542032
2c7b4d81e2320a7bc44c11a63cb60d41b026d97a6a0466a17ce9c4bb347fa731

HTTP Headers

GET /authorize?connection=dhaAuth0&client_id=kCk6saxikcocDeSYKaJEad5JPcuASuzz&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1&state=eyJpbnRlcmltIjpmYWxzZSwibm9uY2UiOiIyYzdjNmQxYTY3YmRiMTQzYTRiNzg0M2JmNjA2MjE2ZWY0YzVkMzgyYWNlMjY2MzRhOTY1MDIxMDcwZTZiZTQzIiwicmVkaXJlY3RfdG8iOiJodHRwczpcL1wvYXViaW5mby5jb21cLyJ9 HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 18 Apr 2024 11:49:58 GMT
content-type: text/plain; charset=utf-8
content-length: 477
location: /login?state=hKFo2SA5anoyTFJMcTR0M25OUWdQYjFuU21lSXptTU0xOTBLWKFupWxvZ2luo3RpZNkgb05zRjA2aU1QSzZYNC1VWDVJNU1VQ2M0MVRQbVdPeC2jY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
cf-ray: 87646f3f2c3a7131-OSL
cf-cache-status: DYNAMIC
cache-control: no-store, max-age=0, no-transform
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept, Accept-Encoding
pragma: no-cache
set-cookie: did=s%3Av0%3Ac81280b0-fd79-11ee-bec1-4b6667a98cc6.BcwKLb5rssjhAdv6MySbcsaZ%2Bj7yfdH%2Fe0mHIqYFjTI; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:58 GMT; HttpOnly; Secure; SameSite=None
auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQB2LmdNm39vDZdLwyQs-kK_AWIRlk5S_19LhkWEcLWfUQtLd2XdfFW-pyqqx0OoX8l3X8Buv0vfe6AipNQwRkl6mY29va2llg6dleHBpcmVz1_9_ytgAZiT9Zq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.XthR%2FIVU2F0hRFD9flWyGFgAxBrgUMlLKnVqU72yjjk; Path=/; Expires=Sun, 21 Apr 2024 11:49:58 GMT; HttpOnly; Secure; SameSite=None
did_compat=s%3Av0%3Ac81280b0-fd79-11ee-bec1-4b6667a98cc6.BcwKLb5rssjhAdv6MySbcsaZ%2Bj7yfdH%2Fe0mHIqYFjTI; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:58 GMT; HttpOnly; Secure
auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQB2LmdNm39vDZdLwyQs-kK_AWIRlk5S_19LhkWEcLWfUQtLd2XdfFW-pyqqx0OoX8l3X8Buv0vfe6AipNQwRkl6mY29va2llg6dleHBpcmVz1_9_ytgAZiT9Zq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.XthR%2FIVU2F0hRFD9flWyGFgAxBrgUMlLKnVqU72yjjk; Path=/; Expires=Sun, 21 Apr 2024 11:49:58 GMT; HttpOnly; Secure
x-auth0-requestid: 91408391eee33c30d0b4
x-content-type-options: nosniff
x-ratelimit-limit: 100
x-ratelimit-remaining: 99
x-ratelimit-reset: 1713440999
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

auth.theaub.org/login?state=hKFo2SA5anoyTFJMcTR0M25OUWdQYjFuU21lSXptTU0xOTBLWKFupWxvZ2luo3RpZNkgb05zRjA2aU1QSzZYNC1VWDVJNU1VQ2M0MVRQbVdPeC2jY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1

104.19.167.24

30 B

URL
auth.theaub.org/login?state=hKFo2SA5anoyTFJMcTR0M25OUWdQYjFuU21lSXptTU0xOTBLWKFupWxvZ2luo3RpZNkgb05zRjA2aU1QSzZYNC1VWDVJNU1VQ2M0MVRQbVdPeC2jY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
IP
104.19.167.24:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
ASCII text, with no line terminators
Size
30 B (30 bytes)
Hash
57a4afae0cf271bde6bbd73d64b8accb
81f94662ab1a293089cfc5076f866376f1627489
f1d83f21c12165267ffc703c3f9baf5e0aae2f36e799d6cc9622b704df7c3fbd

HTTP Headers

GET /login?state=hKFo2SA5anoyTFJMcTR0M25OUWdQYjFuU21lSXptTU0xOTBLWKFupWxvZ2luo3RpZNkgb05zRjA2aU1QSzZYNC1VWDVJNU1VQ2M0MVRQbVdPeC2jY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=49fbb2690aa5f41d83da253acee6bee2d48c178b54f4d5acae0aa5d881cce63e&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1 HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Thu, 18 Apr 2024 11:49:58 GMT
content-type: text/plain; charset=utf-8
content-length: 30
location: /u/login
cf-ray: 87646f418ffc7131-OSL
cf-cache-status: DYNAMIC
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept, Accept-Encoding
set-cookie: did=s%3Av0%3Ac8492110-fd79-11ee-932a-a968d477b3bb.lRTBKC6XPPKoP1FMN1gXmNSrXWqWcT0XYK0WqTujGOQ; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:58 GMT; HttpOnly; Secure; SameSite=None
_csrf=ctYRBV0Z8BmaUS2irW8gUeMD; Max-Age=864000; Path=/usernamepassword/login; HttpOnly; Secure
did_compat=s%3Av0%3Ac8492110-fd79-11ee-932a-a968d477b3bb.lRTBKC6XPPKoP1FMN1gXmNSrXWqWcT0XYK0WqTujGOQ; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:58 GMT; HttpOnly; Secure
x-auth0-requestid: 7d95fda6c27657f1c351
x-content-type-options: nosniff
x-ratelimit-limit: 100
x-ratelimit-remaining: 99
x-ratelimit-reset: 1713440999
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

auth.theaub.org/u/login

104.19.167.24

2.6 kB

URL
auth.theaub.org/u/login
IP
104.19.167.24:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
HTML document, ASCII text, with very long lines (320)
Size
2.6 kB (2575 bytes)
Hash
e7bb66c155e3421e46f9af3fbee1b3b6
3be45515ceb7824f5c08e520cea0bc50ec407f5a
f9353f28d2564b1d2f5b15a97f54b78af097724ffbe0250e1b5a1bc24ea47184

HTTP Headers

GET /u/login HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 400 Bad Request
date: Thu, 18 Apr 2024 11:49:59 GMT
content-type: text/html; charset=utf-8
content-length: 2575
cf-ray: 87646f434ab97131-OSL
cf-cache-status: DYNAMIC
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
etag: W/"a0f-O+RVFc63gk9cCOUgzqC8UOxAf1o"
strict-transport-security: max-age=31536000; includeSubDomains
set-cookie: did=s%3Av0%3Ac87476d0-fd79-11ee-a99e-f7cb30882130.%2FcOVLbohdaqN7B0b9nFw96HwcTZEPMyjJDWNJyJcYrg; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:59 GMT; HttpOnly; Secure; SameSite=None
did_compat=s%3Av0%3Ac87476d0-fd79-11ee-a99e-f7cb30882130.%2FcOVLbohdaqN7B0b9nFw96HwcTZEPMyjJDWNJyJcYrg; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 17:49:59 GMT; HttpOnly; Secure
x-auth0-requestid: 2a8a22e6674ba514c749
x-content-type-options: nosniff
x-ratelimit-limit: 20
x-ratelimit-remaining: 19
x-ratelimit-reset: 1713441006
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1

104.19.168.24

200 OK

4.9 kB

URL User Request GET HTTP/2
auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
IP
104.19.168.24:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
HTML document, ASCII text, with very long lines (5045), with no line terminators
Size
4.9 kB (4945 bytes)
Hash
e18cfeaffdf9bdb82b8e2c92f2c226cf
f2e77c509aca0944c03f7a350c28038838928a62
4808d0209db64b410ed293fa698f535e714ad8f3c42ada5cb4596697e8bcec9c

HTTP Headers

GET /login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1 HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; did_compat=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:49:50 GMT
content-type: text/html; charset=utf-8
cf-ray: 87646f0d7dc17127-OSL
cf-cache-status: DYNAMIC
cache-control: no-store, max-age=0, no-transform
etag: W/"1351-7181MyjJH/GKTnD12C0tIR4Q9DY"
set-cookie: _csrf=H2HWWpKv1tQDa-9Kr2gEzFsz; Max-Age=864000; Path=/usernamepassword/login; HttpOnly; Secure
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
content-security-policy: frame-ancestors 'none'
pragma: no-cache
referrer-policy: same-origin
x-auth0-requestid: 963a986dc0da21ab4ce1
x-content-type-options: nosniff
x-frame-options: deny
x-ratelimit-limit: 100
x-ratelimit-remaining: 99
x-ratelimit-reset: 1713440991
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.auth0.com/js/lock/12.1/lock.min.js

54.230.82.48

200 OK

1.2 MB

URL GET HTTP/2
cdn.auth0.com/js/lock/12.1/lock.min.js
IP
54.230.82.48:443
ASN
#16509 AMAZON-02

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerAmazon
Subject*.auth0.com
Fingerprint25:82:AA:4B:C0:C9:FE:66:32:63:14:A2:DA:94:5C:15:47:DE:C1:BB
ValidityThu, 25 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT

File type

Size
1.2 MB (1249681 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/lock/12.1/lock.min.js HTTP/1.1
Host: cdn.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: FAILED
last-modified: Mon, 17 Jul 2023 11:02:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: AJF5pRydIUaQJkQ_1wRVDtfbzn3esslJ
server: AmazonS3
content-encoding: gzip
date: Thu, 18 Apr 2024 09:02:47 GMT
cache-control: max-age=10800,public
etag: W/"acd41e2192d9683fc39b7e3a29d1e8ab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n8odt1E5g2vFO3ujs44ggAk7tsiI7mmm03-CV3T8MeD1LF_RrYoifg==
age: 10024
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
x-robots-tag: noindex
X-Firefox-Spdy: h2

cdn.auth0.com/js/lock/12.1.0/en.js

54.230.82.48

200 OK

7.0 kB

URL GET HTTP/2
cdn.auth0.com/js/lock/12.1.0/en.js
IP
54.230.82.48:443
ASN
#16509 AMAZON-02

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerAmazon
Subject*.auth0.com
Fingerprint25:82:AA:4B:C0:C9:FE:66:32:63:14:A2:DA:94:5C:15:47:DE:C1:BB
ValidityThu, 25 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (7475), with no line terminators
Size
7.0 kB (6979 bytes)
Hash
68786d78b3ad13dd4b8ddf59afcf8256
f4ee47d776754885d14386456582ef46a6f9a721
79c7fdc4c3f096f378b0631501bdba3b0bba0dae2a78ea1a2963e54856ad689f

HTTP Headers

GET /js/lock/12.1.0/en.js HTTP/1.1
Host: cdn.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: FAILED
last-modified: Mon, 17 Jul 2023 11:02:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 41.EAGMBFm2.ey8qHeJ_klICzAjec.EO
server: AmazonS3
content-encoding: gzip
date: Thu, 18 Apr 2024 04:45:22 GMT
cache-control: max-age=2628000,public
etag: W/"bcbf740cd8a652fc01809dedc83e09e9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eZ9XLQI0j9WbI4yFTRJWV05O-alKacP2eZf3I1PKOVFAc55cRaQICw==
age: 25470
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
x-robots-tag: noindex
X-Firefox-Spdy: h2

auth.theaub.org/client/kCk6saxikcocDeSYKaJEad5JPcuASuzz.js?t1713440991185

104.19.168.24

200 OK

402 B

URL GET HTTP/3
auth.theaub.org/client/kCk6saxikcocDeSYKaJEad5JPcuASuzz.js?t1713440991185
IP
104.19.168.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
Certificate
IssuerLet's Encrypt
Subjectauth.theaub.org
Fingerprint33:51:45:5A:F9:72:9C:20:F1:0F:C3:0B:AE:0D:13:76:18:D7:0E:C3
ValidityTue, 16 Apr 2024 01:21:04 GMT - Mon, 15 Jul 2024 01:21:03 GMT

File type
ASCII text, with very long lines (446), with no line terminators
Size
402 B (402 bytes)
Hash
447b229345b5adc8018071561395aa34
0c4c23dcba5d41035205a3537dc2cd72f0c71556
b3bb46faca182d68fa3d98cf2b25aa773bf042a92c04da10fc8d435988936a18

HTTP Headers

GET /client/kCk6saxikcocDeSYKaJEad5JPcuASuzz.js?t1713440991185 HTTP/1.1
Host: auth.theaub.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auth.theaub.org/login?state=hKFo2SBxSUl3OWZ1bmhES2d0dmotTFFjdEVtLTdHaThKc2R3d6FupWxvZ2luo3RpZNkgcG9tVy1XTHZZcXhoTTVPcUtVVVNBX0EtN0tXbXlTRXijY2lk2SBrQ2s2c2F4aWtjb2NEZVNZS2FKRWFkNUpQY3VBU3V6eg&client=kCk6saxikcocDeSYKaJEad5JPcuASuzz&protocol=oauth2&connection=dhaAuth0&scope=openid%20email%20profile&nonce=ff57c8f4420bf76ab3e81e557f468cdddcc0425154b7a0b62f289888b9ada29f&response_type=code&response_mode=query&redirect_uri=https%3A%2F%2Faubinfo.com%2Findex.php%3Fauth0%3D1
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs; did_compat=s%3Av0%3Ac3199d50-fd79-11ee-b1d8-77d38a9c72ba.Y0bqhbtTWpGL47JPcUW4s0NoLyrzLV7xIeto4SGxeTQ; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQBY-XA1mUVy1lSoa08ZwbeOxLUvt3HIsd2CbUfer5h0EZyUhDIlD4EXFoDJv9uyEsJTOL_wxbBkxna1RfTkH8d6mY29va2llg6dleHBpcmVz1_8txsAAZiT9Xq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jXZ31R5PaqmOmDzeLaMgHKbb4mRB22RzQ515GntH0vs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:49:51 GMT
content-type: application/x-javascript; charset=utf-8
cf-ray: 87646f12fddab518-OSL
cf-cache-status: HIT
age: 4
cache-control: public, max-age=60, stale-while-revalidate=60, stale-if-error=86400
etag: W/"192-no23pqjhotrrxGEg2WaIN6CeZXQ"
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-auth0-requestid: 76e2c5d338d665f51d08
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL POST HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash