| equinor-login.microsoftonline.hdxpyzconq.click/Applicationview/87c9a5689e4930d8cbf9531284042d13/6606bb5ebc0b469eb7032ff4 | 146.190.168.156 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/1.1equinor-login.microsoftonline.hdxpyzconq.click/Applicationview/87c9a5689e4930d8cbf9531284042d13/6606bb5ebc0b469eb7032ff4 IP146.190.168.156:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjecthdxpyzconq.click FingerprintE7:40:DC:2C:9B:8E:BE:C9:59:AD:78:0C:24:30:27:49:4F:0C:4A:45 ValidityWed, 03 Apr 2024 21:14:55 GMT - Tue, 02 Jul 2024 21:14:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | mnemonic secure dns | malicious | Sinkholed |
GET /Applicationview/87c9a5689e4930d8cbf9531284042d13/6606bb5ebc0b469eb7032ff4 HTTP/1.1
Host: equinor-login.microsoftonline.hdxpyzconq.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Location: https://onedrive.live.com/gso@equinor.com
Vary: Origin
Date: Wed, 17 Apr 2024 10:30:42 GMT
Content-Length: 0
|
| onedrive.live.com/gso@equinor.com | 13.107.137.11 | 404 Not Found | 2.6 kB |
URL User Request GET HTTP/2onedrive.live.com/gso@equinor.com IP13.107.137.11:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerMicrosoft Corporation Subjectonedrive.com Fingerprint74:60:B4:06:AB:E1:E4:E4:BC:D5:29:ED:EC:F2:EC:D4:C3:67:DD:8A ValidityFri, 29 Mar 2024 05:42:16 GMT - Mon, 24 Mar 2025 05:42:16 GMT
File typeHTML document, ASCII text, with very long lines (560), with CRLF line terminators Hash418d9172b00b23336e7fed220ab678ac f48f594208b2ec3435cb3fa4ac6f95380c27176e 659d89ee1a9bcd94e7887d8c5c6227125a9f88b0e5d382712b87711b7ef9f2c4
GET /gso@equinor.com HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 2614
content-type: text/html; charset=utf-8
expires: -1
set-cookie: E=P:ifCxb8le3Ig=:CRe53X0fBU20htCWrUnbIwy1fqnsfEWznv05kl4uDAs=:F; domain=.live.com; path=/
xid=19699bac-ac40-4468-ae90-e6abd0dcde0d&&ODSP-ODWEB-ODCF&145; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Wed, 17-Apr-2024 08:50:43 GMT; path=/
wla42=; domain=live.com; expires=Wed, 24-Apr-2024 10:30:43 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: fd58c7b88-tmtj7
x-odwebserver: eurwesteur637265-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CBC1CE88BCC74B718A77E7792632837E Ref B: SVG20EDGE0308 Ref C: 2024-04-17T10:30:43Z
date: Wed, 17 Apr 2024 10:30:43 GMT
X-Firefox-Spdy: h2
|
| onedrive.live.com/gso@equinor.com | 13.107.137.11 | 404 Not Found | 2.6 kB |
URL User Request GET HTTP/2onedrive.live.com/gso@equinor.com IP13.107.137.11:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerMicrosoft Corporation Subjectonedrive.com Fingerprint74:60:B4:06:AB:E1:E4:E4:BC:D5:29:ED:EC:F2:EC:D4:C3:67:DD:8A ValidityFri, 29 Mar 2024 05:42:16 GMT - Mon, 24 Mar 2025 05:42:16 GMT
File typeHTML document, ASCII text, with very long lines (560), with CRLF line terminators Hash418d9172b00b23336e7fed220ab678ac f48f594208b2ec3435cb3fa4ac6f95380c27176e 659d89ee1a9bcd94e7887d8c5c6227125a9f88b0e5d382712b87711b7ef9f2c4
GET /gso@equinor.com HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: E=P:ifCxb8le3Ig=:CRe53X0fBU20htCWrUnbIwy1fqnsfEWznv05kl4uDAs=:F; xid=19699bac-ac40-4468-ae90-e6abd0dcde0d&&ODSP-ODWEB-ODCF&145; xidseq=1; wla42=
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 2614
content-type: text/html; charset=utf-8
expires: -1
set-cookie: E=P:CujNb8le3Ig=:NxwQNx+j9ok9geSoDeNkKdaG5/+Xz5PaJMZokBkL0Bo=:F; domain=.live.com; path=/
xidseq=2; domain=.live.com; path=/
LD=; domain=.live.com; expires=Wed, 17-Apr-2024 08:50:43 GMT; path=/
wla42=; domain=live.com; expires=Wed, 24-Apr-2024 10:30:43 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: fd58c7b88-tmtj7
x-odwebserver: eurwesteur637265-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E4FA11CD4EFB493C903FC383678D0113 Ref B: SVG20EDGE0308 Ref C: 2024-04-17T10:30:43Z
date: Wed, 17 Apr 2024 10:30:43 GMT
X-Firefox-Spdy: h2
|
| p.sfx.ms/images/favicon.ico | 20.101.246.164 | 200 OK | 7.9 kB |
URL GET HTTP/1.1p.sfx.ms/images/favicon.ico IP20.101.246.164:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://onedrive.live.com/gso@equinor.com CertificateIssuerMicrosoft Corporation Subjectonedrive.com FingerprintE9:FF:31:7F:0C:79:4E:6C:11:09:23:F9:09:E5:77:ED:06:E0:4D:ED ValiditySun, 11 Feb 2024 21:04:50 GMT - Wed, 05 Feb 2025 21:04:50 GMT
File typeMS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel Hash604adfb53677b5ca4f910ffb131b3e7c 5f1a0fb4e4ad3707e591ce16352158263488ed70 24638331466a52bb66f912090e7a9cc9e3df2236e39c187c9409104526b472b0
GET /images/favicon.ico HTTP/1.1
Host: p.sfx.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=86400
Content-Type: image/x-icon
Last-Modified: Fri, 19 Jan 2024 16:05:42 GMT
Accept-Ranges: bytes
ETag: "0cf185af14ada1:0"
Server: Microsoft-IIS/10.0
X-MSNServer: bfd6775f7-bpcl6
X-ODWebServer: eurwesteur107255-odwebp
Date: Wed, 17 Apr 2024 10:30:43 GMT
Content-Length: 7886
|