Report - cloudmanagerportal.com/

Report Overview

Submitted URL
cloudmanagerportal.com/
IP
199.244.76.105
ASN
#36354 SHERWEB-AS36354
Submitted
2024-05-01 21:56:20
Access
public
Website Title
Sign in
Final URL
cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Tags
salesforce phishing
urlquery detections
Phishing - Salesforce

Detections

urlquery
10
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-01	453 B	2.6 kB	142.250.74.106
status.geotrust.com	3662	1999-04-04	2017-12-01	2024-04-30	331 B	642 B	192.229.221.95
cloudmanagerportal.com	491298	2014-11-18	2019-04-25	2023-08-15	12 kB	112 kB	199.244.76.105
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-01	552 B	16 kB	216.58.207.227
cdn.segment.com	1618	1998-07-06	2014-04-11	2024-04-30	3.8 kB	183 kB	143.204.48.96

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	cdn.segment.com/analytics.js/v1/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/analytics.min.js	105 kB	2024-05-01	2024-05-08
Pretty URL cdn.segment.com/analytics.js/v1/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/analytics.min.js IP 143.204.48.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 23:56:21 Last Seen2024-05-08 06:15:19 Times Seen4 Hash 43594d9cce60d11c21892383791991e7 a2127f83fd53d67be1de8a539e11fe168f420e52 dafcf5d711965819e577f82074a3cb14b87c61501e239946e961cc328a18d511 Loading...

	cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	1.6 kB	2024-03-24	2024-05-15
Pretty URL cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js IP 143.204.48.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-24 14:10:54 Last Seen2024-05-15 19:39:47 Times Seen338 Hash 3867b2388b619ff7fddc29ef359fc9aa 511bed0c4d3d57ab4cf1b1d7596fb845ecfba6ac 31892c21ae4fb908a875bbe29dbf0df74c2e84171cfbcac23540f3ad8222a35a Loading...

	cdn.segment.com/next-integrations/integrations/visual-tagger/0.3.5/visual-tagger.dynamic.js.gz	46 kB	2024-04-16	2024-05-10
Pretty URL cdn.segment.com/next-integrations/integrations/visual-tagger/0.3.5/visual-tagger.dynamic.js.gz IP 143.204.48.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 11:19:33 Last Seen2024-05-10 21:58:13 Times Seen44 Hash 4fe5e51c081c22eda111911dc950a52b 9f3c892363770f80748c2b957732c6765d78a12a 3999ddde00a86aa8cac52ba54aa3cbf69ccd2ff81a1ecbf5d179eeee6ac835c1 Loading...

	cloudmanagerportal.com/oidc/bundles/js/placeholders.js?v=Zg5BSN9_bYMiX7uZdfRD2B1BDz4	4.3 kB	2024-05-01	2024-05-08
Pretty URL cloudmanagerportal.com/oidc/bundles/js/placeholders.js?v=Zg5BSN9_bYMiX7uZdfRD2B1BDz4 IP 199.244.76.105 ASN #36354 SHERWEB-AS36354 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 23:56:21 Last Seen2024-05-08 06:15:19 Times Seen4 Hash d12daa8636bb931d27888f15c5be35bb e3212e3cbdfdfbee8b2a9432e8d514d26a014d0f 09e991d11b5c8b840ce682ee41f9a436665585a1309b2abcc08dbe87274a1412 Loading...

	cloudmanagerportal.com/oidc/bundles/js/ui-toolkit-components.js?v=UUV0Gh-FAD__lL1JpmTGwfdrOk0	31 kB	2024-05-01	2024-05-08
Pretty URL cloudmanagerportal.com/oidc/bundles/js/ui-toolkit-components.js?v=UUV0Gh-FAD__lL1JpmTGwfdrOk0 IP 199.244.76.105 ASN #36354 SHERWEB-AS36354 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 23:56:21 Last Seen2024-05-08 06:15:19 Times Seen4 Hash 7310f1ef57f41199d47cc1d7306de732 c036c90826373b72d6cf281e29e6beb0d17dd9da 7ce24074a235f9d56533c2bd6bbb98c5b377a69503bfa393c0435d0f71a844b4 Loading...

	cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js	9.3 kB	2024-04-17	2024-05-15
Pretty URL cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js IP 143.204.48.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 16:53:47 Last Seen2024-05-15 19:39:48 Times Seen287 Hash 00e9c65cbba11c07c4bf4a6e2727b8ea ac1a5d9b6ffcde916a82169cd74c9a734bdf4a39 129151ed0140041b198ce3b364a11861a3b5baa5bb60475ebf7bedb9b0fc94d6 Loading...

	cdn.segment.com/next-integrations/integrations/fullstory/3.1.0/fullstory.dynamic.js.gz	5.1 kB	2024-04-19	2024-05-14
Pretty URL cdn.segment.com/next-integrations/integrations/fullstory/3.1.0/fullstory.dynamic.js.gz IP 143.204.48.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 15:57:58 Last Seen2024-05-14 19:09:50 Times Seen33 Hash 6776a6e921e6eeeb1a9ec550d5bd98f4 fc974754f92811898ffd94d589942c2f6710a894 e9fda204818eb76752b45ba07f2a3357507dfbd1ffac18a8badebda6f96feab7 Loading...

	cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz	72 kB	2024-04-12	2024-05-15
Pretty URL cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz IP 143.204.48.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-12 02:43:18 Last Seen2024-05-15 17:53:13 Times Seen373 Hash a6378a93e23b431232f76fc74dca8b18 51c28e605abfb910d4c836f58e96723141e28b30 265ac7549793e4b9d51f8ab19acc8518770ace94078790776b3ac34eb47e1bbd Loading...

	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-05-15
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-15 21:19:58 Times Seen348052 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	cloudmanagerportal.com/oidc/bundles/js/jquery.js?v=Pp9TSvCi-BPI5wca6g4jZYz8MK8	90 kB	2024-05-01	2024-05-08
Pretty URL cloudmanagerportal.com/oidc/bundles/js/jquery.js?v=Pp9TSvCi-BPI5wca6g4jZYz8MK8 IP 199.244.76.105 ASN #36354 SHERWEB-AS36354 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 23:56:21 Last Seen2024-05-08 06:15:19 Times Seen4 Hash 6ad78f34c09ca15d6aed2a9f3722a839 f6b0c9812395e79863904d689248bc7c95dce03e 00e3ab53755f83aa6f04fc5a1c29f9a9f161d587283cf7d3f4f84eb23dc40ca8 Loading...

	cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0	0 B	2023-03-07	2024-05-15
Pretty URL cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 IP 199.244.76.105 ASN #36354 SHERWEB-AS36354 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-15 21:23:10 Times Seen37677757 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz	16 kB	2024-04-14	2024-05-15
Pretty URL cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz IP 143.204.48.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-14 17:35:06 Last Seen2024-05-15 05:08:08 Times Seen111 Hash 0e6c238c4491ba0be60ff1ba0021c299 6f676de2a7d8f5a5a4855101a256ce3fd0e29443 86685e191878d9ecfd30ed1fe63cbb783bf9151607e9996342d64977013e3cff Loading...

	cloudmanagerportal.com/oidc/sandbox%20eval%20code	147 B	2023-04-11	2024-05-15
Pretty URL cloudmanagerportal.com/oidc/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-15 21:19:58 Times Seen348561 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	cloudmanagerportal.com/oidc/bundles/js/segment.js?v=fuBRp82R_hoPj3RLHM2nI-19H1Y	1.5 kB	2024-05-01	2024-05-08
Pretty URL cloudmanagerportal.com/oidc/bundles/js/segment.js?v=fuBRp82R_hoPj3RLHM2nI-19H1Y IP 199.244.76.105 ASN #36354 SHERWEB-AS36354 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 23:56:21 Last Seen2024-05-08 06:15:19 Times Seen4 Hash 5e091be570147293883880b9ec2b5c80 722f6159940206b4826494a6b9cadda4ea5583b1 721f5907274fadb86b4cabd28f50314958e5170c9ea0af78f1d68042bd96e559 Loading...

HTTP Transactions (20)

URL IP Response Size

status.geotrust.com/

192.229.221.95

471 B

URL
status.geotrust.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ec9a06f83c661ece39b094e500d9bccb
2717e8180acc40f9a1426ffdb8047c96a93a05c8
6499af24be028c7599f8902cb72e339bb6a5c3f6dcc254322722c164be337415

HTTP Headers

POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Wed, 01 May 2024 21:55:55 GMT
Server: ECAcc (amb/6B53)
Content-Length: 471

cloudmanagerportal.com/

199.244.76.105

302 Found

0 B

URL User Request GET HTTP/1.1
cloudmanagerportal.com/
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET / HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Content-Length: 0
Location: https://cloudmanagerportal.com/oidc/connect/authorize?client_id=xtkl.accesscontrol.nexus.gl&redirect_uri=https%3A%2F%2Fcloudmanagerportal.com%2Fnexus%2FoidcRedirectCallback&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3&state=CfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0
Server: Kestrel
Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8JbKeVtJ6_1OgLUpRYg2oQdfgFehtuf9Zl3RgUDTEVGt4vaIXJJsTNJ85TQFvv-40XxAiyZYP9njLTBAEiln7xQQf9sRJWkD70lF1WhTJXGv3SxZFitHpB1GLAFvYdKv9gEQb7m2wqnPdMIBhyZp5XPZCeKB0zyLFfppGI5zPIvR_NFQCk-rFKEUV1gryHAlaNuZJHaK771kSmRa1OzMeDFgpFjwpkRaDqKST6STyZWk0uXQCT5Uu08333x4A1LfcOKsWlcAQaWkfiwcnuJjWl8=N; expires=Wed, 01 May 2024 22:10:55 GMT; path=/nexus/oidcRedirectCallback; secure; httponly
.AspNetCore.Correlation.OpenIdConnect.chQ7Z39tGJqKoDNWmsDjhR2mZRPz_2g3p6D0XEBTXDw=N; expires=Wed, 01 May 2024 22:10:55 GMT; path=/nexus/oidcRedirectCallback; secure; httponly
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:54 GMT

cloudmanagerportal.com/oidc/connect/authorize?client_id=xtkl.accesscontrol.nexus.gl&redirect_uri=https%3A%2F%2Fcloudmanagerportal.com%2Fnexus%2FoidcRedirectCallback&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3&state=CfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0

199.244.76.105

302 Found

0 B

URL User Request GET HTTP/1.1
cloudmanagerportal.com/oidc/connect/authorize?client_id=xtkl.accesscontrol.nexus.gl&redirect_uri=https%3A%2F%2Fcloudmanagerportal.com%2Fnexus%2FoidcRedirectCallback&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3&state=CfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /oidc/connect/authorize?client_id=xtkl.accesscontrol.nexus.gl&redirect_uri=https%3A%2F%2Fcloudmanagerportal.com%2Fnexus%2FoidcRedirectCallback&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3&state=CfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0 HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Content-Length: 0
Location: https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Strict-Transport-Security: max-age=2592000
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:54 GMT

cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0

199.244.76.105

200 OK

2.1 kB

URL User Request GET HTTP/1.1
cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1108), with CRLF line terminators
Size
2.1 kB (2114 bytes)
Hash
7276340249272522b2c3f8d20d8de73c
8ca385de7b0fa59bf397a159be7b8994553391d5
613ca6419bb8f8ae812ba6b008b2bdc5857219282f925294b16dcbbb8c65dbef

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Set-Cookie: .AspNetCore.Antiforgery.U50SxYfDo7Y=CfDJ8NjX395COPxFqRVA2e3wAvhpMjBoTcXzBM2yGJrJ_Nna_gyZLZ7hIH4J2SlyyftQxWZyHR10-FM3yVGoOSje5zeay2re0hmKAv_Pg7DqqlQqhzhFv_CgowjRk0fI1MRrirS-U3Z_ym4gEfHu6oPqiMI; path=/oidc; samesite=strict; httponly
Strict-Transport-Security: max-age=2592000
Content-Security-Policy: frame-ancestors 'self'
X-Frame-Options: SAMEORIGIN
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:55 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

cloudmanagerportal.com/oidc/bundles/css/site.css?v=lA-K0mOxGEJmre8R8lt-gep4g4w

199.244.76.105

200 OK

43 kB

URL GET HTTP/1.1
cloudmanagerportal.com/oidc/bundles/css/site.css?v=lA-K0mOxGEJmre8R8lt-gep4g4w
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65301)
Size
43 kB (42572 bytes)
Hash
489e5111b28521f0c967c053a75377fd
223e92aa846a11597f2b4e603be842e044491b6f
e695313147e24029cfb66dc78ba068c080066220329871c89783ff104a587c84

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /oidc/bundles/css/site.css?v=lA-K0mOxGEJmre8R8lt-gep4g4w HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Cookie: .AspNetCore.Antiforgery.U50SxYfDo7Y=CfDJ8NjX395COPxFqRVA2e3wAvhpMjBoTcXzBM2yGJrJ_Nna_gyZLZ7hIH4J2SlyyftQxWZyHR10-FM3yVGoOSje5zeay2re0hmKAv_Pg7DqqlQqhzhFv_CgowjRk0fI1MRrirS-U3Z_ym4gEfHu6oPqiMI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=31536000,immutable
Content-Type: text/css; charset=UTF-8
Last-Modified: Fri, 12 Apr 2024 16:11:08 GMT
ETag: "lA-K0mOxGEJmre8R8lt-gep4g4w"
Strict-Transport-Security: max-age=2592000
X-Content-Type-Options: nosniff
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:55 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

cloudmanagerportal.com/oidc/bundles/js/segment.js?v=fuBRp82R_hoPj3RLHM2nI-19H1Y

199.244.76.105

200 OK

786 B

URL GET HTTP/1.1
cloudmanagerportal.com/oidc/bundles/js/segment.js?v=fuBRp82R_hoPj3RLHM2nI-19H1Y
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (1507), with no line terminators
Size
786 B (786 bytes)
Hash
5e091be570147293883880b9ec2b5c80
722f6159940206b4826494a6b9cadda4ea5583b1
721f5907274fadb86b4cabd28f50314958e5170c9ea0af78f1d68042bd96e559

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /oidc/bundles/js/segment.js?v=fuBRp82R_hoPj3RLHM2nI-19H1Y HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Cookie: .AspNetCore.Antiforgery.U50SxYfDo7Y=CfDJ8NjX395COPxFqRVA2e3wAvhpMjBoTcXzBM2yGJrJ_Nna_gyZLZ7hIH4J2SlyyftQxWZyHR10-FM3yVGoOSje5zeay2re0hmKAv_Pg7DqqlQqhzhFv_CgowjRk0fI1MRrirS-U3Z_ym4gEfHu6oPqiMI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=31536000,immutable
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Fri, 12 Apr 2024 16:11:08 GMT
ETag: "fuBRp82R_hoPj3RLHM2nI-19H1Y"
Strict-Transport-Security: max-age=2592000
X-Content-Type-Options: nosniff
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:56 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

cloudmanagerportal.com/oidc/bundles/js/placeholders.js?v=Zg5BSN9_bYMiX7uZdfRD2B1BDz4

199.244.76.105

200 OK

1.8 kB

URL GET HTTP/1.1
cloudmanagerportal.com/oidc/bundles/js/placeholders.js?v=Zg5BSN9_bYMiX7uZdfRD2B1BDz4
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (4274), with no line terminators
Size
1.8 kB (1782 bytes)
Hash
d12daa8636bb931d27888f15c5be35bb
e3212e3cbdfdfbee8b2a9432e8d514d26a014d0f
09e991d11b5c8b840ce682ee41f9a436665585a1309b2abcc08dbe87274a1412

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /oidc/bundles/js/placeholders.js?v=Zg5BSN9_bYMiX7uZdfRD2B1BDz4 HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Cookie: .AspNetCore.Antiforgery.U50SxYfDo7Y=CfDJ8NjX395COPxFqRVA2e3wAvhpMjBoTcXzBM2yGJrJ_Nna_gyZLZ7hIH4J2SlyyftQxWZyHR10-FM3yVGoOSje5zeay2re0hmKAv_Pg7DqqlQqhzhFv_CgowjRk0fI1MRrirS-U3Z_ym4gEfHu6oPqiMI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=31536000,immutable
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Fri, 12 Apr 2024 16:11:08 GMT
ETag: "Zg5BSN9_bYMiX7uZdfRD2B1BDz4"
Strict-Transport-Security: max-age=2592000
X-Content-Type-Options: nosniff
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:55 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

cloudmanagerportal.com/oidc/bundles/js/ui-toolkit-components.js?v=UUV0Gh-FAD__lL1JpmTGwfdrOk0

199.244.76.105

200 OK

14 kB

URL GET HTTP/1.1
cloudmanagerportal.com/oidc/bundles/js/ui-toolkit-components.js?v=UUV0Gh-FAD__lL1JpmTGwfdrOk0
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (30660), with CRLF line terminators
Size
14 kB (14109 bytes)
Hash
7310f1ef57f41199d47cc1d7306de732
c036c90826373b72d6cf281e29e6beb0d17dd9da
7ce24074a235f9d56533c2bd6bbb98c5b377a69503bfa393c0435d0f71a844b4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /oidc/bundles/js/ui-toolkit-components.js?v=UUV0Gh-FAD__lL1JpmTGwfdrOk0 HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Cookie: .AspNetCore.Antiforgery.U50SxYfDo7Y=CfDJ8NjX395COPxFqRVA2e3wAvhpMjBoTcXzBM2yGJrJ_Nna_gyZLZ7hIH4J2SlyyftQxWZyHR10-FM3yVGoOSje5zeay2re0hmKAv_Pg7DqqlQqhzhFv_CgowjRk0fI1MRrirS-U3Z_ym4gEfHu6oPqiMI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=31536000,immutable
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Fri, 12 Apr 2024 16:11:08 GMT
ETag: "UUV0Gh-FAD__lL1JpmTGwfdrOk0"
Strict-Transport-Security: max-age=2592000
X-Content-Type-Options: nosniff
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:56 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14940, version 1.0
Size
15 kB (14940 bytes)
Hash
a46fb7aae99225fdfd9d64b2b8b1063f
1ee50bf5985c1956dde1c06d9b1cec4645ddb92b
4b5816bbfc52587979139951355fe4048da02ce60e40cef8e4a1efb6cd396281

HTTP Headers

GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloudmanagerportal.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14940
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:59:41 GMT
expires: Sat, 26 Apr 2025 05:59:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:46:07 GMT
content-type: font/woff2
age: 489375
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cloudmanagerportal.com/oidc/bundles/js/jquery.js?v=Pp9TSvCi-BPI5wca6g4jZYz8MK8

199.244.76.105

200 OK

42 kB

URL GET HTTP/1.1
cloudmanagerportal.com/oidc/bundles/js/jquery.js?v=Pp9TSvCi-BPI5wca6g4jZYz8MK8
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65270)
Size
42 kB (41583 bytes)
Hash
6ad78f34c09ca15d6aed2a9f3722a839
f6b0c9812395e79863904d689248bc7c95dce03e
00e3ab53755f83aa6f04fc5a1c29f9a9f161d587283cf7d3f4f84eb23dc40ca8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /oidc/bundles/js/jquery.js?v=Pp9TSvCi-BPI5wca6g4jZYz8MK8 HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Cookie: .AspNetCore.Antiforgery.U50SxYfDo7Y=CfDJ8NjX395COPxFqRVA2e3wAvhpMjBoTcXzBM2yGJrJ_Nna_gyZLZ7hIH4J2SlyyftQxWZyHR10-FM3yVGoOSje5zeay2re0hmKAv_Pg7DqqlQqhzhFv_CgowjRk0fI1MRrirS-U3Z_ym4gEfHu6oPqiMI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=31536000,immutable
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Fri, 12 Apr 2024 16:11:08 GMT
ETag: "Pp9TSvCi-BPI5wca6g4jZYz8MK8"
Strict-Transport-Security: max-age=2592000
X-Content-Type-Options: nosniff
X-Powered-By: ASP.NET
Date: Wed, 01 May 2024 21:55:56 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

cloudmanagerportal.com/favicon.ico

199.244.76.105

404 Not Found

3.4 kB

URL GET HTTP/1.0
cloudmanagerportal.com/favicon.ico
IP
199.244.76.105:443
ASN
#36354 SHERWEB-AS36354

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerDigiCert Inc
Subjectcloudmanagerportal.com
Fingerprint77:C6:A4:3A:46:6F:4E:3D:DF:82:CC:FD:24:98:BB:28:E6:03:D1:78
ValidityWed, 17 Apr 2024 00:00:00 GMT - Wed, 16 Apr 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
3.4 kB (3394 bytes)
Hash
5cb3f7b2e600e0da55337a083308ebbe
2da1781c93b8c7f843a4bfc10daaca65694255cc
0ba39eb9530e2c36ccf1abd8966b832f68188cea8b423dd32ed5547cc763e818

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cloudmanagerportal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 404 Not Found
Cache-Control: no-store, no-cache
Connection: close
Content-Length: 3394

cdn.segment.com/v1/projects/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/settings

143.204.48.96

200 OK

4.2 kB

URL GET HTTP/2
cdn.segment.com/v1/projects/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/settings
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JSON text data
Size
4.2 kB (4185 bytes)
Hash
d31f7af0ce7c7a52a8211ee6b2c23d92
ad6e7d84b0e433d2ed338c6a934f528d39b6692f
3bee058db69f1afe13cf5fbd3e1a8588d86be58309c4a442d68a1ab071e1b865

HTTP Headers

GET /v1/projects/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/settings HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudmanagerportal.com/
Origin: https://cloudmanagerportal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 08 Jun 2023 20:11:03 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 5oj8CBSrNTZZPD7kTSM2l4kyUe1IJfqX
server: AmazonS3
content-encoding: br
date: Wed, 01 May 2024 21:08:27 GMT
cache-control: public, max-age=10800
etag: W/"d31f7af0ce7c7a52a8211ee6b2c23d92"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: U8Oakno3XIYCuuekdzGEgC1gaQh6ddpd8o8ViukMr1zxy9z_PVPkwA==
age: 2851
X-Firefox-Spdy: h2

cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js

143.204.48.96

200 OK

7.7 kB

URL GET HTTP/2
cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (9198)
Size
7.7 kB (7701 bytes)
Hash
00e9c65cbba11c07c4bf4a6e2727b8ea
ac1a5d9b6ffcde916a82169cd74c9a734bdf4a39
129151ed0140041b198ce3b364a11861a3b5baa5bb60475ebf7bedb9b0fc94d6

HTTP Headers

GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
date: Mon, 15 Apr 2024 15:05:40 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Apr 2024 21:39:45 GMT
etag: W/"00e9c65cbba11c07c4bf4a6e2727b8ea"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
x-amz-version-id: 1lCjHefPzcRt0EbQDFkkb.6FnzhNuKxa
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O3UtpXEHYMV0502k4MOexU6IAVlaLKSmueeFhDAwzmqSW0wmRwNyug==
age: 1407018
X-Firefox-Spdy: h2

cdn.segment.com/next-integrations/integrations/visual-tagger/0.3.5/visual-tagger.dynamic.js.gz

143.204.48.96

200 OK

16 kB

URL GET HTTP/2
cdn.segment.com/next-integrations/integrations/visual-tagger/0.3.5/visual-tagger.dynamic.js.gz
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (46392)
Size
16 kB (15523 bytes)
Hash
4fe5e51c081c22eda111911dc950a52b
9f3c892363770f80748c2b957732c6765d78a12a
3999ddde00a86aa8cac52ba54aa3cbf69ccd2ff81a1ecbf5d179eeee6ac835c1

HTTP Headers

GET /next-integrations/integrations/visual-tagger/0.3.5/visual-tagger.dynamic.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 15523
date: Fri, 12 Apr 2024 23:54:56 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 05 Apr 2024 16:42:48 GMT
etag: "1e6ed20ae1ef59e0a54725d717b8454f"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: q0OSwXvSit6ty3qgWK_ICzaIr7vDA45T
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gyo-LbFEqoxezERdkDO60khJ2wTMuX8FrT9D72g-Y6SemwvH7Sw2lQ==
age: 1634462
X-Firefox-Spdy: h2

cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz

143.204.48.96

200 OK

22 kB

URL GET HTTP/2
cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
22 kB (21911 bytes)
Hash
a6378a93e23b431232f76fc74dca8b18
51c28e605abfb910d4c836f58e96723141e28b30
265ac7549793e4b9d51f8ab19acc8518770ace94078790776b3ac34eb47e1bbd

HTTP Headers

GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 21911
date: Fri, 12 Apr 2024 19:17:49 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 05 Apr 2024 16:42:46 GMT
etag: "c467a63b2e7c3a99be423ace649014d8"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: 1Y99HfuTczPsGIDdcPhw1L1EusEviR19
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2O9bz8uyU_IfqK2CLOlu6TXW7VI-KpTNy5_1PzEo6zWmSEMB5E4mTw==
age: 1651089
X-Firefox-Spdy: h2

cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js

143.204.48.96

200 OK

1.6 kB

URL GET HTTP/2
cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1580), with no line terminators
Size
1.6 kB (1559 bytes)
Hash
6e19b4ef2ab810cbea710a18b9497529
8b87132691b073aa3ef474eaa704138098abf3bd
e8714289e7eb4b5686a2bffa5ec489305ec9f8da80596cad8e3b860eefaca9de

HTTP Headers

GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
date: Fri, 12 Apr 2024 16:48:23 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Apr 2024 03:48:56 GMT
etag: W/"3867b2388b619ff7fddc29ef359fc9aa"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
x-amz-version-id: 6p7m0DymtVd2iHKfdr7k4GM1yYafy1xS
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Eafk4eZTPxMPYBnsQ6IXB0A9OkFaT2px01wMrFwQdJ17P6UhfgariA==
age: 1660054
X-Firefox-Spdy: h2

cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz

143.204.48.96

200 OK

16 kB

URL GET HTTP/2
cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (15894)
Size
16 kB (15942 bytes)
Hash
0e6c238c4491ba0be60ff1ba0021c299
6f676de2a7d8f5a5a4855101a256ce3fd0e29443
86685e191878d9ecfd30ed1fe63cbb783bf9151607e9996342d64977013e3cff

HTTP Headers

GET /next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
content-length: 4743
date: Fri, 12 Apr 2024 20:28:53 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 05 Apr 2024 16:42:47 GMT
etag: "6a3ed21f9b6777c0c37e6e248ea22387"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: UrcbvrdkWvVeM88a5LbnIeGLbGs5UNca
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: najtbVxO6FffL9P35Ck0EED75Qa5z7hfzPhHqbnTXsiQslE3qI41wg==
age: 1646825
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat&display=swap

142.250.74.106

200 OK

1.9 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (1964), with no line terminators
Size
1.9 kB (1919 bytes)
Hash
239a618ffafef4ef52b8420e3a840889
eb3c9591cf15cfbc0708770f3680d7ecf7a2029b
1a65d1c5600a83400ac4e08ed56f140e81590a6761a6cdc03187da69555196aa

HTTP Headers

GET /css2?family=Montserrat&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 May 2024 21:55:56 GMT
date: Wed, 01 May 2024 21:55:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.segment.com/analytics.js/v1/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/analytics.min.js

143.204.48.96

200 OK

105 kB

URL GET HTTP/2
cdn.segment.com/analytics.js/v1/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/analytics.min.js
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
105 kB (105342 bytes)
Hash
43594d9cce60d11c21892383791991e7
a2127f83fd53d67be1de8a539e11fe168f420e52
dafcf5d711965819e577f82074a3cb14b87c61501e239946e961cc328a18d511

HTTP Headers

GET /analytics.js/v1/v1LBm6ekWibInRF7kPz21aelktZ2Nh3E/analytics.min.js HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Apr 2024 19:19:46 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: DbFdwgjRf2ONtGV0ILPUAnxu6IUREa2A
server: AmazonS3
content-encoding: br
date: Wed, 01 May 2024 21:55:57 GMT
cache-control: public, max-age=120
etag: W/"43594d9cce60d11c21892383791991e7"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1aT1eZRIlewPFn8R_KLbSAwHy66WF1zfv-wb3S2XjizULjdqxV5qEw==
X-Firefox-Spdy: h2

cdn.segment.com/next-integrations/integrations/fullstory/3.1.0/fullstory.dynamic.js.gz

143.204.48.96

200 OK

5.1 kB

URL GET HTTP/2
cdn.segment.com/next-integrations/integrations/fullstory/3.1.0/fullstory.dynamic.js.gz
IP
143.204.48.96:443
ASN
#16509 AMAZON-02

Requested by
https://cloudmanagerportal.com/oidc/hrd?ReturnUrl=%2Foidc%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dxtkl.accesscontrol.nexus.gl%26redirect_uri%3Dhttps%253A%252F%252Fcloudmanagerportal.com%252Fnexus%252FoidcRedirectCallback%26response_type%3Did_token%26scope%3Dopenid%2520profile%26response_mode%3Dform_post%26nonce%3D638501973554551979.ZjRmMzU0NDEtN2E0NC00MTg5LTgzZTgtNGYyZGNkZDNlNjM5MzJiZmQ0MmItZWJlOS00NzAwLThlNGItMzRhNTJjZTBiMDQ3%26state%3DCfDJ8JbKeVtJ6_1OgLUpRYg2oQfa2ohH4m5i0vkFw_D9h969Pnv2rNLg-eq11msSYw4RRGKaRGKTyOcA3pdvLpuv6oClode783ZThdBXZ4Qo0lzE5jhq6dCv7jwLFwWs31V5BCohMcvm4UdX8aHFLOLX37fBadAIq37k-LIMJixso4fBFmzmEGmZ65tO8RPN_evoKTE6m8aNsmxYwByM-JyX_mGKwvhY-I6BM8DPIUK5KiQoWMGwpCFI9hoWvcT9iPLe59-aP9i9J-Vh76m_4eJWW4KSavvhMadO_uNnRWeBz0FB4HebN7p-QuBtUTbyQrwUC2KOgTjGfOiQwF1-F122g8lQenDi-wbBN1HyCGcl5mX2%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0
Certificate
IssuerAmazon
Subject*.segment.com
Fingerprint92:B4:26:19:9B:B4:C7:48:23:87:41:7A:8A:10:5E:C4:E8:77:35:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (5284), with no line terminators
Size
5.1 kB (5144 bytes)
Hash
fc3a0209bfb978af71b9305a325617f8
4ef3909ebf6e2f76bd1aaef1b3fef83fa042fffa
a39fc8b3210f7674bcb4c9deb8d9a5268759335ce385c2f5c5ed826f278a1c03

HTTP Headers

GET /next-integrations/integrations/fullstory/3.1.0/fullstory.dynamic.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudmanagerportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
content-length: 2166
date: Fri, 12 Apr 2024 16:56:40 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 05 Apr 2024 16:42:47 GMT
etag: "5ab49a383e9cf7b93c013d369b1b30f7"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: oPHfKDIg3jvUi4BGP8xSSh5eX6u0MY0C
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KoX_vAqWPb4eLck8UY-qtSCq8FQsttl2-oyRpZ3SsnGGaXz0b99iVA==
age: 1659558
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML