Report Overview

  1. Submitted URL

    webmail.olsenelectric.com/

  2. IP

    45.40.130.40

    ASN

    #398101 GO-DADDY-COM-LLC

  3. Submitted

    2022-11-22 10:45:00

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
webmail.olsenelectric.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.starfieldtech.com66160001-01-01T00:00:00Z0001-01-01T00:00:00Z
sso.secureserver.net1855550001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
email.secureserver.net1562250001-01-01T00:00:00Z0001-01-01T00:00:00Z
img6.wsimg.com154380001-01-01T00:00:00Z0001-01-01T00:00:00Z
gui.secureserver.net2535220001-01-01T00:00:00Z0001-01-01T00:00:00Z
sdk.split.io32920001-01-01T00:00:00Z0001-01-01T00:00:00Z
reporting.cdndex.io456760001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
events.api.secureserver.net1251790001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumwebmail.olsenelectric.com/Malware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (20)

HTTP Transactions (52)

URLIPResponseSize
r3.o.lencr.org/
23.36.77.32200 OK503 B
webmail.olsenelectric.com/
173.201.193.148301 Moved Permanently281 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.starfieldtech.com/
192.124.249.41200 OK1.8 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
email.secureserver.net/login.php?domain=webmail.olsenelectric.com
173.201.193.133302 Found0 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
sso.secureserver.net/login?app=o365&realm=pass
104.110.14.92200 OK39 kB
sso.secureserver.net/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js
104.110.14.92200 OK62 kB
img6.wsimg.com/wrhs/7c4a123069c201ce75da66eda7f84144/uxcore2.min.css
23.36.79.43200 OK24 kB
img6.wsimg.com/wrhs-next/0a3c9ed73591ea11f77b51a04edf210f/heartbeat.js
23.36.79.43200 OK1.1 kB
img6.wsimg.com/wrhs/a1ec4030e9dc43d22a343bffd99b8514/vendor~uxcore2.min.js
23.36.79.43200 OK65 kB
img6.wsimg.com/wrhs/ae339c79bdde0255080976dd1538b62b/utilityheader.min.js
23.36.79.43200 OK38 kB
img6.wsimg.com/wrhs/fe8b24892f96760c9dd36b9e6673e085/utilityheader.min.css
23.36.79.43200 OK11 kB
push.services.mozilla.com/
52.39.62.124101 Switching Protocols0 B
img6.wsimg.com/wrhs/1687c97b5e8ae39cdd00f0da2764d8a7/tcc.min.js
23.36.79.43200 OK26 kB
img6.wsimg.com/poly/v3/polyfill.min.js?features=Promise,Promise.prototype.finally,Intl.~locale.en-US&rum=0&unknown=polyfill&flags=gated
23.36.79.43200 OK94 B
img6.wsimg.com/wrhs/12263c72ff7a15ea28d22a713a26c1c9/uxcore2.min.js
23.36.79.43200 OK31 kB
img6.wsimg.com/wrhs/36d260a9dfd3c942120af8d91cef9acc/browser-deprecation-banner.header-chunk.min.js
23.36.79.43200 OK6.3 kB
gui.secureserver.net/pcjson/salesheader?plId=3153&shopperId=&sid=
104.110.14.92200 OK368 B
sdk.split.io/api/mySegments/0c71ae8e-cff5-44d2-824f-383dffb47910
151.101.87.9200 OK37 B
img6.wsimg.com/auth-assets/0f6f9f8334dd6807c3ffc05d7a61c18730640a15/pass-header-template.js
23.36.79.43200 OK37 kB
sdk.split.io/api/splitChanges?since=-1
151.101.87.9200 OK37 B
sdk.split.io/api/mySegments/0c71ae8e-cff5-44d2-824f-383dffb47910
151.101.87.9200 OK37 B
sso.secureserver.net/v1/api/pass/o365/header?marketid=en-US
104.110.14.92200 OK66 B
sso.secureserver.net/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/fp
104.110.14.92429 Too Many Requests75 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK4.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg
34.120.237.76200 OK6.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8365a642-a490-4221-8f9f-867864b12d62.webp
34.120.237.76200 OK9.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
34.120.237.76200 OK4.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4db9b106-0a0e-4fae-92b6-a8812d365210.jpeg
34.120.237.76200 OK8.1 kB
reporting.cdndex.io/error
54.230.111.12200 OK2 B
img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
23.36.79.43200 OK7.5 kB
reporting.cdndex.io/error
54.230.111.12200 OK8 B
sso.secureserver.net/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/tl
104.110.14.92200 OK0 B
events.api.secureserver.net/pageEvents.aspx?timestamp=1669113891110&corrid=216364732&referrer=&marketid=en-US&vs=visible&rand=524514929&sitename=sso.secureserver.net&page=%2Flogin&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&agent=false&delegated=false&salessite=false&loadSource=uxpHeader&page_level_properties=loadSource&event_type=page.event&eventdate=2022-11-22T10%3A44%3A51.111Z&eventtype=load&e_id=sso.login_panel.landing.page.load&hit_id=f91dac4c-3c82-54a5-856b-fcb23e26b587&visitor_guid=0c71ae8e-cff5-44d2-824f-383dffb47910&page_realm=pass&has_consent=1&cv=3.24.1&client_name=tcc&same_site=None&trace_id=a29a223e4d755117bf4b580deec279fb
23.72.139.72200 OK43 B
events.api.secureserver.net/pageEvents.aspx?timestamp=1669113891106&corrid=216364732&referrer=&marketid=en-US&vs=visible&rand=131950446&sitename=sso.secureserver.net&page=%2Flogin&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&agent=false&delegated=false&salessite=false&loadSource=uxpHeader&page_level_properties=loadSource&event_type=page.event&usrin=market%2Cen-US%5Esplit%2C%5Euxcore%2C2%5Ecurrency%2CUSD%5Ehostname%2Csso.secureserver.net%5Epath%2Cundefined%5Equery%2C%7B%22app%22%3A%22o365%22%2C%22realm%22%3A%22pass%22%7D%5Ecountry%2CUnited%20States%5Elang%2CEnglish&eventdate=2022-11-22T10%3A44%3A51.106Z&eventtype=impression&e_id=uxp.hyd.int.utilityheader.sso.impression&hit_id=54c9fa62-a4ff-5ca8-b3ab-a8f17eff9e87&visitor_guid=0c71ae8e-cff5-44d2-824f-383dffb47910&page_realm=pass&has_consent=1&cv=3.24.1&client_name=tcc&same_site=None&trace_id=a29a223e4d755117bf4b580deec279fb
23.72.139.72200 OK43 B
events.api.secureserver.net/image.aspx?referrer=&timestamp=1669113891102&corrid=216364732&marketid=en-US&vs=visible&rand=1275472002&sitename=sso.secureserver.net&page=%2Flogin&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&agent=false&delegated=false&salessite=false&loadSource=uxpHeader&page_level_properties=loadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fapp%3Do365%26realm%3Dpass&trace_id=a29a223e4d755117bf4b580deec279fb&hit_id=fa6a376f-7d5f-5d1c-a087-f8ed33bd5c84&visitor_guid=0c71ae8e-cff5-44d2-824f-383dffb47910&page_realm=pass&has_consent=1&cv=3.24.1&client_name=tcc&same_site=None
23.72.139.72200 OK43 B
events.api.secureserver.net/pageEvents.aspx?timestamp=1669113891114&corrid=216364732&referrer=&marketid=en-US&vs=visible&rand=1413554481&sitename=sso.secureserver.net&page=%2Flogin&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&agent=false&delegated=false&salessite=false&loadSource=uxpHeader&page_level_properties=loadSource&event_type=page.event&eventdate=2022-11-22T10%3A44%3A51.114Z&eventtype=load&e_id=sso.login_panel.sso_landing.o365.page.load&hit_id=08b8dcf5-a947-58b5-9fa4-6dcd8a57aa9f&visitor_guid=0c71ae8e-cff5-44d2-824f-383dffb47910&page_realm=pass&has_consent=1&cv=3.24.1&client_name=tcc&same_site=None&trace_id=a29a223e4d755117bf4b580deec279fb
23.72.139.72200 OK43 B
events.api.secureserver.net/b.aspx?timestamp=1669113892670&corrid=216364732&referrer=&marketid=en-US&vs=visible&rand=1473415771&sitename=sso.secureserver.net&page=%2Flogin&location=https%3A%2F%2Fsso.secureserver.net%2Flogin%3Fapp%3Do365%26realm%3Dpass&agent=false&delegated=false&salessite=false&loadSource=uxpHeader&page_level_properties=loadSource&event_type=page.log&eventdate=2022-11-22T10%3A44%3A52.670Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1669113890001&connectStart=1669113889984&domComplete=1669113892658&domContentLoadedEventEnd=1669113891090&domContentLoadedEventStart=1669113891081&domInteractive=1669113891044&domLoading=1669113890240&domainLookupEnd=1669113889983&domainLookupStart=1669113889968&fetchStart=1669113889967&navigationStart=1669113889029&requestStart=1669113890001&responseEnd=1669113890227&responseStart=1669113890225&loadEventStart=1669113892658&loadEventEnd=0&transferSize=40593&encodedBodySize=39408&decodedBodySize=174924&navigationType=navigate&fcp=1627&hit_id=5bcb8012-6943-5a6a-9436-72d2bf8a829a&visitor_guid=0c71ae8e-cff5-44d2-824f-383dffb47910&page_realm=pass&has_consent=1&cv=3.24.1&client_name=tcc&same_site=None&trace_id=a29a223e4d755117bf4b580deec279fb
23.72.139.72200 OK43 B
sdk.split.io/api/splitChanges?since=-1
151.101.87.9200 OK0 B
img6.wsimg.com/auth-assets/0f6f9f8334dd6807c3ffc05d7a61c18730640a15/login-panel.js
23.36.79.43200 OK0 B