Report - www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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

Report Overview

URL

www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
IP

13.107.246.53

ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted

2023-06-10T11:30:47Z

Access

public
Tags

microsoft
urlquery detections

Phishing - Microsoft

Detections

urlquery

6
Network Intrusion Detection

10
Threat Detection Systems

1

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
www.attemplate.com (32)	168105	2020-07-14 10:34:04	2023-06-09 14:34:53	32769	5600324	13.107.246.53
wusofficehome.msocdn.com (9)	unknown	2017-07-13 17:37:50	2023-06-01 15:18:15	4401	4572	23.32.25.29
r4.res.office365.com (7)	180	2017-03-03 13:49:03	2023-06-09 11:25:29	3418	718725	23.36.79.11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-10T11:30:24Z	low	Client IP	Internal IP	ET INFO Microsoft Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:24Z	low	Client IP	Internal IP	ET INFO Microsoft Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:24Z	low	Client IP	Internal IP	ET INFO Microsoft Defender Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:24Z	low	Client IP	Internal IP	ET INFO Microsoft Defender Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:24Z	low	13.107.246.53	Client IP	ET INFO Observed Microsoft Attack Simulation Training SSL Cert (attemplate .com)
2023-06-10T11:30:28Z	low	Client IP	Internal IP	ET INFO Microsoft Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:28Z	low	Client IP	Internal IP	ET INFO Microsoft Defender Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:28Z	low	Client IP	Internal IP	ET INFO Microsoft Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:28Z	low	Client IP	Internal IP	ET INFO Microsoft Defender Attack Simulation Training Domain in DNS Lookup (attemplate .com)
2023-06-10T11:30:40Z	low	13.107.213.53	Client IP	ET INFO Observed Microsoft Attack Simulation Training SSL Cert (attemplate .com)

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-06-09	medium	www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (48)

URL IP Response Size

www.attemplate.com/Content/newSignInFiles/ellipsis_white.svg

United States MICROSOFT-CORP-MSN-AS-BLOCK

13.107.246.53

200 OK

915

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/ellipsis_white.svg
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (915), with no line terminators

Size

915
Hash

5ac590ee72bfe06a7cecfd75b588ad73

dda2cb89a241bc424746d8cf2a22a35535094611

6075736ea9c281d69c4a3d78ff97bb61b9416a5809919babe5a0c5596f99aaea

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

                                        GET /Content/newSignInFiles/ellipsis_white.svg HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=N1NOU0RyUEE3eTk4OUdGQUc0R000NEdMSDFOTE5HcXJGTlBHYUxSOGx0bklITmJTcEp0V0V2UnBmR2tzQkY1OWFGczh1WExNNzJLRy8wSDFvOXB4U3JOQUcrY3VOUHUvNkN3TDJBdlZWT0VKaHZybDQ0S2o5Y2xLb1JvNUtDNGtvZE9JRldET0xBVGhBOHpHbnJMSzNEM25CTFdTc2RnYVhhRjJreXkwdjdBUUJZTHBoU2NqbEw3ci9PejNzSFQrZm1uUXJjMGxEdTZVbXM1dHBWTGFTN0VLcGd3WmQxYnVGbUxJeWU1U2V6RlM5TjFRZTB0Wno0WURGeEc3b1Mxa1BxczlVVUNyZENLQjBVWlhCS0J2a1pNOVJydEFpazNpeVhjbmFqVU1ScjF0N25lMnlodE45U0YvUnVXczBiN2IwemcyM1BPRVlhZ3NKSFhqQ0UzeFVWbVZLTWVKck4ycldmWGtGSmlWemhrcVZ0SXMxZUxvYU83OXZiOE1nZ3dsc1UzdHNpbE04T0dYL2NySk5COVJjUT09
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 915
content-type: image/svg+xml
last-modified: Thu, 08 Jun 2023 09:00:37 GMT
accept-ranges: bytes
etag: "1d999e7b0fceb13"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAACUSvV6Y5HPQJyiMCrJlTqPU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/jsonjs.js

13.107.246.53

200 OK

10323

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/jsonjs.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=N1NOU0RyUEE3eTk4OUdGQUc0R000NEdMSDFOTE5HcXJGTlBHYUxSOGx0bklITmJTcEp0V0V2UnBmR2tzQkY1OWFGczh1WExNNzJLRy8wSDFvOXB4U3JOQUcrY3VOUHUvNkN3TDJBdlZWT0VKaHZybDQ0S2o5Y2xLb1JvNUtDNGtvZE9JRldET0xBVGhBOHpHbnJMSzNEM25CTFdTc2RnYVhhRjJreXkwdjdBUUJZTHBoU2NqbEw3ci9PejNzSFQrZm1uUXJjMGxEdTZVbXM1dHBWTGFTN0VLcGd3WmQxYnVGbUxJeWU1U2V6RlM5TjFRZTB0Wno0WURGeEc3b1Mxa1BxczlVVUNyZENLQjBVWlhCS0J2a1pNOVJydEFpazNpeVhjbmFqVU1ScjF0N25lMnlodE45U0YvUnVXczBiN2IwemcyM1BPRVlhZ3NKSFhqQ0UzeFVWbVZLTWVKck4ycldmWGtGSmlWemhrcVZ0SXMxZUxvYU83OXZiOE1nZ3dsc1UzdHNpbE04T0dYL2NySk5COVJjUT09
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (9380), with CRLF line terminators

Size

10323
Hash

37ea9ecfb21e1348970d981b0cc9f68c

2c74e0956dd4e1f49f7726eedec967d43c9221b5

3c49e5eeb628e98c3dfc5282c440d21b38a0d42bf45d8e281c1a7478d200c793

HTTP Headers

                                        GET /Content/newSignInFiles/jsonjs.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 10323
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 07:06:08 GMT
accept-ranges: bytes
etag: "1d99520b4441853"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAACWdP3gwVEmTpxEsdL7utclU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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

13.107.246.53

200 OK

27913

URL User Request GET HTTP/2

www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2652), with CRLF line terminators

Size

27913
Hash

e642750be4d0bcbbbf10cace6c89390f

d7d4b9bd9cbb3d904a138f7adc5be3a0ee10ffe4

807e286efffab0518b9c70922013b4285be3a2c2d4a51eae436af81cafd0614a

Detections

Analyzer	Verdict	Alert
openphish	Outlook

HTTP Headers

                                        GET /nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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 HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
set-cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0; path=/; samesite=strict; httponly
request-context: appId=
strict-transport-security: max-age=2592000
content-security-policy: img-src https: data: ; style-src 'self' 'unsafe-inline'; script-src 'self' 'sha256-u5fFIcor1xtPxSBsh2kxLHBKvPbM2v9Ub5SKVM9NZrg=' 'sha256-1MFj29uPPXl7TR2f/xnuiJnDErswWH7Wy4byXou/KOc='
x-frame-options: SAMEORIGIN
x-cache: CONFIG_NOCACHE
x-azure-ref: 00V6EZAAAAAAc3vm2R5wVSo/nqpLdtovfU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:25 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/custom.js

13.107.246.53

200 OK

622

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/custom.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Size

622
Hash

aea020f375911781c3071ac22af63908

fde8b655198338b351504827e41afadfe367588c

d260546291a3cda75ad5c44c1658c5420e55287ec8f2546789f1303147319386

HTTP Headers

                                        GET /Content/newSignInFiles/custom.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 622
content-type: application/javascript
last-modified: Wed, 07 Jun 2023 11:15:07 GMT
accept-ranges: bytes
etag: "1d9993150ab6dee"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAACEOjOz7voTS6K3lDXHZVACU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/convergedloginpaginatedstrings-en.min.js

13.107.246.53

200 OK

12121

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/convergedloginpaginatedstrings-en.min.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 text, with very long lines (12112), with no line terminators

Size

12121
Hash

a43abb7b73ede723d909515b0db8567c

31a5c6d3c518e3b27d96a8c4749ef20d9b028ced

8176927c483b9c3c64aedb655264870a59e608a653ed5045c3091382829b4f89

HTTP Headers

                                        GET /Content/newSignInFiles/convergedloginpaginatedstrings-en.min.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 12121
content-type: application/javascript
last-modified: Wed, 24 May 2023 16:51:41 GMT
accept-ranges: bytes
etag: "1d98e600372e3d9"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAABmNJop4ncZTI2LLG+H97I4U1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/morescript.js

13.107.246.53

200 OK

331

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/morescript.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with very long lines (326), with CRLF line terminators

Size

331
Hash

8bc03f0ed1d4ec8b123abc818f236ec9

8d5327da68684b0949c5b388f2b2eab3dc77b42e

58fa1f189953f9c0b6209827f64e8ce65318374e075c30f74cad566ed733fe69

HTTP Headers

                                        GET /Content/newSignInFiles/morescript.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 331
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 06:26:43 GMT
accept-ranges: bytes
etag: "1d9951b329dd2cb"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAACiOf5IMYzCS5/OhcP8xZ9ZU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/firstScript.js

13.107.246.53

200 OK

54099

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/firstScript.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with very long lines (39807), with CRLF line terminators

Size

54099
Hash

da5d678cfa62ab32b62a8123e923f822

ea31c64aa7f094ed21ea0acaa054fbe0745235fe

9fabe69e40bbff565755bbc408ba923e8d05867969c34e5448d334c8914d2ba0

HTTP Headers

                                        GET /Content/newSignInFiles/firstScript.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=N1NOU0RyUEE3eTk4OUdGQUc0R000NEdMSDFOTE5HcXJGTlBHYUxSOGx0bklITmJTcEp0V0V2UnBmR2tzQkY1OWFGczh1WExNNzJLRy8wSDFvOXB4U3JOQUcrY3VOUHUvNkN3TDJBdlZWT0VKaHZybDQ0S2o5Y2xLb1JvNUtDNGtvZE9JRldET0xBVGhBOHpHbnJMSzNEM25CTFdTc2RnYVhhRjJreXkwdjdBUUJZTHBoU2NqbEw3ci9PejNzSFQrZm1uUXJjMGxEdTZVbXM1dHBWTGFTN0VLcGd3WmQxYnVGbUxJeWU1U2V6RlM5TjFRZTB0Wno0WURGeEc3b1Mxa1BxczlVVUNyZENLQjBVWlhCS0J2a1pNOVJydEFpazNpeVhjbmFqVU1ScjF0N25lMnlodE45U0YvUnVXczBiN2IwemcyM1BPRVlhZ3NKSFhqQ0UzeFVWbVZLTWVKck4ycldmWGtGSmlWemhrcVZ0SXMxZUxvYU83OXZiOE1nZ3dsc1UzdHNpbE04T0dYL2NySk5COVJjUT09
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 54099
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 15:06:29 GMT
accept-ranges: bytes
etag: "1d99a1acd669bd3"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAABTaQzGLmIVRa145XN4lA1gU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/microsoft_logo.svg

13.107.246.53

200 OK

3651

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/microsoft_logo.svg
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators

Size

3651
Hash

ee5c8d9fb6248c938fd0dc19370e90bd

d01a22720918b781338b5bbf9202b241a5f99ee4

04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

                                        GET /Content/newSignInFiles/microsoft_logo.svg HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 3651
content-type: image/svg+xml
last-modified: Thu, 08 Jun 2023 09:03:18 GMT
accept-ranges: bytes
etag: "1d999e810f38143"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAACnLpyaazQBSoMsnLhmvT6sU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:27 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/converged.login.min.css

13.107.246.53

200 OK

88187

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/converged.login.min.css
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=N1NOU0RyUEE3eTk4OUdGQUc0R000NEdMSDFOTE5HcXJGTlBHYUxSOGx0bklITmJTcEp0V0V2UnBmR2tzQkY1OWFGczh1WExNNzJLRy8wSDFvOXB4U3JOQUcrY3VOUHUvNkN3TDJBdlZWT0VKaHZybDQ0S2o5Y2xLb1JvNUtDNGtvZE9JRldET0xBVGhBOHpHbnJMSzNEM25CTFdTc2RnYVhhRjJreXkwdjdBUUJZTHBoU2NqbEw3ci9PejNzSFQrZm1uUXJjMGxEdTZVbXM1dHBWTGFTN0VLcGd3WmQxYnVGbUxJeWU1U2V6RlM5TjFRZTB0Wno0WURGeEc3b1Mxa1BxczlVVUNyZENLQjBVWlhCS0J2a1pNOVJydEFpazNpeVhjbmFqVU1ScjF0N25lMnlodE45U0YvUnVXczBiN2IwemcyM1BPRVlhZ3NKSFhqQ0UzeFVWbVZLTWVKck4ycldmWGtGSmlWemhrcVZ0SXMxZUxvYU83OXZiOE1nZ3dsc1UzdHNpbE04T0dYL2NySk5COVJjUT09
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (61123), with CRLF line terminators

Size

88187
Hash

962d66b5fa6c30ab93ed4762d692b0b6

264402864833193dc83aea439dfc26bbeae4199e

b975857eea84eb27fe2effc01b4045800b81d6e358b37a7a876ba813351745ce

HTTP Headers

                                        GET /Content/newSignInFiles/converged.login.min.css HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=N1NOU0RyUEE3eTk4OUdGQUc0R000NEdMSDFOTE5HcXJGTlBHYUxSOGx0bklITmJTcEp0V0V2UnBmR2tzQkY1OWFGczh1WExNNzJLRy8wSDFvOXB4U3JOQUcrY3VOUHUvNkN3TDJBdlZWT0VKaHZybDQ0S2o5Y2xLb1JvNUtDNGtvZE9JRldET0xBVGhBOHpHbnJMSzNEM25CTFdTc2RnYVhhRjJreXkwdjdBUUJZTHBoU2NqbEw3ci9PejNzSFQrZm1uUXJjMGxEdTZVbXM1dHBWTGFTN0VLcGd3WmQxYnVGbUxJeWU1U2V6RlM5TjFRZTB0Wno0WURGeEc3b1Mxa1BxczlVVUNyZENLQjBVWlhCS0J2a1pNOVJydEFpazNpeVhjbmFqVU1ScjF0N25lMnlodE45U0YvUnVXczBiN2IwemcyM1BPRVlhZ3NKSFhqQ0UzeFVWbVZLTWVKck4ycldmWGtGSmlWemhrcVZ0SXMxZUxvYU83OXZiOE1nZ3dsc1UzdHNpbE04T0dYL2NySk5COVJjUT09
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 88187
content-type: text/css
last-modified: Wed, 07 Jun 2023 10:53:57 GMT
accept-ranges: bytes
etag: "1d9992e5bb188fb"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAAAPx3DJBd1WS6B0z0Ig8sD3U1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/convergedlogin_pcore.min.js

13.107.246.53

200 OK

450214

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/convergedlogin_pcore.min.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (32002), with CRLF line terminators

Size

450214
Hash

9ae1e96885da36ab5aacdaf54eeb8305

34084f5f515dab11fc20b63089d5d1a80e75d478

e4a459ed9bf635aaf0bbcfb36142c32264378f2dd25aa79bae136dfd55dd5888

HTTP Headers

                                        GET /Content/newSignInFiles/convergedlogin_pcore.min.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 450214
content-type: application/javascript
last-modified: Fri, 26 May 2023 10:43:59 GMT
accept-ranges: bytes
etag: "1d98fbefa4a9f26"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 00l6EZAAAAABsqS1SNSxoQqNdKFBb0rEDU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:26 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/0-small.jpg

13.107.246.53

200 OK

1029

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/0-small.jpg
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, xresolution=98, yresolution=106, resolutionunit=2, software=paint.net 4.0.13], baseline, precision 8, 50x28, components 3\012- data

Size

1029
Hash

12f4b8b543125cc986c79cd85320812f

e3142c687fe873e1a6a7d29016c7a451b8a2850f

c13db279143e1845ee4aaee5afedc5bd75e9f7d50024b63883b45332c4960b3b

HTTP Headers

                                        GET /Content/newSignInFiles/0-small.jpg HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 1029
content-type: image/jpeg
last-modified: Wed, 07 Jun 2023 11:23:09 GMT
accept-ranges: bytes
etag: "1d999326ff6c885"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01F6EZAAAAACi2DGBecqZT7SepR3uUf/NU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/prefetch.html

13.107.246.53

200 OK

1756

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/prefetch.html
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

Size

1756
Hash

a9661376c6d3c89c6448e8efdce7fcfe

5f861ddc8c0d18fc4f1ad6f04a1232504b0e3f27

c7972543b426a4ea331b3de94b4c29071d2b69ec5b2616b7af195c5cf531e72f

HTTP Headers

                                        GET /Content/newSignInFiles/prefetch.html HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 1756
content-type: text/html
last-modified: Thu, 08 Jun 2023 09:06:15 GMT
accept-ranges: bytes
etag: "1d999e87a739b5c"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01F6EZAAAAAAOAvInvaiZTbd5FBMVnU1QU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/sharedFontStyles.css

13.107.246.53

200 OK

80753

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/sharedFontStyles.css
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

80753
Hash

f2b550ccd5342b303f228c6c21b75a5a

1f0d44968065c0e7c6c94c48b64df85fd87319ee

0365a3907c20a89c185786deb53076a06d0c823926153a46d534359e05b3fd94

HTTP Headers

                                        GET /Content/newSignInFiles/sharedFontStyles.css HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 80753
content-type: text/css
last-modified: Thu, 08 Jun 2023 09:06:15 GMT
accept-ranges: bytes
etag: "1d999e87a72a6f1"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01F6EZAAAAACDVell6h8dSI6SLwgL27zjU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/share.html

13.107.246.53

200 OK

61050

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/share.html
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (34636), with CRLF line terminators

Size

61050
Hash

9a3bb6d1929df442683d0042a4da4736

f40f88e9c5043f43ce176313738f0242bc741ddb

1f2052b393bc87d22c4320ac95cfa8e0e0b5e6e505be6e49c9b8158df02ff1be

HTTP Headers

                                        GET /Content/newSignInFiles/share.html HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 61050
content-type: text/html
last-modified: Fri, 02 Jun 2023 06:22:19 GMT
accept-ranges: bytes
etag: "1d9951a954271fa"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01F6EZAAAAAAeSuaSE54wQ5NfDojUrJYiU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/staticStylesFluent.css

13.107.246.53

200 OK

42370

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/staticStylesFluent.css
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (42370), with no line terminators

Size

42370
Hash

91eabe9f6d879f4ca72b65493213bd68

0f6815e186b3c08e4e4aa3105282db2588c9dd33

3e17954a96ef8fdab6b6c32b08452a5e555f3c95a3ac691913542b54198c3dc5

HTTP Headers

                                        GET /Content/newSignInFiles/staticStylesFluent.css HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 42370
content-type: text/css
last-modified: Thu, 08 Jun 2023 09:06:12 GMT
accept-ranges: bytes
etag: "1d999e878a97f82"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01F6EZAAAAAChKRauxJskRIR/CbxTKuNEU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/odbshare.resx-30cb8c0f.js

13.107.246.53

200 OK

54846

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/odbshare.resx-30cb8c0f.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/share.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 text, with very long lines (54840), with no line terminators

Size

54846
Hash

30cb8c0f0121ecf0d7e72f25e99db372

d5569b73a452b935da0394cda601ef83e69e5361

df5b5ebcb8f62fb2e24b77c57d71f02f98705370ccad457e4ca214975ab77498

HTTP Headers

                                        GET /Content/newSignInFiles/odbshare.resx-30cb8c0f.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.attemplate.com/Content/newSignInFiles/share.html
DNT: 1
Connection: keep-alive
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 54846
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 09:06:15 GMT
accept-ranges: bytes
etag: "1d999e87a734bbe"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAAAm4BgDLMS8T5njq/HcU5wfU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/favicon_a.ico

13.107.246.53

200 OK

17174

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/favicon_a.ico
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data

Size

17174
Hash

12e3dac858061d088023b2bd48e2fa96

e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5

90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

                                        GET /Content/newSignInFiles/favicon_a.ico HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 17174
content-type: image/x-icon
last-modified: Wed, 07 Jun 2023 11:23:09 GMT
accept-ranges: bytes
etag: "1d999326ff68f96"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAABu6wlN/r+2RZ9ZDMphemGKU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/react-e173c92e.js

13.107.246.53

200 OK

150787

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/react-e173c92e.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/share.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

150787
Hash

e173c92e0f5b1f151fb56b251cacbc39

5a2ecc596693c47856d22c7f240c9b9568bb96a0

66bcaf33e9ff0218ddd697bfcc5067e10840ae8055f271dcf7d5a37ade6ee22f

HTTP Headers

                                        GET /Content/newSignInFiles/react-e173c92e.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.attemplate.com/Content/newSignInFiles/share.html
DNT: 1
Connection: keep-alive
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 150787
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 09:00:37 GMT
accept-ranges: bytes
etag: "1d999e7b0fea583"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAACgiVqSNfJuR666TaKnbqr5U1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/prefetch_1.html

13.107.246.53

200 OK

3401

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/prefetch_1.html
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1188), with CRLF line terminators

Size

3401
Hash

64a497444d32ffc563f0acb028a00add

0128ccd7f2db9cad212bbad9604fbf375fd6e9d2

b3ed53e1ec89c55f0ad6f8241900b6fb06c8538158ae386ad18666942a6c1180

HTTP Headers

                                        GET /Content/newSignInFiles/prefetch_1.html HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 3401
content-type: text/html
last-modified: Thu, 08 Jun 2023 09:03:18 GMT
accept-ranges: bytes
etag: "1d999e810f38249"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01F6EZAAAAAD9F7kmH3a4R4+r3gvM5FJCU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/0.jpg

13.107.246.53

200 OK

298105

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/0.jpg
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, xresolution=98, yresolution=106, resolutionunit=2, software=paint.net 4.0.13], baseline, precision 8, 1920x1080, components 3\012- data

Size

298105
Hash

f5a9a9531b8f4bcc86eabb19472d15d5

0aac0b09708622c679768aa62b11d95f0e8388de

62faab60433070e2ea52c235f0f18db228759f2a08bb6f9e5711630df8321214

HTTP Headers

                                        GET /Content/newSignInFiles/0.jpg HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/nam/7ba633e0-1b51-4d50-9eda-a22a2f9776bf/8ebe4bf4-d1dc-4850-b93a-dfa0504b59f3/e9c6a6c2-4608-4007-9777-33e0f10c20d2/login?id=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
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 298105
content-type: image/jpeg
last-modified: Thu, 08 Jun 2023 15:06:29 GMT
accept-ranges: bytes
etag: "1d99a1acd62c4f9"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01F6EZAAAAABm0jdFll1pQKxRwC7FaFqBU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/sprite1.mouse.png

13.107.246.53

200 OK

16664

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/sprite1.mouse.png
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

PNG image data, 600 x 75, 8-bit/color RGBA, non-interlaced\012- data

Size

16664
Hash

2835f067dcf4c8a12464856267ca8ff7

ab0a6ccd3932d913314b1ff617f236750781a835

4b5cc3fed2c03c158abc3634c1f7700079fbc1e6183aa5e47a2064cfed87977c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

                                        GET /Content/newSignInFiles/sprite1.mouse.png HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 16664
content-type: image/png
last-modified: Fri, 02 Jun 2023 07:06:08 GMT
accept-ranges: bytes
etag: "1d99520b4447118"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAAB/MN9V8EVKTaR2E1iLK6DNU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.mouse.css

13.107.246.53

200 OK

232377

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.mouse.css
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

232377
Hash

48fc1595ceb5f14fd150e4c303231a66

cfea5fe8e941a3b54c37362e21b2f64969d51bb0

1be30cb9303e429a65d50bfa98d279c803256485836027d99b4b195b7fcd9f69

HTTP Headers

                                        GET /Content/newSignInFiles/boot.worldwide.mouse.css HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 232377
content-type: text/css
last-modified: Fri, 02 Jun 2023 06:22:19 GMT
accept-ranges: bytes
etag: "1d9951a95411439"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAABjNJ95YOgJTbNTDKCr2VrjU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/odbshare-deca58ee.js

13.107.246.53

200 OK

1267037

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/odbshare-deca58ee.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/share.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (52526), with CRLF line terminators

Size

1267037
Hash

36e4d5260114c1c0aaaf543f60242abe

216bb5e7b2d7b3ea2fa94be5bd0daaa8420d9294

23f0ff28cbffa80317fd222cb6b7857cfd2075be3bccebfac2cbc97ad1747da6

HTTP Headers

                                        GET /Content/newSignInFiles/odbshare-deca58ee.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.attemplate.com/Content/newSignInFiles/share.html
DNT: 1
Connection: keep-alive
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 1267037
content-type: application/javascript
last-modified: Wed, 07 Jun 2023 11:15:07 GMT
accept-ranges: bytes
etag: "1d9993150b83add"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAADp2gxPGr00TYR2Rti6wZu7U1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/knockout-b324ae36.js

13.107.246.53

200 OK

65592

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/knockout-b324ae36.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/share.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (59466), with CRLF line terminators

Size

65592
Hash

1fe900de2fc85937b8fd66b912d5ec98

1aa37910ecec33bee345da74cd5ee50feb85fbe1

5052bc6222b5c7990b21575a67fbeb1396e550fb03d11b86c9bc96dbb8a9e4e7

HTTP Headers

                                        GET /Content/newSignInFiles/knockout-b324ae36.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.attemplate.com/Content/newSignInFiles/share.html
DNT: 1
Connection: keep-alive
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 65592
content-type: application/javascript
last-modified: Fri, 09 Jun 2023 05:58:54 GMT
accept-ranges: bytes
etag: "1d99a9778b5e338"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAAAE8Czb1EOYQ58iZSrpzFhSU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.0.mouse.js

13.107.246.53

200 OK

658812

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.0.mouse.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with very long lines (59852), with CRLF line terminators

Size

658812
Hash

ddbd3e0172d580dce1d5037ac1b7df8b

182379569666d07d0505621be9d8e1b32353bd8e

7a321e19122b4aea06314fc09e75cf19e37d4ba61e6e315371987ac895e806ce

HTTP Headers

                                        GET /Content/newSignInFiles/boot.worldwide.0.mouse.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 658812
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 08:24:21 GMT
accept-ranges: bytes
etag: "1d999e29ff7a5fc"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAAApFFk3k+xCQaABSCdPdTWwU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/sprite1.mouse.css

13.107.246.53

200 OK

7604

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/sprite1.mouse.css
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

ASCII text, with very long lines (7604), with no line terminators

Size

7604
Hash

e9ba472d2ddb09fb3ec536dc240b1976

99daf55408b077f6f56daaf6cae4e54dc0fc0cfa

461f87e55bba34c4d9248d1b45685ea832eba56c15ebf6cccf75d49f1547b502

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

                                        GET /Content/newSignInFiles/sprite1.mouse.css HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 7604
content-type: text/css
last-modified: Wed, 24 May 2023 16:51:41 GMT
accept-ranges: bytes
etag: "1d98e600372d134"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAAALoth3UkZrRb07rr5swFqOU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.3.mouse.js

13.107.246.53

200 OK

656278

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.3.mouse.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators

Size

656278
Hash

97c5f8fff487304a9482b1bc49cc0d01

4e2f7c2efef5e2eb974e42c75add4c5fe62bc3f6

09b52730dfeb19700920e33d3a12060ec2c78ccb62b7336a22a3d39fb07674a5

HTTP Headers

                                        GET /Content/newSignInFiles/boot.worldwide.3.mouse.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 656278
content-type: application/javascript
last-modified: Wed, 24 May 2023 16:51:41 GMT
accept-ranges: bytes
etag: "1d98e600378cf16"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAACmR0Yfl+raQL3htDIRePEaU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:28 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.1.mouse.js

13.107.246.53

200 OK

655420

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.1.mouse.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators

Size

655420
Hash

6a959bbef782c384e9bc59b6ca8985f5

6ff91ca8fc691f7ae420d6ee41b5172b08968f3f

eccbfcf674637944b0ad6c956e8a1210838158a3fa589d9d3752bc667ecfb09b

HTTP Headers

                                        GET /Content/newSignInFiles/boot.worldwide.1.mouse.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 655420
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 07:22:17 GMT
accept-ranges: bytes
etag: "1d99522f5dfdabc"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAAAqO6oe/PViQL7qv4FY5y/rU1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:29 GMT
X-Firefox-Spdy: h2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.2.mouse.js

13.107.246.53

200 OK

658229

URL GET HTTP/2

www.attemplate.com/Content/newSignInFiles/boot.worldwide.2.mouse.js
IP

13.107.246.53:443
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerMicrosoft Corporation

Subjectwww.attemplate.com

FingerprintDA:0D:43:9A:CC:E0:A3:D5:84:83:B7:1F:E4:4D:52:8C:AF:2D:7F:98

ValiditySun, 07 May 2023 20:25:31 GMT - Fri, 03 Nov 2023 20:25:31 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators

Size

658229
Hash

4b4b962b7bcb6374b576fb44fb24a871

d8dcadb5752a2549f8321ac022edb6be3c7ca51f

f5ea68a1c0bb90325f9a53432026888725dacc91574702856db1d628c3f9c5df

HTTP Headers

                                        GET /Content/newSignInFiles/boot.worldwide.2.mouse.js HTTP/1.1
Host: www.attemplate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Cookie: .AspNetCore.Antiforgery.gwqVAx6z9U4=CfDJ8LWP7bxcPh5JjzxZiZoC3HxLOTtPjT3wOSoPuH2Jno0YynUa9sAYthFe2nLNz9mwh9EESa6BFNBeCxOVPCzaxYrDfJ0TXiO_8Ldiv5klXdVLIT7QeuohcTK70nI44uz75rrTx3QQrNISA6mregIv_N0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
content-length: 658229
content-type: application/javascript
last-modified: Wed, 07 Jun 2023 11:09:45 GMT
accept-ranges: bytes
etag: "1d9993090b429b5"
request-context: appId=
strict-transport-security: max-age=2592000
x-cache: CONFIG_NOCACHE
x-azure-ref: 01V6EZAAAAACEfDs5o1GvQo9vSy4+dP69U1ZHMjBFREdFMDUxOQAyMDQ2ODBkMy1lN2MyLTRjZTktOGNlNy00ZGJmZWExY2VjODA=
date: Sat, 10 Jun 2023 11:30:29 GMT
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/2f9f9c93/Areas/Home/Content/js/build/bundles/app-bundle.js

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/2f9f9c93/Areas/Home/Content/js/build/bundles/app-bundle.js
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

0511095e3d17a6cc91ed2395ac4095db

c5b132cbbfb575238d24d5f8357edf5e9989a76d

5a2bf87e828285ddfb8a8bc117edd7df9ed74b69fe5ef041f4cf95274d4e060e

HTTP Headers

                                        GET /s/2f9f9c93/Areas/Home/Content/js/build/bundles/app-bundle.js HTTP/1.1
Host: wusofficehome.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 503 Service Unavailable
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 269
expires: Sat, 10 Jun 2023 11:30:32 GMT
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/6be72975/Areas/Home/Content/js/build/bundles/sharedScripts.js

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/6be72975/Areas/Home/Content/js/build/bundles/sharedScripts.js
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

3317c5321b48b1e6fa7fe3e0de285483

a3fed163155b3a0533c89ebf16d537381ece0528

07e5bfb0e20ddc219981383935bc4a6dac5c6d850309d442e069837c12cca2fe

HTTP Headers

                                        GET /s/6be72975/Areas/Home/Content/js/build/bundles/sharedScripts.js HTTP/1.1
Host: wusofficehome.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 503 Service Unavailable
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 269
expires: Sat, 10 Jun 2023 11:30:32 GMT
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/f5628679/Areas/Home/Content/js/build/bundles/polyfills-bundle.js

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/f5628679/Areas/Home/Content/js/build/bundles/polyfills-bundle.js
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

66112d1e023d51fcca9d0e013cc1083f

ee6a07283222e5ca6cd194ac07b39242aff784e5

0d4ed53ab0e8f83caffcb780b69281fe7c80f4680aa0e5bbb85fa6cde90d565b

HTTP Headers

                                        GET /s/f5628679/Areas/Home/Content/js/build/bundles/polyfills-bundle.js HTTP/1.1
Host: wusofficehome.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 503 Service Unavailable
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 269
expires: Sat, 10 Jun 2023 11:30:32 GMT
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/19ef5923/Areas/Home/Content/js/build/bundles/vendor-bundle.js

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/19ef5923/Areas/Home/Content/js/build/bundles/vendor-bundle.js
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

9351ea62de4b50b8c95bfea25f03fb0c

f61a4bd482d03f8cb1088686756557c94b70f418

363399231453e8f76c2a14300f40ba4b7b551bb345b678b52a832a47b77345bc

HTTP Headers

                                        GET /s/19ef5923/Areas/Home/Content/js/build/bundles/vendor-bundle.js HTTP/1.1
Host: wusofficehome.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 503 Service Unavailable
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 269
expires: Sat, 10 Jun 2023 11:30:32 GMT
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/7c18fcc8/Areas/Home/Content/js/build/bundles/react-bundle.js

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/7c18fcc8/Areas/Home/Content/js/build/bundles/react-bundle.js
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

7ed1ad52fb9b9b574f93203ec2ae2c0e

8e86f7760277179f451cb5c7516cf5b7224a5c50

6e976c527bcce2c8390e51d12aad83aa0a570acf60777328b8ff847ce8617d70

HTTP Headers

                                        GET /s/7c18fcc8/Areas/Home/Content/js/build/bundles/react-bundle.js HTTP/1.1
Host: wusofficehome.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 503 Service Unavailable
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 269
expires: Sat, 10 Jun 2023 11:30:32 GMT
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/b29e92f2/Areas/Home/Content/js/build/bundles/staticScripts.js

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/b29e92f2/Areas/Home/Content/js/build/bundles/staticScripts.js
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

5dfc0d2239644f198f5c01b7379b8ee3

20f351cc837d405416e6378360ec122f02b4f2ec

b137783c2844b2a6d091a3d75727be638988225fe5b45c37c501fbdfd75ebc4a

HTTP Headers

                                        GET /s/b29e92f2/Areas/Home/Content/js/build/bundles/staticScripts.js HTTP/1.1
Host: wusofficehome.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 503 Service Unavailable
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 269
expires: Sat, 10 Jun 2023 11:30:32 GMT
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2170.8.2502626/scripts/boot.worldwide.0.mouse.js

23.36.79.11

200 OK

178168

URL GET HTTP/2

r4.res.office365.com/owa/prem/16.2170.8.2502626/scripts/boot.worldwide.0.mouse.js
IP

23.36.79.11:443
ASN

#20940 Akamai International B.V.

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch_1.html
Certificate

IssuerDigiCert Inc

Subject*.res.outlook.com

Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE

ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT

Magic

Unicode text, UTF-8 (with BOM) text, with very long lines (59852), with CRLF line terminators

Size

178168
Hash

ddbd3e0172d580dce1d5037ac1b7df8b

182379569666d07d0505621be9d8e1b32353bd8e

7a321e19122b4aea06314fc09e75cf19e37d4ba61e6e315371987ac895e806ce

HTTP Headers

                                        GET /owa/prem/16.2170.8.2502626/scripts/boot.worldwide.0.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Thu, 01 Mar 2018 22:03:28 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 178168
cache-control: public,max-age=630720000, s-maxage=630720000
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/c3caee40/Areas/Home/Content/images/fluent-background-sources/header-default-desktop.svg

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/c3caee40/Areas/Home/Content/images/fluent-background-sources/header-default-desktop.svg
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

5dca414600209837415f3635238cca2e

9157d666485c7e3317e5d565fb6c7180ae3332f2

c0f942082324d9df4f1777eaf74e5f0969287acb6dc9eb04bcbffbdde3c0914b

HTTP Headers

                                        GET /s/c3caee40/Areas/Home/Content/images/fluent-background-sources/header-default-desktop.svg HTTP/1.1
Host: wusofficehome.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.attemplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 503 Service Unavailable
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 269
expires: Sat, 10 Jun 2023 11:30:32 GMT
date: Sat, 10 Jun 2023 11:30:32 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

wusofficehome.msocdn.com/s/398b5c2a/Areas/Home/Content/images/zero-docs-sprite.png

23.32.25.29

503 Service Unavailable

269

URL GET HTTP/2

wusofficehome.msocdn.com/s/398b5c2a/Areas/Home/Content/images/zero-docs-sprite.png
IP

23.32.25.29:443
ASN

#16625 AKAMAI-AS

Requested by

https://www.attemplate.com/Content/newSignInFiles/prefetch.html
Certificate

IssuerMicrosoft Corporation

Subject*.msocdn.com

Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84

ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

269
Hash

7f45cc9de871fddc9994c4929b6e5327

16023bb88d798bc587d8113ecdaaef5f89bbd973

4800bb1d173d3ec7a2a3ff6053c2624a83536d97488d8f34ae1ae151d2667243

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

#1 JS:Script (size: 54096)

#2 JS:Script (size: 35207)

#3 JS:Script (size: 0)

#4 JS:Script (size: 150787)

#5 JS:Script (size: 65592)

#6 JS:Script (size: 450214)

#7 JS:Script (size: 12121)

#8 JS:Script (size: 10323)

#9 JS:Script (size: 328)

#10 JS:Script (size: 619)

#11 JS:Script (size: 54846)

#12 JS:Script (size: 1267037)

HTTP Transactions (48)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic