Report - gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05|01|john.steckel@americansystems.com|09f4303511e04ab161fb08db624e6e7b|85fedf245af7459cb935b978cf6c8ca0|0|0|638211862172084355|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|0|||&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0

Report Overview

Submitted URL
gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05|01|john.steckel@americansystems.com|09f4303511e04ab161fb08db624e6e7b|85fedf245af7459cb935b978cf6c8ca0|0|0|638211862172084355|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|0|||&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0
IP
104.47.64.28
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2023-06-01 05:51:00
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gcc02.safelinks.protection.outlook.com	29725	1994-08-18	2019-09-25	2023-05-30	4.0 kB	33 kB	104.47.64.28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-01 05:50:47	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	gcc02.safelinks.protection.outlook.com/Content/Scripts/site.js	1.6 kB	2023-03-07	2024-04-27
Pretty URL gcc02.safelinks.protection.outlook.com/Content/Scripts/site.js IP 104.47.64.28 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:14:59 Last Seen2024-04-27 13:54:10 Times Seen1929 Hash 3af1fdb9a3f664a6683d212f4787733a 59063d49b723a1988236c8d39c2804c6ebc5ff95 a9ce4840ff0d613b456081dea64e46eb717a1f8bfa5afb05d3bd058f294e416c Loading...

HTTP Transactions (5)

	URL	IP	Response	Size
	gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0	104.47.64.28	200 OK	2.2 kB
URL User Request GET HTTP/1.1 gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 IP 104.47.64.28:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1170), with CRLF line terminators Size 2.2 kB (2234 bytes) Hash c2f81647a7a69e5c3d133bdefaff25d8 51eedd04e6e329fec799d2cb273dbf4c94111f9f ab61dbf196336ec590ee777af715f5d53e3c7ab22f15757a7bf2dcf24a26e0b6 HTTP Headers GET /?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 HTTP/1.1 Host: gcc02.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-SL-GetUrlReputation-Verdict: Error SafelinksWebApiErrorCode: 400201 X-Robots-Tag: noindex, nofollow X-AspNet-Version: 4.0.30319 X-ServerName: BL0GCC02WS013 X-ServerVersion: 15.20.6455.020 X-ServerLat: 5 X-SafeLinks-Tracking-Id: 90f99784-aee1-4ae0-af75-08db62642409 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Thu, 01 Jun 2023 05:50:43 GMT Connection: close Content-Length: 2234

	gcc02.safelinks.protection.outlook.com/Content/Scripts/safelinksv2.css	104.47.64.28	200 OK	1.1 kB
URL GET HTTP/1.1 gcc02.safelinks.protection.outlook.com/Content/Scripts/safelinksv2.css IP 104.47.64.28:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 1.1 kB (1142 bytes) Hash bbad95c4a0be4e5775b7d5b409fbf602 fad598750b15c207dfef6e1fea3c072baeac2b66 41f78d15ae18c36b84c819d9af3511c342c180f0aba8f91dc1ccf4046b56b308 HTTP Headers GET /Content/Scripts/safelinksv2.css HTTP/1.1 Host: gcc02.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Tue, 30 May 2023 10:13:04 GMT Accept-Ranges: bytes ETag: "0b84852df92d91:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerName: BL0GCC02WS016 X-ServerVersion: 15.20.6455.020 X-ServerLat: 0 X-SafeLinks-Tracking-Id: 8a69358e-f6dc-4543-3cbb-08db6264246f X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Thu, 01 Jun 2023 05:50:44 GMT Connection: close Content-Length: 1142`

	gcc02.safelinks.protection.outlook.com/Content/Scripts/site.js	104.47.64.28	200 OK	854 B
URL GET HTTP/1.1 gcc02.safelinks.protection.outlook.com/Content/Scripts/site.js IP 104.47.64.28:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 854 B (854 bytes) Hash 3af1fdb9a3f664a6683d212f4787733a 59063d49b723a1988236c8d39c2804c6ebc5ff95 a9ce4840ff0d613b456081dea64e46eb717a1f8bfa5afb05d3bd058f294e416c HTTP Headers GET /Content/Scripts/site.js HTTP/1.1 Host: gcc02.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Tue, 30 May 2023 10:13:04 GMT Accept-Ranges: bytes ETag: "0b84852df92d91:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerName: BL0GCC02WS018 X-ServerVersion: 15.20.6455.020 X-ServerLat: 0 X-SafeLinks-Tracking-Id: 998875d9-f90d-497e-323c-08db6264246f X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Thu, 01 Jun 2023 05:50:44 GMT Connection: close Content-Length: 854

	gcc02.safelinks.protection.outlook.com/Content/images/scanned.png	104.47.64.28	200 OK	24 kB
URL GET HTTP/1.1 gcc02.safelinks.protection.outlook.com/Content/images/scanned.png IP 104.47.64.28:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type PNG image data, 186 x 200, 8-bit/color RGBA, non-interlaced\012- data Size 24 kB (24231 bytes) Hash 1f6397becea10f3aa7c63671c29b9a79 633d92227b28480cd1b26adb7c259d9208ab0bbb bf5bd5c4216a18e5cea417d8ef471796eca754cff391d087409a940008d71a25 HTTP Headers GET /Content/images/scanned.png HTTP/1.1 Host: gcc02.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://gcc02.safelinks.protection.outlook.com/?url=https://americansystems-company.rbdgirls.in/john.steckel@americansystems.com/americansystems-john.steckel-Enrollment-Benefits-for-john.steckel.pdf&data=05\|01\|john.steckel@americansystems.com\|09f4303511e04ab161fb08db624e6e7b\|85fedf245af7459cb935b978cf6c8ca0\|0\|0\|638211862172084355\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|0\|\|\|&sdata=D8cDgqVes+9wZbGwTNCRqYmVnv5AtgWiW81U7mCvqUk=&reserved=0 DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 30 May 2023 10:11:56 GMT Accept-Ranges: bytes ETag: "0bec029df92d91:0" Server: Microsoft-IIS/10.0 X-ServerName: BL0GCC02WS015 X-ServerVersion: 15.20.6455.020 X-ServerLat: 0 X-SafeLinks-Tracking-Id: ff750f3b-bf92-40dd-e126-08db6264247f X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Thu, 01 Jun 2023 05:50:44 GMT Connection: close Content-Length: 24231`

	gcc02.safelinks.protection.outlook.com/	104.47.65.28		1.8 kB
URL gcc02.safelinks.protection.outlook.com/ IP 104.47.65.28:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (810), with CRLF line terminators Size 1.8 kB (1814 bytes) Hash 3fca84c9ad611b5ce71132054f86695e 2e663fe266d5704907bad4d9ae0e62a454d6bd8c cf26cd69abda58ba2bb949fe910d8360762ffeb972e6a56ec751151c7b7393fd HTTP Headers `GET / HTTP/1.1 Host: gcc02.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-SL-GetUrlReputation-Verdict: Error SafelinksWebApiErrorCode: 400204 X-Robots-Tag: noindex, nofollow X-AspNet-Version: 4.0.30319 X-ServerName: DM3GCC02WS004 X-ServerVersion: 15.20.6455.020 X-ServerLat: 3 X-SafeLinks-Tracking-Id: ad9ea2cf-5738-4a55-bb24-08db626425b3 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Thu, 01 Jun 2023 05:50:46 GMT Connection: close Content-Length: 1814

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (5)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers