{"report_id":"167cea47-bf7b-4e7f-bdff-1c0e870d6172","version":6,"status":"done","tags":[],"date":"2024-12-06T08:37:02Z","url":{"schema":"http","addr":"www.msftconnecttest.com/connecttest.txt","fqdn":"www.msftconnecttest.com","domain":"msftconnecttest.com","tld":"com"},"ip":{"addr":"2.17.251.50","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"http","addr":"www.msftconnecttest.com/connecttest.txt","fqdn":"www.msftconnecttest.com","domain":"msftconnecttest.com","tld":"com"},"title":"msftconnecttest.com/connecttest.txt"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-02-14T08:37:02Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.msftconnecttest.com","ip":{"addr":"23.36.77.107","port":80,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-04-04","domain_rank":231,"first_seen":"2015-04-21T06:08:17Z","last_seen":"2024-12-03T04:37:21.811314Z","alert_count":1,"request_count":2,"received_data":335,"sent_data":781,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-12-06T08:36:39Z","timestamp":1733474199,"ip_dst":{"addr":"23.36.77.107","port":80,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"ip_src":{"addr":"172.18.0.6","port":35518,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Microsoft Connection Test","source":"{\"timestamp\":\"2024-12-06T08:36:39.218361+0000\",\"flow_id\":1865650974180003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":35518,\"dest_ip\":\"23.36.77.107\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031071,\"rev\":4,\"signature\":\"ET INFO Microsoft Connection Test\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2020_10_21\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"http\":{\"hostname\":\"www.msftconnecttest.com\",\"url\":\"/connecttest.txt\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/plain\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":22},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":683,\"bytes_toclient\":398,\"start\":\"2024-12-06T08:36:39.213667+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"www.msftconnecttest.com/connecttest.txt","fqdn":"www.msftconnecttest.com","domain":"msftconnecttest.com","tld":"com"},"ip":{"addr":"23.36.77.107","port":80,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-06T08:36:39.213Z","timestamp":1733474199213,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /connecttest.txt HTTP/1.1\r\nHost: www.msftconnecttest.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 22\r\nDate: Fri, 06 Dec 2024 08:36:39 GMT\r\nConnection: keep-alive\r\nContent-Type: text/plain\r\nCache-Control: max-age=30, must-revalidate\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":22,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"04c3fc4a88588ee47d33d066920ac410","sha1":"c49d3bb4c93b31e2ce67fa23e93464adf902e9d9","sha256":"5e9a7996fe94d7be10595d7133748760bf8348198b71b7a50fd8affaa980ac61","sha512":"114c22ee28dc2ebfff32b1ee3d2e91d10fdf718645fe91caf3842e0b395fc61ce3e975829ac9cb759764a8e7a1865b49210e05916c6e1629103a5b5a22cc65a3","ssdeep":"","tlshash":"05700000800002023a8220a000028c003038ab03820888008088c02880233e0c0300c2","first_seen":"2023-06-27T18:58:53Z","last_seen":"2026-04-13T13:37:00.089828Z","times_seen":36,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":3,"dns":0,"connect":3,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2024-12-06T08:36:39Z","timestamp":1733474199,"ip_dst":{"addr":"23.36.77.107","port":80,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"ip_src":{"addr":"172.18.0.6","port":35518,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Microsoft Connection Test","source":"{\"timestamp\":\"2024-12-06T08:36:39.218361+0000\",\"flow_id\":1865650974180003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":35518,\"dest_ip\":\"23.36.77.107\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031071,\"rev\":4,\"signature\":\"ET INFO Microsoft Connection Test\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2020_10_21\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"http\":{\"hostname\":\"www.msftconnecttest.com\",\"url\":\"/connecttest.txt\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_content_type\":\"text/plain\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":22},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":683,\"bytes_toclient\":398,\"start\":\"2024-12-06T08:36:39.213667+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.msftconnecttest.com/favicon.ico","fqdn":"www.msftconnecttest.com","domain":"msftconnecttest.com","tld":"com"},"ip":{"addr":"23.36.77.107","port":80,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.msftconnecttest.com/connecttest.txt","date":"2024-12-06T08:36:39.485Z","timestamp":1733474199485,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.msftconnecttest.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.msftconnecttest.com/connecttest.txt\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Length: 14\r\nDate: Fri, 06 Dec 2024 08:36:39 GMT\r\nConnection: keep-alive\r\nContent-Type: text/plain\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":14,"size_decoded":14,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"d0fbda9855d118740f1105334305c126","sha1":"bc3023b36063a7681db24681472b54fa11f0d4ec","sha256":"a469ab4ca4e55bf547566e9ebfa1b809c933207e9d558156bc0c4252b17533fe","sha512":"41171c08ca31b832c6e64c553702d38adf805ce4fec552b71659558a419c02589cf9332f40288fb450e6c52297efa7903999f39dd48efa20edb92c7d8e3bd42b","ssdeep":"","tlshash":"9c60000c0c03030c0000003c03c000300c0c03000cc003300003f00cc3000000c00ccc","first_seen":"2023-04-05T14:46:24Z","last_seen":"2026-04-23T10:07:03.536146Z","times_seen":22640,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}