Report - email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv

Report Overview

Submitted URL
email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
IP
143.204.55.52
ASN
#16509 AMAZON-02
Submitted
2023-04-18 14:46:27
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.servicenow.com	114061	2012-12-08	2023-04-17	456 B	2.4 kB	104.110.9.122
email.btobtechinsight.com	unknown	2019-12-05	2023-04-15	1.9 kB	42 kB	143.204.55.98
ocsp.r2m01.amazontrust.com	unknown	2022-10-12	2023-04-18	340 B	889 B	143.204.48.16
ocsp.pki.goog	175	2018-07-01	2023-04-17	666 B	1.4 kB	142.250.74.3
email.techenrchs.com	unknown	2018-05-09	2023-04-13	525 B	109 kB	143.204.55.86
fonts.googleapis.com	8877	2013-06-10	2023-04-17	895 B	10 kB	142.250.74.106
px.meritb2b.com	567015	2021-08-16	2023-04-17	507 B	302 B	95.101.10.209
info.servicenow.com	458101	2017-01-30	2023-04-13	933 B	18 kB	104.17.71.206

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-04-18	medium	email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
2023-04-18	medium	email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (14)

URL IP Response Size

email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv

143.204.55.98

301 Moved Permanently

167 B

URL User Request GET HTTP/1.1
email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
IP
143.204.55.98:80
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
167 B (167 bytes)
Hash
f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /q/12EliQtpEtqLyjB3DFM7cWnc/wv HTTP/1.1
Host: email.btobtechinsight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 18 Apr 2023 14:46:12 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
X-Cache: Redirect from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YdTAHyPcHtBrcBZUw4svUTxIVlgPHpT-UT-DW0Mqa_GLIsnoQcOJQg==

ocsp.r2m01.amazontrust.com/

143.204.48.16

471 B

URL
ocsp.r2m01.amazontrust.com/
IP
143.204.48.16:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
a73f9295fe38d7fb5189ff47c885881a
20b37d9da8ffd98e0dcce25b83b6e2c6565fd482
ececafdb535aa4c01968a53a616786b0a992bd4293106b4ee8f9581440b2d8b8

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 18 Apr 2023 14:46:12 GMT
Etag: "643c48bb-1d7"
Server: ECAcc (dcb/7339)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3o6Bc9TJ9S7EPvnKQjRcWnFk8LQk9zeL5rqZbv206vO2Oeap0MOPlA==

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8cd9aa01db60293b18dcdbae7d3721db
27cc709e8fbceb5eb651ab77c58678094a323b0b
bdb89cf524c1f48708a3b9cba1b202ee009e534603301b01d94fbafe462c28b8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 18 Apr 2023 14:46:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8cd9aa01db60293b18dcdbae7d3721db
27cc709e8fbceb5eb651ab77c58678094a323b0b
bdb89cf524c1f48708a3b9cba1b202ee009e534603301b01d94fbafe462c28b8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 18 Apr 2023 14:46:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

email.techenrchs.com/files/amf_meritdirect/project_163/Upsell/2023/Q2-23/Email_Thumbnail_Vertical_408x490_9_.png

143.204.55.86

200 OK

108 kB

URL GET HTTP/2
email.techenrchs.com/files/amf_meritdirect/project_163/Upsell/2023/Q2-23/Email_Thumbnail_Vertical_408x490_9_.png
IP
143.204.55.86:443
ASN
#16509 AMAZON-02

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerAmazon
Subjectdg-0065-a1a5e7d.client-tls.adestra.com
Fingerprint63:F1:2D:98:3F:F2:19:32:E8:BF:1C:8A:B1:37:72:B6:E4:C4:05:E6
ValidityWed, 12 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT

File type
PNG image data, 408 x 490, 8-bit/color RGBA, non-interlaced\012- data
Size
108 kB (108177 bytes)
Hash
1db90258590967bed4cde63442a8c3b0
231c1dd49dd26b9156c725ea4aedf6e07c368320
5e1b69867b3cbcd5fb9dd0206823f26a8ed05e02bfef8e1e7b62130c638e3b5b

HTTP Headers

GET /files/amf_meritdirect/project_163/Upsell/2023/Q2-23/Email_Thumbnail_Vertical_408x490_9_.png HTTP/1.1
Host: email.techenrchs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 108177
server: nginx
last-modified: Thu, 06 Apr 2023 14:37:04 GMT
accept-ranges: bytes
date: Tue, 18 Apr 2023 14:36:16 GMT
expires: Tue, 18 Apr 2023 14:48:07 GMT
cache-control: max-age=1800
etag: "642ed910-1a691"
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ce9JD3GzA4wdzgRwYv-wKo33yZoIcZFOCN8R5a2QHAZaOCsvjxtxtA==
age: 1686
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Merriweather:300,400,700

142.250.74.106

200 OK

1.1 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Merriweather:300,400,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:74:DC:A1:79:64:AB:97:A4:EA:AB:80:90:A6:E2:B9:D4:16:79:64
ValidityTue, 28 Mar 2023 16:54:33 GMT - Tue, 20 Jun 2023 16:54:32 GMT

File type
data
Size
1.1 kB (1066 bytes)
Hash
3ded476a488ef16b797a9a3d7f033b61
d98049a0360cdfb400f68b69982ec139969017e8
e3e4cfa4326e8fe29ace55edecee7cbf861b863e91d37553442a213ab40da06a

HTTP Headers

GET /css?family=Merriweather:300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 18 Apr 2023 14:46:13 GMT
date: Tue, 18 Apr 2023 14:46:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

px.meritb2b.com/1/e/a.gif?img=true&aqet=em&r=788271754&ca=16528&puu=2333863417&v0=AKSHAY.GURU@EXLSERVICE.COM

95.101.10.209

200 OK

42 B

URL GET HTTP/1.1
px.meritb2b.com/1/e/a.gif?img=true&aqet=em&r=788271754&ca=16528&puu=2333863417&v0=AKSHAY.GURU@EXLSERVICE.COM
IP
95.101.10.209:443
ASN
#20940 Akamai International B.V.

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerLet's Encrypt
Subjectcert2-prod.aut.a24365.net
FingerprintD5:08:59:DE:FD:9F:CE:CF:E7:C0:4C:BD:A3:E4:D8:21:70:0E:78:CD
ValidityMon, 13 Mar 2023 08:09:42 GMT - Sun, 11 Jun 2023 08:09:41 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /1/e/a.gif?img=true&aqet=em&r=788271754&ca=16528&puu=2333863417&v0=AKSHAY.GURU@EXLSERVICE.COM HTTP/1.1
Host: px.meritb2b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 42
Content-Type: image/gif
Expires: Tue, 18 Apr 2023 14:46:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 18 Apr 2023 14:46:13 GMT
Connection: keep-alive
X-Robots-Tag: noindex, nofollow

info.servicenow.com/rs/089-ANS-673/images/Servicenow-logo-22.png

104.17.71.206

200 OK

6.9 kB

URL GET HTTP/2
info.servicenow.com/rs/089-ANS-673/images/Servicenow-logo-22.png
IP
104.17.71.206:443
ASN
#13335 CLOUDFLARENET

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerCloudflare, Inc.
Subjectinfo.servicenow.com
Fingerprint09:D6:7C:38:11:5D:87:6B:9A:6D:C8:9F:08:B3:ED:DC:60:68:0C:6A
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT

File type
PNG image data, 238 x 36, 8-bit/color RGBA, non-interlaced\012- data
Size
6.9 kB (6869 bytes)
Hash
a33ce5aba5dc01b3a6bdbc6efd35eaa4
b9682d4946319db9d675eda22c323e35e7da9050
b3e4b19251b24f05ffd80592806bcf51854c4f2961ef816d50607d526842954b

HTTP Headers

GET /rs/089-ANS-673/images/Servicenow-logo-22.png HTTP/1.1
Host: info.servicenow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 18 Apr 2023 14:46:13 GMT
content-type: image/png
content-length: 6869
last-modified: Sat, 01 Apr 2023 02:48:08 GMT
etag: "1aa0557-1ad5-5f83d5b18b25c"
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Tue, 18 Apr 2023 14:47:13 GMT
cache-control: public, max-age=60
accept-ranges: bytes
set-cookie: __cf_bm=ga10h1INhTY7CYOfd8MvxMlP0Jo5cRTRpuVjmcFYsIw-1681829173-0-AbIRdaDDkgFfxIkjVmz99j+QD/IQkqeBezfZt3cgWyrOuk08Wri9iJYXSDisA40A60ovgeLaiFAKa6CHI0QvSgU=; path=/; expires=Tue, 18-Apr-23 15:16:13 GMT; domain=.info.servicenow.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b9db230cad7b517-OSL
X-Firefox-Spdy: h2

email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv

143.204.55.86

301 Moved Permanently

40 kB

URL User Request GET HTTP/1.1
email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
IP
143.204.55.86:80
ASN
#16509 AMAZON-02

File type
data
Size
40 kB (39989 bytes)
Hash
9445d75d5a3bcd25ab473662a296e3d1
801a1f65a34e8b8fee7916fc85c060527af67626
cfcfb358a24cb79b3c81e694c2bb79a108b57c5ea4b506bf9293c57f2009a14e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /q/12EliQtpEtqLyjB3DFM7cWnc/wv HTTP/1.1
Host: email.btobtechinsight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
server: CloudFront
date: Tue, 18 Apr 2023 14:46:13 GMT
cache-control: max-age=0
x-cache: Miss from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vIYWabeaIrRiCNZD0s5GU8isbL7hq75z7WyjiIQXU3MMDSt_p6jb5g==
X-Firefox-Spdy: h2

www.servicenow.com/etc/designs/servicenow-www/favicon.ico

104.110.9.122

404 Not Found

59 B

URL GET HTTP/2
www.servicenow.com/etc/designs/servicenow-www/favicon.ico
IP
104.110.9.122:443
ASN
#16625 AKAMAI-AS

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerEntrust, Inc.
Subjectwww.servicenow.com
Fingerprint75:61:0B:13:21:07:48:72:46:92:B1:AA:A8:35:2F:EB:07:BC:85:70
ValidityThu, 06 Oct 2022 17:46:35 GMT - Fri, 06 Oct 2023 17:46:35 GMT

File type
ASCII text
Size
59 B (59 bytes)
Hash
d206cf28aaa623fa59e7090e5c7c1217
11f1c9c26028871bd7e75c0461e050d4572a3589
8913d36a51ead0bb3663b2f1fe9e1fd341f0b11d5b9ccb2958d4d4b06c4a5539

HTTP Headers

GET /etc/designs/servicenow-www/favicon.ico HTTP/1.1
Host: www.servicenow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/html;charset=utf-8
content-length: 59
x-dispatcher: prod-ams-01
x-vhost: prod-ams-01
x-content-type-options: nosniff
expires: Tue, 18 Apr 2023 14:46:14 GMT
date: Tue, 18 Apr 2023 14:46:14 GMT
set-cookie: AWSALB=dRpU+F9t4gs4uqwwNZiDDuTsCkrCUVorLegdVH1+o9v05o/nS6MLfrQTauYBkhITKPqrTl4yY/AOXY6IaGiYaWlTmWznPG110nLqbe1QsbUivdQ/tcAQ3j6V2ySg; Expires=Tue, 25 Apr 2023 14:46:14 GMT; Path=/
AWSALBCORS=dRpU+F9t4gs4uqwwNZiDDuTsCkrCUVorLegdVH1+o9v05o/nS6MLfrQTauYBkhITKPqrTl4yY/AOXY6IaGiYaWlTmWznPG110nLqbe1QsbUivdQ/tcAQ3j6V2ySg; Expires=Tue, 25 Apr 2023 14:46:14 GMT; Path=/; SameSite=None; Secure
JSESSIONID=node0byodntgvwft01fp0wyknnq2f54785430.node0; Path=/; Secure; HttpOnly
TS01639ba4=0144a5e64746aa30056d281a4cb2f8a8a0dd1ce89d22d4b574871c91f334aee14f0d2186fe72d5f3a54dc3f50f773f1e5e89dd2e25f7ddeb3ded29647bc48ac3c5c34a79f4cbb871a1b3dc09b5f9f85fcf509a509ece2a904816b39eb406afeff5f3f4cc36; Path=/; Secure; HTTPOnly
ak_bmsc=F1DBABB51F03C0BCF81259619C5666FD~000000000000000000000000000000~YAAQn00kF7uT0VmHAQAAlJ7UlBO6//ymfTiaDSp6e+WPPdYkNFppB0pu9k+rDfuJctP8umiXcbmC9WfZ+TtQvOSQLUqj9utf10it5zss8NP1PXq2+GsTN5rLFsxjOJMIyUR9a80QG1+LhjfULcuJF0qlflbXWA6lPSH3K6KvLH4rh6HKAjNZijJBbX7EkW6rknB5qpNKE+aIzkpQfWpU46qPF8oj8nhqL5kDqbaBLsPZizDLQovrBHM1Fom7yUQXkRdcs8uQXDvByFLueMMhN1HeANYXx6MCm/++ObVSJLEklmGZO7GYQgTmhLv1dLMJAjHTbabidH5Lv1mr5Pb7kkfPmOk/ck2OwH4Ez0OMhknCnNIJQyCLK4UNFpHwYsvlgcHJM7D3Tg3Ceg==; Domain=.servicenow.com; Path=/; Expires=Tue, 18 Apr 2023 16:46:14 GMT; Max-Age=7200; HttpOnly
server-timing: cdn-cache; desc=MISS, edge; dur=125, origin; dur=298, ak_p; desc="467174_388255135_62073259_42328_8174_6_0";dur=1
x-akam-sw-version: 0.5.0
x-frame-options: SAMEORIGIN, ALLOW-FROM https://servicenow.highspot.com, ALLOW-FROM https://your.servicenow.com, ALLOW-FROM https://content.servicenow.com
content-security-policy: upgrade-insecure-requests;, frame-ancestors 'self' http://content.servicenow.com https://content.servicenow.com https://your.servicenow.com  https://servicenow.highspot.com
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: 
access-control-allow-methods: GET,POST,PUT,OPTIONS
access-control-allow-origin: 
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

info.servicenow.com/rs/089-ANS-673/images/Servicenow-logo-22-dark.png

104.17.71.206

200 OK

9.5 kB

URL GET HTTP/2
info.servicenow.com/rs/089-ANS-673/images/Servicenow-logo-22-dark.png
IP
104.17.71.206:443
ASN
#13335 CLOUDFLARENET

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerCloudflare, Inc.
Subjectinfo.servicenow.com
Fingerprint09:D6:7C:38:11:5D:87:6B:9A:6D:C8:9F:08:B3:ED:DC:60:68:0C:6A
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT

File type
PNG image data, 238 x 37, 8-bit/color RGBA, non-interlaced\012- data
Size
9.5 kB (9507 bytes)
Hash
1d1a2f829025602503321feb7830371b
29193c86127f6e78b031a1c57b1f035443b53442
13f1df377c34cf1aa4ab5d22ed583c4ddaa906a3ee21315a2432ce533b6ecd89

HTTP Headers

GET /rs/089-ANS-673/images/Servicenow-logo-22-dark.png HTTP/1.1
Host: info.servicenow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 18 Apr 2023 14:46:13 GMT
content-type: image/png
content-length: 9507
last-modified: Sat, 01 Apr 2023 02:48:08 GMT
etag: "1aa0558-2523-5f83d5b18d96c"
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Tue, 18 Apr 2023 14:47:13 GMT
cache-control: public, max-age=60
accept-ranges: bytes
set-cookie: __cf_bm=nRNmNAKpJNPLOxnvPkGe1DmtY2rYh917yhfK.F2sN.Q-1681829173-0-AdyZwzVnVhWX/CH9XzSp6JNX3xUvZgse3NW+ThdSsQy79FbPprTr1hMO7f0RVNaFH4oNJHiCyMk3z3a0U+avw9I=; path=/; expires=Tue, 18-Apr-23 15:16:13 GMT; domain=.info.servicenow.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b9db230cad8b517-OSL
X-Firefox-Spdy: h2

email.btobtechinsight.com/t/12MlkxeK2nMK5auxnZ.png

143.204.55.86

200 OK

42 B

URL GET HTTP/2
email.btobtechinsight.com/t/12MlkxeK2nMK5auxnZ.png
IP
143.204.55.86:443
ASN
#16509 AMAZON-02

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerAmazon
Subjectdg-0065-a1a5e7d.client-tls.adestra.com
Fingerprint63:F1:2D:98:3F:F2:19:32:E8:BF:1C:8A:B1:37:72:B6:E4:C4:05:E6
ValidityWed, 12 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292

HTTP Headers

GET /t/12MlkxeK2nMK5auxnZ.png HTTP/1.1
Host: email.btobtechinsight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
server: CloudFront
date: Tue, 18 Apr 2023 14:46:13 GMT
cache-control: max-age=0
x-cache: Miss from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Scpeqn-JyAKZHwdXEV41lUynlQ2AVcJcSbc3eMWs5P0anPnpsvqgtw==
X-Firefox-Spdy: h2

email.btobtechinsight.com/r/12MlkxeK2nMK5auxnZ.png

143.204.55.86

200 OK

42 B

URL GET HTTP/2
email.btobtechinsight.com/r/12MlkxeK2nMK5auxnZ.png
IP
143.204.55.86:443
ASN
#16509 AMAZON-02

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerAmazon
Subjectdg-0065-a1a5e7d.client-tls.adestra.com
Fingerprint63:F1:2D:98:3F:F2:19:32:E8:BF:1C:8A:B1:37:72:B6:E4:C4:05:E6
ValidityWed, 12 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292

HTTP Headers

GET /r/12MlkxeK2nMK5auxnZ.png HTTP/1.1
Host: email.btobtechinsight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
server: CloudFront
date: Tue, 18 Apr 2023 14:46:13 GMT
cache-control: max-age=0
x-cache: Miss from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I5ri38BWAFUuuXiqqZX1PQxOoXby5AK-J7Mb93ra5qQeR1mqoyWN5Q==
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:300,400,700

142.250.74.106

200 OK

7.9 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:300,400,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://email.btobtechinsight.com/q/12EliQtpEtqLyjB3DFM7cWnc/wv
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:74:DC:A1:79:64:AB:97:A4:EA:AB:80:90:A6:E2:B9:D4:16:79:64
ValidityTue, 28 Mar 2023 16:54:33 GMT - Tue, 20 Jun 2023 16:54:32 GMT

File type
ASCII text, with very long lines (8124), with no line terminators
Size
7.9 kB (7908 bytes)
Hash
d64e1545d8e1be153403b2caf98be70e
7352c2bc39c5a37393b58b94a2e94840cc2ea235
67942e006a1a5438a126a526d0e10eb437e5de72c028aef7ecf47b7c20043431

HTTP Headers

GET /css?family=Open+Sans:300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.btobtechinsight.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 18 Apr 2023 14:46:13 GMT
date: Tue, 18 Apr 2023 14:46:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (14)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type