Report Overview

  1. Submitted URL

    ctwmt04.na1.hs-sales-engage.com/Ctc/GE+23284/cTWMt04/JjT4YGXpW50kH_H6lZ3pZW85p8h457PhbdW6wypcT2qd_2LW827rpq1W6QYNW3S-jtb3n1FkSW2G4f3y7ZcC5dW192jjW6BLxCHN7fh3ytXMbZkW8rch6m5N1_yDW6rNwb09h_7bcW42-TrS6_BVbrW2rrd8m34NhV9W2wjfnM54W7G1W3ZXjr_3wrqh1W4HrSGv2z323KN4WtY9BGmPQZW6sTYNs1npcRVW5Y6B3h96xmPdN60PT6qR2dvGW8Q8F4H56stPYW49Bs116PF-frW8zNgJn5NmqnZW5wnmdX2bK5HYVxv2YK5ZYpjqW3gHL647gpFw7W7HPWNR950SvtW4hshlZ5h_MTvW5y2dHF7bmhWNVjbXTX5T6DKFV_gss41-hbQ-W3_HBhP27H2zxW80vg8k3-b47SV9tf325PWc0Nf4HrpCH04

  2. IP

    172.64.149.165

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2024-04-26 20:29:13

    Access

    public

  4. Website Title

    Bookings with me - Mark Watson - Outlook

  5. Final URL

    outlook.office.com/bookwithme/user/865246bf79ee4e1d81e6f8d544818280%40arrowsmith.ca?anonymous&isanonymous=true

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
outlook.office.com771999-04-202018-12-212019-01-03
login.microsoftonline.com252002-07-092017-02-192019-07-18
res.cdn.office.net12921994-11-142021-09-302024-04-24
ecs.office.com1151999-04-202020-01-252024-04-24
storage.live.com1621994-12-282012-06-202024-04-23
login.live.com791994-12-282012-05-212024-04-26
eu-office.events.data.microsoft.comunknown1991-05-022022-07-182024-04-24
ctwmt04.na1.hs-sales-engage.comunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumres.cdn.office.net/owamail/20240419007.15/resources/suiteux-shell/js/suiteux.shell.plus.jsDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (78)

HTTP Transactions (125)

URLIPResponseSize
ctwmt04.na1.hs-sales-engage.com/events/public/v1/encoded/track/tc/GE+23284/cTWMt04/JjT4YGXpW50kH_H6lZ3pZW85p8h457PhbdW6wypcT2qd_2LW827rpq1W6QYNW3S-jtb3n1FkSW2G4f3y7ZcC5dW192jjW6BLxCHN7fh3ytXMbZkW8rch6m5N1_yDW6rNwb09h_7bcW42-TrS6_BVbrW2rrd8m34NhV9W2wjfnM54W7G1W3ZXjr_3wrqh1W4HrSGv2z323KN4WtY9BGmPQZW6sTYNs1npcRVW5Y6B3h96xmPdN60PT6qR2dvGW8Q8F4H56stPYW49Bs116PF-frW8zNgJn5NmqnZW5wnmdX2bK5HYVxv2YK5ZYpjqW3gHL647gpFw7W7HPWNR950SvtW4hshlZ5h_MTvW5y2dHF7bmhWNVjbXTX5T6DKFV_gss41-hbQ-W3_HBhP27H2zxW80vg8k3-b47SV9tf325PWc0Nf4HrpCH04?_ud=7cfc6d16-b734-49e9-943c-8ca99f0b92e2&_jss=1&_fl=8&_pl=5&_hc=48&_lg=en-US,en&_plt=Linux%20x86_64&_scr=1280,1024
104.18.38.91307 Temporary Redirect0 B
outlook.office.com/owa/?anonymous&ep=bwmEmailSignature&state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vYm9va3dpdGhtZS91c2VyLzg2NTI0NmJmNzllZTRlMWQ4MWU2ZjhkNTQ0ODE4MjgwQGFycm93c21pdGguY2E_YW5vbnltb3VzJmVwPWJ3bUVtYWlsU2lnbmF0dXJl
52.98.149.162302 Found1.0 kB
login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a5b6e949-5f2b-15ca-aa2a-d5647dbc3bf5&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&prompt=none&nonce=638497601232644965.7eaec086-1619-4ad5-94bd-6b3e71703552&state=DYzLcoIwAACh_Rdv1LwI5uD0Uh9lhFZFEC6dBDIoTcCBCANf2s8ph93brm1Z1uvMy4wNZlkexSvCPAogwogSwqj75kkuc7CiDqSQOYQXrsOIKBwqsPSgB7DrIntu_-xlM_DlO6-betTNs1vIx1oMeqP5XZ3vZc3Ns5WLznAj13DRyuLeytxEzZrvTyDfB_Qwsr64njqBWHvQTGdaVdnZrQQCfapZz3HxKHY3k50ZzFE8HqYShdEnCLWvw0mpLDqpIDmSILmgrLr9htERfH1sSFCVw3G3HXPNcI7g_CifKdr8pInbi1oZgePJ1_HwnfhYXGKTJqq7IFULvQXF1Vf_
20.190.181.0200 OK917 B
outlook.office.com/owa/
52.98.149.162302 Found262 B
login.microsoftonline.com/favicon.ico
20.190.181.0 0 B
res.cdn.office.net/assets/framework/microsoft.svg
95.101.10.136200 OK1.4 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.bookwithmeindex.2657e410.js
95.101.10.136200 OK88 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.bookings.runtime.56b02742.js
95.101.10.136200 OK251 kB
res.cdn.office.net/assets/mail/pwa/v1/pngs/apple-touch-icon.png
95.101.10.136200 OK11 kB
outlook.office.com/mail/favicon.ico
52.98.149.162200 OK7.9 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.157066.03cf03e5.js
95.101.10.136200 OK4.8 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.542398.8b6ff09b.js
95.101.10.136200 OK3.0 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.535535.85c4ca8b.js
95.101.10.136200 OK1.4 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.191488.2f2e23ae.js
95.101.10.136200 OK1.2 kB
outlook.office.com/bookwithme/user/865246bf79ee4e1d81e6f8d544818280@arrowsmith.ca?anonymous&ep=bwmEmailSignature&isanonymous=true
52.98.149.162200 OK4.1 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.225435.63ebe0b2.js
95.101.10.136200 OK1.4 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.104857.7259a2e0.js
95.101.10.136200 OK4.3 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.476152.98c524e6.js
95.101.10.136200 OK7.7 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.985566.833929ba.js
95.101.10.136200 OK3.0 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.4675.874449e3.js
95.101.10.136200 OK7.1 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.342217.29a859ad.js
95.101.10.136200 OK1.5 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.86319.b2d47cd7.js
95.101.10.136200 OK23 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.415639.d4595187.js
95.101.10.136200 OK6.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.665221.ac71a583.js
95.101.10.136200 OK2.4 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.93786.6f4f8864.js
95.101.10.136200 OK4.8 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.255385.82ddba8e.js
95.101.10.136200 OK1.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.705145.966b1f60.js
95.101.10.136200 OK2.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.474010.3d863b16.js
95.101.10.136200 OK5.9 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.375276.eb21c568.js
95.101.10.136200 OK29 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.BookWithMeBoot.d40d9701.css
95.101.10.136200 OK5.3 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.BookWithMeBoot.3cb4e3f4.js
95.101.10.136200 OK511 kB
res.cdn.office.net/owamail/hashed-v1/resources/locale/en/owa.BookWithMeBoot.54fdd2d8.json
95.101.10.136200 OK6.2 kB
res.cdn.office.net/assets/mail/fonts/v1/fonts/segoeui-westeuropean/segoeui-regular.woff2
95.101.10.136200 OK36 kB
outlook.office.com/owa/published/service.svc?action=GetTimeZoneOffsets&app=BookWithMe&n=0
52.98.149.162200 OK20 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.126665.d3407d3c.js
95.101.10.136200 OK2.9 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.worker.data.9957362d.js
95.101.10.136200 OK266 kB
res.cdn.office.net/owamail/20240419007.15/resources/boot-analytics-ping.js
95.101.10.136200 OK38 B
res.cdn.office.net/owamail/hashed-v1/scripts/owa.103869.0b52826d.js
95.101.10.136200 OK7.6 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.312608.3a32b8da.js
95.101.10.136200 OK6.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.465145.8d785852.js
95.101.10.136200 OK13 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.900823.e4b9cfcc.js
95.101.10.136200 OK4.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.198702.d72371d9.js
95.101.10.136200 OK3.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.279799.a218f3b3.js
95.101.10.136200 OK1.7 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.148271.20d294c9.js
95.101.10.136200 OK15 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.659848.743df78f.js
95.101.10.136200 OK2.6 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.616778.bac8a469.js
95.101.10.136200 OK12 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.PostSharedBoot.3506a4a8.js
95.101.10.136200 OK20 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.Tti.fa77dc3d.js
95.101.10.136200 OK1.8 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.426244.7ecafb42.js
95.101.10.136200 OK3.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.397090.8e5fa90e.js
95.101.10.136200 OK4.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.664600.9617b7b3.js
95.101.10.136200 OK4.6 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.778996.f0cf541b.js
95.101.10.136200 OK1.1 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.754807.c9c1337a.js
95.101.10.136200 OK4.9 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.738151.be817434.js
95.101.10.136200 OK2.9 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.188056.e6c90b46.js
95.101.10.136200 OK6.4 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.503441.f5448a90.js
95.101.10.136200 OK4.9 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.140902.1ded1f27.js
95.101.10.136200 OK7.1 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.23460.1da14ccd.js
95.101.10.136200 OK3.6 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.696013.c6cd588e.js
95.101.10.136200 OK807 B
res.cdn.office.net/owamail/hashed-v1/scripts/owa.532057.59c47e52.js
95.101.10.136200 OK4.3 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.741001.990705c6.js
95.101.10.136200 OK2.4 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.298951.c55a0ea1.js
95.101.10.136200 OK3.0 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.655205.1b5c9110.js
95.101.10.136200 OK5.1 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.681684.14fa67d6.js
95.101.10.136200 OK795 B
res.cdn.office.net/owamail/hashed-v1/resources/locale/en/owa.593323.187a73af.json
95.101.10.136200 OK5.0 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.931541.98af4c7e.js
95.101.10.136200 OK3.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.Analytics.406c16a6.js
95.101.10.136200 OK6.2 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.896847.e05043de.js
95.101.10.136200 OK7.7 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.407663.bede0a46.js
95.101.10.136200 OK1.0 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.60805.2eb66ee5.js
95.101.10.136200 OK3.5 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.725811.da6d4188.js
95.101.10.136200 OK3.5 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.986517.8813c714.js
95.101.10.136200 OK5.1 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.779285.8a1252e7.js
95.101.10.136200 OK11 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.972427.0373e8c2.js
95.101.10.136200 OK4.8 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.752691.ec9fa5b1.css
95.101.10.136200 OK999 B
res.cdn.office.net/owamail/hashed-v1/scripts/owa.81227.15cd3f71.js
95.101.10.136200 OK3.1 kB
res.cdn.office.net/owamail/hashed-v1/resources/locale/en/owa.752691.169aa416.json
95.101.10.136200 OK99 B
res.cdn.office.net/owamail/hashed-v1/scripts/owa.593323.85a0a0a9.css
95.101.10.136200 OK7.6 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.521852.b1cde8b3.js
95.101.10.136200 OK5.9 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.302363.f0e6349e.js
95.101.10.136200 OK1.1 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.396350.4de2ded6.js
95.101.10.136200 OK1.0 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.593323.ebd16724.js
95.101.10.136200 OK131 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.339495.140116a2.js
95.101.10.136200 OK333 B
res.cdn.office.net/owamail/hashed-v1/scripts/owa.912818.f1707109.css
95.101.10.136200 OK9.4 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.542608.f0268e7f.js
95.101.10.136200 OK1.7 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.912818.d2c83195.js
95.101.10.136200 OK236 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.752691.9c4ea9bd.js
95.101.10.136200 OK12 kB
res.cdn.office.net/owamail/20240419007.15/resources/boot-analytics-ping.js
95.101.10.136200 OK38 B
res.cdn.office.net/owamail/20240419007.15/resources/suiteux-shell/strings/en/shellstrings.json
95.101.10.136200 OK4.8 kB
res.cdn.office.net/owamail/20240419007.15/resources/suiteux-shell/js/suiteux.shell.core.js
95.101.10.136200 OK84 kB
res.cdn.office.net/assets/mail/fonts/v1/fonts/segoeui-westeuropean/segoeui-semibold.woff2
95.101.10.136200 OK32 kB
res.cdn.office.net/owamail/hashed-v1/resources/locale/en/owa.912818.18f70cc2.json
95.101.10.136200 OK32 kB
res.cdn.office.net/owamail/hashed-v1/resources/fonts/FluentSystemIcons-Resizable-hash-8bfeda42.woff2
95.101.10.136200 OK45 kB
res.cdn.office.net/owamail/20240419007.15/resources/suiteux-shell/js/suiteux.shell.consappdata.js
95.101.10.136200 OK3.7 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.123601.3623c1a9.js
95.101.10.136200 OK10 kB
res.cdn.office.net/owamail/hashed-v1/resources/locale/en/owa.123601.477f6a53.json
95.101.10.136200 OK64 B
res.cdn.office.net/owamail/20240419007.15/resources/suiteux-shell/js/suiteux.shell.plus.js
95.101.10.136200 OK52 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.382883.ebc9866c.js
95.101.10.136200 OK837 B
res.cdn.office.net/assets/mail/fonts/v1/fonts/segoeui-westeuropean/segoeui-regular.woff2
95.101.10.136200 OK36 kB
res.cdn.office.net/assets/mail/fonts/v1/fonts/segoeui-westeuropean/segoeui-semibold.woff2
95.101.10.136200 OK32 kB
res.cdn.office.net/owamail/20240419007.15/resources/suiteux-shell/js/suiteux.shell.otellogging.js
95.101.10.136200 OK37 kB
ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=Exchange&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=undefined&UPN=undefined
52.113.194.132200 OK295 B
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714163326577
13.105.28.32302 Found0 B
login.microsoftonline.com/arrowsmith.ca/.well-known/openid-configuration
20.190.177.21200 OK1.8 kB
login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714163326&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
20.190.181.23200 OK11 kB
outlook.office.com/BookingsService/api/V1/bookingBusinessesc2/mbx:865246bf79ee4e1d81e6f8d544818280@afe7be7e-8998-47d7-b6c6-f0bc81d73a5d/businessLogo?app=BookWithMe&n=2
52.98.149.162200 OK93 kB
outlook.office.com/BookingsService/api/V1/bookingBusinessesc2/mbx:865246bf79ee4e1d81e6f8d544818280@afe7be7e-8998-47d7-b6c6-f0bc81d73a5d/services?app=BookWithMe&n=3
52.98.149.162200 OK72 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.85057.ca906b26.js
95.101.10.136200 OK958 B
res.cdn.office.net/assets/mail/fonts/aptos/v1.93.230727224051/aptos/Aptos.woff2
95.101.10.136200 OK74 kB
res.cdn.office.net/assets/mail/fonts/aptos/v1.93.230727224051/aptos/Aptos-Bold.woff2
95.101.10.136200 OK74 kB
res.cdn.office.net/assets/mail/fonts/aptos/v1.93.230727224051/aptos/Aptos-Italic.woff2
95.101.10.136200 OK79 kB
res.cdn.office.net/owamail/20240419007.15/scripts/ThirdPartyNotices.txt
95.101.10.136200 OK13 kB
res.cdn.office.net/assets/mail/fonts/aptos/v1.93.230727224051/aptos-display/Aptos-Display.woff2
95.101.10.136200 OK74 kB
res.cdn.office.net/assets/mail/fonts/aptos/v1.93.230727224051/aptos-mono/Aptos-Mono.woff2
95.101.10.136200 OK42 kB
res.cdn.office.net/assets/mail/fonts/aptos/v1.93.230727224051/aptos-narrow/Aptos-Narrow.woff2
95.101.10.136200 OK75 kB
res.cdn.office.net/assets/mail/fonts/aptos/v1.93.230727224051/aptos-serif/Aptos-Serif.woff2
95.101.10.136200 OK66 kB
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
20.50.80.214200 OK0 B
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
20.50.80.214200 OK154 B
outlook.office.com/owa/calendar/865246bf79ee4e1d81e6f8d544818280@arrowsmith.ca/pbp/?eventify=2
52.98.149.162200 OK0 B
res.cdn.office.net/assets/bookwithme/background_008.png
95.101.10.136200 OK70 kB
outlook.office.com/owa/calendar/865246bf79ee4e1d81e6f8d544818280@arrowsmith.ca/pbp/?eventify=2
52.98.149.162200 OK0 B
outlook.office.com/BookingsService/api/V1/bookingBusinessesc2/mbx:865246bf79ee4e1d81e6f8d544818280@afe7be7e-8998-47d7-b6c6-f0bc81d73a5d/?app=BookWithMe&n=1
52.98.149.162200 OK2.6 kB
outlook.office.com/bookwithme/user/865246bf79ee4e1d81e6f8d544818280@arrowsmith.ca?anonymous&ep=bwmEmailSignature
52.98.149.162302 Found1.4 kB
res.cdn.office.net/assets/bookwithme/background_008.png
95.101.10.136200 OK70 kB
res.cdn.office.net/owamail/hashed-v1/scripts/owa.218948.db2f126a.js
95.101.10.136200 OK2.6 kB