Report - checkpoint.url-protection.com/v1/url?o=https://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU

Report Overview

Visited public
2023-09-24 04:19:23
Tags
URL
checkpoint.url-protection.com/v1/url?o=https://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU
Finishing URL
checkpoint.url-protection.com/v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU
IP / ASN
143.204.55.87
#16509 AMAZON-02
Title
Check Point Error Page

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-09-23 23:57:04	574 B	20 kB	216.58.207.227
ocsp.r2m02.amazontrust.com	unknown	2007-05-11	2022-10-12 16:01:39	2023-09-24 00:22:42	340 B	863 B	143.204.48.16
checkpoint.url-protection.com	244765	2019-09-05	2021-04-26 11:42:00	2023-09-23 19:00:31	3.3 kB	70 kB	143.204.55.17
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-09-23 18:12:07	999 B	2.1 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-09-24 00:15:11	444 B	1.7 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-24 04:19:18	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

	URL	IP	Response	Size
	ocsp.r2m02.amazontrust.com/	143.204.48.16		471 B
URL ocsp.r2m02.amazontrust.com/ IP 143.204.48.16:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 76c3b45bca183ba4bb478d120a0ea3b8 50fbe6f2c901661cd851ea594bf7e16415652c9b 51f2d0be7b5bbff397ded0399bf995012bbf50ae7c7ee2869bbf55b016ed35cd HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m02.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: max-age=7200 Date: Sun, 24 Sep 2023 04:19:06 GMT Server: ECAcc (amb/6B12) X-Cache: Miss from cloudfront Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: VyyA9m9jgDMQdbEBIA6rEKcGBjJdj7-fp6BlesRGxZ1EawygrupITw==`

	checkpoint.url-protection.com/v1/url?o=https://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU	143.204.55.17	403 Forbidden	30 kB
URL User Request GET HTTP/2 checkpoint.url-protection.com/v1/url?o=https://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU IP 143.204.55.17:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjecturl-protection.com Fingerprint0B:DA:87:5B:42:F4:ED:40:39:3A:20:7C:A1:29:87:60:CB:F0:9D:65 ValiditySun, 14 May 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (29809), with no line terminators Size 30 kB (29809 bytes) Hash 24473d77cbd51b470c82c83fd011990d a887c497c86e59b0a11366a5b782050719532758 7b6990055dccb9b84c2df195ffcc8ffba6bf022e4ba83fa8098c4fd9a3ba91a4 HTTP Headers GET /v1/url?o=https://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU HTTP/1.1 Host: checkpoint.url-protection.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 403 Forbidden content-type: text/html content-length: 29809 date: Sun, 24 Sep 2023 04:19:06 GMT x-amzn-requestid: 04a8edd4-4b1f-4e4f-a194-9d96f1bae2f5 content-encoding: UTF-8 x-amz-apigw-id: LvnNPEp5oAMEecw= cache-control: max-age=100 x-amzn-trace-id: Root=1-650fb8ba-61fc6f967dcd82dd2dabc29a;Sampled=0;lineage=5e061aa4:0 x-cache: Error from cloudfront via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: Ru5k-VRDsyfzdCVlb7-4AiHbmEBPmHEkOYoBjYLQKFx2X2rF-hnalw== X-Firefox-Spdy: h2

	checkpoint.url-protection.com/v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU	143.204.55.17	403 Forbidden	30 kB
URL User Request GET HTTP/1.1 checkpoint.url-protection.com/v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU IP 143.204.55.17:80 ASN #16509 AMAZON-02 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (29809), with no line terminators Size 30 kB (29809 bytes) Hash 24473d77cbd51b470c82c83fd011990d a887c497c86e59b0a11366a5b782050719532758 7b6990055dccb9b84c2df195ffcc8ffba6bf022e4ba83fa8098c4fd9a3ba91a4 HTTP Headers GET /v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU HTTP/1.1 Host: checkpoint.url-protection.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Content-Type: text/html Content-Length: 29809 Connection: keep-alive Date: Sun, 24 Sep 2023 04:19:07 GMT x-amzn-RequestId: f36465c1-dd94-4ace-b631-9b849f978e50 Content-Encoding: UTF-8 x-amz-apigw-id: LvnNWFIDIAMEo0w= Cache-Control: max-age=100 X-Amzn-Trace-Id: Root=1-650fb8bb-202138bb07dd0d7503880ddc;Sampled=0;lineage=5e061aa4:0 X-Cache: Error from cloudfront Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: c7iPB7affMVuaAW6Qe22xR-BXbeqaqkrQgL59dmLoNYQwa5amBq_Jg==

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 99734170fcdad2d52884412f61321bf8 25163901dbdc047070a12d8afadcaa7009d8b595 f2a2590ac5fa2bcc9db8c46b3b4ad45f0a03b03193f601a2636e900fe851cf59 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 24 Sep 2023 04:19:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	fonts.googleapis.com/css?family=Open+Sans	142.250.74.106	200 OK	1.1 kB
URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by http://checkpoint.url-protection.com/v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49 ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT File type gzip compressed data, max compression\012- data Size 1.1 kB (1108 bytes) Hash 9d8011470c9eb13204ee9dd89eb8c7e8 7a6f50ca67875faa16eeb6f9c339ea9479f83e69 0bc656e19a14c5a0ed580314a91617c82e5f05f704f75b5d7bb29c3c631cbe16 HTTP Headers `GET /css?family=Open+Sans HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://checkpoint.url-protection.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Sun, 24 Sep 2023 04:19:07 GMT date: Sun, 24 Sep 2023 04:19:07 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 23ee71f34a80feec27e23d99ecada83e 62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1 429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 24 Sep 2023 04:19:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2	216.58.207.227	200 OK	19 kB
URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by http://checkpoint.url-protection.com/v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT File type Web Open Font Format (Version 2), TrueType, length 18664, version 1.0\012- data Size 19 kB (18664 bytes) Hash 8d1c44b2bf75a4e6f1bd141f9a965f4f 1e5dfdb7ca5ee8e823f9f5787f84b18fbdc38434 441e23601fe7525a142857c98cbb2784997579d51a17f736d7964dceee609709 HTTP Headers GET /s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://checkpoint.url-protection.com DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 18664 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Tue, 19 Sep 2023 09:27:11 GMT expires: Wed, 18 Sep 2024 09:27:11 GMT cache-control: public, max-age=31536000 last-modified: Thu, 14 Sep 2023 01:36:18 GMT content-type: font/woff2 age: 413517 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 23ee71f34a80feec27e23d99ecada83e 62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1 429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 24 Sep 2023 04:19:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	checkpoint.url-protection.com/favicon.ico	143.204.55.17	403 Forbidden	8.4 kB
URL GET HTTP/1.1 checkpoint.url-protection.com/favicon.ico IP 143.204.55.17:80 ASN #16509 AMAZON-02 Requested by http://checkpoint.url-protection.com/v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (21711), with no line terminators Size 8.4 kB (8405 bytes) Hash 16a9468cfb81da847d07e0e3367770d4 65ba539aa15a67980ebe7e0c9ac9b2bd93a1fd77 bd2c5427f63ef5c5bea28096688303792127c83ad3a7ab116b18ef32214394c8 HTTP Headers GET /favicon.ico HTTP/1.1 Host: checkpoint.url-protection.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://checkpoint.url-protection.com/v1/url?o=http://www.yammer.com/ahliunited.com/threads/2454616920539136?allow_app_redirect=1&from=email&message_id=2454616920539136&trk_elmnt=goto&trk_event=de_thrd_clk&trk_fst_thrd_id=2454616920539136&trk_is_storyline=false&trk_network=403423&trk_nmbr_lks=0&trk_nmbr_rplys=0&trk_nmbr_thrds=1&trk_notif_id=2f8b176254a16d6ca7ade39ab03a8146697c8eac1b6f55bec37f5e7beafd1013&trk_outlook_origin=glam_static&trk_thrd_clckd_id=2454616920539136&trk_thrd_pstn=fst&trk_user=3342237163520&g=MjU2ZGM4NDMwODU5YzQxMg==&h=NTk1ZWRkNWM5ZWQxNDczODEyMDc1NWRjYTYzZjJkOGU1M2MwZDUzZWUyM2NiNmY5MDhlMzYwM2Q0Mjg1NWM0OA==&p=Y3AxZTphaGxpdW5pdGVkYmFuazpjOm86NDdiOTQ1ZTY3ZmU1MWJkNmRjMjQxODI1MGZiMzMxOGQ6djE6aDpU Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Date: Sun, 24 Sep 2023 04:19:08 GMT x-amzn-RequestId: e764fd42-872f-40cc-a0f7-d97df8e9607b x-amzn-ErrorType: MissingAuthenticationTokenException x-amz-apigw-id: LvnNeGs-oAMEpFQ= Content-Encoding: gzip X-Cache: Error from cloudfront Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: Oc352g7V0h-yPu0De758qzs_JKMP8-LUBa1q0pYsi6ogwiagAIAREg==

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type