Report - dxc.workplace.com/work/email_notif/?groups/695307008882279/permalink/875730134173298/&work_newsfeed_token=S:_I100083728598391:875730134173298:813665857229410&aref=1701110443749813&medium=email&mid=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&bcode=2.1701110456.AbxVSG7Y7nmQ46Yysek&n_m=zhenging.yiu@slurpmail.net&atwork_nonce=xb0EEh9q&lloc=logo&rms=v2&irms=true

Report Overview

Visited public
2023-12-04 02:43:52
Tags
URL
dxc.workplace.com/work/email_notif/?groups/695307008882279/permalink/875730134173298/&work_newsfeed_token=S:_I100083728598391:875730134173298:813665857229410&aref=1701110443749813&medium=email&mid=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&bcode=2.1701110456.AbxVSG7Y7nmQ46Yysek&n_m=zhenging.yiu@slurpmail.net&atwork_nonce=xb0EEh9q&lloc=logo&rms=v2&irms=true
Finishing URL
uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
IP / ASN
31.13.72.16
#32934 FACEBOOK
Title
Universal ID - Sign In

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
127.0.0.1:65131	unknown	unknown	No data	No data	502 B	0 B	0.0.0.0
ok12static.oktacdn.com	30047	2014-11-11	2022-12-01 12:39:03	2023-12-01 17:04:09	5.2 kB	5.4 MB	54.230.111.109
127.0.0.1:65141	unknown	unknown	No data	No data	502 B	0 B	0.0.0.0
127.0.0.1:65111	unknown	unknown	No data	No data	502 B	0 B	0.0.0.0
127.0.0.1:8769	unknown	unknown	No data	No data	501 B	0 B	0.0.0.0
127.0.0.1:65151	unknown	unknown	No data	No data	502 B	0 B	0.0.0.0
127.0.0.1:65121	unknown	unknown	No data	No data	502 B	0 B	0.0.0.0
dxc.workplace.com	unknown	1997-06-02	2019-06-25 14:58:33	2023-12-01 07:44:30	3.0 kB	8.5 kB	31.13.72.16
uid.dxc.com	500938	2000-03-06	2020-12-24 19:04:47	2023-11-28 19:22:45	7.7 kB	56 kB	35.71.149.114
login.okta.com	7351	2004-06-11	2020-01-18 22:09:36	2023-12-03 15:26:57	1.0 kB	100 kB	143.204.55.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-03	medium	127.0.0.1	Sinkholed
2023-12-03	medium	127.0.0.1	Sinkholed
2023-12-03	medium	127.0.0.1	Sinkholed
2023-12-03	medium	127.0.0.1	Sinkholed
2023-12-03	medium	127.0.0.1	Sinkholed
2023-12-03	medium	127.0.0.1	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/js/okta-sign-in.min.js	ScriptElement	1.7 MB	2023-11-17	2024-08-20
Pretty URL ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/js/okta-sign-in.min.js IP 54.230.111.109 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-17 10:16 Last Seen2024-08-20 19:08 Times Seen81 Hash 0f9fe6dafd49554de113a9d98096ea58 788b9f01284bdbbbea54621df8b7a0ae48bb746d 82f6d56afedd53775e13d3f303beeea62511f9c57f3f3ddcef0a24dfc769c411 Loading...

	uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o	ScriptElement	52 B	2023-03-08	2025-03-05
Pretty URL uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o IP 35.71.149.114 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 00:09 Last Seen2025-03-05 18:02 Times Seen99 Hash 8fa2c0f052f380d26a8467953005aab1 e0d9bc717943bd14addc099f86a58a8fbc3b79e9 923649839867424829340b44e33fa571f2c72d068a92de72e5cc204934855394 Loading...

	unknown	Function	852 B	2023-04-19	2025-05-11
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-19 12:34 Last Seen2025-05-11 11:27 Times Seen979 Hash 1636c46c8e2184bde6cce6b7cd9c42cf 3bd6fde98e51c25df847b2776325d95d4cd11c5a b099390887625cdcaa514a668fe9b759d4b838df07b547ad8c7068e8e9412f5b Loading...

	login.okta.com/lib/discoveryIframe-ea9230c42a202475efd8.min.js	ScriptElement	98 kB	2023-11-02	2024-08-20
Pretty URL login.okta.com/lib/discoveryIframe-ea9230c42a202475efd8.min.js IP 143.204.55.8 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-02 00:55 Last Seen2024-08-20 21:26 Times Seen426 Hash 6ba68ae0d3bea7d2d2d7262b7afe570e 1464624b6758ae69673738aba97f80f78f6343c8 058bb9d17b2131122ad576569715e4e35cc79848433645fba5d768d9627acbd0 Loading...

	login.okta.com/discovery/iframe.html	ScriptElement	35 B	2023-03-12	2025-05-11
Pretty URL login.okta.com/discovery/iframe.html IP 143.204.55.8 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 21:12 Last Seen2025-05-11 11:27 Times Seen984 Hash 324edfc7e12b10d3943829a3e3c47cce 14041e460ec030ec519c79edea0df7d7b60b3b4d d975ba9d515a109f7fe3ba8d631ca10c5bb26492997fa59144c8240f6c22e090 Loading...

	uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o	ScriptElement	11 kB	2024-08-20	2024-08-20
Pretty URL uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o IP 35.71.149.114 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:52 Last Seen2024-08-20 16:52 Times Seen1 Hash b9608687454834656ec076b41003c9d7 f5535a820ae7e8d682822daa658174afacd30e99 9590a2260b8a214d772eb65de698a27591f8d12208cb9bbed5c7ca705977603a Loading...

	uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/OktaUtil.js	ScriptElement	11 kB	2024-08-20	2024-08-20
Pretty URL uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/OktaUtil.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 16:52 Last Seen2024-08-20 16:52 Times Seen1 Hash a77ea8c940a0bd69904ae13a437d69fa 37ff6eb0dbb79daacf73983539244a549df78f7c 0ecc9a66441d4d0c9e2a5fa88c594c29fbc53743708cabfc8385efaa9557f109 Loading...

	ok12static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js	ScriptElement	209 kB	2023-11-09	2025-05-11
Pretty URL ok12static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js IP 54.230.111.109 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 14:19 Last Seen2025-05-11 11:27 Times Seen863 Hash 58de3be0c9b511a0fdfd7ea4f69b56fc 91eca02abf11239ec4af7a30b1da6e2610f1b9a6 6a6c595fcf3a6c74bf3509f160ba34b78a8a3eb92ecaf290412c46679576d3ed Loading...

		Size	First Seen	Last Seen
	#1 Write - 5531a5834816222280f20d1ef9e95f69	4 B	2023-03-12 12:17	2024-08-29 17:45
Pretty Observations First Seen2023-03-12 12:17 Last Seen2024-08-29 17:45 Times Seen7112 Hash 5531a5834816222280f20d1ef9e95f69 445cd2fd3273962bdf09425109a2d09f7170e837 d398b29d3dbbb9bf201d4c7e1c19ff9d43c15fd45a0cec46fbe9885ec3f6e97f Loading...

HTTP Transactions (25)

URL IP Response Size

dxc.workplace.com/work/email_notif/?groups/695307008882279/permalink/875730134173298/&work_newsfeed_token=S:_I100083728598391:875730134173298:813665857229410&aref=1701110443749813&medium=email&mid=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&bcode=2.1701110456.AbxVSG7Y7nmQ46Yysek&n_m=zhenging.yiu@slurpmail.net&atwork_nonce=xb0EEh9q&lloc=logo&rms=v2&irms=true

31.13.72.16

200 OK

551 B

URL User Request GET HTTP/2
dxc.workplace.com/work/email_notif/?groups/695307008882279/permalink/875730134173298/&work_newsfeed_token=S:_I100083728598391:875730134173298:813665857229410&aref=1701110443749813&medium=email&mid=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&bcode=2.1701110456.AbxVSG7Y7nmQ46Yysek&n_m=zhenging.yiu@slurpmail.net&atwork_nonce=xb0EEh9q&lloc=logo&rms=v2&irms=true
IP
31.13.72.16:443
ASN
#32934 FACEBOOK

Certificate
IssuerDigiCert Inc
Subjectworkplace.com
Fingerprint87:0D:94:FB:08:42:1F:90:DF:1E:96:52:7F:00:F7:27:25:B4:A4:EA
ValidityTue, 12 Sep 2023 00:00:00 GMT - Mon, 11 Dec 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1136), with no line terminators
Size
551 B (551 bytes)
Hash
f6efb9165c54a325fcc4256957d83a32
d573c6ee9c517623444f54c5894fdfd0f9f1e52d
82ee3e66458b15f6338f73652f0a63b806dcceb65c7d4644125d5567716da395

HTTP Headers

GET /work/email_notif/?groups/695307008882279/permalink/875730134173298/&work_newsfeed_token=S:_I100083728598391:875730134173298:813665857229410&aref=1701110443749813&medium=email&mid=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&bcode=2.1701110456.AbxVSG7Y7nmQ46Yysek&n_m=zhenging.yiu@slurpmail.net&atwork_nonce=xb0EEh9q&lloc=logo&rms=v2&irms=true HTTP/1.1
Host: dxc.workplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: text/html;charset=utf-8
reporting-endpoints: default="https://dxc.workplace.com/ajax/workplace_error_reports/?device_level=unknown"
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/dxc.workplace.com\/ajax\/workplace_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src workplace.com *.workplace.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob:;script-src *.workplace.com workplace.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' workplace.com *.workplace.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.workplace.com workplace.com *.fbcdn.net wss://*.workplace.com:* wss://*.fbcdn.net blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://my.workplace.com/csp/reporting/?m=c&minimize=0;
document-policy: force-load-at-top
permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), gamepad=(), keyboard-map=(), otp-credentials=(), picture-in-picture=(), xr-spatial-tracking=()
permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), gamepad=(self), geolocation=(self), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), payment=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=()
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: g1di+HcBROWgTPuNYlW6yFGV/hPxgwbygPAgNZ9E2Jx0tcpiWX2Ng25z6ayA/IH/fgzvtu61peVpcgXP8kuTWw==
content-length: 551
date: Mon, 04 Dec 2023 02:43:33 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dxc.workplace.com/work/goclaim/?enc=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&nonce=xb0EEh9q&notif_type=work_group_activity&email=zhenging.yiu%40dxc.com

31.13.72.16

302 Found

0 B

URL User Request GET HTTP/3
dxc.workplace.com/work/goclaim/?enc=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&nonce=xb0EEh9q&notif_type=work_group_activity&email=zhenging.yiu%40dxc.com
IP
31.13.72.16:443
ASN
#32934 FACEBOOK

Certificate
IssuerDigiCert Inc
Subjectworkplace.com
Fingerprint87:0D:94:FB:08:42:1F:90:DF:1E:96:52:7F:00:F7:27:25:B4:A4:EA
ValidityTue, 12 Sep 2023 00:00:00 GMT - Mon, 11 Dec 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /work/goclaim/?enc=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&nonce=xb0EEh9q&notif_type=work_group_activity&email=zhenging.yiu%40dxc.com HTTP/1.1
Host: dxc.workplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dxc.workplace.com/work/email_notif/?groups/695307008882279/permalink/875730134173298/&work_newsfeed_token=S:_I100083728598391:875730134173298:813665857229410&aref=1701110443749813&medium=email&mid=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&bcode=2.1701110456.AbxVSG7Y7nmQ46Yysek&n_m=zhenging.yiu@slurpmail.net&atwork_nonce=xb0EEh9q&lloc=logo&rms=v2&irms=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
location: https://dxc.workplace.com/work/sso/claim/?uid=61553509693869&notif_data=AYZI7G3dWYusiE6LFEH1Jcffehxq-GQgrcLfEJwqk_YFdQKmdAcJ59w1CcRxWeUuiKRb6Whn9apflJLhI_NXG5piOftAaLYZpcy8-OfZFjYquNpXIxJvHwr0oSX4mpS2CYRrH11nZ-4trFjzZo6R4QbLhAj32X3Z-BNmHyNos_8MLFZZ4Olq5e4xOmObXoc_c1VVU-TsOsQH6xVZB7YSXrkHSHn2EmuNxvQ939vTBpyBhbVk6NGXFFAkuXWlwwmzbcM
reporting-endpoints: default="https://dxc.workplace.com/ajax/workplace_error_reports/?device_level=unknown"
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/dxc.workplace.com\/ajax\/workplace_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src workplace.com *.workplace.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob:;script-src *.workplace.com workplace.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' workplace.com *.workplace.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.workplace.com workplace.com *.fbcdn.net wss://*.workplace.com:* wss://*.fbcdn.net blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://my.workplace.com/csp/reporting/?m=c&minimize=0;
document-policy: force-load-at-top
permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), gamepad=(), keyboard-map=(), otp-credentials=(), picture-in-picture=(), xr-spatial-tracking=()
permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), gamepad=(self), geolocation=(self), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), payment=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=()
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: qkEfb38o+6pcldXTwBSBWc41HOP4uJfT5/dr17Nl9lu32csj9jdG58J2mIqyDFyXgWYDs0DX3Q8GgVLdhSpmhw==
content-length: 0
date: Mon, 04 Dec 2023 02:43:33 GMT
alt-svc: h3=":443"; ma=86400
priority: u=1

dxc.workplace.com/work/sso/claim/?uid=61553509693869&notif_data=AYZI7G3dWYusiE6LFEH1Jcffehxq-GQgrcLfEJwqk_YFdQKmdAcJ59w1CcRxWeUuiKRb6Whn9apflJLhI_NXG5piOftAaLYZpcy8-OfZFjYquNpXIxJvHwr0oSX4mpS2CYRrH11nZ-4trFjzZo6R4QbLhAj32X3Z-BNmHyNos_8MLFZZ4Olq5e4xOmObXoc_c1VVU-TsOsQH6xVZB7YSXrkHSHn2EmuNxvQ939vTBpyBhbVk6NGXFFAkuXWlwwmzbcM

31.13.72.16

302 Found

0 B

URL User Request GET HTTP/3
dxc.workplace.com/work/sso/claim/?uid=61553509693869&notif_data=AYZI7G3dWYusiE6LFEH1Jcffehxq-GQgrcLfEJwqk_YFdQKmdAcJ59w1CcRxWeUuiKRb6Whn9apflJLhI_NXG5piOftAaLYZpcy8-OfZFjYquNpXIxJvHwr0oSX4mpS2CYRrH11nZ-4trFjzZo6R4QbLhAj32X3Z-BNmHyNos_8MLFZZ4Olq5e4xOmObXoc_c1VVU-TsOsQH6xVZB7YSXrkHSHn2EmuNxvQ939vTBpyBhbVk6NGXFFAkuXWlwwmzbcM
IP
31.13.72.16:443
ASN
#32934 FACEBOOK

Certificate
IssuerDigiCert Inc
Subjectworkplace.com
Fingerprint87:0D:94:FB:08:42:1F:90:DF:1E:96:52:7F:00:F7:27:25:B4:A4:EA
ValidityTue, 12 Sep 2023 00:00:00 GMT - Mon, 11 Dec 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /work/sso/claim/?uid=61553509693869&notif_data=AYZI7G3dWYusiE6LFEH1Jcffehxq-GQgrcLfEJwqk_YFdQKmdAcJ59w1CcRxWeUuiKRb6Whn9apflJLhI_NXG5piOftAaLYZpcy8-OfZFjYquNpXIxJvHwr0oSX4mpS2CYRrH11nZ-4trFjzZo6R4QbLhAj32X3Z-BNmHyNos_8MLFZZ4Olq5e4xOmObXoc_c1VVU-TsOsQH6xVZB7YSXrkHSHn2EmuNxvQ939vTBpyBhbVk6NGXFFAkuXWlwwmzbcM HTTP/1.1
Host: dxc.workplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dxc.workplace.com/work/email_notif/?groups/695307008882279/permalink/875730134173298/&work_newsfeed_token=S:_I100083728598391:875730134173298:813665857229410&aref=1701110443749813&medium=email&mid=60b265a232ee3G37fb8b1479adG60b26a3b931b5G1d72&bcode=2.1701110456.AbxVSG7Y7nmQ46Yysek&n_m=zhenging.yiu@slurpmail.net&atwork_nonce=xb0EEh9q&lloc=logo&rms=v2&irms=true
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
location: https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
reporting-endpoints: default="https://dxc.workplace.com/ajax/workplace_error_reports/?device_level=unknown"
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/dxc.workplace.com\/ajax\/workplace_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src workplace.com *.workplace.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob:;script-src *.workplace.com workplace.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' workplace.com *.workplace.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.workplace.com workplace.com *.fbcdn.net wss://*.workplace.com:* wss://*.fbcdn.net blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://my.workplace.com/csp/reporting/?m=c&minimize=0;
document-policy: force-load-at-top
permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), gamepad=(), keyboard-map=(), otp-credentials=(), picture-in-picture=(), xr-spatial-tracking=()
permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), gamepad=(self), geolocation=(self), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), payment=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=()
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: yOa0dJwSwuuviFLio5Cwrnmxq2NZkUayBEi/UFxLWgJN5N2mMbUdeIPZqo4J+KdwxPfcG3wtbqmHWApvRTVf2w==
content-length: 0
date: Mon, 04 Dec 2023 02:43:33 GMT
alt-svc: h3=":443"; ma=86400
priority: u=1

uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o

35.71.149.114

200 OK

9.2 kB

URL User Request GET HTTP/1.1
uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
IP
35.71.149.114:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subjectuid.dxc.com
Fingerprint68:82:F0:56:AB:62:27:0F:52:89:97:1E:9B:50:A5:1D:C1:BF:2B:49
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7167)
Size
9.2 kB (9184 bytes)
Hash
65fbbfa0dcb65e9527fcdd3921a8da34
dfa90feba9222f46b87a7f1d0225a6db8bde9557
da9ad5513fce2a46671b66a3564d8ea6cee79a86b6bb1ed3c35e4e0ce32e93ad

HTTP Headers

GET /app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o HTTP/1.1
Host: uid.dxc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dxc.workplace.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 02:43:34 GMT
Server: nginx
Content-Type: text/html;charset=utf-8
Vary: Accept-Encoding
x-okta-request-id: ZW081rt_8YqvI-uTZmrxdQAABBE
x-xss-protection: 0
p3p: CP="HONK"
content-security-policy: frame-ancestors 'self' https://csc100.csc.com https://dxc105.dxc.com https://idm.dxc.com; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce; report-to csp
x-rate-limit-limit: 7500
x-rate-limit-remaining: 7442
x-rate-limit-reset: 1701657825
cache-control: no-cache, no-store
pragma: no-cache
expires: 0
report-to: {"group":"csp","max_age":31536000,"endpoints":[{"url":"https://oktacsp.report-uri.com/a/t/g"}],"include_subdomains":true}
content-security-policy-report-only: frame-ancestors 'self' https://csc100.csc.com https://dxc105.dxc.com https://idm.dxc.com
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-ua-compatible: IE=edge
content-language: en
Strict-Transport-Security: max-age=315360000; includeSubDomains
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip
set-cookie: sid="";Version=1;Path=/;Max-Age=0
autolaunch_triggered=""; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
JSESSIONID=FB92AE57F55DE2565A6B3F72943F3373; Path=/; Secure; HttpOnly
t=default; Path=/
DT=DI1QfbxPH9tQXO6CkWBNydbnw;Version=1;Path=/;Max-Age=63072000;Secure;Expires=Wed, 03 Dec 2025 02:43:34 GMT;HttpOnly;SameSite=None
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked

ok12static.oktacdn.com/fs/bco/1/fs0a40unlrZ0cjfJS5d7

54.230.111.109

200 OK

3.4 kB

URL GET HTTP/2
ok12static.oktacdn.com/fs/bco/1/fs0a40unlrZ0cjfJS5d7
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type
PNG image data, 200 x 63, 8-bit/color RGBA, non-interlaced\012- data
Size
3.4 kB (3356 bytes)
Hash
40741e5ea03a4debe15db26f90d61ffd
97fe4f414740840a4d6088c9fc90301d2315caf3
c5e58e4b561ba6c1c49d0427b43a1d14527df95b16929cd0927868575b3a2ec4

HTTP Headers

GET /fs/bco/1/fs0a40unlrZ0cjfJS5d7 HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3356
date: Thu, 30 Nov 2023 20:51:09 GMT
server: nginx
last-modified: Sat, 24 Jun 2023 04:38:24 GMT
etag: "40741e5ea03a4debe15db26f90d61ffd"
expires: Fri, 29 Nov 2024 20:51:09 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rjbivJ0EZhhpNgRA7q_Yb8gVzRmOve4pCuUhKGfy9PKMOcW32kax0Q==
age: 280346
X-Firefox-Spdy: h2

ok12static.oktacdn.com/assets/loginpage/css/custom-signin.737a914842b846fb44d117b7a2900fcb.css

54.230.111.109

200 OK

1.6 MB

URL GET HTTP/2
ok12static.oktacdn.com/assets/loginpage/css/custom-signin.737a914842b846fb44d117b7a2900fcb.css
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type
gzip compressed data, from Unix\012- data
Size
1.6 MB (1594212 bytes)
Hash
5b1a2d7e09a812d364c22c77b78264bc
cb48c7a48ee0fe276ae3bb9ebfeb41f0dffa8b35
83aa6b0a11da6a0e9c492525bddb48c88b4ccf67e79c80b858747d7958fba0ff

HTTP Headers

GET /assets/loginpage/css/custom-signin.737a914842b846fb44d117b7a2900fcb.css HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
date: Thu, 23 Nov 2023 07:57:37 GMT
server: nginx
last-modified: Thu, 09 Nov 2023 00:54:25 GMT
etag: W/"737a914842b846fb44d117b7a2900fcb"
x-amz-meta-sha1sum: f4435f7649134c3a393983234d53ddec02cd33b4
expires: Fri, 22 Nov 2024 07:57:37 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GnHs10blNP-x3VcBLE5b5zWjDRvCB2rC-SotDvrWdGLx2zDlRQnCxA==
age: 931558
X-Firefox-Spdy: h2

uid.dxc.com/favicon.ico

35.71.149.114

200 OK

5.4 kB

URL GET HTTP/1.1
uid.dxc.com/favicon.ico
IP
35.71.149.114:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subjectuid.dxc.com
Fingerprint68:82:F0:56:AB:62:27:0F:52:89:97:1E:9B:50:A5:1D:C1:BF:2B:49
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
5.4 kB (5430 bytes)
Hash
449c9dd651db589388b721eb2496f5b0
64f3b213a89a00f7b0940271576ecc72280236f7
f9e86fb363a05f75ab3b525439d46bf4911d4cd4ae94c656c0198206374002aa

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: uid.dxc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Cookie: JSESSIONID=FB92AE57F55DE2565A6B3F72943F3373; t=default; DT=DI1QfbxPH9tQXO6CkWBNydbnw; dxcemp=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 02:43:36 GMT
Server: nginx
Content-Type: image/x-icon
Content-Length: 5430
accept-ranges: bytes
etag: W/"5430-1701408486000"
last-modified: Fri, 01 Dec 2023 05:28:06 GMT
Strict-Transport-Security: max-age=315360000; includeSubDomains
X-Robots-Tag: noindex,nofollow
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

143.204.55.8

200 OK

451 B

URL GET HTTP/1.1
login.okta.com/discovery/iframe.html
IP
143.204.55.8:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subjectaccounts.okta.com
FingerprintC7:78:AF:98:7D:DB:48:0F:23:9B:39:1B:D7:5C:F8:3E:FD:45:F8:F7
ValidityWed, 19 Jul 2023 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (451), with no line terminators
Size
451 B (451 bytes)
Hash
fe4139cbc5a13528dbecbf548e6dd39c
ef4f00e9ffe503188b149942309fd3d1d19ff460
04e5a6a734bb7d87c3edca98ab40003f8972aba152440e7df17bda26d9ce0f8a

HTTP Headers

GET /discovery/iframe.html HTTP/1.1
Host: login.okta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 451
Connection: keep-alive
Last-Modified: Wed, 01 Nov 2023 16:07:38 GMT
Server: AmazonS3
Date: Sun, 03 Dec 2023 02:50:35 GMT
ETag: "fe4139cbc5a13528dbecbf548e6dd39c"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WFSYwPJATUum0IXnV2ctn7X8vUULfnPIIMWZHxKKMfJuEJJAascmYw==
Age: 85981
Strict-Transport-Security: max-age=31536000; includeSubDomains

143.204.55.8

200 OK

98 kB

URL GET HTTP/1.1
login.okta.com/lib/discoveryIframe-ea9230c42a202475efd8.min.js
IP
143.204.55.8:443
ASN
#16509 AMAZON-02

Requested by
https://login.okta.com/discovery/iframe.html
Certificate
IssuerDigiCert Inc
Subjectaccounts.okta.com
FingerprintC7:78:AF:98:7D:DB:48:0F:23:9B:39:1B:D7:5C:F8:3E:FD:45:F8:F7
ValidityWed, 19 Jul 2023 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (48877), with LF, NEL line terminators
Size
98 kB (98194 bytes)
Hash
6ba68ae0d3bea7d2d2d7262b7afe570e
1464624b6758ae69673738aba97f80f78f6343c8
058bb9d17b2131122ad576569715e4e35cc79848433645fba5d768d9627acbd0

HTTP Headers

GET /lib/discoveryIframe-ea9230c42a202475efd8.min.js HTTP/1.1
Host: login.okta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.okta.com/discovery/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 98194
Connection: keep-alive
Last-Modified: Wed, 01 Nov 2023 16:07:39 GMT
Server: AmazonS3
Date: Sun, 03 Dec 2023 05:34:03 GMT
ETag: "6ba68ae0d3bea7d2d2d7262b7afe570e"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pdYhkyx3QtHU0lCfKFZbsrPmTB6jpRdscFgs51T0dBAW5Z-5mLFpdg==
Age: 76203
Strict-Transport-Security: max-age=31536000; includeSubDomains

uid.dxc.com/idp/idx/introspect

35.71.149.114

200 OK

21 kB

URL POST HTTP/1.1
uid.dxc.com/idp/idx/introspect
IP
35.71.149.114:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subjectuid.dxc.com
Fingerprint68:82:F0:56:AB:62:27:0F:52:89:97:1E:9B:50:A5:1D:C1:BF:2B:49
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JSON data\012- , ASCII text, with very long lines (21270), with no line terminators
Size
21 kB (21270 bytes)
Hash
fa7683dd6fedea82e95298981109be45
9f21aa46fd6fa489619cf3882eb14f7c0dbc7328
088fa9185d5d46f88d1931b1d1a79cd93454a556a0a8e308796001c99297f3ac

HTTP Headers

POST /idp/idx/introspect HTTP/1.1
Host: uid.dxc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/ion+json; okta-version=1.0.0
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Content-Type: application/ion+json; okta-version=1.0.0
X-Okta-User-Agent-Extended: okta-auth-js/7.0.1 okta-signin-widget-7.12.0
Content-Length: 4414
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=FB92AE57F55DE2565A6B3F72943F3373; t=default; DT=DI1QfbxPH9tQXO6CkWBNydbnw; dxcemp=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 02:43:36 GMT
Server: nginx
Content-Type: application/ion+json;okta-version=1.0.0
x-okta-request-id: ZW082D1-cMKgvq2VHu74NQAAC5w
x-xss-protection: 0
p3p: CP="HONK"
content-security-policy: default-src 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com; connect-src 'self' dxcprod.okta.com dxcprod-admin.okta.com uid.dxc.com *.oktacdn.com *.mixpanel.com *.mapbox.com app.pendo.io data.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com *.mtls.okta.com dxcprod.kerberos.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com; style-src 'unsafe-inline' 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com app.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com; frame-src 'self' dxcprod.okta.com dxcprod-admin.okta.com uid.dxc.com login.okta.com com-okta-authenticator:; img-src 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com app.pendo.io data.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com data: blob:; font-src 'self' dxcprod.okta.com uid.dxc.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'
x-rate-limit-limit: 20000
x-rate-limit-remaining: 19924
x-rate-limit-reset: 1701657827
access-control-allow-origin: https://uid.dxc.com
access-control-allow-credentials: true
vary: Origin
cache-control: no-cache, no-store
pragma: no-cache
expires: 0
x-content-type-options: nosniff
Strict-Transport-Security: max-age=315360000; includeSubDomains
X-Robots-Tag: noindex,nofollow
set-cookie: sid="";Version=1;Path=/;Max-Age=0
autolaunch_triggered=""; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
JSESSIONID=0A577712CDD8D57327941DF1259676D8; Path=/; Secure; HttpOnly
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked

ok12static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2

54.230.111.109

200 OK

20 kB

URL GET HTTP/2
ok12static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20416, version 2.197\012- data
Size
20 kB (20416 bytes)
Hash
d99a7377dabb55772ca9f986b0a04b57
2b5fcd8431953c44e410d0489899e74f6d2cfecc
affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149

HTTP Headers

GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Referer: https://ok12static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff2
content-length: 20416
server: nginx
last-modified: Thu, 09 Nov 2023 00:52:06 GMT
x-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:45:01 GMT
expires: Fri, 29 Nov 2024 01:45:01 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: "d99a7377dabb55772ca9f986b0a04b57"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yHbpCKXl4Ey0_utBeSaAQCEqrCdndPM9iXoy3N7AOWr9DdftoWAu7g==
age: 349115
X-Firefox-Spdy: h2

ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/img/icons/mfa/oktaVerify_70x70.png

54.230.111.109

200 OK

2.4 kB

URL GET HTTP/2
ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/img/icons/mfa/oktaVerify_70x70.png
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type
PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced\012- data
Size
2.4 kB (2411 bytes)
Hash
8146a7091eda20534f86ceadfb34a1fa
c429e1305e5dff0f7cb60b5e9dc3420a58b5e9b0
d434b33b7d0382d89cd488dd964f27e395eb03cf34b51d822d45912d96e75c64

HTTP Headers

GET /assets/js/sdk/okta-signin-widget/7.12.0/img/icons/mfa/oktaVerify_70x70.png HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/css/okta-sign-in.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 2411
date: Thu, 16 Nov 2023 02:32:42 GMT
server: nginx
last-modified: Tue, 14 Nov 2023 21:59:37 GMT
etag: "8146a7091eda20534f86ceadfb34a1fa"
x-amz-meta-sha1sum: c429e1305e5dff0f7cb60b5e9dc3420a58b5e9b0
expires: Fri, 15 Nov 2024 02:32:42 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yk5S-p-u12GwO0JSmpXnCQiSmx9ngm72iRXwI8be7y0VkW6ZDLymXA==
age: 1555854
X-Firefox-Spdy: h2

ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/img/ui/indicators/loader@1x.gif

54.230.111.109

200 OK

10 kB

URL GET HTTP/2
ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/img/ui/indicators/loader@1x.gif
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type
GIF image data, version 89a, 38 x 38\012- data
Size
10 kB (10274 bytes)
Hash
da5afed58d4a7ab9e44a16ee5387707b
ce2bac88d718f974add007d55ef0e9314d0f4b61
2d0840961e9d93f813811d90c3ed7537149172e1bb0fa92762ab0e0a72af054f

HTTP Headers

GET /assets/js/sdk/okta-signin-widget/7.12.0/img/ui/indicators/loader@1x.gif HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/css/okta-sign-in.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/gif
content-length: 10274
date: Thu, 16 Nov 2023 02:32:42 GMT
server: nginx
last-modified: Tue, 14 Nov 2023 21:59:41 GMT
etag: "da5afed58d4a7ab9e44a16ee5387707b"
x-amz-meta-sha1sum: ce2bac88d718f974add007d55ef0e9314d0f4b61
expires: Fri, 15 Nov 2024 02:32:42 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b96VfUypXlMsXKOVXbTjley14wgmTSfAh5buKJE-9UwdwQXsW_qkGA==
age: 1555854
X-Firefox-Spdy: h2

ok12static.oktacdn.com/assets/loginpage/font/assets/proximanova-sbold-webfont.41acb8650115f83780fc.woff2

54.230.111.109

200 OK

20 kB

URL GET HTTP/2
ok12static.oktacdn.com/assets/loginpage/font/assets/proximanova-sbold-webfont.41acb8650115f83780fc.woff2
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20328, version 2.197\012- data
Size
20 kB (20328 bytes)
Hash
27429b092c0595aa8803b611bd7508f3
dd4beda27e8057403b27d1276ca9d68902692615
9b5d2290b34cd718e1e97e894d6790f92387ee50de0b3364da291e7112f412be

HTTP Headers

GET /assets/loginpage/font/assets/proximanova-sbold-webfont.41acb8650115f83780fc.woff2 HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Referer: https://ok12static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff2
content-length: 20328
server: nginx
last-modified: Thu, 09 Nov 2023 00:52:42 GMT
x-amz-meta-sha1sum: dd4beda27e8057403b27d1276ca9d68902692615
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:45:02 GMT
expires: Fri, 29 Nov 2024 01:45:02 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: "27429b092c0595aa8803b611bd7508f3"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d23isSXO3H9LSrXkKbjn29oon8NaqbRz9Ri_GRaI9h8ecZ4o_FYzTg==
age: 349114
X-Firefox-Spdy: h2

uid.dxc.com/idp/idx/authenticators/poll/cancel

35.71.149.114

200 OK

13 kB

URL POST HTTP/1.1
uid.dxc.com/idp/idx/authenticators/poll/cancel
IP
35.71.149.114:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subjectuid.dxc.com
Fingerprint68:82:F0:56:AB:62:27:0F:52:89:97:1E:9B:50:A5:1D:C1:BF:2B:49
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JSON data\012- , ASCII text, with very long lines (12971), with no line terminators
Size
13 kB (12971 bytes)
Hash
29dc8b5b4c56b0e853492bbd75c23a91
f32a84d9a305d9e50787f135efa3cc99981751fc
0a402868c3a577bc16c6e59586a43694f839513b139359a6db85aab11e290abd

HTTP Headers

POST /idp/idx/authenticators/poll/cancel HTTP/1.1
Host: uid.dxc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json; okta-version=1.0.0
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Content-Type: application/json
X-Okta-User-Agent-Extended: okta-auth-js/7.0.1 okta-signin-widget-7.12.0
Content-Length: 4471
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=0A577712CDD8D57327941DF1259676D8; t=default; DT=DI1QfbxPH9tQXO6CkWBNydbnw; dxcemp=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 02:43:37 GMT
Server: nginx
Content-Type: application/json;okta-version=1.0.0
x-okta-request-id: ZW082T1-cMKgvq2VHu74OAAAC5w
x-xss-protection: 0
p3p: CP="HONK"
content-security-policy: default-src 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com; connect-src 'self' dxcprod.okta.com dxcprod-admin.okta.com uid.dxc.com *.oktacdn.com *.mixpanel.com *.mapbox.com app.pendo.io data.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com *.mtls.okta.com dxcprod.kerberos.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com; style-src 'unsafe-inline' 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com app.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com; frame-src 'self' dxcprod.okta.com dxcprod-admin.okta.com uid.dxc.com login.okta.com com-okta-authenticator:; img-src 'self' dxcprod.okta.com uid.dxc.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com app.pendo.io data.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com data: blob:; font-src 'self' dxcprod.okta.com uid.dxc.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'
x-rate-limit-limit: 10000
x-rate-limit-remaining: 9961
x-rate-limit-reset: 1701657849
access-control-allow-origin: https://uid.dxc.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
vary: Origin
cache-control: no-cache, no-store
pragma: no-cache
expires: 0
x-content-type-options: nosniff
Strict-Transport-Security: max-age=315360000; includeSubDomains
X-Robots-Tag: noindex,nofollow
set-cookie: sid="";Version=1;Path=/;Max-Age=0
autolaunch_triggered=""; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
JSESSIONID=37E814C0FB27671D12F54B9B9F34BD0A; Path=/; Secure; HttpOnly
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked

127.0.0.1:65141/probe

0.0.0.0

0 B

URL OPTIONS
127.0.0.1:65141/probe
IP
0.0.0.0:0
ASN
#0

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

127.0.0.1:65111/probe

0.0.0.0

0 B

URL OPTIONS
127.0.0.1:65111/probe
IP
0.0.0.0:0
ASN
#0

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65111
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ok12static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js

54.230.111.109

200 OK

209 kB

URL GET HTTP/2
ok12static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65460)
Size
209 kB (209381 bytes)
Hash
58de3be0c9b511a0fdfd7ea4f69b56fc
91eca02abf11239ec4af7a30b1da6e2610f1b9a6
6a6c595fcf3a6c74bf3509f160ba34b78a8a3eb92ecaf290412c46679576d3ed

HTTP Headers

GET /assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Thu, 09 Nov 2023 00:50:57 GMT
x-amz-meta-sha1sum: 91eca02abf11239ec4af7a30b1da6e2610f1b9a6
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Thu, 30 Nov 2023 01:20:58 GMT
expires: Fri, 29 Nov 2024 01:20:58 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"58de3be0c9b511a0fdfd7ea4f69b56fc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QWxQUspBxMr6Yptq6lnLbO9fl2dqqXfTiK6rTpvdzVm3AiEAJKwvGA==
age: 350558
X-Firefox-Spdy: h2

ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/css/okta-sign-in.min.css

54.230.111.109

200 OK

222 kB

URL GET HTTP/2
ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/css/okta-sign-in.min.css
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type

Size
222 kB (221839 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/js/sdk/okta-signin-widget/7.12.0/css/okta-sign-in.min.css HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
date: Thu, 16 Nov 2023 02:32:14 GMT
server: nginx
last-modified: Tue, 14 Nov 2023 21:58:38 GMT
etag: W/"14a902da0701755f1c3dc816ee428221"
x-amz-meta-sha1sum: 4cfa8d8c88cf536e49e478565a2da853267beb22
expires: Fri, 15 Nov 2024 02:32:14 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ttKl-Ki8nHz0wNHDxie4RmyS0t7u6BLWJV0vnuJy-7jo59oyJfcpFQ==
age: 1555881
X-Firefox-Spdy: h2

127.0.0.1:8769/probe

0.0.0.0

0 B

URL OPTIONS
127.0.0.1:8769/probe
IP
0.0.0.0:0
ASN
#0

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:8769
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ok12static.oktacdn.com/fs/bco/7/fs0a40unlvTpaVGtC5d7

54.230.111.109

200 OK

1.6 MB

URL GET HTTP/2
ok12static.oktacdn.com/fs/bco/7/fs0a40unlvTpaVGtC5d7
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type

Size
1.6 MB (1592044 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fs/bco/7/fs0a40unlvTpaVGtC5d7 HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
content-length: 1592044
date: Wed, 29 Nov 2023 20:57:17 GMT
server: nginx
last-modified: Sat, 24 Jun 2023 04:38:25 GMT
etag: "223428b74b0ab1cac8c779f950cd88cb"
expires: Thu, 28 Nov 2024 20:57:17 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 424Ud2w-kYdTiUq37svviYxm7Q6CTIYxpJY8enpZ4IxTQUq_L6PF1g==
age: 366378
X-Firefox-Spdy: h2

127.0.0.1:65151/probe

0.0.0.0

0 B

URL OPTIONS
127.0.0.1:65151/probe
IP
0.0.0.0:0
ASN
#0

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65151
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/js/okta-sign-in.min.js

54.230.111.109

200 OK

1.7 MB

URL GET HTTP/2
ok12static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.12.0/js/okta-sign-in.min.js
IP
54.230.111.109:443
ASN
#16509 AMAZON-02

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o
Certificate
IssuerDigiCert Inc
Subject*.oktacdn.com
FingerprintBA:38:93:EA:39:03:30:A0:BD:7F:D9:34:53:12:8D:64:E3:4D:6B:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Tue, 02 Jan 2024 23:59:59 GMT

File type

Size
1.7 MB (1746635 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/js/sdk/okta-signin-widget/7.12.0/js/okta-sign-in.min.js HTTP/1.1
Host: ok12static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uid.dxc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
date: Thu, 16 Nov 2023 02:32:14 GMT
server: nginx
last-modified: Tue, 14 Nov 2023 21:59:43 GMT
etag: W/"0f9fe6dafd49554de113a9d98096ea58"
x-amz-meta-sha1sum: 788b9f01284bdbbbea54621df8b7a0ae48bb746d
expires: Fri, 15 Nov 2024 02:32:14 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jqmszeRtYpW0dLzJQi6XmEfq-ZAstVCMK4s0H-2M3sUc-rLBAl3SDg==
age: 1555881
X-Firefox-Spdy: h2

127.0.0.1:65121/probe

0.0.0.0

0 B

URL OPTIONS
127.0.0.1:65121/probe
IP
0.0.0.0:0
ASN
#0

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65121
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

127.0.0.1:65131/probe

0.0.0.0

0 B

URL OPTIONS
127.0.0.1:65131/probe
IP
0.0.0.0:0
ASN
#0

Requested by
https://uid.dxc.com/app/dxcprod_workplace_1/exk7mpgh9M8icVB5D5d6/sso/saml?SAMLRequest=fZLJbtswFEX3%2FgqBe4sa7AyEZUCJUdRA0hqxm0U3AUU%2BWZTFoSRVOX9fiGqSJkDD3RvOxX0XXDkqO0PK3jfqAX714PwsiqLoLDvlSBgWqLeKaOqEI4pKcMQzsi%2Fv70gWJ8RY7TXTHfqAfU5R58B6odWEbTcForWqFACTbSUFqI6qSh1bWdW8PematnXDWgp1NRGPYJ3QqkBZnKDZJOJcD1vlPFW%2BQFmS5fM0myeLQ5KRRU7y%2FOeEbsB5oagPeOO9cQTjXvCYn1nMtMTUGMzPzFjNnwZtT6ajDJ5SDOfTpTTH5vr%2BSrDHm%2BVmyS%2BwcxqP907au79p3AjFhTp%2BHkI1LTny9XDYzXff94dJpHwJ51Yr10uwe7C%2FBYMfD3dvhkezr%2BaC7bEKVmLTGLQOUquxJiEZu35Bh2GIa8qg0voUSKaloeoZp1f58iK%2FXCzz9DpZZCv8L%2F2mZ8g3KmG72elOsOfQH98XbSX1%2Fz85jdPQEXxeh1UCkoqu5NyCc%2BhVp%2Bw6PdxaoB4K5G0PKMLr2Wxy8%2F6rrv8A&RelayState=AbkY5CRSatzxotoVh5VSbeytx3hxGCLdmvGJEOdJr9ejdzxGAoLKDXKN2Aw3-87_EuF161ZOwP7QXR1EKtN7as_4PIZkXn_yiaGGyJWFw4eyV556xb3t1VhWQq6bAX7tFeDAWGQ0n0FKYSX_pu_pOzjQiAlru5Q9x3VW9eVhdLTibcPrh1zotDqQs6xsF3dgAEVCX9FwHsARKPJasQdOpyfaEcREe_LVZcmxBS8rtw1F2GrOtHNQ55sOmZUQc4Tk4P-089xmcDyr1_ACPR5ZxZ69C7epY87Sa5syaaU3ZPQ1doC4fm6MfTpP9mf-Iln2_jjubqvJF9VKv1woUN0xWx3KbpAyOvXIuhL526GtaUDH7TiBWRop5s2hWx-fGVBd0omCydq1uNTWJzJwWWXwd1hbkaUqBu40EPkHGRkHzm0y0wvBeW_lfbWwWImgxmFbf5hqtMGHVcnU1KTpmoTBorX0Dy1xDHHG1KSMGEn5L3n7SLmLPMcTNGuPNy1_MQhif24hFnRCnxFmZzT0_tZ74kHGx5uVeWi4S9XWbq4si5eEX-6KQbOkTYxS46POKjU8KE70WVVca8dm9cwLtyQ-2EsmVK7_AuRoivP7agQZUiFsC4gGXlDfWsPxCZCdDaPU65o

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65131
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://uid.dxc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (25)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/3

IP

ASN