{"report_id":"62d4de0e-1e21-4d3f-96ef-f43945e45da7","version":6,"status":"done","tags":[],"date":"2025-01-14T19:27:24Z","url":{"schema":"https","addr":"portal.lrs.t-mobile.com/","fqdn":"portal.lrs.t-mobile.com","domain":"t-mobile.com","tld":"com"},"ip":{"addr":"23.36.79.168","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"portal.lrs.t-mobile.com/","fqdn":"portal.lrs.t-mobile.com","domain":"t-mobile.com","tld":"com"},"title":"Access Denied"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-25T19:27:24Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"portal.lrs.t-mobile.com","ip":{"addr":"95.101.10.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2000-01-13","domain_rank":0,"first_seen":"2023-03-06T18:30:20Z","last_seen":"2024-09-24T19:42:49Z","alert_count":0,"request_count":3,"received_data":2887,"sent_data":2702,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"portal.lrs.t-mobile.com/","fqdn":"portal.lrs.t-mobile.com","domain":"t-mobile.com","tld":"com"},"ip":{"addr":"95.101.10.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-14T19:27:01.278Z","timestamp":1736882821278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal.lrs.t-mobile.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Dec 2024 17:46:50 GMT","end":"Mon, 03 Mar 2025 17:46:49 GMT"},"fingerprint":{"sha1":"06:CA:5B:5A:80:56:2E:12:EB:BF:5B:12:23:A5:DB:AF:27:D9:6B:B3","sha256":"6D:EE:BA:99:D2:16:79:E2:CD:D3:78:9F:2F:DF:8E:BD:D0:2C:AE:17:94:9C:E9:F4:B6:00:28:FB:B4:87:90:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portal.lrs.t-mobile.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nmime-version: 1.0\r\ncontent-type: text/html\r\ncontent-length: 383\r\ncache-control: private, max-age=0\r\ndate: Tue, 14 Jan 2025 19:27:01 GMT\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nset-cookie: ak_bmsc=876DD98222376A374F80E2E282AAE800~000000000000000000000000000000~YAAQpAplXxMSHmKUAQAA3ZdIZhoXGCOJKxWydQbGOM+WPCTgXK6c+tayGtReJfTr5hqS+23IQStwIHF1HqyIECOZGJCRvelfqtwDvja8tyn+2hShuRtZWFVd40JM7QBJeDo9RX0fNXOWLJ396bxOTMc4+wEELclno7nMEKIajsjkVGkYntrWBBjkGnDOWOvHe2mVZu/qdSLM6gut7r7z5/nbFKB7hkXUNcE4l7B3/99ZjDvQHRRwJF+cbA7vfyScny5oosjh0uBvSyLcs0TUgijTtR0kfXszNMnGWD7PaWTs/noxSTfKfpZWGWS1P66Lz2ho068/htMDwAeCPhfxlwfTiDLSRDJIhxZJZddfkboLny+OU6Fb+P6H/LXR3gJwobjV/RIQOxDB4ifyTASY; Domain=.lrs.t-mobile.com; Path=/; Expires=Tue, 14 Jan 2025 21:27:01 GMT; Max-Age=7200\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":383,"size_decoded":383,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c0aff908264ec3ef6a1ea46b85c42efe","sha1":"c25384d9e50b5a34d15a35e452c95eb3f635c1bf","sha256":"94783a03c523d72a9e04dee0f94cf9904a8e6c3e0ad8d2c24e202263ce3c03b6","sha512":"99b7a373bb03f0d9ea6573d825c2cd4f992f834d783e395c624539d2dbd22c1a813404d28c60648de68fb50de8d7a4e40a7c6bfd809bd09a67ecb1788391408a","ssdeep":"","tlshash":"bae0208bdc35446b4f453f0f9a3a5b34a71342a761eff39bad66e0100541d6c66c24c9","first_seen":"2025-01-14T19:27:26.366148Z","last_seen":"2025-01-14T19:27:26.366148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.lrs.t-mobile.com/","fqdn":"portal.lrs.t-mobile.com","domain":"t-mobile.com","tld":"com"},"ip":{"addr":"95.101.10.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-14T19:27:01.278Z","timestamp":1736882821278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal.lrs.t-mobile.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Dec 2024 17:46:50 GMT","end":"Mon, 03 Mar 2025 17:46:49 GMT"},"fingerprint":{"sha1":"06:CA:5B:5A:80:56:2E:12:EB:BF:5B:12:23:A5:DB:AF:27:D9:6B:B3","sha256":"6D:EE:BA:99:D2:16:79:E2:CD:D3:78:9F:2F:DF:8E:BD:D0:2C:AE:17:94:9C:E9:F4:B6:00:28:FB:B4:87:90:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portal.lrs.t-mobile.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: ak_bmsc=876DD98222376A374F80E2E282AAE800~000000000000000000000000000000~YAAQpAplXxMSHmKUAQAA3ZdIZhoXGCOJKxWydQbGOM+WPCTgXK6c+tayGtReJfTr5hqS+23IQStwIHF1HqyIECOZGJCRvelfqtwDvja8tyn+2hShuRtZWFVd40JM7QBJeDo9RX0fNXOWLJ396bxOTMc4+wEELclno7nMEKIajsjkVGkYntrWBBjkGnDOWOvHe2mVZu/qdSLM6gut7r7z5/nbFKB7hkXUNcE4l7B3/99ZjDvQHRRwJF+cbA7vfyScny5oosjh0uBvSyLcs0TUgijTtR0kfXszNMnGWD7PaWTs/noxSTfKfpZWGWS1P66Lz2ho068/htMDwAeCPhfxlwfTiDLSRDJIhxZJZddfkboLny+OU6Fb+P6H/LXR3gJwobjV/RIQOxDB4ifyTASY\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nmime-version: 1.0\r\ncontent-type: text/html\r\ncontent-length: 383\r\ncache-control: private, max-age=0\r\ndate: Tue, 14 Jan 2025 19:27:01 GMT\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nset-cookie: bm_sv=681AE4FCDE20AF47C989F4D06D07B0B3~YAAQpAplXx4SHmKUAQAAqJhIZhq9Nq0mZxEmfrNjuQqHEzRswM3FNQhi9tutsmbtBcfb/J6pppK60N3Az6IfViWAsITYlV6OW/eXLaBoSFxdPztmraq6GLEYOW2vBrOdivND071u5wYHDei7W1NnAIULETzajcXAuTHtJ4N+9V1BOCwRLj2pI0NPjLtOa+UhH1+tet1QuVmV13FugUTyLaoltQSCAGzovBS/E7nxycaVyMrCVmN3jUBR9NRmaixCAjvIVUj3~1; Domain=.lrs.t-mobile.com; Path=/; Expires=Tue, 14 Jan 2025 21:27:01 GMT; Max-Age=7200; Secure\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":383,"size_decoded":383,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ce7fb0c7a0e6fae2bdc6593ae258a27b","sha1":"68ee514459100f99a23fed192abf744a3a29be8e","sha256":"7f4ff10a776c1c76225470c036f65392a936f9893b4b02eafc641c4a6a5d1eff","sha512":"86d6a976e855310428bb13a44a7a98cef005f34fc47ecc8186f2028b7a4a62a2e0bf2c69ce7f3f53194efd34a681dc63d7be930718fc0acc55ffb2c84366da03","ssdeep":"","tlshash":"5be0684bdc3640ea4f453b0e863a0f38a223019761aff3da0966f1140540d6c66864c4","first_seen":"2025-01-14T19:27:26.367845Z","last_seen":"2025-01-14T19:27:26.367845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.lrs.t-mobile.com/favicon.ico","fqdn":"portal.lrs.t-mobile.com","domain":"t-mobile.com","tld":"com"},"ip":{"addr":"95.101.10.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.lrs.t-mobile.com/","date":"2025-01-14T19:27:01.388Z","timestamp":1736882821388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal.lrs.t-mobile.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Dec 2024 17:46:50 GMT","end":"Mon, 03 Mar 2025 17:46:49 GMT"},"fingerprint":{"sha1":"06:CA:5B:5A:80:56:2E:12:EB:BF:5B:12:23:A5:DB:AF:27:D9:6B:B3","sha256":"6D:EE:BA:99:D2:16:79:E2:CD:D3:78:9F:2F:DF:8E:BD:D0:2C:AE:17:94:9C:E9:F4:B6:00:28:FB:B4:87:90:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: portal.lrs.t-mobile.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.lrs.t-mobile.com/\r\nCookie: ak_bmsc=876DD98222376A374F80E2E282AAE800~000000000000000000000000000000~YAAQpAplXxMSHmKUAQAA3ZdIZhoXGCOJKxWydQbGOM+WPCTgXK6c+tayGtReJfTr5hqS+23IQStwIHF1HqyIECOZGJCRvelfqtwDvja8tyn+2hShuRtZWFVd40JM7QBJeDo9RX0fNXOWLJ396bxOTMc4+wEELclno7nMEKIajsjkVGkYntrWBBjkGnDOWOvHe2mVZu/qdSLM6gut7r7z5/nbFKB7hkXUNcE4l7B3/99ZjDvQHRRwJF+cbA7vfyScny5oosjh0uBvSyLcs0TUgijTtR0kfXszNMnGWD7PaWTs/noxSTfKfpZWGWS1P66Lz2ho068/htMDwAeCPhfxlwfTiDLSRDJIhxZJZddfkboLny+OU6Fb+P6H/LXR3gJwobjV/RIQOxDB4ifyTASY; bm_sv=681AE4FCDE20AF47C989F4D06D07B0B3~YAAQpAplXx4SHmKUAQAAqJhIZhq9Nq0mZxEmfrNjuQqHEzRswM3FNQhi9tutsmbtBcfb/J6pppK60N3Az6IfViWAsITYlV6OW/eXLaBoSFxdPztmraq6GLEYOW2vBrOdivND071u5wYHDei7W1NnAIULETzajcXAuTHtJ4N+9V1BOCwRLj2pI0NPjLtOa+UhH1+tet1QuVmV13FugUTyLaoltQSCAGzovBS/E7nxycaVyMrCVmN3jUBR9NRmaixCAjvIVUj3~1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nmime-version: 1.0\r\ncontent-type: text/html\r\ncontent-length: 398\r\ncache-control: private, max-age=0\r\ndate: Tue, 14 Jan 2025 19:27:01 GMT\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":398,"size_decoded":398,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6edfdebf5d50a775f488b908a09556a4","sha1":"6fea2928ca66df01b49443652603474c4bbc0221","sha256":"1ebd9b16b955a685f5e93e8fb9b43b9a56bbd54763d409099ed4f5df1549a1cf","sha512":"2c1371e1a90c6a337211f0aa8bfc4d8f573613f1058bc7eba9f3c937e848c4e027a7b105205b85562339f3a820cc163628dcd3f5385c48ebe4c3f98d3b540c87","ssdeep":"","tlshash":"b0e0684bdc3546aa8f453f0e86394b25a21341a363aff3eb0d66e1042980d6c62824c9","first_seen":"2025-01-14T19:27:26.369662Z","last_seen":"2025-01-14T19:27:26.369662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
