| gemini.net.au/mfas/csc/newfile/docus/Tsmis/oZZQIJlXdPAhwnekSdtutqxlWQHfSIPbztWrYfGTOvjAohgruG/bndhZ29uZXJAY3Jpc3dlbGwuZWR1 |  103.152.248.205 | | 0 B |
URL gemini.net.au/mfas/csc/newfile/docus/Tsmis/oZZQIJlXdPAhwnekSdtutqxlWQHfSIPbztWrYfGTOvjAohgruG/bndhZ29uZXJAY3Jpc3dlbGwuZWR1 IP103.152.248.205:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Office365 |
GET /mfas/csc/newfile/docus/Tsmis/oZZQIJlXdPAhwnekSdtutqxlWQHfSIPbztWrYfGTOvjAohgruG/bndhZ29uZXJAY3Jpc3dlbGwuZWR1 HTTP/1.1
Host: gemini.net.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/5.6.40
refresh: 0;url=https://mfa-sync.se-sto-1.linodeobjects.com/policy.html#/?email=nwagoner@criswell.edu
content-type: text/html; charset=UTF-8
content-length: 0
date: Sun, 10 Dec 2023 11:24:46 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
| mfa-sync.se-sto-1.linodeobjects.com/policy.html |  172.232.133.55 | | 222 B |
URL mfa-sync.se-sto-1.linodeobjects.com/policy.html IP172.232.133.55:0 ASN#20940 Akamai International B.V.
File typeXML 1.0 document text
- XML document, ASCII text, with no line terminators Hash8c889f24f7eb192260f5654726687847 aba11af6b2f00302156bd27d7a034af1879a8559 406046e868bca0bf4282abddd2ad79c15e8ed3d35e0962f2aa59edf4c23d88ed
GET /policy.html HTTP/1.1
Host: mfa-sync.se-sto-1.linodeobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 10 Dec 2023 11:24:47 GMT
Content-Type: application/xml
Content-Length: 222
Connection: keep-alive
x-amz-request-id: tx00000695261421996975a-0065759fff-70f5a1-default
Accept-Ranges: bytes
|
| mfa-sync.se-sto-1.linodeobjects.com/favicon.ico | 172.232.133.55 | 403 Forbidden | 222 B |
URL GET HTTP/1.1mfa-sync.se-sto-1.linodeobjects.com/favicon.ico IP172.232.133.55:443 ASN#20940 Akamai International B.V.
Requested byhttps://mfa-sync.se-sto-1.linodeobjects.com/policy.html#/?email=nwagoner@criswell.edu CertificateIssuerLet's Encrypt Subjectse-sto-1.linodeobjects.com Fingerprint24:C7:1E:8C:E7:53:A6:2B:71:D5:19:A5:48:AA:58:50:27:11:AC:37 ValidityMon, 27 Nov 2023 16:07:03 GMT - Sun, 25 Feb 2024 16:07:02 GMT
File typeXML 1.0 document text
- XML document, ASCII text, with no line terminators Hashfa6905712eae3af3ab206bfcf022bfb5 9ddb28b3dded45e36ff39cd2706dca748552ac69 0dd85f6c6610385d431f466b6d82f6acea02f1750963dd840743069563362779
GET /favicon.ico HTTP/1.1
Host: mfa-sync.se-sto-1.linodeobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mfa-sync.se-sto-1.linodeobjects.com/policy.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 10 Dec 2023 11:24:47 GMT
Content-Type: application/xml
Content-Length: 222
Connection: keep-alive
x-amz-request-id: tx00000c04a0c6df9c6f5e0-0065759fff-6f23e7-default
Accept-Ranges: bytes
|
| mfa-sync.se-sto-1.linodeobjects.com/policy.html | 172.232.133.55 | 403 Forbidden | 222 B |
URL User Request GET HTTP/1.1mfa-sync.se-sto-1.linodeobjects.com/policy.html IP172.232.133.55:443 ASN#20940 Akamai International B.V.
CertificateIssuerLet's Encrypt Subjectse-sto-1.linodeobjects.com Fingerprint24:C7:1E:8C:E7:53:A6:2B:71:D5:19:A5:48:AA:58:50:27:11:AC:37 ValidityMon, 27 Nov 2023 16:07:03 GMT - Sun, 25 Feb 2024 16:07:02 GMT
File typeXML document, ASCII text, with no line terminators Hashcdc2dd4f04a950a3f428d8e5e91d7734 20624830d28ac8efd25984f2e08beca9891b4acd 1ebdf2462e94877a30a3b3ab31785c4b18079017f38ba687f858dcb3148099b5
GET /policy.html HTTP/1.1
Host: mfa-sync.se-sto-1.linodeobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 10 Dec 2023 11:24:47 GMT
Content-Type: application/xml
Content-Length: 222
Connection: keep-alive
x-amz-request-id: tx00000695261421996975a-0065759fff-70f5a1-default
Accept-Ranges: bytes
|