Report - ohscorgza.github.io/microsoft.com/

Report Overview

Visited public
2024-12-04 14:35:10
Tags
microsoft phishing
URL
ohscorgza.github.io/microsoft.com/
Finishing URL
ohscorgza.github.io/microsoft.com/
IP / ASN
185.199.110.153
#54113 FASTLY
Title
Sign in to your Microsoft account
Phishing - Microsoft

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-12-04	1.4 kB	15 kB	140.82.121.3
github-production-user-asset-6210df.s3.amazonaws.com	384858	2005-08-18	2017-06-08	2024-11-29	2.3 kB	4.4 kB	3.5.25.188
ohscorgza.github.io	unknown	2013-03-08	2024-12-04	2024-12-04	488 B	3.1 kB	185.199.108.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	ohscorgza.github.io/microsoft.com/	27 B	2024-12-04 14:35	2024-12-06 11:39
Pretty URL ohscorgza.github.io/microsoft.com/ IP 185.199.108.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-04 14:35 Last Seen2024-12-06 11:39 Times Seen5 Hash d2334767cd2cee0714bfcbf9610dd92e 8592c38d2b45c6c981d4cb798ab328ee6eee6db3 9a369e08757136aa3ce8d7e5771d5afb620b772e876c142a456f96a6fb3f1ab2 Loading...

HTTP Transactions (7)

URL IP Response Size

ohscorgza.github.io/microsoft.com/

185.199.108.153

200 OK

2.3 kB

URL User Request GET HTTP/2
ohscorgza.github.io/microsoft.com/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (496)
Size
2.3 kB (2322 bytes)
Hash
e550ee3ad27e2fd1987f594f94487343
309cc1fced8d848f5e204ccaeb75f8e3eda69f93
a8d8de4b70d88b5b8374c32ab39bbe28f5c20bc1f2a869921505943629ec3d49

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /microsoft.com/ HTTP/1.1
Host: ohscorgza.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Wed, 04 Dec 2024 14:19:27 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"675064ef-1bfa"
expires: Wed, 04 Dec 2024 14:44:45 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: F97C:23B7B3:CC9BB0:D2E85C:67506885
accept-ranges: bytes
age: 0
date: Wed, 04 Dec 2024 14:34:45 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1733322885.131401,VS0,VE136
vary: Accept-Encoding
x-fastly-request-id: 430b34f9b83ecfae0ce39eb2e3675cb1bab32367
content-length: 2322
X-Firefox-Spdy: h2

github.com/user-attachments/assets/29a1be1b-b275-4161-a2b8-466957a3a4a4

140.82.121.3

302 Found

0 B

URL GET HTTP/2
github.com/user-attachments/assets/29a1be1b-b275-4161-a2b8-466957a3a4a4
IP
140.82.121.3:443
ASN
#36459 GITHUB

Requested by
https://ohscorgza.github.io/microsoft.com/
Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /user-attachments/assets/29a1be1b-b275-4161-a2b8-466957a3a4a4 HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohscorgza.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Wed, 04 Dec 2024 14:34:45 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://github-production-user-asset-6210df.s3.amazonaws.com/188638152/390829518-29a1be1b-b275-4161-a2b8-466957a3a4a4.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=f1d175298210e87bb738c17b97826d974eb4e4ac938cf1cc35e1ceb224335ffa&X-Amz-SignedHeaders=host
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
set-cookie: _gh_sess=QudDR%2BpF3cK7hhf4H0z40De%2FjGyUPF2Sxym0tXCeyeotYvvmCsUylrmE25ldTeN%2BXA3cvIAcfIgy11lLQhqY9o4xakyAYv8xrv8aF6PyCuRliPw5D2KcrltqFTzDI0utPEIWJzkKoANOtHqeiTSzkJhaqKINtjW7Sohcil5Nz0ddhejbeaWgvyS11SIclE%2Fab77ML1F7TTnp%2B9GkeBMBqd4HEp3tE4BvqiAr6J0%2FpZ5mDGIMf0HChapEnfkp9e5DPd00KVfvtbI%2FcJnvea797w%3D%3D--ato39uLZZMmcM3uY--Biy4cfNNXbTd7rkK6wDY0w%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
_octo=GH1.1.2061548589.1733322885; Path=/; Domain=github.com; Expires=Thu, 04 Dec 2025 14:34:45 GMT; Secure; SameSite=Lax
logged_in=no; Path=/; Domain=github.com; Expires=Thu, 04 Dec 2025 14:34:45 GMT; HttpOnly; Secure; SameSite=Lax
content-length: 0
x-github-request-id: EB7B:4C05D:C3FA39:C773E6:67506885
X-Firefox-Spdy: h2

github.com/user-attachments/assets/381fa878-5e38-4d28-8379-42ef268bf154

140.82.121.3

302 Found

0 B

URL GET HTTP/2
github.com/user-attachments/assets/381fa878-5e38-4d28-8379-42ef268bf154
IP
140.82.121.3:443
ASN
#36459 GITHUB

Requested by
https://ohscorgza.github.io/microsoft.com/
Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /user-attachments/assets/381fa878-5e38-4d28-8379-42ef268bf154 HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohscorgza.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Wed, 04 Dec 2024 14:34:45 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://github-production-user-asset-6210df.s3.amazonaws.com/188638152/390829390-381fa878-5e38-4d28-8379-42ef268bf154.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=b44876f30ec4b6730934462f8ad9c72c57f4dc7992b8348b22635f948e1c9788&X-Amz-SignedHeaders=host
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
set-cookie: _gh_sess=3buF2l13n4JQ5K%2FYsTlopdleCgM7gGSnd6Z5Kj7Iw828RQ9SU%2BoqE27LTBxiWsw%2BW8tiSn5BXglFQ2Eq962%2FhihoST3OAGFcgfuCjqdGxrgpJXek6prdxy09PWXqShUI7DVIwuUU3APw84RpbFP2v4ihSUDig5BBQTmRjMe5evX4hVwzSsOroKJRSDIQMP%2FDtXsY%2FHDIyIYkW5GvPW%2BXfxByglmLNxsvofVG8ZVRT22wXg0hZ4iXfhOktMhvj3dxpGjxw8HHdRPiIC%2FwlQaqdw%3D%3D--%2BX1Ic0UismdUpWfV--w%2Fa3C92s%2Bh%2BQXSND9ETJTw%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
_octo=GH1.1.1544921112.1733322885; Path=/; Domain=github.com; Expires=Thu, 04 Dec 2025 14:34:45 GMT; Secure; SameSite=Lax
logged_in=no; Path=/; Domain=github.com; Expires=Thu, 04 Dec 2025 14:34:45 GMT; HttpOnly; Secure; SameSite=Lax
content-length: 0
x-github-request-id: EB7B:4C05D:C3FA3F:C773EB:67506885
X-Firefox-Spdy: h2

github-production-user-asset-6210df.s3.amazonaws.com/188638152/390829518-29a1be1b-b275-4161-a2b8-466957a3a4a4.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=f1d175298210e87bb738c17b97826d974eb4e4ac938cf1cc35e1ceb224335ffa&X-Amz-SignedHeaders=host

3.5.25.188

200 OK

1.4 kB

URL GET HTTP/1.1
github-production-user-asset-6210df.s3.amazonaws.com/188638152/390829518-29a1be1b-b275-4161-a2b8-466957a3a4a4.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=f1d175298210e87bb738c17b97826d974eb4e4ac938cf1cc35e1ceb224335ffa&X-Amz-SignedHeaders=host
IP
3.5.25.188:443
ASN
#14618 AMAZON-AES

Requested by
https://ohscorgza.github.io/microsoft.com/
Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
Fingerprint57:FE:C9:73:13:31:CA:2C:91:7F:05:C3:3B:16:FF:3F:1B:D8:7D:E2
ValidityMon, 22 Apr 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Size
1.4 kB (1400 bytes)
Hash
333ee830e5ab72c41dd9126a27b4d878
12d8d66ebb3076f3d6069e133c3212f97c8774e1
8702292cbc365e9f0488143e2b309b85efe09c61fd2e0a2e21c53735a309313c

HTTP Headers

GET /188638152/390829518-29a1be1b-b275-4161-a2b8-466957a3a4a4.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=f1d175298210e87bb738c17b97826d974eb4e4ac938cf1cc35e1ceb224335ffa&X-Amz-SignedHeaders=host HTTP/1.1
Host: github-production-user-asset-6210df.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ohscorgza.github.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: 3flnjivIXH7hqXDo4lKBL8U1M3qSmABvCtiyhClvOzj35VUCLLZBKdKjlU7OgQ7mADrKjnYS8WG94XXZV33gWVb266MQNW1O1N10C2el0aA=
x-amz-request-id: Q6F0T0N75C815QSV
Date: Wed, 04 Dec 2024 14:34:47 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 28 Nov 2024 14:56:43 GMT
ETag: "333ee830e5ab72c41dd9126a27b4d878"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=2592000
x-amz-meta-surrogate-control: max-age=31557600
x-amz-version-id: 8yd6KVWZdR19U9tBz8eYZzF3vrN0.65F
Accept-Ranges: bytes
Content-Type: image/png
Content-Length: 1400
Server: AmazonS3

github-production-user-asset-6210df.s3.amazonaws.com/188638152/390829390-381fa878-5e38-4d28-8379-42ef268bf154.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=b44876f30ec4b6730934462f8ad9c72c57f4dc7992b8348b22635f948e1c9788&X-Amz-SignedHeaders=host

3.5.25.188

200 OK

727 B

URL GET HTTP/1.1
github-production-user-asset-6210df.s3.amazonaws.com/188638152/390829390-381fa878-5e38-4d28-8379-42ef268bf154.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=b44876f30ec4b6730934462f8ad9c72c57f4dc7992b8348b22635f948e1c9788&X-Amz-SignedHeaders=host
IP
3.5.25.188:443
ASN
#14618 AMAZON-AES

Requested by
https://ohscorgza.github.io/microsoft.com/
Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
Fingerprint57:FE:C9:73:13:31:CA:2C:91:7F:05:C3:3B:16:FF:3F:1B:D8:7D:E2
ValidityMon, 22 Apr 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
727 B (727 bytes)
Hash
839cb0f55c3d2d5c2f740bda95cb2878
93f6fa3a2da8b7184d4b5c5f2065872793370c2e
40ecb8832f6a9a8aaa0cc6e1287e867a4fca38433d091d86c6cab1f28fbab652

HTTP Headers

GET /188638152/390829390-381fa878-5e38-4d28-8379-42ef268bf154.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143445Z&X-Amz-Expires=300&X-Amz-Signature=b44876f30ec4b6730934462f8ad9c72c57f4dc7992b8348b22635f948e1c9788&X-Amz-SignedHeaders=host HTTP/1.1
Host: github-production-user-asset-6210df.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ohscorgza.github.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: EOwwGAUGgz4IQU1WebbeuKTbESTGb1spwhfdW0qBRvqJJDqj6M4ijx/C7+iy84b03eL8VbAv1ke8BExsg+ZgpaH9M3KIImdVgldf6EOpKfM=
x-amz-request-id: Q6F8TDC93215QJK0
Date: Wed, 04 Dec 2024 14:34:47 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 28 Nov 2024 14:56:19 GMT
ETag: "839cb0f55c3d2d5c2f740bda95cb2878"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=2592000
x-amz-meta-surrogate-control: max-age=31557600
x-amz-version-id: yotrwYk_.bhKdGJvHwU16jsHa.SGFwWb
Accept-Ranges: bytes
Content-Type: image/png
Content-Length: 727
Server: AmazonS3

github.com/user-attachments/assets/bb0bc864-8e9c-4601-b1ef-233d35683486

140.82.121.3

302 Found

0 B

URL GET HTTP/2
github.com/user-attachments/assets/bb0bc864-8e9c-4601-b1ef-233d35683486
IP
140.82.121.3:443
ASN
#36459 GITHUB

Requested by
https://ohscorgza.github.io/microsoft.com/
Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /user-attachments/assets/bb0bc864-8e9c-4601-b1ef-233d35683486 HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohscorgza.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
server: GitHub.com
date: Wed, 04 Dec 2024 14:34:46 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://github-production-user-asset-6210df.s3.amazonaws.com/188638152/390830278-bb0bc864-8e9c-4601-b1ef-233d35683486.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143446Z&X-Amz-Expires=300&X-Amz-Signature=9e0e0859cd85cae55eafe379aa44c1fe1aa1afe931505e5701667e3a0cccb888&X-Amz-SignedHeaders=host
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
set-cookie: _gh_sess=yDKbyxNHfFOnD4FfByJPUiUhx%2FON1x9hdSosjFIMr%2BwqPw3vXqIb915hiWvCypZV5FVYZhX%2BZTE%2BxjUH9BhfkRmmtToJANPkrVYovkyQWYDP1aSTc7bQUxZC6sYyj431ycmKOYG33CGCuXqg4aPWDYGlmvOF2RZz3WW3%2FTxvLiCEmiy8JpZ7%2BF7ZNlEIpVKlX7cTEQ8ZlSmAmDq%2FGTtTPgdLXeQGEAVBcE6%2B9O939oMq7ypfQX%2F5bMiOolD4E2H2UZwQoDby%2BDFceMOi5kFgTw%3D%3D--gesuudzaXmWx6XMC--SJZvRIYJVJJKSEU1htxe3Q%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
_octo=GH1.1.2042224847.1733322886; Path=/; Domain=github.com; Expires=Thu, 04 Dec 2025 14:34:46 GMT; Secure; SameSite=Lax
logged_in=no; Path=/; Domain=github.com; Expires=Thu, 04 Dec 2025 14:34:46 GMT; HttpOnly; Secure; SameSite=Lax
content-length: 0
x-github-request-id: EB7B:4C05D:C3FD1A:C7768E:67506885
X-Firefox-Spdy: h2

github-production-user-asset-6210df.s3.amazonaws.com/188638152/390830278-bb0bc864-8e9c-4601-b1ef-233d35683486.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143446Z&X-Amz-Expires=300&X-Amz-Signature=9e0e0859cd85cae55eafe379aa44c1fe1aa1afe931505e5701667e3a0cccb888&X-Amz-SignedHeaders=host

3.5.25.188

200 OK

511 B

URL GET HTTP/1.1
github-production-user-asset-6210df.s3.amazonaws.com/188638152/390830278-bb0bc864-8e9c-4601-b1ef-233d35683486.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143446Z&X-Amz-Expires=300&X-Amz-Signature=9e0e0859cd85cae55eafe379aa44c1fe1aa1afe931505e5701667e3a0cccb888&X-Amz-SignedHeaders=host
IP
3.5.25.188:443
ASN
#14618 AMAZON-AES

Requested by
https://ohscorgza.github.io/microsoft.com/
Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
Fingerprint57:FE:C9:73:13:31:CA:2C:91:7F:05:C3:3B:16:FF:3F:1B:D8:7D:E2
ValidityMon, 22 Apr 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
511 B (511 bytes)
Hash
9ed7995c1d2fe965ab81f91941e4b4a4
19e079cf0f7bed0556c1c186254ade33ebaa6efa
c0d051552b1e53caf53a5148852556c04ce6eec459a7a7cd9303e818574772bf

HTTP Headers

GET /188638152/390830278-bb0bc864-8e9c-4601-b1ef-233d35683486.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20241204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241204T143446Z&X-Amz-Expires=300&X-Amz-Signature=9e0e0859cd85cae55eafe379aa44c1fe1aa1afe931505e5701667e3a0cccb888&X-Amz-SignedHeaders=host HTTP/1.1
Host: github-production-user-asset-6210df.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ohscorgza.github.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: CnJIg8+/sWmFo//CFlL7KzDfrmw8cMIgFkL4lkrgbGqs0WgMsKAUGMMKomSmRtXjCf/Z7UCnqCJKrNMk31hAxzdkPdX7LLmj5bdab7TAWFc=
x-amz-request-id: Q6F5PK77J398767J
Date: Wed, 04 Dec 2024 14:34:47 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 28 Nov 2024 14:59:00 GMT
ETag: "9ed7995c1d2fe965ab81f91941e4b4a4"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=2592000
x-amz-meta-surrogate-control: max-age=31557600
x-amz-version-id: PDoqFdY7Yb2RtEpPI6YGoct.ptnoMprY
Accept-Ranges: bytes
Content-Type: image/svg+xml
Content-Length: 511
Server: AmazonS3

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type