Report - 213.188.223.217/auth/login

Report Overview

Submitted URL
213.188.223.217/auth/login
IP
213.188.223.217
ASN
#40509 FLY
Submitted
2024-04-18 01:41:34
Access
public
Website Title
Sign In with Auth0
Final URL
basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
213.188.223.217	unknown	unknown	No data	No data	396 B	703 B	213.188.223.217
basedcdn-staging.us.auth0.com	unknown	unknown	No data	No data	10 kB	11 kB	104.19.167.24
cdn.auth0.com	9952	2012-10-18	2017-04-20	2024-04-17	1.2 kB	936 kB	108.157.211.47

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	213.188.223.217	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	basedcdn-staging.us.auth0.com/client/G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf.js?t1713404469955	499 B	2024-04-18	2024-04-18
Pretty URL basedcdn-staging.us.auth0.com/client/G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf.js?t1713404469955 IP 104.19.167.24 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 03:41:40 Last Seen2024-04-18 03:41:40 Times Seen1 Hash c5a4e8b659337ca94482a36450d451b8 6a232cf435eea80679bf9c5cc1c9d916cbeb8fdb 5e2469bdbbe0ff1c5859ab18219f434f929c38f20023d6a1e874b5b1d8cab92f Loading...

	cdn.auth0.com/js/lock/11.30/lock.min.js	926 kB	2023-04-26	2024-04-18
Pretty URL cdn.auth0.com/js/lock/11.30/lock.min.js IP 108.157.211.47 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-26 17:35:33 Last Seen2024-04-18 03:41:40 Times Seen3 Hash 25e1ef64a0bfdfa9bddd36f808bc99b0 75ba3d6f3d28d69f441efce1e5ba7822c4db9bc7 9ed213c86d64a6816e82baf344955bf8a2c20a0a38c6534e76fbb24b1a215ad1 Loading...

	basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback	0 B	2023-03-07	2024-05-01
Pretty URL basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback IP 104.19.167.24 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-01 04:26:21 Times Seen37236103 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.auth0.com/js/lock/11.30.6/en.js	6.6 kB	2023-03-07	2024-04-30
Pretty URL cdn.auth0.com/js/lock/11.30.6/en.js IP 108.157.211.47 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:50 Last Seen2024-04-30 20:46:00 Times Seen18 Hash 752bd942891e49a1035e916dd81017a5 1f472b5c79b3555ddaa0d39f7dfc8ca70e845f72 274a08ddc700fc754cb977c38b9fa34cc0dac17b9d768da40c81b502b97862f6 Loading...

HTTP Transactions (11)

URL IP Response Size

213.188.223.217/auth/login

213.188.223.217

302 Found

0 B

URL User Request GET HTTP/1.1
213.188.223.217/auth/login
IP
213.188.223.217:80
ASN
#40509 FLY

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /auth/login HTTP/1.1
Host: 213.188.223.217
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
x-powered-by: Express
set-cookie: _session=eyJvYXV0aDI6c3RhdGUiOiI4ZjZhZmI1Ni0xYTNjLTRiMTUtODk1Mi1jNGI3Nzk4NjIyYzMifQ%3D%3D.CNNmlMvI9wjTF%2BbInszERQ19r3RIoQ7jrjWo9F%2FLaME; Path=/; HttpOnly; Secure; SameSite=Lax
location: https://basedcdn-staging.us.auth0.com/authorize?scope=openid+profile+email&response_type=code&client_id=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback&state=8f6afb56-1a3c-4b15-8952-c4b7798622c3
date: Thu, 18 Apr 2024 01:41:08 GMT
connection: keep-alive
keep-alive: timeout=5
transfer-encoding: chunked
server: Fly/f28a2f4b (2024-04-16)
via: 1.1 fly.io
fly-request-id: 01HVQDTQAN6Z4670JNWPXPZMJ0-arn

basedcdn-staging.us.auth0.com/authorize?scope=openid+profile+email&response_type=code&client_id=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback&state=8f6afb56-1a3c-4b15-8952-c4b7798622c3

104.19.167.24

302 Found

778 B

URL User Request GET HTTP/2
basedcdn-staging.us.auth0.com/authorize?scope=openid+profile+email&response_type=code&client_id=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback&state=8f6afb56-1a3c-4b15-8952-c4b7798622c3
IP
104.19.167.24:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectus.auth0.com
FingerprintE6:AE:E7:FD:C8:50:14:D4:6D:0B:18:56:0B:C1:16:4F:96:A6:58:91
ValidityMon, 25 Mar 2024 06:03:50 GMT - Sun, 23 Jun 2024 06:03:49 GMT

File type
HTML document, ASCII text, with very long lines (778), with no line terminators
Size
778 B (778 bytes)
Hash
cc425451bf4e93bd6a64e38d5d20df2d
35545e4737a912817d4cce3f8be18cd126d2ca57
9548060aa6e0a9644ab10af3dc8a7081a3f94b39f7a8881ed11a3bc300c84056

HTTP Headers

GET /authorize?scope=openid+profile+email&response_type=code&client_id=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback&state=8f6afb56-1a3c-4b15-8952-c4b7798622c3 HTTP/1.1
Host: basedcdn-staging.us.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 18 Apr 2024 01:41:09 GMT
content-type: text/html; charset=utf-8
content-length: 778
location: /login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
cf-ray: 8760f36afc3fb4f3-OSL
cf-cache-status: DYNAMIC
cache-control: no-store, max-age=0, no-transform
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept, Accept-Encoding
pragma: no-cache
set-cookie: did=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 07:41:09 GMT; HttpOnly; Secure; SameSite=None
auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; Path=/; Expires=Sun, 21 Apr 2024 01:41:09 GMT; HttpOnly; Secure; SameSite=None
did_compat=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; Max-Age=31557600; Path=/; Expires=Fri, 18 Apr 2025 07:41:09 GMT; HttpOnly; Secure
auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; Path=/; Expires=Sun, 21 Apr 2024 01:41:09 GMT; HttpOnly; Secure
x-auth0-requestid: ba69cf9723855a16bfb6
x-content-type-options: nosniff
x-ratelimit-limit: 300
x-ratelimit-remaining: 299
x-ratelimit-reset: 1713404470
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.auth0.com/styleguide/components/1.0.8/media/logos/img/badge.png

108.157.211.47

200 OK

1.6 kB

URL GET HTTP/2
cdn.auth0.com/styleguide/components/1.0.8/media/logos/img/badge.png
IP
108.157.211.47:443
ASN
#16509 AMAZON-02

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerAmazon
Subject*.auth0.com
Fingerprint25:82:AA:4B:C0:C9:FE:66:32:63:14:A2:DA:94:5C:15:47:DE:C1:BB
ValidityThu, 25 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT

File type
PNG image data, 152 x 168, 8-bit colormap, non-interlaced
Size
1.6 kB (1591 bytes)
Hash
e3842ac36d4fbd8d4e31a39999c0eba6
758b15e719f9f9a01add02524629031ab9977f0b
33fb88f606a3f32f2f218df25dcc69283d9a555a0f8e253f2092f3af53404c11

HTTP Headers

GET /styleguide/components/1.0.8/media/logos/img/badge.png HTTP/1.1
Host: cdn.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 1591
x-amz-replication-status: COMPLETED
last-modified: Thu, 04 May 2017 21:37:11 GMT
x-amz-version-id: CghttMoXpqZBzj9pIZwTb7OuGonBat5c
accept-ranges: bytes
server: AmazonS3
date: Wed, 17 Apr 2024 22:05:34 GMT
cache-control: max-age=2628000,public
etag: "e3842ac36d4fbd8d4e31a39999c0eba6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: pSjHCvVQqDkJwteAVzhGUZZ6ZxgbGIJgr6pvL7o6sWg7OCQHThAD9w==
age: 12936
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
x-robots-tag: noindex
X-Firefox-Spdy: h2

basedcdn-staging.us.auth0.com/favicon.ico

104.19.167.24

404 Not Found

9 B

URL GET HTTP/3
basedcdn-staging.us.auth0.com/favicon.ico
IP
104.19.167.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerLet's Encrypt
Subjectus.auth0.com
FingerprintE6:AE:E7:FD:C8:50:14:D4:6D:0B:18:56:0B:C1:16:4F:96:A6:58:91
ValidityMon, 25 Mar 2024 06:03:50 GMT - Sun, 23 Jun 2024 06:03:49 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
9d1ead73e678fa2f51a70a933b0bf017
d205cbd6783332a212c5ae92d73c77178c2d2f28
0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: basedcdn-staging.us.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; did_compat=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 01:41:10 GMT
content-type: text/plain; charset=utf-8
content-length: 9
cf-ray: 8760f3710ea55685-OSL
cf-cache-status: MISS
cache-control: public, max-age=300
etag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-auth0-not-found: 1
x-auth0-requestid: c5bbb1894ee89e05d61e
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400

basedcdn-staging.us.auth0.com/usernamepassword/challenge

104.19.167.24

200 OK

18 B

URL POST HTTP/3
basedcdn-staging.us.auth0.com/usernamepassword/challenge
IP
104.19.167.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerLet's Encrypt
Subjectus.auth0.com
FingerprintE6:AE:E7:FD:C8:50:14:D4:6D:0B:18:56:0B:C1:16:4F:96:A6:58:91
ValidityMon, 25 Mar 2024 06:03:50 GMT - Sun, 23 Jun 2024 06:03:49 GMT

File type
JSON text data
Size
18 B (18 bytes)
Hash
dc3016814761dc49b136bef202590e2e
f5fb38c7f8722790e4a901762d866439d1d15963
8376431f05ed0574aa914db9f36153ed5837a067d6d3450847c49d89b37ad1bf

HTTP Headers

POST /usernamepassword/challenge HTTP/1.1
Host: basedcdn-staging.us.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Content-Type: application/json
Auth0-Client: eyJuYW1lIjoibG9jay5qcy11bHAiLCJ2ZXJzaW9uIjoiMTEuMzAuNiIsImVudiI6eyJhdXRoMC5qcy11bHAiOiI5LjE2LjQiLCJhdXRoMC5qcyI6IjkuMTYuNCJ9fQ==
Content-Length: 174
Origin: https://basedcdn-staging.us.auth0.com
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; did_compat=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 01:41:10 GMT
content-type: application/json; charset=utf-8
content-length: 18
cf-ray: 8760f3713eb95685-OSL
cf-cache-status: DYNAMIC
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
etag: W/"12-9fs4x/hyJ5DkqQF2LYZkOdHRWWM"
strict-transport-security: max-age=31536000; includeSubDomains
x-auth0-requestid: a17fb281a8e667714d11
x-content-type-options: nosniff
x-ratelimit-limit: 300
x-ratelimit-remaining: 299
x-ratelimit-reset: 1713404471
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

basedcdn-staging.us.auth0.com/user/geoloc/country

104.19.167.24

200 OK

21 B

URL GET HTTP/3
basedcdn-staging.us.auth0.com/user/geoloc/country
IP
104.19.167.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerLet's Encrypt
Subjectus.auth0.com
FingerprintE6:AE:E7:FD:C8:50:14:D4:6D:0B:18:56:0B:C1:16:4F:96:A6:58:91
ValidityMon, 25 Mar 2024 06:03:50 GMT - Sun, 23 Jun 2024 06:03:49 GMT

File type
JSON text data
Size
21 B (21 bytes)
Hash
92605d54e983bd65542a68e8eb0d5249
5d89f99e343af0ef5d8139776460a90f25794402
be20d0868c200922c8c5ceea82a030f59169a1476dd534dc6cc955635942aebf

HTTP Headers

GET /user/geoloc/country HTTP/1.1
Host: basedcdn-staging.us.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Content-Type: application/json
Auth0-Client: eyJuYW1lIjoibG9jay5qcy11bHAiLCJ2ZXJzaW9uIjoiMTEuMzAuNiIsImVudiI6eyJhdXRoMC5qcy11bHAiOiI5LjE2LjQiLCJhdXRoMC5qcyI6IjkuMTYuNCJ9fQ==
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; did_compat=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 01:41:10 GMT
content-type: application/json; charset=utf-8
content-length: 21
cf-ray: 8760f3713eba5685-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
etag: W/"15-XYn5njQ68O9dgTl3ZGCpDyV5RAI"
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
access-control-allow-credentials: false
access-control-expose-headers: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset
x-auth0-requestid: 164f77addd2dcd11dcb2
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400

basedcdn-staging.us.auth0.com/user/ssodata

104.19.167.24

404 Not Found

0 B

URL GET HTTP/3
basedcdn-staging.us.auth0.com/user/ssodata
IP
104.19.167.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerLet's Encrypt
Subjectus.auth0.com
FingerprintE6:AE:E7:FD:C8:50:14:D4:6D:0B:18:56:0B:C1:16:4F:96:A6:58:91
ValidityMon, 25 Mar 2024 06:03:50 GMT - Sun, 23 Jun 2024 06:03:49 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /user/ssodata HTTP/1.1
Host: basedcdn-staging.us.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; did_compat=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 01:41:10 GMT
content-length: 0
cf-ray: 8760f3726f215685-OSL
cf-cache-status: DYNAMIC
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform
strict-transport-security: max-age=31536000; includeSubDomains
x-auth0-requestid: 5c7c4b9e780ab1fff2de
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

cdn.auth0.com/js/lock/11.30.6/en.js

108.157.211.47

200 OK

6.6 kB

URL GET HTTP/2
cdn.auth0.com/js/lock/11.30.6/en.js
IP
108.157.211.47:443
ASN
#16509 AMAZON-02

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerAmazon
Subject*.auth0.com
Fingerprint25:82:AA:4B:C0:C9:FE:66:32:63:14:A2:DA:94:5C:15:47:DE:C1:BB
ValidityThu, 25 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (7118), with no line terminators
Size
6.6 kB (6634 bytes)
Hash
fc4eb6d44a0f3bcba74ba916c6ab4087
bf3af86e1d8f77b6da015169d10c50ab3bba2467
ea8304ab9b5f8433fe527ec349007cbf792310341fa9e634332cd9f4e50f3c60

HTTP Headers

GET /js/lock/11.30.6/en.js HTTP/1.1
Host: cdn.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 28 Sep 2021 10:01:21 GMT
x-amz-version-id: xO3zdET_9TiK2fYvjUFfZsvZbLaH8EBg
server: AmazonS3
content-encoding: gzip
date: Wed, 17 Apr 2024 05:05:12 GMT
cache-control: max-age=2628000,public
etag: W/"752bd942891e49a1035e916dd81017a5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: lXEZNsgSofuYzJFc8Xl_WrQim01sUJnHcMmD9C_snEuqI_f8PpkuOQ==
age: 74439
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
x-robots-tag: noindex
X-Firefox-Spdy: h2

basedcdn-staging.us.auth0.com/client/G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf.js?t1713404469955

104.19.167.24

200 OK

499 B

URL GET HTTP/3
basedcdn-staging.us.auth0.com/client/G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf.js?t1713404469955
IP
104.19.167.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerLet's Encrypt
Subjectus.auth0.com
FingerprintE6:AE:E7:FD:C8:50:14:D4:6D:0B:18:56:0B:C1:16:4F:96:A6:58:91
ValidityMon, 25 Mar 2024 06:03:50 GMT - Sun, 23 Jun 2024 06:03:49 GMT

File type
ASCII text, with very long lines (557), with no line terminators
Size
499 B (499 bytes)
Hash
2c58b449922f7674fc8656f64ecd1d12
e500711b4a97f89097bb7337c1fd132c96ced32b
16423ba8390cfe85efe2f76946dd470e2bcba7eae2105981650cac4c70ce5b3f

HTTP Headers

GET /client/G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf.js?t1713404469955 HTTP/1.1
Host: basedcdn-staging.us.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; did_compat=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 01:41:10 GMT
content-type: application/x-javascript; charset=utf-8
cf-ray: 8760f3712eaf5685-OSL
cf-cache-status: MISS
cache-control: public, max-age=60, stale-while-revalidate=60, stale-if-error=86400
etag: W/"1f3-aiMs9DXuqAZ5v5xcwcnZFsvrj9s"
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-auth0-requestid: d8062e26589bf06b175b
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback

104.19.167.24

200 OK

3.8 kB

URL User Request GET HTTP/2
basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
IP
104.19.167.24:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectus.auth0.com
FingerprintE6:AE:E7:FD:C8:50:14:D4:6D:0B:18:56:0B:C1:16:4F:96:A6:58:91
ValidityMon, 25 Mar 2024 06:03:50 GMT - Sun, 23 Jun 2024 06:03:49 GMT

File type
HTML document, ASCII text, with very long lines (3870), with no line terminators
Size
3.8 kB (3787 bytes)
Hash
46e999f4014e6fbf874ed85922897270
ca437135a1747cb5106e383c938349ea12a6dc8e
a69a89115ad5ce3caa785575d104d4e758b430d0449273a6636ced6bf79fb6a3

HTTP Headers

GET /login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback HTTP/1.1
Host: basedcdn-staging.us.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: did=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw; did_compat=s%3Av0%3Abadeaef0-fd24-11ee-98c8-6dc3d5950e40.65co9EhmFISUhoUzDIN6N7VDCOPztSt8jQyCEG52yzs; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQCh4FyL9js4hrSR3fbl9ogw8fuFjfqCi2yG9PREWm_PYzajuAgJeAs619OGevo7g0Tcvti8NkN1yO_R0k37pFBumY29va2llg6dleHBpcmVz1_8kAE8AZiRuta5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.jq2aAk314bgt1IhDdnpJOQALdTb1Gwmtyy5KdEh4qKw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 01:41:09 GMT
content-type: text/html; charset=utf-8
cf-ray: 8760f36cac8ab4f3-OSL
cf-cache-status: DYNAMIC
cache-control: no-store, max-age=0, no-transform
etag: W/"ecb-TQUNNjvZG8dsj2OeUYYsWzOU0RA"
set-cookie: _csrf=Te2mYtb6dALa6xVh1-w6f-ML; Max-Age=864000; Path=/usernamepassword/login; HttpOnly; Secure
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
content-security-policy: frame-ancestors 'none'
pragma: no-cache
referrer-policy: same-origin
x-auth0-requestid: fa3802dfa05e65d4fd55
x-content-type-options: nosniff
x-frame-options: deny
x-ratelimit-limit: 300
x-ratelimit-remaining: 299
x-ratelimit-reset: 1713404470
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.auth0.com/js/lock/11.30/lock.min.js

108.157.211.47

200 OK

926 kB

URL GET HTTP/2
cdn.auth0.com/js/lock/11.30/lock.min.js
IP
108.157.211.47:443
ASN
#16509 AMAZON-02

Requested by
https://basedcdn-staging.us.auth0.com/login?state=hKFo2SA2RGxZMnVxcDRyaFkwcE9HRTRuZXBsVnpSTWEyTGJVMqFupWxvZ2luo3RpZNkgTUs2ZmpXaC1OcWhESmRNNXZ3MnI0eFBDeF84aEpsOVCjY2lk2SBHNFZsMzJwNXJENktzNUNLeG9yakV3a2M3V043WTZnZg&client=G4Vl32p5rD6Ks5CKxorjEwkc7WN7Y6gf&protocol=oauth2&scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fstaging.basedcdn.com%2Fauth%2Fcallback
Certificate
IssuerAmazon
Subject*.auth0.com
Fingerprint25:82:AA:4B:C0:C9:FE:66:32:63:14:A2:DA:94:5C:15:47:DE:C1:BB
ValidityThu, 25 Jan 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT

File type

Size
926 kB (925760 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/lock/11.30/lock.min.js HTTP/1.1
Host: cdn.auth0.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 28 Sep 2021 10:01:22 GMT
x-amz-version-id: 6P1E5uCKNVjzMyTTbhzKYWnnGy7bxte2
server: AmazonS3
content-encoding: gzip
date: Wed, 17 Apr 2024 23:39:28 GMT
cache-control: max-age=10800,public
etag: W/"25e1ef64a0bfdfa9bddd36f808bc99b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 8xLNDXgJ9MCxD1cRA3QMqxk5DpFOp_geIYXKpBhM9WzalUjMa4NtuA==
age: 7974
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
x-robots-tag: noindex
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers