{"report_id":"aae19185-35fc-4d82-9ff8-f588eba89d90","version":6,"status":"done","tags":[],"date":"2025-09-25T11:37:52Z","url":{"schema":"http","addr":"umonctoncacrm.elluciancrmrecruit.com/main.aspx","fqdn":"umonctoncacrm.elluciancrmrecruit.com","domain":"elluciancrmrecruit.com","tld":"com"},"ip":{"addr":"3.97.177.23","port":0,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"title":"Home Realm Discovery"},"submit":{"url":{"schema":"http","addr":"umonctoncacrm.elluciancrmrecruit.com/main.aspx","fqdn":"umonctoncacrm.elluciancrmrecruit.com","domain":"elluciancrmrecruit.com","tld":"com"},"ip":{"addr":"3.97.177.23","port":0,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-30T11:37:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"adfs4prodca01.elluciancloud.com","ip":{"addr":"52.60.71.45","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"domain_registered":"2012-05-19","domain_rank":0,"first_seen":"2025-09-25T11:34:53.91105Z","last_seen":"2025-09-25T11:34:53.91105Z","alert_count":0,"request_count":6,"received_data":101818,"sent_data":5354,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"umonctoncacrm.elluciancrmrecruit.com","ip":{"addr":"3.97.177.23","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"domain_registered":"2016-03-31","domain_rank":0,"first_seen":"2025-09-25T11:34:53.927958Z","last_seen":"2025-09-25T11:34:53.927958Z","alert_count":0,"request_count":1,"received_data":23446,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"860a9463699472e5d096ec6f5d4f797a","sha1":"f11d8da9c2f0202400989e6c4b186cb309ffb67c","sha256":"c7e0539a0dc2bb9ada5d2ea452c7540533a9813dada6bb478f61433b6ee90091","sha512":"71260fda7bb2614711ffd5798891072cde2761cc557f3b9fd16b3cf377d8dc9ba642e3e55c00811e3c3f29dd35dd292b38804dd9c24a3078ab13f9ef09a67b0f","ssdeep":"","tlshash":"91d0234df7a447034f4545662d47fd0d15661004d48168946d7963cc51d66cc4f37f5c","size":206,"data":"","first_seen":"2023-03-07T01:23:27Z","last_seen":"2026-03-31T04:29:49.226923Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"eadb1c57f47e53a98b694a385f79f620","sha1":"e91698d36f629f7a08ce11962a6e32306239e942","sha256":"7e76f95325cbc84d2b81876f84c0f296f149c093c28694f28dfe94ad95b57593","sha512":"0eec95aa8d347ef57e48d652afb70bc0b3e383936b124490a0d223b259352fbf50020f4f27e6afabd04350bd5997fa1f7ef36cd2fe399912cb78f2a05237822b","ssdeep":"96:ADk0GbLtFyi9a/tv82wfAaCgkgCXysCSy3tvzP5qiRw1GynC:eGbLtFyi9Utv8HIPgkgCcSy3tL5qiRn1","tlshash":"f091fc6e24aa49d799cb78762fde560839344013180ccf01fcac59e02f94d786ba9fb8","size":4496,"data":"","first_seen":"2023-03-07T01:12:03Z","last_seen":"2026-04-03T05:51:29.868571Z","times_seen":950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f45acdd570674b3cbfb341f472b50b79","sha1":"54234db194e495f33df75c256c355be3ea927885","sha256":"a0609519e75507a912342dfccd41b2775f8065ffa3a93662b7cec09e963dd824","sha512":"c955aa06a72b69c46c50e0d446fed687622e96acd43306f276cf687f8c996985062fbc612d0323cdd54e24b1f55310bed27c57b14bb19d0ee02a61f83c9877a8","ssdeep":"","tlshash":"29a0228b3a03032003ee808b20328b8c3030800b0c80c00b3cbc08a00b20e82ac2838c","size":74,"data":"","first_seen":"2023-03-07T01:12:03Z","last_seen":"2026-04-04T03:02:08.849184Z","times_seen":1267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"85025dc516f9707b0e9ccfa7ba986076","sha1":"0d09db597f43bd459d12fd8bf83d673aab9369a3","sha256":"9838bbb9ddc5ac5474e29996ae369d665949d8ed381596738dfeab4598cd7f63","sha512":"c7fac863562b87b6b080c8d0933793790d2df9ed7ffc98c04eff0d69695c955f95bbfe59b6d19350fd2bc2c818d1cbe9e0829e3f47e6bdd6db644ac0a593aa9d","ssdeep":"","tlshash":"944146bb38a3a4f0ae9ba47a77db524028b500171d01d840782c45564fb0e967e7abf8","size":2285,"data":"","first_seen":"2023-03-07T01:23:27Z","last_seen":"2026-03-31T04:29:49.231922Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"eecf60dd79f4b390755c6740a6e7dbe4","sha1":"1276e0826dc01eab6a0206ff833db9a9545ce53c","sha256":"1a39ca0676e8bf1de2f8fad2568ae4e093016c9803be93ceeab876044a92f3f6","sha512":"621617d07ddc1e26f0adc1cef38cb14e3dd8302f21d164a72b50bfca21fbf607dab8123fbee4ddf062f528080fd382b32f5ff3edc413a2c618ed869648e03acb","ssdeep":"96:ADFF2t6wvIUnB67C2PRJulAsfAzFPf48sjTgX9SUEg/wKcv8Q4F2ZAyPS:VXI4BYCzDY+8aTgNrMKM8Q4F2Z9q","tlshash":"87a1743026e2107404a321eb678fa2c6723991678705de9079addb385f60c33a67bfd9","size":4684,"data":"","first_seen":"2023-03-07T01:15:21Z","last_seen":"2026-04-04T03:02:08.851805Z","times_seen":528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/portal/images/idp/localsts.png?id=A3911892BE04D81EBA5A8E0C74F77099AA1DB05E542FBFCC78C9DF4B0EC0E3A6","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"52.60.71.45","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","date":"2025-09-25T11:37:31.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.elluciancloud.com","organization":"Ellucian Company LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Tue, 17 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:85:36:37:6C:5F:EA:B8:DC:6B:49:F6:B1:A6:CC:0B:18:4B:05:79","sha256":"C6:61:7B:D3:8F:1C:A0:FC:95:22:40:92:15:A3:7A:BD:B3:DC:DE:63:03:51:C9:78:B9:DE:D0:A6:8B:6E:63:E4"}}},"request":{"raw":"GET /adfs/portal/images/idp/localsts.png?id=A3911892BE04D81EBA5A8E0C74F77099AA1DB05E542FBFCC78C9DF4B0EC0E3A6 HTTP/1.1\r\nHost: adfs4prodca01.elluciancloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1977\r\nContent-Type: image/png\r\nExpires: Sat, 25 Oct 2025 11:37:31 GMT\r\nETag: A3911892BE04D81EBA5A8E0C74F77099AA1DB05E542FBFCC78C9DF4B0EC0E3A6\r\nServer: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0\r\nDate: Thu, 25 Sep 2025 11:37:31 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced","md5":"3566703c2c7b0db8bf4b510967f7bbcb","sha1":"9a8f4a3cd97e204f979287ae691e0d401e95b63c","sha256":"a3911892be04d81eba5a8e0c74f77099aa1db05e542fbfcc78c9df4b0ec0e3a6","sha512":"a0ca8ea6935c9c021cc7788cbffebc2484500eaa46cef10ec590a10fdd800bb7f9ec46aa5798903ed7ee7739c921dea2267dd3f5a97108860a7a603da849feb0","ssdeep":"","tlshash":"0d410ada2b89cb4ccde409b68cb417a0d486145217c7512cbb82845598cf3cc7717f6b","first_seen":"2023-07-11T12:08:43Z","last_seen":"2026-03-31T04:29:49.222463Z","times_seen":50,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":297,"dns":1,"connect":100,"send":0,"wait":101,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/portal/images/idp/otherorganizations.png?id=A3911892BE04D81EBA5A8E0C74F77099AA1DB05E542FBFCC78C9DF4B0EC0E3A6","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","date":"2025-09-25T11:37:31.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.elluciancloud.com","organization":"Ellucian Company LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Tue, 17 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:85:36:37:6C:5F:EA:B8:DC:6B:49:F6:B1:A6:CC:0B:18:4B:05:79","sha256":"C6:61:7B:D3:8F:1C:A0:FC:95:22:40:92:15:A3:7A:BD:B3:DC:DE:63:03:51:C9:78:B9:DE:D0:A6:8B:6E:63:E4"}}},"request":{"raw":"GET /adfs/portal/images/idp/otherorganizations.png?id=A3911892BE04D81EBA5A8E0C74F77099AA1DB05E542FBFCC78C9DF4B0EC0E3A6 HTTP/1.1\r\nHost: adfs4prodca01.elluciancloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1977\r\nContent-Type: image/png\r\nExpires: Sat, 25 Oct 2025 11:37:31 GMT\r\nETag: A3911892BE04D81EBA5A8E0C74F77099AA1DB05E542FBFCC78C9DF4B0EC0E3A6\r\nServer: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0\r\nDate: Thu, 25 Sep 2025 11:37:31 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced","md5":"3566703c2c7b0db8bf4b510967f7bbcb","sha1":"9a8f4a3cd97e204f979287ae691e0d401e95b63c","sha256":"a3911892be04d81eba5a8e0c74f77099aa1db05e542fbfcc78c9df4b0ec0e3a6","sha512":"a0ca8ea6935c9c021cc7788cbffebc2484500eaa46cef10ec590a10fdd800bb7f9ec46aa5798903ed7ee7739c921dea2267dd3f5a97108860a7a603da849feb0","ssdeep":"","tlshash":"0d410ada2b89cb4ccde409b68cb417a0d486145217c7512cbb82845598cf3cc7717f6b","first_seen":"2023-07-11T12:08:43Z","last_seen":"2026-03-31T04:29:49.222463Z","times_seen":50,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/favicon.ico","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","date":"2025-09-25T11:37:31.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.elluciancloud.com","organization":"Ellucian Company LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Tue, 17 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:85:36:37:6C:5F:EA:B8:DC:6B:49:F6:B1:A6:CC:0B:18:4B:05:79","sha256":"C6:61:7B:D3:8F:1C:A0:FC:95:22:40:92:15:A3:7A:BD:B3:DC:DE:63:03:51:C9:78:B9:DE:D0:A6:8B:6E:63:E4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: adfs4prodca01.elluciancloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 25 Sep 2025 11:37:31 GMT\r\nConnection: close\r\nContent-Length: 315\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=us-ascii","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"67932d4b695e1d6b19dfc2e3610761ff","sha1":"a66898b36c94c53766e66c1a7aaeb149447ec083","sha256":"ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0","sha512":"97408b30995b72417494daca4c67488b77e3121a9db8bb3c2f204b49944457caa1af4b75730511b39fc9babcca5e1440168c3dbf3377b072866295bd490710fe","ssdeep":"","tlshash":"8be07d6d9856aac542a0f4bc75d193b48115038fd4e547d90051b21714891bcc1f0dcf","first_seen":"2023-04-05T14:02:50Z","last_seen":"2026-04-04T12:07:31.67525Z","times_seen":2130,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/portal/illustration/illustration.png?id=E3E4867B197A53DFF0DC8C5295E0B8CC7966976226A4CBB29BEDA9AE1F4A0565","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"52.60.71.45","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","date":"2025-09-25T11:37:31.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.elluciancloud.com","organization":"Ellucian Company LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Tue, 17 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:85:36:37:6C:5F:EA:B8:DC:6B:49:F6:B1:A6:CC:0B:18:4B:05:79","sha256":"C6:61:7B:D3:8F:1C:A0:FC:95:22:40:92:15:A3:7A:BD:B3:DC:DE:63:03:51:C9:78:B9:DE:D0:A6:8B:6E:63:E4"}}},"request":{"raw":"GET /adfs/portal/illustration/illustration.png?id=E3E4867B197A53DFF0DC8C5295E0B8CC7966976226A4CBB29BEDA9AE1F4A0565 HTTP/1.1\r\nHost: adfs4prodca01.elluciancloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 65801\r\nContent-Type: image/png\r\nExpires: Sat, 25 Oct 2025 11:37:32 GMT\r\nETag: E3E4867B197A53DFF0DC8C5295E0B8CC7966976226A4CBB29BEDA9AE1F4A0565\r\nServer: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0\r\nDate: Thu, 25 Sep 2025 11:37:31 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":65801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1301 x 900, 8-bit/color RGB, non-interlaced","md5":"404a018e9a5607213670768009cbe171","sha1":"99c55e46cf4da514d23a817467a9fa6a0f1fa68d","sha256":"e3e4867b197a53dff0dc8c5295e0b8cc7966976226a4cbb29beda9ae1f4a0565","sha512":"3e7b85b3ca1300ba7508417a13d9acae68f7a8c2de63ab79d7915c7f8d2d8cc15313178cfc2ebb8f0db225376096512cf111d501de3f976b88ababa403259a68","ssdeep":"1536:YATsoRSyUJ90hwS45CSrgHK3WI4Fv7LZeiJukUwn7R:YATsVRDa45JrgHk45ZeJXQ","tlshash":"5d53d087d5aef1f8f973e8bc8ce6064ca561da47c0a40c5bb3d1c2a9b905955238337b","first_seen":"2025-09-25T11:34:56.501534Z","last_seen":"2025-09-25T11:37:52.805653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"umonctoncacrm.elluciancrmrecruit.com/main.aspx","fqdn":"umonctoncacrm.elluciancrmrecruit.com","domain":"elluciancrmrecruit.com","tld":"com"},"ip":{"addr":"3.97.177.23","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-25T11:37:30.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.elluciancrmrecruit.com","organization":"Ellucian Company LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Thu, 05 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:22:25:2A:22:F6:1A:62:35:1B:03:ED:B1:5B:C1:E2:53:4D:8D:E1","sha256":"71:ED:4D:36:8B:A4:F6:B4:0F:38:9D:CC:7D:91:6A:7C:24:56:F8:8C:53:E0:E3:1A:3A:44:C2:AF:A9:E6:E0:AD"}}},"request":{"raw":"GET /main.aspx HTTP/1.1\r\nHost: umonctoncacrm.elluciancrmrecruit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 25 Sep 2025 11:37:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 530\r\nlocation: https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword\r\nset-cookie: AWSALB=/45WOcDTf57x8EfTgMdX41y08jK99JMeriGRVxw6UORNMans3s+L4gyFkTGzN5RIyqUMw3X8zUQbhIbeHTr0z9d925KQKyw4lrWjDSsrcvL3Z6MBQI5eyiS1tamt; Expires=Thu, 02 Oct 2025 11:37:30 GMT; Path=/\nAWSALBCORS=/45WOcDTf57x8EfTgMdX41y08jK99JMeriGRVxw6UORNMans3s+L4gyFkTGzN5RIyqUMw3X8zUQbhIbeHTr0z9d925KQKyw4lrWjDSsrcvL3Z6MBQI5eyiS1tamt; Expires=Thu, 02 Oct 2025 11:37:30 GMT; Path=/; SameSite=None; Secure\nReqClientId=85c583de-847f-493c-94a3-3ab25c629e6c; expires=Wed, 25-Sep-2075 11:37:30 GMT; path=/; secure; HttpOnly\r\ncache-control: private\r\nallow: OPTIONS,GET,HEAD,POST\r\nserver: \r\nx-ms-service-request-id: ffb63a87-cd5c-4225-b24c-82cb3f7557b8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreq_id: ffb63a87-cd5c-4225-b24c-82cb3f7557b8\r\npublic: OPTIONS,GET,HEAD,POST\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":22095,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":298,"dns":1,"connect":96,"send":0,"wait":108,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-25T11:37:30.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.elluciancloud.com","organization":"Ellucian Company LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Tue, 17 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:85:36:37:6C:5F:EA:B8:DC:6B:49:F6:B1:A6:CC:0B:18:4B:05:79","sha256":"C6:61:7B:D3:8F:1C:A0:FC:95:22:40:92:15:A3:7A:BD:B3:DC:DE:63:03:51:C9:78:B9:DE:D0:A6:8B:6E:63:E4"}}},"request":{"raw":"GET /adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword HTTP/1.1\r\nHost: adfs4prodca01.elluciancloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-cache,no-store\r\nPragma: no-cache\r\nContent-Length: 22095\r\nContent-Type: text/html; charset=utf-8\r\nExpires: -1\r\nServer: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0\r\nX-Frame-Options: DENY\r\nDate: Thu, 25 Sep 2025 11:37:31 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":22095,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4314), with CRLF line terminators","md5":"9e539b59c4cce9cbe6d720b79120ed98","sha1":"9e914aa229ed2d650a0f98a8baf0c8f827ddf2eb","sha256":"236279d806bc160c0641f1d24576d8e924fd64bd7ce4adaf924dc011857c9114","sha512":"32229bd8f90bee1bd707b05cb1612ec81d0e0447f67b165d51b7ae13ccdcfb993e96b064c664b959b5b00338b3661b612ddd03b21bd2332bff420f79766aa1e2","ssdeep":"384:rPCDWobI5EnqYNOQFYiGuRcxvQibnOEFF0YMWhSQku8PueCpKzCKqz4J28Iv:ra9I5EnqugWEFWYJr8PspfKqz4J28Iv","tlshash":"e6a2096a249554b249b72377bfdb9649ff7440234a01c900b8ac86a61fb1c129b77ffc","first_seen":"2025-09-25T11:37:52.807014Z","last_seen":"2025-09-25T11:37:52.807014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":507,"dns":43,"connect":99,"send":0,"wait":127,"receive":99,"ssl":362},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs4prodca01.elluciancloud.com/adfs/portal/css/style.css?id=0A13280A86E7DFA6949BD016EA848912FCAFC05E88CBEDF538AC325B27041205","fqdn":"adfs4prodca01.elluciancloud.com","domain":"elluciancloud.com","tld":"com"},"ip":{"addr":"99.79.131.98","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword","date":"2025-09-25T11:37:31.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.elluciancloud.com","organization":"Ellucian Company LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Tue, 17 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:85:36:37:6C:5F:EA:B8:DC:6B:49:F6:B1:A6:CC:0B:18:4B:05:79","sha256":"C6:61:7B:D3:8F:1C:A0:FC:95:22:40:92:15:A3:7A:BD:B3:DC:DE:63:03:51:C9:78:B9:DE:D0:A6:8B:6E:63:E4"}}},"request":{"raw":"GET /adfs/portal/css/style.css?id=0A13280A86E7DFA6949BD016EA848912FCAFC05E88CBEDF538AC325B27041205 HTTP/1.1\r\nHost: adfs4prodca01.elluciancloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adfs4prodca01.elluciancloud.com/adfs/ls/?wa=wsignin1.0\u0026wtrealm=https%3a%2f%2fumonctoncacrm.elluciancrmrecruit.com%2f\u0026wctx=rm%3d1%26id%3d461b0073-6e03-433d-8a7c-2ee6242555f4%26ru%3dhttps%253a%252f%252fumonctoncacrm.elluciancrmrecruit.com%252fmain.aspx%26crmorgid%3da836caed-6f1a-4bc1-9ce1-62e02159ce05\u0026wct=2025-09-25T11%3a37%3a30Z\u0026wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 8144\r\nContent-Type: text/css\r\nExpires: Sat, 25 Oct 2025 11:37:31 GMT\r\nETag: 0A13280A86E7DFA6949BD016EA848912FCAFC05E88CBEDF538AC325B27041205\r\nServer: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0\r\nDate: Thu, 25 Sep 2025 11:37:31 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":8144,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"97d3f4a129dab9dbd0a18296f5b833c2","sha1":"dc72a652e8d9d60e291fcbedae5669a97fe25130","sha256":"0a13280a86e7dfa6949bd016ea848912fcafc05e88cbedf538ac325b27041205","sha512":"1f6c5ba2cb9d0c62df25f1f23bbc7ca7c0c17269b94828ce877e3c67380512542efd9f2734a987bffa0437d6343cdd00439153328f55602d0248197f33bc1b25","ssdeep":"192:x+0WahH4oFFjC0x+PSheX8Ey6aAxdubbtm:xYofr+dxj","tlshash":"8ff172259542a11c62370f21efd3904cfb2a102b674b1aac7eedb654cfb96d94221fcc","first_seen":"2023-04-05T18:44:36Z","last_seen":"2026-03-27T03:57:25.097128Z","times_seen":195,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}