Report - workplace-hud.csod.com/phnx/driver.aspx?routename=Reviews/User/ReviewOverview&t=367&r=1&tu=350579&u=3566&k=1

Report Overview

Visited public
2025-07-08 16:39:34
Tags
Submit Tags
URL
workplace-hud.csod.com/phnx/driver.aspx?routename=Reviews/User/ReviewOverview&t=367&r=1&tu=350579&u=3566&k=1
Finishing URL
workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1
IP / ASN
54.230.82.246
#16509 AMAZON-02
Title
+ Cornerstone OnDemand +

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
workplace-hud.csod.com	unknown	1998-05-01	2025-06-17	2025-07-03	5.9 kB	208 kB	54.230.82.246
us-il2-hs.api.csod.com	unknown	1998-05-01	2025-04-24	2025-07-03	2.2 kB	1.6 MB	44.239.12.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1	ScriptElement	5.4 kB	2025-04-24	2025-07-08
Pretty URL workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 IP 54.230.82.246 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-24 17:17 Last Seen2025-07-08 16:39 Times Seen5 Hash 248c8238ec787112495c2e30be0f56c6 6305c543f17f1aac9df5ef000eefe6100631a9e1 9e1d6bc04e7931d48ca82254d6adaa019b80de79ac32c187408ab5af31a90d9b Loading...

	workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1	ScriptElement	640 B	2023-12-20	2025-07-08
Pretty URL workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 IP 54.230.82.246 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-20 15:25 Last Seen2025-07-08 16:39 Times Seen10 Hash d2b75cf87e0e8b9020d685bb0c4a4eaa fe33f0752319911d440e650d40269800946d8fd8 afb0d3552cd35fd70f7a871ca178101fc7f1f10601770183312c26e21e4c2739 Loading...

	workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1	ScriptElement	664 B	2024-07-03	2025-07-08
Pretty URL workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 IP 54.230.82.246 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-07-03 15:24 Last Seen2025-07-08 16:39 Times Seen12 Hash 439ce953926623158465625dab29252a 5eea50f95847d38073e0ee987dbfc3e56a94da4c 4890b73571db0c11d88a6f8154d17c919bacf1daa57008d4021738cfea5ba5be Loading...

	us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=render	ScriptElement	848 kB	2025-04-23	2025-07-08
Pretty URL us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=render IP 44.239.12.170 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-23 19:04 Last Seen2025-07-08 16:39 Times Seen9 Hash 9d1b9c7d87347b2a8609299359834936 a99d41c0e448c18ce73da7c832f843e9a067d1d2 524cd4db04e7208f1ab68f6e3ace507206e0e5e612f38861bbbe4c7d12859e36 Loading...

	us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=backgroundClassicResponsive	ScriptElement	548 kB	2025-04-23	2025-07-08
Pretty URL us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=backgroundClassicResponsive IP 44.239.12.170 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-23 19:04 Last Seen2025-07-08 16:39 Times Seen7 Hash cfce4fc34cae2a73ae84efb959f2c19a e4b2fa98fce1ddd8e51daf37065272a849b371ce ceff4baf39665058193b10a37089a970d05194f5d89e88c8e5dd3a239350f149 Loading...

HTTP Transactions (11)

	URL	IP	Response	Size
	GET workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1	54.230.82.246	200 OK	19 kB
URL User Request GET workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 IP 54.230.82.246:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subject.csod.com Fingerprint5F:09:0C:B0:63:DF:18:6A:BD:5F:25:1B:F8:9C:B9:A6:A3:E6:74:7E ValidityMon, 23 Dec 2024 00:00:00 GMT - Fri, 23 Jan 2026 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (9332), with CRLF line terminators Size 19 kB (19107 bytes) Hash 59649926b50b1dbf489bae1ff7584001 60d1defbe8c7fd6a72c9c90c094e2c3171eda741 c367e96904b812c1675442a52ceef6398d252d376eee5b5cf3a6a98308e3aee9 HTTP Headers GET /login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 HTTP/1.1 Host: workplace-hud.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: ASP.NET_SessionId=qhe0shgaltjkcq2ucrtxq05t Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/html; charset=utf-8 cache-control: private server: x-robots-tag: noindex x-xss-protection: 0 set-cookie: loginCyberU_LogoutRedirectUrl=; expires=Mon, 07-Jul-2025 16:39:14 GMT; path=/; HttpOnly; SameSite=None CYBERU_backUrl=http://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1; expires=Wed, 09-Jul-2025 16:39:14 GMT; path=/; secure; HttpOnly; SameSite=None true_route: /login/render.aspx true_status: Ok correlation_id: 5ac9a17a-813e-40f5-bfe5-34c563caf9c9 s-n: ECWT4003 p3p: CP="DSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSD" pics-label: (pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline EN v2.0" l r (nz 1 vz 1 lz 1 oz 1 cz 1) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0)) permissions-policy: geolocation=() x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Tue, 08 Jul 2025 16:39:14 GMT content-encoding: gzip vary: accept-encoding x-cache: Miss from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: xaD5dMlpC0Lc8mJkG_9Z96cbRLjgbwjM9OLvDB6xVwq2H2_yHWhJpg== X-Firefox-Spdy: h2

	GET workplace-hud.csod.com/login/node_modules/player-theming/theme.css?ver=638875643544664168	54.230.82.246	200 OK	138 kB
URL GET workplace-hud.csod.com/login/node_modules/player-theming/theme.css?ver=638875643544664168 IP 54.230.82.246:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.csod.com Fingerprint5F:09:0C:B0:63:DF:18:6A:BD:5F:25:1B:F8:9C:B9:A6:A3:E6:74:7E ValidityMon, 23 Dec 2024 00:00:00 GMT - Fri, 23 Jan 2026 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 138 kB (137722 bytes) Hash 0335cc5a22a31599a26300d95436172c dfd1b17039dfd759f20094480bcfeb20454ec49b ee68ea1bf547ad4192633ad92d8995d176909a5a05e3e248c94e1c75bc286b3e HTTP Headers GET /login/node_modules/player-theming/theme.css?ver=638875643544664168 HTTP/1.1 Host: workplace-hud.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Cookie: ASP.NET_SessionId=qhe0shgaltjkcq2ucrtxq05t; CYBERU_backUrl=http://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/css last-modified: Sat, 17 Feb 2024 17:54:16 GMT content-encoding: gzip server: true_route: /login/node_modules/player-theming/theme.css true_status: Ok correlation_id: 2ce6c884-d785-499b-a5e9-9bd705da5925 s-n: ECWT4001 p3p: CP="DSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSD" pics-label: (pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline EN v2.0" l r (nz 1 vz 1 lz 1 oz 1 cz 1) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0)) x-content-type-options: nosniff expect-ct: enforce permissions-policy: geolocation=() strict-transport-security: max-age=31536000; includeSubDomains date: Tue, 08 Jul 2025 16:39:15 GMT etag: W/"014b952ca61da1:0" vary: accept-encoding x-cache: Miss from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 2AcmBjw19L7xuQrnAhaBZuU24zngn7KpfoX0AtUR4qBWzMuNj899eg== X-Firefox-Spdy: h2

	GET workplace-hud.csod.com/favicon.ico	54.230.82.246	404 Not Found	1.2 kB
URL GET workplace-hud.csod.com/favicon.ico IP 54.230.82.246:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.csod.com Fingerprint5F:09:0C:B0:63:DF:18:6A:BD:5F:25:1B:F8:9C:B9:A6:A3:E6:74:7E ValidityMon, 23 Dec 2024 00:00:00 GMT - Fri, 23 Jan 2026 23:59:59 GMT File type HTML document, ASCII text, with CRLF line terminators Size 1.2 kB (1245 bytes) Hash 5343c1a8b203c162a3bf3870d9f50fd4 04b5b886c20d88b57eea6d8ff882624a4ac1e51d dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f HTTP Headers GET /favicon.ico HTTP/1.1 Host: workplace-hud.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Cookie: ASP.NET_SessionId=qhe0shgaltjkcq2ucrtxq05t; CYBERU_backUrl=http://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1; CYBERU_lastculture=en-US Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 404 Not Found content-type: text/html server: true_route: /favicon.ico true_status: Ok correlation_id: 76ea6154-3451-45ee-bf89-05b14d1032e0 s-n: ECWT4002 p3p: CP="DSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSD" pics-label: (pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline EN v2.0" l r (nz 1 vz 1 lz 1 oz 1 cz 1) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0)) permissions-policy: geolocation=() x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Tue, 08 Jul 2025 16:39:17 GMT content-encoding: gzip vary: accept-encoding x-cache: Error from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: qPdilGjLjeJdhoEOqirGXu0L5D3jqhnXgEaBbgVeuS-Z-dIK7LUPAg== X-Firefox-Spdy: h2

	GET us-il2-hs.api.csod.com/gts-custom-login-page/V1/GetCustomLoginPage/defaultclp?corpname=workplace-hud	44.239.12.170	200 OK	154 kB
URL GET us-il2-hs.api.csod.com/gts-custom-login-page/V1/GetCustomLoginPage/defaultclp?corpname=workplace-hud IP 44.239.12.170:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.api.csod.com Fingerprint8C:DA:C6:09:1D:EC:14:41:08:1C:DC:0A:B9:51:FE:63:81:AE:23:AF ValidityMon, 19 Aug 2024 00:00:00 GMT - Fri, 19 Sep 2025 23:59:59 GMT File type JSON text data Size 154 kB (154404 bytes) Hash 53545b2cd0e7570609fbdb50f331aaf4 b77842da4a2ab7aa81374e8e9b2ec7f6994c495c 5fb77c394fb61db77098170a3ffa11e36ef8405dab62cbbf421228d30b6e881f HTTP Headers GET /gts-custom-login-page/V1/GetCustomLoginPage/defaultclp?corpname=workplace-hud HTTP/1.1 Host: us-il2-hs.api.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/json, text/plain, /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json; charset=utf-8 Origin: https://workplace-hud.csod.com DNT: 1 Connection: keep-alive Referer: https://workplace-hud.csod.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: application/json; charset=utf-8 date: Tue, 08 Jul 2025 16:39:22 GMT server: edge cache-control: public,max-age=86400 x-gateway-latency: 0 x-gateway-upstream-latency: 106 x-gateway-upstream-status: 200 access-control-allow-origin: https://workplace-hud.csod.com vary: Origin access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubdomains x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2`

	OPTIONS us-il2-hs.api.csod.com/gts-custom-login-page/V1/GetCustomLoginPage/defaultclp?corpname=workplace-hud	44.239.12.170	204 No Content	0 B
URL OPTIONS us-il2-hs.api.csod.com/gts-custom-login-page/V1/GetCustomLoginPage/defaultclp?corpname=workplace-hud IP 44.239.12.170:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.api.csod.com Fingerprint8C:DA:C6:09:1D:EC:14:41:08:1C:DC:0A:B9:51:FE:63:81:AE:23:AF ValidityMon, 19 Aug 2024 00:00:00 GMT - Fri, 19 Sep 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS /gts-custom-login-page/V1/GetCustomLoginPage/defaultclp?corpname=workplace-hud HTTP/1.1 Host: us-il2-hs.api.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Referer: https://workplace-hud.csod.com/ Origin: https://workplace-hud.csod.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 204 No Content date: Tue, 08 Jul 2025 16:39:22 GMT x-kong-response-latency: 0 server: edge access-control-allow-origin: https://workplace-hud.csod.com access-control-allow-credentials: true vary: Origin access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS access-control-allow-headers: content-type content-type: text/plain charset=UTF-8 content-length: 0 access-control-max-age: 864000 X-Firefox-Spdy: h2`

	GET us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=backgroundClassicResponsive	44.239.12.170	200 OK	548 kB
URL GET us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=backgroundClassicResponsive IP 44.239.12.170:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.api.csod.com Fingerprint8C:DA:C6:09:1D:EC:14:41:08:1C:DC:0A:B9:51:FE:63:81:AE:23:AF ValidityMon, 19 Aug 2024 00:00:00 GMT - Fri, 19 Sep 2025 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (65451) Size 548 kB (548073 bytes) Hash cfce4fc34cae2a73ae84efb959f2c19a e4b2fa98fce1ddd8e51daf37065272a849b371ce ceff4baf39665058193b10a37089a970d05194f5d89e88c8e5dd3a239350f149 HTTP Headers `GET /gts-custom-login-page/V1/Component?componentName=backgroundClassicResponsive HTTP/1.1 Host: us-il2-hs.api.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://workplace-hud.csod.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: text/javascript; charset=utf-8 date: Tue, 08 Jul 2025 16:39:24 GMT server: edge cache-control: public,max-age=86400 x-gateway-latency: 0 x-gateway-upstream-latency: 50 x-gateway-upstream-status: 200 vary: Origin access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubdomains x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2`

	GET workplace-hud.csod.com/phnx/driver.aspx?routename=Reviews/User/ReviewOverview&t=367&r=1&tu=350579&u=3566&k=1	54.230.82.246	302 Found	19 kB
URL User Request GET workplace-hud.csod.com/phnx/driver.aspx?routename=Reviews/User/ReviewOverview&t=367&r=1&tu=350579&u=3566&k=1 IP 54.230.82.246:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subject.csod.com Fingerprint5F:09:0C:B0:63:DF:18:6A:BD:5F:25:1B:F8:9C:B9:A6:A3:E6:74:7E ValidityMon, 23 Dec 2024 00:00:00 GMT - Fri, 23 Jan 2026 23:59:59 GMT File type Size 19 kB (19107 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /phnx/driver.aspx?routename=Reviews/User/ReviewOverview&t=367&r=1&tu=350579&u=3566&k=1 HTTP/1.1 Host: workplace-hud.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found content-type: text/html; charset=utf-8 content-length: 295 location: /default.aspx?ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 server: x-robots-tag: noindex true_route: /phnx/driver.aspx true_status: Ok correlation_id: 288410f1-bf83-4d4c-bb15-91b75ce76c0f s-n: ECWT4003 p3p: CP="DSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSD" pics-label: (pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline EN v2.0" l r (nz 1 vz 1 lz 1 oz 1 cz 1) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0)) permissions-policy: geolocation=() x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Tue, 08 Jul 2025 16:39:13 GMT x-cache: Miss from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: h4_H9qW_3wi0dztu_GcfxRBAGEV7SanGWyCN1uJ9gr_GJ0KNxTcbiQ== X-Firefox-Spdy: h2

	GET workplace-hud.csod.com/default.aspx?ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1	54.230.82.246	302 Found	19 kB
URL User Request GET workplace-hud.csod.com/default.aspx?ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 IP 54.230.82.246:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subject.csod.com Fingerprint5F:09:0C:B0:63:DF:18:6A:BD:5F:25:1B:F8:9C:B9:A6:A3:E6:74:7E ValidityMon, 23 Dec 2024 00:00:00 GMT - Fri, 23 Jan 2026 23:59:59 GMT File type Size 19 kB (19107 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /default.aspx?ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 HTTP/1.1 Host: workplace-hud.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found content-type: text/html; charset=utf-8 content-length: 318 cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: -1 location: /login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 server: x-robots-tag: noindex x-frame-options: SAMEORIGIN set-cookie: ASP.NET_SessionId=qhe0shgaltjkcq2ucrtxq05t; path=/; secure; HttpOnly; SameSite=None; SameSite=None true_route: /default.aspx true_status: Ok correlation_id: 714a6921-6b9e-4ee7-b7e4-a037e0dac52b s-n: ECWT4004 p3p: CP="DSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSD" pics-label: (pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline EN v2.0" l r (nz 1 vz 1 lz 1 oz 1 cz 1) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0)) permissions-policy: geolocation=() x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Tue, 08 Jul 2025 16:39:13 GMT x-cache: Miss from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: kAkSCa4EAr1unyL_izt8wsxV4H6xkg0CZaxAXVzAlfusOeQ0ekR0dQ== X-Firefox-Spdy: h2

	GET workplace-hud.csod.com/login/node_modules/player-core-ui/assets/csod-icons.css?ver=638875643544664168	54.230.82.246	200 OK	3.6 kB
URL GET workplace-hud.csod.com/login/node_modules/player-core-ui/assets/csod-icons.css?ver=638875643544664168 IP 54.230.82.246:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.csod.com Fingerprint5F:09:0C:B0:63:DF:18:6A:BD:5F:25:1B:F8:9C:B9:A6:A3:E6:74:7E ValidityMon, 23 Dec 2024 00:00:00 GMT - Fri, 23 Jan 2026 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 3.6 kB (3617 bytes) Hash 4ed4eee327e6a1618b503e4b9e25ff16 d355d737449c366eb302119fdd1ec594f35cb813 5efc73d62973eb12f9502582234e76b90e4321d87604d837b979e755b82189b0 HTTP Headers GET /login/node_modules/player-core-ui/assets/csod-icons.css?ver=638875643544664168 HTTP/1.1 Host: workplace-hud.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Cookie: ASP.NET_SessionId=qhe0shgaltjkcq2ucrtxq05t; CYBERU_backUrl=http://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/css last-modified: Sat, 17 Feb 2024 17:54:16 GMT content-encoding: gzip server: true_route: /login/node_modules/player-core-ui/assets/csod-icons.css true_status: Ok correlation_id: 3c59ad9c-43b9-4b8b-b254-bd53748bddd5 s-n: ECWT4006 p3p: CP="DSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSD" pics-label: (pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline EN v2.0" l r (nz 1 vz 1 lz 1 oz 1 cz 1) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0)) permissions-policy: geolocation=() x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Tue, 08 Jul 2025 16:39:15 GMT etag: W/"014b952ca61da1:0" vary: accept-encoding x-cache: Miss from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: emSFQy1TseQk1sdpJGQIPucNuHf4l1jWH1xkW8Gk1bD_Px0QSW0KJQ== X-Firefox-Spdy: h2

	GET workplace-hud.csod.com/login/pages/render.styles.css?ver=638875643544664168	54.230.82.246	200 OK	83 B
URL GET workplace-hud.csod.com/login/pages/render.styles.css?ver=638875643544664168 IP 54.230.82.246:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.csod.com Fingerprint5F:09:0C:B0:63:DF:18:6A:BD:5F:25:1B:F8:9C:B9:A6:A3:E6:74:7E ValidityMon, 23 Dec 2024 00:00:00 GMT - Fri, 23 Jan 2026 23:59:59 GMT File type ASCII text, with no line terminators Size 83 B (83 bytes) Hash 9c46de7b4f77ce66cbc7873d9fb10694 7fbc772a28fab554769294b47c413018da1d0ec9 ad562293fc317d24c172e3dc3c26bdeae80842f1331f892d30608d48cf837885 HTTP Headers GET /login/pages/render.styles.css?ver=638875643544664168 HTTP/1.1 Host: workplace-hud.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Cookie: ASP.NET_SessionId=qhe0shgaltjkcq2ucrtxq05t; CYBERU_backUrl=http://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/css content-length: 83 last-modified: Sat, 17 Feb 2024 17:54:16 GMT accept-ranges: bytes etag: "014b952ca61da1:0" server: true_route: /login/pages/render.styles.css true_status: Ok correlation_id: 08649897-2fa5-4ab6-b406-6d5e8ab7fcf8 s-n: ECWT4005 p3p: CP="DSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSD" pics-label: (pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline EN v2.0" l r (nz 1 vz 1 lz 1 oz 1 cz 1) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0)) permissions-policy: geolocation=() x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Tue, 08 Jul 2025 16:39:14 GMT x-cache: Miss from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: vWEBzjZkablASW6ZS-mZ5YdT5x77l3r0zwTJuftC-60BoCi3pFP9Rg== X-Firefox-Spdy: h2

	GET us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=render	44.239.12.170	200 OK	848 kB
URL GET us-il2-hs.api.csod.com/gts-custom-login-page/V1/Component?componentName=render IP 44.239.12.170:443 ASN #16509 AMAZON-02 Requested by https://workplace-hud.csod.com/login/render.aspx?id=defaultclp&ReturnUrl=https%3a%2f%2fworkplace-hud.csod.com%2fphnx%2fdriver.aspx%3froutename%3dReviews%2fUser%2fReviewOverview%26t%3d367%26r%3d1%26tu%3d350579%26u%3d3566%26k%3d1 Certificate IssuerDigiCert Inc Subject.api.csod.com Fingerprint8C:DA:C6:09:1D:EC:14:41:08:1C:DC:0A:B9:51:FE:63:81:AE:23:AF ValidityMon, 19 Aug 2024 00:00:00 GMT - Fri, 19 Sep 2025 23:59:59 GMT File type JavaScript source, Unicode text, UTF-8 text, with very long lines (42343), with LF, NEL line terminators Size 848 kB (847616 bytes) Hash 9d1b9c7d87347b2a8609299359834936 a99d41c0e448c18ce73da7c832f843e9a067d1d2 524cd4db04e7208f1ab68f6e3ace507206e0e5e612f38861bbbe4c7d12859e36 HTTP Headers `GET /gts-custom-login-page/V1/Component?componentName=render HTTP/1.1 Host: us-il2-hs.api.csod.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://workplace-hud.csod.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: text/javascript; charset=utf-8 date: Tue, 08 Jul 2025 16:39:16 GMT server: edge cache-control: public,max-age=86400 x-gateway-latency: 0 x-gateway-upstream-latency: 98 x-gateway-upstream-status: 200 vary: Origin access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubdomains x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type