{"report_id":"f216d974-8f11-4493-a243-7ca0acfd72ea","version":6,"status":"done","tags":[],"date":"2025-09-24T18:44:25Z","url":{"schema":"https","addr":"lpda9f27a988.hana.ondemand.com/p/5GOzH?utm_source=LSI","fqdn":"lpda9f27a988.hana.ondemand.com","domain":"ondemand.com","tld":"com"},"ip":{"addr":"155.56.210.43","port":0,"asn":12510,"as":"SAP SE","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"lpda9f27a988.hana.ondemand.com/p/5GOzH?utm_source=LSI","fqdn":"lpda9f27a988.hana.ondemand.com","domain":"ondemand.com","tld":"com"},"title":"lpda9f27a988.hana.ondemand.com/p/5GOzH?utm_source=LSI"},"submit":{"url":{"schema":"https","addr":"lpda9f27a988.hana.ondemand.com/p/5GOzH?utm_source=LSI","fqdn":"lpda9f27a988.hana.ondemand.com","domain":"ondemand.com","tld":"com"},"ip":{"addr":"155.56.210.43","port":0,"asn":12510,"as":"SAP SE","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T18:44:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"lpda9f27a988.hana.ondemand.com","ip":{"addr":"155.56.210.43","port":443,"asn":12510,"as":"SAP SE","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2019-12-11T13:10:44Z","last_seen":"2023-03-24T10:16:45Z","alert_count":0,"request_count":2,"received_data":1768,"sent_data":1010,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"lpda9f27a988.hana.ondemand.com/p/5GOzH?utm_source=LSI","fqdn":"lpda9f27a988.hana.ondemand.com","domain":"ondemand.com","tld":"com"},"ip":{"addr":"155.56.210.43","port":443,"asn":12510,"as":"SAP SE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T18:44:04.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hana.ondemand.com","organization":"SAP SE"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EB:7B:01:1F:5E:3F:29:6A:B0:0E:BF:94:17:4D:FE:55:96:FA:E1:6E","sha256":"76:F4:77:2D:6D:DA:80:70:B7:E9:B4:BA:CE:10:9C:6E:76:3F:9E:D8:0E:44:7E:3E:61:56:F7:52:31:25:E2:AB"}}},"request":{"raw":"GET /p/5GOzH?utm_source=LSI HTTP/1.1\r\nHost: lpda9f27a988.hana.ondemand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 \r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-language: en-US\r\ncontent-security-policy: form-action 'self'\r\ndate: Wed, 24 Sep 2025 18:44:04 GMT\r\nexpires: 0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vcap-request-id: 7c5028fe-ce70-40a2-7649-92116c64e8a8\r\nx-xss-protection: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload;\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 275\r\nKeep-Alive: timeout=20\r\nConnection: keep-alive\r\nServer: SAP\r\nOrigin-Trial: Avu6rn7emV5gK8gvyGHlX8TMqM9uo1FacP2j/RWTq+8j+yKnqcTO0TQh0bXJ/7QntxD4/JzXv8aXoqxxZQuqXgYAAABdeyJvcmlnaW4iOiJodHRwczovL29uZGVtYW5kLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nCritical-Origin-Trial: Tpcd\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":275,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"63c21fee8b984ed37c619891794fdd0a","sha1":"f5cac764832e02395877d0441056fabb9dec7651","sha256":"b8c18f3d1ceac0b6650acd523ae82270f0a49688c777bb4e3270d95f12c1786c","sha512":"8e8012c56faa74d3ac0fbe6dfb4974d712e714ec0a0d475693aec2e02b66bb828a9e39110b2214d4fb3f567d7c5cd2ad7d034cf16fabfee0c433cca2eb217d5b","ssdeep":"","tlshash":"f8d0ebf2032083c10c4e0bc006b300694a2093b41673438030d8c4bea7c9009cf36cc8","first_seen":"2025-09-24T18:44:26.313534Z","last_seen":"2025-09-24T18:44:26.313534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":166,"dns":40,"connect":27,"send":0,"wait":69,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lpda9f27a988.hana.ondemand.com/favicon.ico","fqdn":"lpda9f27a988.hana.ondemand.com","domain":"ondemand.com","tld":"com"},"ip":{"addr":"155.56.210.43","port":443,"asn":12510,"as":"SAP SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lpda9f27a988.hana.ondemand.com/p/5GOzH?utm_source=LSI","date":"2025-09-24T18:44:05.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hana.ondemand.com","organization":"SAP SE"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EB:7B:01:1F:5E:3F:29:6A:B0:0E:BF:94:17:4D:FE:55:96:FA:E1:6E","sha256":"76:F4:77:2D:6D:DA:80:70:B7:E9:B4:BA:CE:10:9C:6E:76:3F:9E:D8:0E:44:7E:3E:61:56:F7:52:31:25:E2:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lpda9f27a988.hana.ondemand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lpda9f27a988.hana.ondemand.com/p/5GOzH?utm_source=LSI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 \r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nDate: Wed, 24 Sep 2025 18:44:05 GMT\r\nKeep-Alive: timeout=20\r\nConnection: keep-alive\r\nServer: SAP\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nOrigin-Trial: Avu6rn7emV5gK8gvyGHlX8TMqM9uo1FacP2j/RWTq+8j+yKnqcTO0TQh0bXJ/7QntxD4/JzXv8aXoqxxZQuqXgYAAABdeyJvcmlnaW4iOiJodHRwczovL29uZGVtYW5kLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nCritical-Origin-Trial: Tpcd\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8dffbe25f8cfc96dbce6995173721ded","sha1":"df8f232c7d6924c36b78e4aa24f4002e1edcb1c4","sha256":"3be8dcd93f91fab47bd4f4abb65bdc26a70cf1b3f3e9ab24086569cc1b523391","sha512":"ec5d3bb6ec383fea8a3fb3a2f6522065ee721b00b3aaa24394835c188c0a13e5b80cfb67dd540c2db53c4938f98dfe8922a43e95bbac885691b22c7e3011476d","ssdeep":"","tlshash":"9fb0122005b5901fdf32d07401c82359a104d7c109640d9039cecf30fc6047f5468405","first_seen":"2025-09-24T18:44:26.315072Z","last_seen":"2025-09-24T18:44:26.315072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1047,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}