Report - 7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx

Report Overview

Submitted URL
7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx
IP
52.183.87.159
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-04-24 20:22:08
Access
public
Website Title
MU2013 Commander obs.pdf
Final URL
file:///root/Downloads/MU2013%20Commander%20obs.pdf
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com	unknown	1994-04-12	2020-03-10	2023-03-14	2.2 kB	2.3 kB	52.183.87.159
mktdplp102cdn.azureedge.net	41334	2014-01-22	2018-02-07	2024-04-24	481 B	11 kB	152.199.19.161
www.fedsig.com	unknown	1996-12-05	2013-07-26	2024-01-26	1.2 kB	1.5 MB	104.20.83.114

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.fedsig.com/sites/default/files/news/pdf/MU2013%20Commander%20obs.pdf
IP
104.20.83.114
ASN
#13335 CLOUDFLARENET

File type
PDF document, version 1.4, 1 pages
Size
732 kB (731687 bytes)
Hash
4079c020f03ea0ddfc29a0ff8b2a2f3e
71c2e5ca64ed940bc7fdc2820bf5e6c194dcb6fd
f01ff2d8c62bd6e7cf5d2b30602d2aacd233c0369e5398c757e6f81b1c164aea

JavaScript (1)

	URL	Size	First Seen	Last Seen
	mktdplp102cdn.azureedge.net/public/latest/js/bot-detection.js?v=1.84.2007	29 kB	2023-06-13	2024-04-24
Pretty URL mktdplp102cdn.azureedge.net/public/latest/js/bot-detection.js?v=1.84.2007 IP 152.199.19.161 ASN #15133 EDGECAST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-13 06:25:51 Last Seen2024-04-24 22:22:09 Times Seen4 Hash a4caaaf77aec8c639811849b3f63ca03 6bf589e074b29cda043cdf314c86e920de7967ab 9b84ef7aceabcc916edf9d2810fca33e19b0c3cd51bf0eab66098d497a26943d Loading...

HTTP Transactions (6)

	URL	IP	Response	Size
	7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx	52.183.87.159	200 OK	682 B
URL User Request GET HTTP/2 7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx IP 52.183.87.159:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerMicrosoft Corporation Subject.svc.dynamics.com FingerprintF1:81:46:53:FC:B3:33:3C:B1:54:36:ED:A3:03:17:E0:33:56:9A:E2 ValidityTue, 02 Apr 2024 03:34:07 GMT - Fri, 28 Mar 2025 03:34:07 GMT File type HTML document, ASCII text, with very long lines (682), with no line terminators Size 682 B (682 bytes) Hash 8fb6e724d27c085da08af9c8eee7d5ee 5ab6f08cf2650aa51b5987fa0004910ade89bac8 3c8c21ac71486c9d1444b36d847e584be435304d9b9659292b960f2958660ef4 HTTP Headers GET /t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx HTTP/1.1 Host: 7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-length: 682 content-type: text/html; charset=utf-8 server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0 set-cookie: 79f08280-5c63-4331-b04d-fb6f39afda51=3VCes8P0GSWMm4wFr4VyebVVLOFJ_o21djWO4oQQQFA; expires=Fri, 24 Apr 2026 20:21:43 GMT; path=/; secure; httponly; SameSite=None 319af4c0-e197-4de9-8a9b-fe98c8a2ca04=3VCes8P0GSWMm4wFr4VyebVVLOFJ_o21djWO4oQQQFA; path=/; secure; httponly; SameSite=None x-activity-id: b95c6cd8-2efe-46e0-b099-c618ff480b72 x-servicefabricrequestid: 835bc703-f0a6-4bf5-9649-1d2ad848d872, 691a4acb-93dd-4358-a806-78ced91227bf x-ms-activity-id: b95c6cd8-2efe-46e0-b099-c618ff480b72 api-deprecated: False x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Wed, 24 Apr 2024 20:21:42 GMT X-Firefox-Spdy: h2

	mktdplp102cdn.azureedge.net/public/latest/js/bot-detection.js?v=1.84.2007	152.199.19.161	200 OK	10 kB
URL GET HTTP/2 mktdplp102cdn.azureedge.net/public/latest/js/bot-detection.js?v=1.84.2007 IP 152.199.19.161:443 ASN #15133 EDGECAST Requested by https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx Certificate IssuerDigiCert Inc Subject.vo.msecnd.net Fingerprint86:E0:37:E4:B1:31:51:81:DD:54:33:82:FF:4D:EB:D1:15:5F:65:C4 ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT File type JavaScript source, Unicode text, UTF-8 text, with very long lines (19601), with CRLF line terminators Size 10 kB (10471 bytes) Hash 629fb69a45e4e0c36fd741fbde32cb09 5f194b5d54b012872469ab3173d55c188d101858 84eacf3f43bf7b9177fb78c533f34c3930cd517da0295bfd57bd5e01b2400ed8 HTTP Headers `GET /public/latest/js/bot-detection.js?v=1.84.2007 HTTP/1.1 Host: mktdplp102cdn.azureedge.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-encoding: gzip access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 528205 content-md5: Yp+2mkXk4MNv10H73jLLCQ== content-type: application/x-javascript date: Wed, 24 Apr 2024 20:21:44 GMT etag: 0x8DB0E75DA644AE9 last-modified: Tue, 14 Feb 2023 10:25:54 GMT server: ECAcc (ska/F797) vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 36b2e706-b01e-00b4-64b7-919f88000000 x-ms-version: 2009-09-19 content-length: 10471 X-Firefox-Spdy: h2

	7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/favicon.ico	52.183.87.159	404 Not Found	0 B
URL GET HTTP/2 7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/favicon.ico IP 52.183.87.159:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx Certificate IssuerMicrosoft Corporation Subject.svc.dynamics.com FingerprintF1:81:46:53:FC:B3:33:3C:B1:54:36:ED:A3:03:17:E0:33:56:9A:E2 ValidityTue, 02 Apr 2024 03:34:07 GMT - Fri, 28 Mar 2025 03:34:07 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: 7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx Cookie: 79f08280-5c63-4331-b04d-fb6f39afda51=3VCes8P0GSWMm4wFr4VyebVVLOFJ_o21djWO4oQQQFA; 319af4c0-e197-4de9-8a9b-fe98c8a2ca04=3VCes8P0GSWMm4wFr4VyebVVLOFJ_o21djWO4oQQQFA Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 404 Not Found content-length: 0 server: Microsoft-HTTPAPI/2.0 x-ms-activity-id: a37aec46-2038-4b2f-bb14-9314aea29ce9 api-deprecated: False x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Wed, 24 Apr 2024 20:21:43 GMT X-Firefox-Spdy: h2`

	7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/cp	52.183.87.159	204 No Content	0 B
URL POST HTTP/2 7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/cp IP 52.183.87.159:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx Certificate IssuerMicrosoft Corporation Subject.svc.dynamics.com FingerprintF1:81:46:53:FC:B3:33:3C:B1:54:36:ED:A3:03:17:E0:33:56:9A:E2 ValidityTue, 02 Apr 2024 03:34:07 GMT - Fri, 28 Mar 2025 03:34:07 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /t/cp HTTP/1.1 Host: 7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/t/t/8WwRA77sNZX0arkQzGFXlMPlDNmAQMr1uRWimFsvrHAx/XJEO41I3yFbCLCdLYGmK4YH2xtLUL9Bx5wplkmlownAx Content-Type: application/json Content-Length: 378 Origin: https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com DNT: 1 Connection: keep-alive Cookie: 79f08280-5c63-4331-b04d-fb6f39afda51=3VCes8P0GSWMm4wFr4VyebVVLOFJ_o21djWO4oQQQFA; 319af4c0-e197-4de9-8a9b-fe98c8a2ca04=3VCes8P0GSWMm4wFr4VyebVVLOFJ_o21djWO4oQQQFA Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 204 No Content content-length: 0 server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0 x-activity-id: 89242ea8-9699-4dbb-ad82-ce917ec3cbaf x-servicefabricrequestid: 82a813b1-d187-4330-bcd7-68ed8987964f, d382b33a-419e-42b3-aa55-065546c680fb x-ms-activity-id: 89242ea8-9699-4dbb-ad82-ce917ec3cbaf api-deprecated: False x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains date: Wed, 24 Apr 2024 20:21:43 GMT X-Firefox-Spdy: h2`

	www.fedsig.com/sites/default/files/news/pdf/MU2013%20Commander%20obs.pdf	104.20.83.114		732 kB
URL www.fedsig.com/sites/default/files/news/pdf/MU2013%20Commander%20obs.pdf IP 104.20.83.114:0 ASN #13335 CLOUDFLARENET File type PDF document, version 1.4, 1 pages Size 732 kB (731687 bytes) Hash 4079c020f03ea0ddfc29a0ff8b2a2f3e 71c2e5ca64ed940bc7fdc2820bf5e6c194dcb6fd f01ff2d8c62bd6e7cf5d2b30602d2aacd233c0369e5398c757e6f81b1c164aea HTTP Headers GET /sites/default/files/news/pdf/MU2013%20Commander%20obs.pdf HTTP/1.1 Host: www.fedsig.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Wed, 24 Apr 2024 20:21:45 GMT content-type: application/octet-stream content-length: 731687 x-content-type-options: nosniff last-modified: Wed, 24 Apr 2024 18:18:02 GMT etag: "b2a27-616dbb0f36173" cache-control: max-age=31536000 expires: Thu, 24 Apr 2025 20:21:45 GMT content-disposition: attachment x-varnish: 7374110 via: 1.1 varnish-v4 strict-transport-security: max-age=15552000; preload x-xss-protection: 1; mode=block referrer-policy: no-referrer-when-downgrade permissions-policy: autoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=() content-security-policy: default-src https: data: wss://*.hotjar.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; cf-cache-status: MISS accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 8798cd2acec91c12-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	www.fedsig.com/sites/default/files/news/pdf/MU2013%20Commander%20obs.pdf	104.20.83.114	200 OK	732 kB
URL User Request GET HTTP/2 www.fedsig.com/sites/default/files/news/pdf/MU2013%20Commander%20obs.pdf IP 104.20.83.114:443 ASN #13335 CLOUDFLARENET Certificate IssuerDigiCert Inc Subjectwww.fedsig.com FingerprintC4:3E:8E:D9:87:85:7A:3E:68:44:32:03:AC:74:79:7D:98:90:9B:CE ValidityTue, 12 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT File type Size 732 kB (731687 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /sites/default/files/news/pdf/MU2013%20Commander%20obs.pdf HTTP/1.1 Host: www.fedsig.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://7dea79fc04b94fd38f58f252928ef42c.svc.dynamics.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Wed, 24 Apr 2024 20:21:45 GMT content-type: application/octet-stream content-length: 731687 x-content-type-options: nosniff last-modified: Wed, 24 Apr 2024 18:18:02 GMT etag: "b2a27-616dbb0f36173" cache-control: max-age=31536000 expires: Thu, 24 Apr 2025 20:21:45 GMT content-disposition: attachment x-varnish: 7374110 via: 1.1 varnish-v4 strict-transport-security: max-age=15552000; preload x-xss-protection: 1; mode=block referrer-policy: no-referrer-when-downgrade permissions-policy: autoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=() content-security-policy: default-src https: data: wss://*.hotjar.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; cf-cache-status: MISS accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 8798cd2acec91c12-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2