Phishing Simulation Message - URL Scan Results

Summary

A Concise Overview of the scan result of url https://travelresinfo.com/load_training?guid=c27847d1c2b03d8b&correlation_id=355f7b70-78b5-4419-856b-2dfb5c414ed1

Document
HTML
79
StyleSheets
0
Scripts
13
Font
0
Images
3
Links
1
JavaScript Variables
52
Console log messages
0
Network
Requests
97
Bytes Transferred
306.61KB
Bytes Total
448.38KB

DNS Record
A Record
2
Technology
PaaS
1
Web servers
1
JavaScript libraries
1
CDN
1
SSL/TLS certificate authorities
1

Links

The outgoing links identified from the page.

Link	Text
https://abbott.sharepoint.com/sites/GLB-BTS-CyberEdAware	Cybersecurity Awareness site

JavaScript Variables

Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.

onbeforetogglestringdocumentPictureInPicturestringonscrollendstringtraining_pagestring$stringjQuerystringPluginDetectstringdetectorstringjstringversion_regex_basestringversion_regex_strictstringversion_regex_with_family_modifierstringdeployJavastringplugin_detectorstringaccount_logostringcampaign_guidstringcompany_namestringcompany_name_possessivestringcontent_bucketstringcorrelation_idstringenvironmentstringfrom_email_addressstringsubject_linestringtarget_guidstringtemplatestringBrowserDetectstring$_GETstringregexstringitemsstringlaststringistringbase_post_urlstringlog_errorstringlog_to_consolestringlog_messagestringfingerprintedstringtracking_idstringstripstringsecureSubmitWithGuidstringsecureSubmitstringfindUsernamestringcheckPasswordstringsecureLogAndRedirectstringsendFingerprintstringimageSenderstringsendIndividuallystringloadAllInfostringlocal_addressesstringredirectorstringrewriteLinksstringisFormValidstringsstring

Technology

The technologies identified are present on the scanned URL.

Name	Description	Detected patterns
Web servers
Apache Traffic Server https://trafficserver.apache.org/	Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.	Type: headers Name: server Regex: ATS\/?([\d.]{1,250})?
CDN
Amazon S3 https://aws.amazon.com/s3/	Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.	Type: scriptSrc Regex: s3[^ ]{0,250}\.amazonaws\.com\/
JavaScript libraries
jQuery https://jquery.com	jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.	Type: scriptSrc Regex: jquery
PaaS
Amazon Web Services https://aws.amazon.com/	Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.	Dependent on AWS Certificate Manager,Amazon S3
SSL/TLS certificate authorities
AWS Certificate Manager https://aws.amazon.com/certificate-manager/	AWS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.	Type: certIssuer Regex: Amazon

Type	Name	Content	DNSSEC
A	travelresinfo.com	3.227.176.95	no
A	travelresinfo.com	3.223.170.210	no

SSL Certificate

An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.

Subject	Issue date	Expiry date	Valid
shippingtracker.info Amazon RSA 2048 M02	3/19/2024	4/18/2025	1 year 1 month
*.s3.amazonaws.com Amazon RSA 2048 M01	4/22/2024	4/7/2025	11 months 20 days

HTTP Header

An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.

Name	Value
access-control-allow-origin	*
cache-control	max-age=0, private, must-revalidate
content-encoding	gzip
content-type	text/html; charset=utf-8
date	Fri, 06 Sep 2024 05:15:51 GMT
etag	W/"7bce98619dddeb9297af6bf7d3b37e6a"
referrer-policy	strict-origin-when-cross-origin
server	ThreatSim-Web-Server
vary	Accept-Encoding
x-content-type-options	nosniff
x-download-options	noopen
x-frame-options	SAMEORIGIN
x-host-info	lw-prod-us-i-08c44a22c0fd22388 ; f2b5de6fff38e7dd7ac15e124f070d93bb1446d3
x-permitted-cross-domain-policies	none
x-request-id	66f0ce8a-a00b-4454-aa3e-b4516898e6f3
x-runtime	0.015482
x-xss-protection	1; mode=block

Content Security Policy

Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.

Name	Value

Cookies

Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.

Name	Value	Domain/Path	Expires	Secure	HTTP Only
EXFILGUID	7847d2b03d	travelresinfo.com/	12/31/1969, 11:59:59 PM	no	no
link_clicked_7847d2b03d	1	travelresinfo.com/	12/31/1969, 11:59:59 PM	no	no
akaalb_OCE_Failover	1725599810~op=JCOM_OCE:oceProdappJcomProdOrigin\|~rv=66~m=oceProdappJcomProdOrigin:0\|~os=2708f36cb43ca861e42dc0215e4669c5~id=a23de36af129df17419043fdf68818e9	java.com/	9/6/2024, 5:16:50 AM	yes	no
akaalb_OCE_Failover	1725599810~op=JCOM_OCE:oceProdappJcomProdOrigin\|~rv=77~m=oceProdappJcomProdOrigin:0\|~os=2708f36cb43ca861e42dc0215e4669c5~id=6be16a7d046f315d62d1ad433a110c8c	www.java.com/	9/6/2024, 5:16:50 AM	yes	no

URL Scan Results for the page [Phishing Simulation Message](https://travelresinfo.com/load_training?guid=c27847d1c2b03d8b&correlation_id=355f7b70-78b5-4419-856b-2dfb5c414ed1)

URL basic Information and screenshot

Summary

Document