technology software

documentation technical

government public service

adult content

phishing scam

English

JSESSIONID

Within the commercial generic top-level domain (.com), 'vdi.portal.effem.com' is registered and includes subdomain 'vdi.portal'. Count 5 characters in 'effem' with 2 vowels and three consonants. Splitting it apart reveals 2 words: eff, em. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

fromURI

x509_login

identifier

rememberMe

html/96/4b/964b4705-cba7-4528-843e-93c618d62b9e.html.gz

default-src 'self'; script-src 'self'; connect-src 'self'; img-src http://localhost:* 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self'; child-src 'self' com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view:// nsgcepa://nsgcepa application://*; form-action  'self'; object-src 'none'; base-uri 'self'; report-uri /nscsp_violation/report_uri

default-src 'self'; script-src https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/releases/ 'self'; connect-src 'self'; img-src http://localhost:* 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src https://www.google.com/recaptcha/ com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view://* nsgcepa://* application://* receiver://* 'self'; child-src 'self' com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view://* nsgcepa://nsgcepa application://*; form-action 'self'; object-src 'none'; base-uri 'self'; report-uri /nscsp_violation/report_uri

application/x-www-form-urlencoded; charset=UTF-8

816810f6fdb9067cad19ab599f6f609e9117360731c4a4f1f4cb0f2d0e998482

748d6000b029e4406142c992d31afa0f536bee81670933723cd9673f85adf5f3

f3f1ef82ac67693b6255a465e07dc2b0c20264f07046053a385588894f8b4c2d

9bbbee2c65b74a02eede62ca5a340a0b873e50282dc26db4aeb3a6a587cc1d95

8f30cb2628c011d34408145d095e5679e3c63e88ac77a14176f1316aaf865d72

6d8c5c8694245716f43adbbe19f5231ecb3059df98bc5cc6ebfc9151836a48ac

a362dd8024a2d785c91515592a6c31317ff7d96c48fca13d5fd6e1758239b208

ba4e6af952ad38ed336e34950ac7dd236db7238c315418431a53263a84760305

d7d2cca4989b1f4201d186a8d4208a8c6cc04760849e53951c6e4f89ec7d803b

868d791faf7c47cfe08cbe5ae07d39f6ceb24dd2b70bcb0c476bf53f9ce32149

41e4e4037ef4008568d48c7fd1592da6d8859690d802432f0bf4591188f355c4

8125f76c9d99fa698dc43d0ea760e97510a882d49e5bfe4ea9267663a566bfb8

31d53110df746be20920919bd72b80408e758a44852d3cf4a3d88e1b7bd5460a

898429bd7b9e3e3eec1867d9df18483a75281b39f24e1cec76f33aa26f214c2c

9643e9cff0b030bedc1be4aff4d0fc4eca26254c1a3177664b3e08da584377dd

e118ccdff65c739b0069e967496013f89d2dcb3e393df8918d11a433bc8cf839

55df59f769ea5b1d2e39c55e092c6892c08082523f3b8a892128267f9cf9679d

a5366bdf12ecdd7ff4c87d34ec238717b0c1864598ace0fbd94a5f73f151060f

42e00230e185db1c83764b3c1b9fb5b35c3de425391c65bb6681425a195b848f

ba5c5832ac2c55e09f357db165fc99c684162b4b81fabd728c35da5b93497b3f

bf1ba19ab994cc9f41f7b3f5a31aff89a97784e7649cdd9e07d6daf9d7337044

bc1aa2f9d4677517fe54d6dea37d6c9f0fb68419c5ea188352a8231e91168697

e22fd480546ae46579ff3086fa5df315ec28b97da561e6e869f0c68452e1c6fb

206145b603ed6db081e0a316779c2a82015eedd929688edfe1035ef47f229873

7306fb90f0df9212885ef712360172eeb5b6ed7382874ee8c678075d5c023801

0de6728a041d1796b1609268739d06c60d4d5b27c3bbfe0f2378e4bbb99e1bf0

2102d573e7e558bfb9ac5ecbe6ad932c01e6076d7aa8824cca6b86e72efddea4

b36b8758c36fee2153478339b9944793b5d83c17c3f30df2c95b065064a0cf69

1252b6f510f734b694e6104037f2b9bb36633a512bb5d96bc9bf8235165520f5

f8709740a7d40e01167843b91935a7bc825aae785bd6ee373f362063a248e34e

71572ba4dd15775f30e1640fc7ce044c07d93e2cd1116bc7f076aa67e3ec8380

f0034ca2a411c63271c4d49726d4165b390340de120960891fd538631ff50a47

viewport

robots

default-src 'self'; script-src https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/releases/ 'self' 'unsafe-eval'; connect-src 'self'; img-src http://localhost:* 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src https://www.google.com/recaptcha/ com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view://* nsgcepa://* application://* receiver://* 'self'; child-src 'self' com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view://* nsgcepa://nsgcepa application://*; form-action 'self'; object-src 'none'; base-uri 'self'; report-uri /nscsp_violation/report_uri

application/vnd.citrix.authenticateresponse-1+xml; charset=utf-8

default-src 'self'; script-src 'self' 'nonce-wrD+aKvxMNShkSpEqYLPStan3E9X+3MBe5hpbi8RbS0='; connect-src 'self'; img-src http://localhost:* 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self'; child-src 'self' com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view:// nsgcepa://nsgcepa application://*; form-action https://mars-group.okta.com/app/marsgroup_citrixnetscalergatewayvdinewprod_1/exk3t67guljhYgSDC357/sso/saml 'self'; object-src 'none'; base-uri 'self'; report-uri /nscsp_violation/report_uri

default-src 'self' mars-group.okta.com *.oktacdn.com; connect-src 'self' mars-group.okta.com mars-group-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com mars-group.kerberos.okta.com mars-group.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-rPY8S71O-E_5R5L9-Iiyjg' 'unsafe-eval' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; frame-src 'self' mars-group.okta.com mars-group-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' mars-group.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' mars-group.okta.com data: *.oktacdn.com fonts.gstatic.com

default-src 'self' mars-group.okta.com *.oktacdn.com; connect-src 'self' mars-group.okta.com mars-group-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com mars-group.kerberos.okta.com mars-group.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-rPY8S71O-E_5R5L9-Iiyjg' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; frame-src 'self' mars-group.okta.com mars-group-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' mars-group.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' mars-group.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://marspulse--uat.sandbox.lightning.force.com https://mars1-qa-1.oms.supply-chain.ibm.com https://localhost:8000 https://hfmtest.apps.effem.com https://stage.petparentpartners.com

default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri  https://oktacsp.report-uri.com/r/t/csp/enforce

default-src 'self' mars-group.okta.com *.oktacdn.com; connect-src 'self' mars-group.okta.com mars-group-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com mars-group.kerberos.okta.com mars-group.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; frame-src 'self' mars-group.okta.com mars-group-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' mars-group.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' mars-group.okta.com data: *.oktacdn.com fonts.gstatic.com

default-src 'self' mars-group.okta.com *.oktacdn.com; connect-src 'self' mars-group.okta.com mars-group-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com mars-group.kerberos.okta.com mars-group.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' mars-group.okta.com *.oktacdn.com; frame-src 'self' mars-group.okta.com mars-group-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' mars-group.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' mars-group.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'

MarkMonitor Inc.

OKTA.COM

Nom-iq Ltd. dba COM LAUDE

EFFEM.COM

Microsoft Abuse Contact

Divya Quamara

MICROSOFT-MAINT

Microsoft Routing, Peering, and DNS

cloud

if (typeof module === 'object') {window.module = module; module = undefined;}

window.cspNonce = '2ydOuryXLML58QMqhuv2mQ';


        var okta = {
            locale: 'en',
            deployEnv: 'PROD'
        };
        
            okta.supportedLocales = ["cs","da","de","el","en","es","eu","fi","fr","ht","hu","id","it","ja","ko","ms","nb","nl_NL","pl","pt_BR","ro","ru","sv","th","tr","uk","vi","zh_CN","zh_TW"];
        

window.okta || (window.okta = {}); okta.cdnUrlHostname = "//ok7static.oktacdn.com";


    if (okta) {
            okta.sentry = {
                sentryDsn: 'https://728f6bd7e621314e88a26d7337d3fd61@o101443.ingest.sentry.io/4507506066849792',
                orgId: '00oac44haRlJpuBQ6356',
                isCustomDomain: false,
                deployEnv: window.okta && window.okta.deployEnv,
                appName: 'okta-hosted-siw',
                teamName: '951953394',
                ignoreErrorTypes: '[]',
                ignoreErrors: '[]',
                filenamesAllowList: '["okta-sign-in.min.js","okta-sign-in.next.js"]',
                tracesSampleRate: '0'
            };
        }
    

if (window.module) module = window.module;

function runLoginPage (fn) {var mainScript = document.createElement('script');mainScript.src = 'https://ok7static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.f45aba2fcd86049fdc0a4446a0b4aa60.js';mainScript.crossOrigin = 'anonymous';mainScript.integrity = 'sha384-Ti1AVzmYlM/NMC9etUiz87VUWhwg+Bo9yxzyhSC6H+BcvWDdE/RfZIEFxIsvkfcf';document.getElementsByTagName('head')[0].appendChild(mainScript);fn && mainScript.addEventListener('load', function () { setTimeout(fn, 1) });}

Requests	IP Address	Location	AS Autonomous System
13	51.105.249.50	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
11	35.71.178.224	United States	AS16509Amazon.com, Inc.
11	3.161.82.2	United States	AS16509Amazon.com, Inc.
35	3	-	-

Security Scan Report: vdi.portal.effem.com

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History