{"report_id":"0926f98a-4a15-48f4-aca0-4cc6e399c249","version":6,"status":"done","tags":["dyndns"],"date":"2023-12-03T13:20:56Z","url":{"schema":"http","addr":"unitedpostalservice.ddns.net/","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"title":"Login to Customer Portals and Tools | DHL |"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:22:45Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"unitedpostalservice.ddns.net","ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2001-06-28","domain_rank":0,"first_seen":"2022-07-07 00:10:43","last_seen":"2023-12-03 11:24:55","alert_count":24,"request_count":12,"received_data":3644612,"sent_data":6176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30 02:15:09","last_seen":"2023-12-03 05:09:21","alert_count":0,"request_count":2,"received_data":100789,"sent_data":1072,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":2467,"first_seen":"2018-06-15 22:36:43","last_seen":"2023-12-03 05:10:22","alert_count":0,"request_count":1,"received_data":31925,"sent_data":485,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:43Z","timestamp":1701609643,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53459,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:43.992031+0000\",\"flow_id\":538101431345951,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":53459,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":58338,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:43.992031+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:43Z","timestamp":1701609643,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47082,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:43.992211+0000\",\"flow_id\":60440938488787,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":47082,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":22331,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:43.992211+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47556,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.048606+0000\",\"flow_id\":1928816136863198,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":47556,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":37023,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.048606+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53627,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.727727+0000\",\"flow_id\":1980703636724399,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":53627,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":25612,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.727727+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55197,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.729746+0000\",\"flow_id\":462441287525010,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":55197,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":48603,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.729746+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":58845,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.730635+0000\",\"flow_id\":193464665646603,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":58845,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":52450,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.730635+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36273,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.731928+0000\",\"flow_id\":651784920771352,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":36273,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":25806,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.731928+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":52283,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.733317+0000\",\"flow_id\":1636788425470085,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":52283,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":24624,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.733317+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":52827,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.734097+0000\",\"flow_id\":55858208453521,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":52827,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":14949,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.734097+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44447,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.737537+0000\",\"flow_id\":227515166376193,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":44447,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":27027,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.737537+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:44Z","timestamp":1701609644,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38787,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:44.986738+0000\",\"flow_id\":1483814575279730,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":38787,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":44090,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:44.986738+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:45Z","timestamp":1701609645,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60640,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:45.150972+0000\",\"flow_id\":1892622447496636,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":60640,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":525,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:45.150972+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-03T13:20:45Z","timestamp":1701609645,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33095,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY DNS Query to DynDNS Domain *.ddns .net","source":"{\"timestamp\":\"2023-12-03T13:20:45.383489+0000\",\"flow_id\":1019318157302273,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.129\",\"src_port\":33095,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2028675,\"rev\":2,\"signature\":\"ET POLICY DNS Query to DynDNS Domain *.ddns .net\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_10_12\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"POLICY\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2019_10_12\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":45495,\"rrname\":\"unitedpostalservice.ddns.net\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":99,\"bytes_toclient\":0,\"start\":\"2023-12-03T13:20:45.383489+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/js/jquery-3.5.1.min.js","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-28T14:48:45.837425Z","times_seen":274000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/js/jquery.mask.js","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"24992f1ed62baf9393609f3c6c2ad20e","sha1":"34716cf70f7f7a9cd072e7796c34ce987f85d18c","sha256":"a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8","sha512":"dd181bfff8972676cdcd068a59eed0e61bdd04214c4f49216fc783b8b58ab8414eb0d06c1be03f71f982502000f848d4c0ebc455eb78bce2737dff39c5f1cd91","ssdeep":"384:suPmGzmECrshSSQCyF8jKQze/he/UilGA2Al:BO9EQ8jK78Rl","tlshash":"b5a24f4929f32262566372bd0bef4009b7b68613149eed00bd4d63819f01a7897f7fe9","size":23176,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-09-28T13:29:56.420972Z","times_seen":4391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T14:46:47.346954Z","times_seen":18708784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-03T13:20:44.065Z","timestamp":1701609644065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1771\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.2.13, PleskLin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1771,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2e3ca5df55d37e981383f05a62f0383e","sha1":"14cb28eb6153461695f20b4a937fd833d8d8e975","sha256":"859cc42836abbd2fd6501fda2e326145245a0f59a17fc1356832b9822a199c62","sha512":"29026354b4fce1de66517bd3b3e12851c6cfc49b0941ada419d216bb0972961f491b04bd1549e0fb73b1c4aad94733eaf7e65de4c87c66f28a8be6e86bfd9303","ssdeep":"192:a/EzbG/A8eAYsbeALnAwsRdEtttLgtStvGGDo:a/EzbqjePsKknvsRdu7LykvGGDo","tlshash":"70d1262867cd6476017242864425364ae897c833b62746a772ff27773fbbd8e9c0f129","first_seen":"2023-12-03T14:20:57Z","last_seen":"2023-12-03T14:20:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":294,"dns":5,"connect":40,"send":0,"wait":54,"receive":1,"ssl":265},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"cdn.jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.755Z","timestamp":1701609644755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2023 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 27 Sep 2023 18:13:13 GMT","end":"Mon, 28 Oct 2024 18:13:12 GMT"},"fingerprint":{"sha1":"05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09","sha256":"0F:90:CD:B5:CD:3B:AE:F1:BB:01:3A:4D:6D:2E:A6:BA:98:C6:1B:1B:75:BE:DD:CB:39:33:E8:D1:21:F1:9F:EF"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.5.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.5.0\r\nx-jsd-version-type: version\r\netag: W/\"100a0-GGXd3Lt7Z9zvQlDlkMyalXSrpnM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\nage: 856846\r\nx-served-by: cache-fra-eddf8230101-FRA, cache-bma1670-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8770\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8770,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ea83ae92c684331d2096c4d3306a04de","sha1":"1865dddcbb7b67dcef4250e590cc9a9574aba673","sha256":"3c325075337b768950583012228055ae392e384688d77ec5235e6ca88dcec6ef","sha512":"20eb355cc27cbcf9905fe6928301adf27035c0c02faade42287f6cab1527846767ac074f6463f0a107b1b0e7b192740716eacb6ead9b14b875593936bdb1a639","ssdeep":"384:zWqJVm8OAL1M+hQokEYm47U7yH2CuwZwmiQObdNJew4vM4+jQRe2p85seIwTcSx5:Sqnm8OAL1Mzocm4KyH2CuwZwmij34k4M","tlshash":"7053ddbad18f05f59341e4d92743674297a9ba7ce1813c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T04:36:20Z","last_seen":"2026-09-28T00:14:48.208417Z","times_seen":3989,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":23,"dns":17,"connect":9,"send":0,"wait":9,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/image/dhl-logo.svg","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.767Z","timestamp":1701609644767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /image/dhl-logo.svg HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1603\r\nlast-modified: Tue, 20 Sep 2022 20:33:32 GMT\r\netag: \"632a239c-643\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1603,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"3fecc9db35d5d2a9e6e71ab4b02d22e5","sha1":"628ba2f505b480097445aaf08649a08242bd6847","sha256":"362bcaa42090e36611031bec6bdaa0600375ef847092cca195c58d3bae9b4419","sha512":"c0d70d0f914d3d9f29366c9886f174580675334ec79ba77158c4cf184075540dd7d25b3f35f7129c1fae764527574daec29f5fb8434817ccbef6951b332cdd5e","ssdeep":"","tlshash":"90317c570394e6ea9d018740473c52d922d1e9afc87064c8a9f33c27eb4cc5848b86d7","first_seen":"2023-04-30T18:39:16Z","last_seen":"2026-09-22T06:56:19.637381Z","times_seen":2818,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/image/camion.png","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.770Z","timestamp":1701609644770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /image/camion.png HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 6755\r\nlast-modified: Tue, 20 Sep 2022 21:55:54 GMT\r\netag: \"632a36ea-1a63\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\\012- data","md5":"4d6c500f19032f9ad24f0c20751eb16c","sha1":"41e562ed29a58274f0871409bc4dc29e07ab0314","sha256":"9749654bdfcce79bc06740ed18ce854c5bc56fd419a8d59fc590777ba942105e","sha512":"c7321cc518762477d03ac1dd8001ca86d3e8c0913ae60e46636ca66b1e72e092af31819f163896eaf77c62c14f1b0b6d6f1dc4a70f91fba0e4d971fe68f74d29","ssdeep":"192:XSQI01hjlFBXwoxDQfyWcgnkdwUtXgPk7xWt84:CQTN5+fymnkdRQPkFs","tlshash":"38d19ec6721b4b23ee0df23108e51c55bc71ae953a14412e33169eb7f83815cbe8ea6c","first_seen":"2023-05-08T17:36:22Z","last_seen":"2026-07-20T19:17:33.90949Z","times_seen":375,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/image/group.svg","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.772Z","timestamp":1701609644772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /image/group.svg HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11968\r\nlast-modified: Fri, 23 Sep 2022 22:05:48 GMT\r\netag: \"632e2dbc-2ec0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11968,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (656)","md5":"d1b0e043744fd642282117a03d308b17","sha1":"d8abe7a0887b804e516c45a344c542e291a1a84b","sha256":"5162de2ee844a80d76b7d7514c02ab7d5de72a5966113323d80eb56bf6ded038","sha512":"cb1fe08ae27d8d9203bcb110287cd73d478f4b6bdbf83353867a156e56ab86a1edcc9c28ef3b8dab48568abdcf2f1529b2b1c9c1ed031abf778783af3a0cfbb2","ssdeep":"192:lSEQBzaQwAkRlXqYz2AJ72o8hya55PUiaabxle:lSlVwAMT2Ah2oXat+","tlshash":"d23253d161f4624c4ece969dff7c90d49e0553eba3e619c2718d4b60bf478aabe02c60","first_seen":"2023-05-01T09:28:55Z","last_seen":"2026-09-22T06:56:19.603059Z","times_seen":1215,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/image/socio.png","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.774Z","timestamp":1701609644774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /image/socio.png HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1292\r\nlast-modified: Fri, 23 Sep 2022 22:19:30 GMT\r\netag: \"632e30f2-50c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 33, 8-bit/color RGBA, non-interlaced\\012- data","md5":"85fcc8db797ded15a1e7736d80a98026","sha1":"6167fd8c4ea5bc75ad6e668cd967d0a3715bec20","sha256":"39b5e1fdc845a00e044f1d5136d4d365e319d79caae542b2abef7e9a7eb7d786","sha512":"53909270d5899512dc5b35790493ad2d1c1ff97ef9f07c629de37410e1407dc466bf9d5c11873b50142551f82ae7d3785e93d474625d72ac509de922775e30de","ssdeep":"","tlshash":"6e211a72ff57d0da5a7c60edc192b2012043e18b78207048fc6e9d1c6ce1ee1e495757","first_seen":"2023-04-17T10:05:06Z","last_seen":"2026-05-05T10:16:30.988952Z","times_seen":326,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/js/jquery.mask.js","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:45.150Z","timestamp":1701609645150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /js/jquery.mask.js HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2020 21:30:48 GMT\r\netag: W/\"5e7a7c08-5a88\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96074,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"24992f1ed62baf9393609f3c6c2ad20e","sha1":"34716cf70f7f7a9cd072e7796c34ce987f85d18c","sha256":"a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8","sha512":"dd181bfff8972676cdcd068a59eed0e61bdd04214c4f49216fc783b8b58ab8414eb0d06c1be03f71f982502000f848d4c0ebc455eb78bce2737dff39c5f1cd91","ssdeep":"384:suPmGzmECrshSSQCyF8jKQze/he/UilGA2Al:BO9EQ8jK78Rl","tlshash":"b5a24f4929f32262566372bd0bef4009b7b68613149eed00bd4d63819f01a7897f7fe9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-09-28T13:29:56.420972Z","times_seen":4391,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/css/bootstrap.css","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.759Z","timestamp":1701609644759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /css/bootstrap.css HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Feb 2022 07:43:06 GMT\r\netag: W/\"621c7d0a-2f1f7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1716041,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"052dfc723bbdf659b1528e37b1472301","sha1":"a06f1b5340a4dceaa9a8e044d0248ab48fcb7e17","sha256":"0c159070e198b7ed2a9162d6c9751f5914ff62803914d8512d60b1f5ffde4334","sha512":"99a22fd4a93d74eca1883c15ee63799eee662428db0371a26003d14988c9bf8300597835b38637aa2c5961e9dde3b8e67eb371609e2e68e62ddaa62bdd792a97","ssdeep":"1536:Hgwcfq/zc1+QI/Rhi4De5j9p7AC2LdQVUaryWrSPUKO5kIl8d/ALfLNLy:Hpc178d/ALfLNLy","tlshash":"10140f9dfdf118087057956864dbbbf57b7e4086d20ece7a76e23264cf493c18c62a88","first_seen":"2023-04-05T04:36:20Z","last_seen":"2026-09-26T12:44:37.275239Z","times_seen":1290,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/js/jquery.mask.js","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:45.150Z","timestamp":1701609645150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /js/jquery.mask.js HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2020 21:30:48 GMT\r\netag: W/\"5e7a7c08-5a88\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6696,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"24992f1ed62baf9393609f3c6c2ad20e","sha1":"34716cf70f7f7a9cd072e7796c34ce987f85d18c","sha256":"a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8","sha512":"dd181bfff8972676cdcd068a59eed0e61bdd04214c4f49216fc783b8b58ab8414eb0d06c1be03f71f982502000f848d4c0ebc455eb78bce2737dff39c5f1cd91","ssdeep":"384:suPmGzmECrshSSQCyF8jKQze/he/UilGA2Al:BO9EQ8jK78Rl","tlshash":"b5a24f4929f32262566372bd0bef4009b7b68613149eed00bd4d63819f01a7897f7fe9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-09-28T13:29:56.420972Z","times_seen":4391,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/js/jquery-3.5.1.min.js","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.776Z","timestamp":1701609644776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 08:36:20 GMT\r\netag: W/\"6013c904-15d84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-28T14:48:45.837425Z","times_seen":274000,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/image/titiza.png","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.992Z","timestamp":1701609644992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /image/titiza.png HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/css/posta.css\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1694457\r\nlast-modified: Tue, 20 Sep 2022 21:23:58 GMT\r\netag: \"632a2f6e-19daf9\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1694457,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T14:46:47.346954Z","times_seen":18708784,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/image/favicon.ico","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:45.389Z","timestamp":1701609645389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /image/favicon.ico HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:40 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 1150\r\nlast-modified: Tue, 20 Sep 2022 19:50:38 GMT\r\netag: \"632a198e-47e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\\012- data","md5":"d8106bf3a1d00ab43b01e6e3c92500eb","sha1":"202b5e8654ab1b28351378293bca3b9d844cc29b","sha256":"9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e","sha512":"3a77cbe48e27af035abcd70f0ae679195bb1b210eb02bbd86d3db270349fcc6f9b5ad8da10ff97f786865b18657531197d8a4e0d2ff1f08a2f117b2c1422ae89","ssdeep":"","tlshash":"78219a38ae408488ce98d135cdc2e5a20116af839e2119c763cc3f82764389ddfb3e06","first_seen":"2023-04-26T08:39:49Z","last_seen":"2026-09-28T01:01:09.642958Z","times_seen":3231,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"unitedpostalservice.ddns.net/css/posta.css","fqdn":"unitedpostalservice.ddns.net","domain":"unitedpostalservice.ddns.net","tld":"ddns.net"},"ip":{"addr":"13.79.120.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.760Z","timestamp":1701609644760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unitedpostalservice.ddns.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 00:12:37 GMT","end":"Fri, 01 Mar 2024 00:12:36 GMT"},"fingerprint":{"sha1":"98:09:C2:8B:8D:67:B9:A2:43:28:66:77:BC:67:E8:C7:8B:A0:6A:A9","sha256":"53:FA:13:05:73:7B:B1:E0:95:A9:C2:15:1E:D5:D4:50:3C:E0:71:45:44:3A:EF:FD:71:6F:EC:58:E5:8C:52:DC"}}},"request":{"raw":"GET /css/posta.css HTTP/1.1\r\nHost: unitedpostalservice.ddns.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nCookie: PHPSESSID=11gcd50kb0j1tgd15eg4p7c5vl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Sep 2022 02:01:00 GMT\r\netag: W/\"63364ddc-3789\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6f7b4b36856517df7290a25fd67463f7","sha1":"16dee3f1d0dc291db63df1926a9ba209341041ee","sha256":"4d4c2229366643e0f0c76860971f79393833087f09b21c07ec026db6e289e801","sha512":"cd6e187f6e668fd7face4cc59e7e8447c9939ac1b76a5fad1114a91653bd79e41f6090eb4f4530ae83a2dfc6db08a51fcddc63c2e7dbe91937c72e374107f19d","ssdeep":"192:B+vB4roN2AMedxSmDkQOH9cEndxlQjf5Yg69A+gu:Y1EmVu","tlshash":"2b52ff07c7240106597a9374dbb79665f66e4233e30ad2ec3dada658dfbc24481a0fdc","first_seen":"2023-04-05T04:36:20Z","last_seen":"2026-02-22T00:32:52.3294Z","times_seen":225,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"DHL Airways, Inc.","trigger":"unitedpostalservice.ddns.net/","verdict":"phishing","severity":"medium","comment":"DHL Airways, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.757Z","timestamp":1701609644757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 00:15:17 GMT","end":"Wed, 28 Feb 2024 00:15:16 GMT"},"fingerprint":{"sha1":"34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04","sha256":"43:DF:F0:50:19:18:94:64:CA:28:1D:82:84:B3:9A:EC:06:DB:BE:07:DE:82:E2:0D:5C:52:19:05:67:1E:BF:A6"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unitedpostalservice.ddns.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: W/\"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-cachedat: 11/18/2022 06:18:29\r\ncdn-proxyver: 1.03\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 722\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requestid: b3a57c6aca414a3b87fe0638b631146d\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2875391\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 82fc1bb67a2195df-ARN\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-09-28T14:50:20.594684Z","times_seen":318439,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":2,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/fonts/bootstrap-icons.woff2?856008caa5eb66df68595e734e59580d","fqdn":"cdn.jsdelivr.net","domain":"cdn.jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://unitedpostalservice.ddns.net/","date":"2023-12-03T13:20:44.997Z","timestamp":1701609644997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2023 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 27 Sep 2023 18:13:13 GMT","end":"Mon, 28 Oct 2024 18:13:12 GMT"},"fingerprint":{"sha1":"05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09","sha256":"0F:90:CD:B5:CD:3B:AE:F1:BB:01:3A:4D:6D:2E:A6:BA:98:C6:1B:1B:75:BE:DD:CB:39:33:E8:D1:21:F1:9F:EF"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.5.0/font/fonts/bootstrap-icons.woff2?856008caa5eb66df68595e734e59580d HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://unitedpostalservice.ddns.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 90528\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.5.0\r\nx-jsd-version-type: version\r\netag: W/\"161a0-RkmHeGigBozlCxBdDSojXoAQyY8\"\r\naccept-ranges: bytes\r\ndate: Sun, 03 Dec 2023 13:20:39 GMT\r\nage: 2209402\r\nx-served-by: cache-fra-eddf8230031-FRA, cache-bma1620-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 90528, version 1.0\\012- data","md5":"e07b538aa51b6fa77f32828af21cb591","sha1":"4649877868a0068ce50b105d0d2a235e8010c98f","sha256":"76506e128f2b47b7179f5037bd885a1674455ffeb6b5093cdb4c7eefbf436ce8","sha512":"e2ec08562aaee660d0ae1471e9d5659bc03b5b4f60c7d2c4a9c5a546b4ae151ed16cef58c2c798dce5d35628357b010d345ea2a3bf13bdee88adba954f6d1f54","ssdeep":"1536:5TkcgsTqc4q/40EvBlS/4inu8vyGF2OKYUayEOOgwehlS9hg8TNaSC4+NEBv6Gw/:5Iaqc4lRvBlNinqkkCyERdevM5C4+61K","tlshash":"259312792dbca3ab42d9377226a6510a788414eee7b4b1e474fdb34c5b3058e2a1f052","first_seen":"2023-04-19T00:44:58Z","last_seen":"2026-09-27T14:53:36.869193Z","times_seen":3109,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":15,"dns":1,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}