{"report_id":"253781b5-37f8-448d-a190-e50793f55e63","version":6,"status":"done","tags":["dyndns"],"date":"2026-03-24T09:40:35Z","url":{"schema":"http","addr":"mattermost-kldev.duckdns.org","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/landing#/","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"title":"Mattermost","dom":{"size":93211,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (59470)","md5":"8516decbaf14ca6950a68ceadb312bcf","sha1":"16270bd54be4c8e069901a03aba9ec33b6b88ef5","sha256":"67a351c60bd918873591a74f538281aedda7e79f1fbcef31e54514d17edae7f8","sha512":"1a86a89c770f041b10514cf252b8c49c898090511a6b4364e52521bcf946aafbe678f243842cb4b7790bf5be69c730dbce16e4c7074096a1f3680d2bed40a256","ssdeep":"768:hK/CVMSK+RIYmqLZzDzjfYbrzUEgvaFdzB1VSlBP93rL6vHJNdAtzgufotWGHrIo:hTVMSK+8yZzWWtzgQotBLIqXtz4aCi7","tlshash":"89934bfaae42793e5763613ec3cea6e4810cebc6de815614b139927083cb0cdd2d9857","dom_hash":"domhashd50cfea3278cf11a2b38855ef62bcda4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mattermost-kldev.duckdns.org","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T09:40:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"api.rudderlabs.com","ip":{"addr":"108.157.229.85","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-24","domain_rank":63999,"first_seen":"2019-11-25T05:35:41Z","last_seen":"2026-03-17T23:53:51.849464Z","alert_count":0,"request_count":2,"received_data":2819,"sent_data":1034,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"mattermost-kldev.duckdns.org","ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"domain_registered":"2013-04-12","domain_rank":6921656,"first_seen":"2026-03-24T09:40:54.896164Z","last_seen":"2026-03-24T09:40:54.896164Z","alert_count":114,"request_count":57,"received_data":22288148,"sent_data":34015,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pdat.matterlytics.com","ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2020-03-16","domain_rank":461123,"first_seen":"2020-03-25T07:19:06Z","last_seen":"2026-03-18T05:50:16.039811Z","alert_count":0,"request_count":15,"received_data":5205,"sent_data":8078,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/7703.d9ed98e201401c2beb22.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f73b0167fe4f850698bc2f2b384fb6a2","sha1":"39ed6a85ea3be18d5f1bbec9bf3d077d41b412f8","sha256":"efd039d642c8307f6c14638dbdff8579d29941a7e54139f78f25e9f0d43781c7","sha512":"6a28e16187ad8c9bddfeacb3427cfd6882173f5dd7c9bf3b1883c519fcfca85d61c82d887bf3ae6e175ee960b321f69ca129f72ad223256ff66f8bda57519e30","ssdeep":"192:5rT0Xzb4q10URNYdUOmTgt7SbACFnZwkrW2859BWgQN8/8kvOM:1+zb4q11MUvoSdZwkrFO9IRM","tlshash":"0632b9c4b25274a147f25094516f4802f67f2e11a88de481f782e45428bee9ff1b7f7a","size":11743,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.77638Z","times_seen":1057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2534.9cd47e7cf931cba451f2.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"50a4d7ba0deb15006489ed7b3de3b0fe","sha1":"d188b752326c187af405759031d0d9426993dc2e","sha256":"56dabe5904236d8330b841754807f6ae7feb6e8642347d52645e9da2eb894e42","sha512":"626ffdd4363cfc26fef464858ffb15b09ad362afee635fa5804ce53d229a908cb05126204045a88a85b9f104fe14cd5a3febf2da60a24b3df14c47553eb6ee78","ssdeep":"192:EVKfPrhbfeg/F8AHJj+/ArI5h1bzxB1U75HPrCBMHt6:Y4rRtLK/Arob1LMyMN6","tlshash":"f922b8c976c1783a0ae321a2816f215ab27f68c67cdd90019061f9d03c78f6f466bdac","size":10349,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.779004Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/4617.88e5428809e56688db84.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"23af4994846d7557b3304dd5b6742848","sha1":"df6bb18c13af487aec439ef3ce36d8f5a5c04fd6","sha256":"3a220f4e80684f3b536009aee70c8bab031e9530ae3aeebeb01bf038f10ec1c3","sha512":"7c97ef7a8c26b2a8fc8c40916ba243821aeef1ef5207067a93a460a8ad7130b46beb104babdda80d32577a2b601dace402e3b8f53d962523a1aeadf21243ed57","ssdeep":"192:yuteuCXjP8skODf9BE6sFkIJoaw8H1Ok62+KVyvhwJzFnuVoIdCyCdG:yWkP8NOD1etZ2aV1dRyvStIYG","tlshash":"ff6263f8b0d1b0b066672021c47f182ea23f7895b84c5564f767e5cd39b469ec223bda","size":14952,"data":"","first_seen":"2024-03-12T19:30:52Z","last_seen":"2026-03-24T09:41:05.808843Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/3577.7ae35657cb3e001e2052.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"29119edaa468b41b9abb5f1ef82df334","sha1":"d101194f858659d3cab6bec42e8de47e4186d0ff","sha256":"8f70d74cfc59c3446dca78dae77274b47aeec4126c7d49ecaa0883815b2b8078","sha512":"1f3f228e359534a7943ff77df51750b02ac4a18eec551dfedf0d051d5939441317235b3de5118a3a4ddb3bea93bb02012f812bf70debf91fdf77b1a9db63c028","ssdeep":"768:mhwkrbbyhivoPPcgMtBr+xAPH68fRwTfjVcgIUYMl1TCgyfB3cW9lf:TiUAPa8aSl","tlshash":"81f209a2b6d1f05217b313da90350404f3395a0d794c99bdb3399cdbbcd294a62fba39","size":35987,"data":"","first_seen":"2024-03-12T19:30:52Z","last_seen":"2026-03-24T09:41:05.769842Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2514.3b0b11ab4b6c88c22e31.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b23ceb91130f9b65c0edf602a0fef4c4","sha1":"4ac691ac299bd41fdc2fd3740b6afe24982b8e66","sha256":"4cae45b8f3be8fb14a76d61252aa1ca0897f3c89d7434fbb063b762fe1f0cdf4","sha512":"6b97cb29a90bb5bc9e226839ef9a8d223f970cfdf660501c9a442a0d85157f464a926f0367fcb63cd051ff93918229659d50265f05524357481fb9785d49b63f","ssdeep":"12288:QBS8hNEvtEvoEvtEv2duzfhqTMy7Db7EqGDeuPvK3c8WsIJql1XnCFaFIcSAJyzM:QI8hLduzf6My7xl1XbImf+xRh4P","tlshash":"0da529c036a5e5a2439799e8042b180af33bbd3da45ab450fbcac9f1fd66489513df31","size":2073889,"data":"","first_seen":"2024-12-24T12:43:45.707353Z","last_seen":"2026-03-24T09:41:05.818924Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/680.4da078dab52828997dac.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f98478108568b8c4f70d14e7423810eb","sha1":"64cca00d936e413ed81f91b1f217aa2e7696e25b","sha256":"45ca9f9160471313818e7facbbfd8fdddc53412da402897cf8d5100be4ecd894","sha512":"bbf256c331cba93a6886983e3ef3e31e21acec13110558c941cf38690be4cf9efd186168d56b41373e8a981c78ae3935fc785e91aa3ef56a1f631a27f5b9095b","ssdeep":"1536:V1DMT+5y0nnMVGsIIkTcGq83Mk22n9j9AEZg2FGQ:V1DlXsIIkTcGq8B229j/Zg2FGQ","tlshash":"0d53b3c272c7f22507a902d904294102fb6c5db5349e8c4cf5d8e8d77da6c99a27afb8","size":63090,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.815037Z","times_seen":1059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/7378.0b94e714d0e252a84cc0.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"526d43f2eee2876a1c49036f24fdb72a","sha1":"f8075604b14ef496853f067bd64dc8d0abe49a53","sha256":"dddd6da2844278eabc9604772073725570aec1061f4c70e0de3646dfd80c2402","sha512":"38825751a4a6d3a3ec5fc00d74583ef3b2e5d4a1487682f1e97a305c1a4db0759c9b3e8819de8cd7e2689fb7ac7f0a5b515e8ac4c44d3d79e25c14a4789c7a1d","ssdeep":"96:XvUIbvGKuG8LDw7JW0GKhQaK/PI311qrL7MQ1JPKthEULkvOY6CM5Jag9MODXr1s:f/ZAPC5XKKjcJPsAvzmUMRrh4JmSi2uG","tlshash":"ffe1a5d5b099f0a157b738a5103f540eb33d292d385dc1a4a311d8e4bcf869dd22bf5a","size":7137,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.777031Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/3294.89356d3bfc84cb9cf509.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a3e8920331287af7532259902200920","sha1":"75bcd76380713704f9dcb694a6dff9ac706bc3a7","sha256":"363d5e1e0a0371b5c3af0a1928e6f07e44030b5ad4d7f23f48034d3a2c5d9af0","sha512":"49d9201b0587b1155782ad31efab7478aa2524ca422b1f7c9768a37115b546158898cbc89c0448d0595a68787d06e1fdc35be7ee2d4133ada8f1074a1950c4de","ssdeep":"3072:E0IWFP1h/geQIMlGAw3vBL0mNKHBwN3NpnQ2oY8RG0u3vfLqJ/drG2M4:kGsmcHBlGC1dld","tlshash":"66a3b661b18161722a4313e4442e030e6e3e7979678c941b73acedd72d66dca463ffa2","size":105484,"data":"","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.801592Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/plugins/com.mattermost.nps/com.mattermost.nps_e0f4f7088d82c850_bundle.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7303a3336d3f0c6cc64a582bac55b40","sha1":"3648f4e715ecd7cac48e6d0b86306536a8cc6138","sha256":"518fba0f9c1c91add08845a8f4dee283175915fea01465f997937b8b99e1b068","sha512":"6aff9cdd8e4c7d4cf17f213538880329540bf8d056ae19f57edada086a457290a26bcbefe315f9d87e5570d03575b76fd1d11df84ceb2907e58eb3a29af4d99c","ssdeep":"12288:xmBWa/6lpjp+Axu9cOGOxpPIxRb+jldLQdaSZ7qmW0cy50WfeI6CY:xmB6leQu9cOGOORb+jladaSZ7qm+I6CY","tlshash":"da25078c7147fa10c64690a7e43f3841d67de646a40e04d1af39c6f3bdb1b99ca3ae25","size":1016091,"data":"","first_seen":"2023-12-19T12:24:04Z","last_seen":"2026-04-05T08:13:06.514608Z","times_seen":3679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/plugins/playbooks/playbooks_d2ca242431bde84c_bundle.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b24fa4235bf7f7ce04f91c30baa3adf2","sha1":"59c22d4fa8c55f08fbe3c4e07bcd75ae39a67ce3","sha256":"d35509c450e225f3a494b46094d845746d5ce3053995828cf5df59123fd89083","sha512":"86daa92f184a5ec96ff6368cab464d3fd82ea3e4ee6c618a8cd30addb70622393e34c6e7038d33f90ac8d134d393e701340bea05d10101efea33f607da9e51d9","ssdeep":"49152:EHj+Pn1gG6MvLvAYsc5ZM4QkCZuvqb5mMOJ+gSUQ1fa9cwWLcr93BCUxDbAsVCec:+KtgG6MvLvAYsc5ZPQkDoh0fJjXy","tlshash":"3636f84c361af7548449c0d7e4373c44e2ade59ab00b14d0af788bf75aa1786ebadd23","size":4972883,"data":"","first_seen":"2024-08-27T07:20:21Z","last_seen":"2026-03-24T09:41:05.820779Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/remote_entry.js?bt=1711110898290","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"593a75c292e646e47d2c12e12a0f43e3","sha1":"c45f29556fe4de635770da7118a7e0b88e399dcf","sha256":"5acabb9672dd32cc1f8664fc1ecc63348c69975b95b865c099f00a9867c3e02b","sha512":"87f19ccf227de6f86a3255c33aaa3c3f3d6bc36f55e80f4f5448834add3f17966c4d668a34096a5d656009fe60acfbfae5f7936ca6c045982f1ddc820d49ad30","ssdeep":"384:bRpg9kg4YtgeV5TKV26oaMnLH/Wg+aRYW733N7mQPW3e:9pgt4Lg5Z6oEg+aL3d75f","tlshash":"01627ddeb7d8a4e1a52200a8f53ed1c1b418b629344ea8f0f547dd34205ddd5a7f2a73","size":15770,"data":"","first_seen":"2024-12-24T12:43:45.700906Z","last_seen":"2026-03-24T09:41:05.814027Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/8039.de8937287e12968506e8.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"aad5e4c43ec993cbea1d1defac9f87c7","sha1":"d196f0ffe87a12185cf9eb6d883cd7d82fb33513","sha256":"d9f6bfa189fbf1cd34d51d00a13bf5ee72d0621c44d3faa1804398f273e9343c","sha512":"b9cd6e88ad16bbd4d1be4db7d75a43e63ef4e09e29f6351bd36989c2e7f3c313f1af1a6f8a83104b148e6891d91778aa12196916dd703db6dc5669ed14854723","ssdeep":"192:yymwgqTDe3ik7VLL0OjAJ2x8rDtfiOfY63/cqmsLUrRLikYBRB/EBzludkvGa4b:ybwgqG3/A7pfEskRYBCpufb","tlshash":"4952f9a93142305429e3a86264cf20ebac7c8c34388c1df7afd2f995e5b59c29453fd2","size":13426,"data":"","first_seen":"2023-11-16T13:11:59Z","last_seen":"2026-03-24T09:41:05.747862Z","times_seen":1056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1072.27b27310dbf060108088.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1d0937a7c7c705df5a962fc60d1c45b","sha1":"6d171e117ff221d19d897660e435dca1b032fea0","sha256":"eb05154007d3380f99f84dcb7469eed8b30072901b08a54f47f4f8a9f23868f8","sha512":"8cdadb1f7536feb60496ab09e66c8729f866f62445892d779c16e1d76604b02ace5b74c59fa5a2ff0dc9c19fb31d3e579d8fd6780591e4bbc2c21090eed3d20f","ssdeep":"1536:NmkJqMC4T/dBq9C+9Rn07DNBMXPNlhNcuWzb/:RIM5rdB1anuDNsK","tlshash":"3683b9ca76e7f0e24fe9a091807b035bf2387b45b80c5150f215eed67019da6b763b29","size":83504,"data":"","first_seen":"2024-12-24T12:43:45.675222Z","last_seen":"2026-03-24T09:41:05.794741Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/5208.11c7f48da67f458e2fd4.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6402935eeac5be8f3cb12f6ce7e29004","sha1":"39f5dd3c9936459c1e87e15c4f56ac57b1c4f064","sha256":"ce70e8228a11a40f78185995a94d82d0c7075c4fc2395e54d795568e29616627","sha512":"4b637c7752435221c6fa2414b1331f8543825135e3b858f941e01b5b34856dffb85b20a53428e02b75f609b1d7ddba551d554cc876bd398afc36a986e7cb279f","ssdeep":"1536:37a0xvPwTGH0xdvsZsNHRD9WkyoN1bqfiQwJl+w23U:jHibuZeJ","tlshash":"c333b6c8baaabdd91ff874d0443643abf26e941bb4041a72e6116f957011dd1e3f3b28","size":50656,"data":"","first_seen":"2024-12-24T12:43:45.659859Z","last_seen":"2026-03-24T09:41:05.798325Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/145.487644412738b336a698.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"237ad3306d6ce8cd60788f4909e6d786","sha1":"f7b1f8af1d5641eb9916134f4de627c8d8cb2b5a","sha256":"b8761f269c2c4949ad6317fa9267ca9ec7f5f7e777ae0b756c94bd6c1f724246","sha512":"2f6517c077374943959d7ba03b0f5d837efda372139fe92f5c1454c08f7f4ddc8554433714a4855a8a38676cbf4eb546d231bcc4e1095c5ec2f20e92f72827f1","ssdeep":"6144:TcA9YWmzgqyaz7bVf0nTxt3H0zZCpQ6R6zQHwnE/h+pEt4zhLardxWEiQ1Ew8Och:TcA9Y1gqyaBf0nTxt3H0zZCpQ6R6zQHy","tlshash":"1e8408c8b6e7b8d14fc694d484bf4247f4297925742cb400f620e9a2b451ee3a2f7b36","size":376874,"data":"","first_seen":"2024-12-24T12:43:45.69466Z","last_seen":"2026-03-24T09:41:05.807637Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/9604.5d838f221b541a3dc704.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6737ce2190516ebf33fe3581fd388505","sha1":"70fd119eabf39bc1fce4f62149e7420f35b014cb","sha256":"46d42b6903ceaee2e0d9b43593d07dc2faad3849eb33fc63df66b54dbda10efb","sha512":"1b26f3f7c8c5730ca373d1e424abf03c44ea6821ca0c487f7633b6ec9acad877e6c8609e5abcd8ef0d0cdf32fd32671b260fd27c03a46f2eb54c33da7181052e","ssdeep":"1536:L0rCj453DvlZ4zf5UB7zHjVbEHX7quv+tY8OdAWJkUs5hp:LLj45zvv4zf5UB7zji/8OV4","tlshash":"8a9393c97a99b06ca3dfe135503f590bf27b6e81640d8121f662c5c53c7a49ac323e6e","size":89648,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.795855Z","times_seen":1056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/6640.2badf0e09b393fe70fc3.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"12eb0c59d671bc968860ec1e65e71581","sha1":"352891b790f6e77302bec7069c26eb6792056445","sha256":"b1e54bc195f55e42ddbdf7f20cba099662a054676c6d635a5e4f24c8c16100ec","sha512":"86d87e56ae83e1c9d87aeab437e9c525b1814c8c49ac9e7849ba1926f9bced1efeaf9dbbe06b5f01873fe161e9108bbd2d5d89d2e39d228bd35701ba6628270b","ssdeep":"","tlshash":"17e0c0a5ccb23cd5a03b5fc994380c22a0f420a5310450d0ab0f08b5542359e2c52e71","size":344,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.809855Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1618.310a8ec69eb176a29494.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1928bb0dccded8cba3a14dad757fb9ec","sha1":"85834f7bc86f1f82790a48bebd3e056ec876373a","sha256":"50abb7e1bb6a10fe57b0d33884eca6099f4306491512af28e6949a6120b0c990","sha512":"482310a593a5bacf3cba62082fc313b06d97ebc19ff4b8d9624b932390f3b2e8d17333a1f2b453d76c96dc3fe79a546aceba695d9bd72fd0ffb72e6a6d361db2","ssdeep":"12288:FgPv6a6mpeDBqzennqns/U5IxMonE/2c3Ul2U81ChZjon2hzkPWplsZUCpqrgcpJ:FgmiNLxu9GAdeOJ80z","tlshash":"4475733d1e548daa99ed740701c6fe451bec1d3bbb484ec43eedd4a9a1b00dab04a85f","size":1576359,"data":"","first_seen":"2024-12-24T12:43:45.704828Z","last_seen":"2026-03-24T09:41:05.822351Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/plugins/com.mattermost.calls/com.mattermost.calls_904eb58b92e5dc2b_bundle.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e126ef40063ec47f13a98941e305fbf","sha1":"b6518422e8cb05d98579df1544fb7934679d9159","sha256":"67666bd66bc850ddbca75cfc0a49671a73d5f4150926833e27c97413fcb28109","sha512":"2af15c4e12d3986f65a3c100b695736df89740b27fa621acba57304d55651686fcc717106996ab1daf210908a8bd0dc72bfbe9901cecbffbcdece6c056dab2c2","ssdeep":"49152:sZhN3pzk+Ji1hB9EcPArV0aOuk/3ySfJgzo97N9Mcz:g3pzk+Ji1hB9EcPLkKff","tlshash":"3a06922c1a1afb98d848e0c7e5677d44c69cd5abb60a08c03fb9c6b756b0386f59cc17","size":3842087,"data":"","first_seen":"2024-12-24T12:43:45.691448Z","last_seen":"2026-03-24T09:41:05.824021Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2811.0a81c7ef9daf162ebe35.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb3dc2533fdf7065036616080361fb6","sha1":"5ade924ca30b697096e62060ccaf1ddb3ac9632e","sha256":"60f27b59ae0d7d36d7b4f736bb574c8c0f9b1ed663bdb3a4b9335cb7a870c7fc","sha512":"878b3666ae25214702fc0ab9023e7b89686ec13e6f4596aa72f5f0542628fbc95e8425c4f64b8bd4d60c7c1bcfd165e6ba822179e78a7a71b57a8b73f9527d27","ssdeep":"24576:6101OHkQDuOh7N4u22btMAhTkcRKYgtjy2Y:6101OHkQDuORN4uNbtMAhT9qtjy2Y","tlshash":"1f154a85b2d1b03053e36166807f110ab37a2519644ec858f27ed8e57fb998ea237f7c","size":939976,"data":"","first_seen":"2024-12-24T12:43:45.696729Z","last_seen":"2026-03-24T09:41:05.799453Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1542.c90979dfc4aadbe945ba.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a54d863e5fc59f73b38bb6fd51146f81","sha1":"e1314f623f915362e2f8b25f7995b019925fa2d7","sha256":"f21f53aa72f6b5b2b7ee85498afb38be7b0fdee2cb1c561b0829b2e8ae4dd312","sha512":"bdfe82c38dc0dbbd482ee48b05c1bb5d34b8625ca1c947aa10a3a0c78c3037c28e3adfd544f69bf2b4c5e14cab9d4ebf4e348996b406ad96839988541ff74e74","ssdeep":"1536:6vNVfpzYRuH5i/EZ0JDovEgX5TX9uESYz9KSuWO:61Ft0z8QUxXZf96","tlshash":"e2c3f8ec3995f9616af711a700af2803733d6a1b280c4550a215fddeb5f801eb16bf9e","size":123813,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.76467Z","times_seen":1059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/4404.b87614c5f140f1ac7ba6.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a7db12d02e1643410f4d7ebae562734","sha1":"185fdb682780baf4d86a7d4f1b2ff8628edbdefc","sha256":"2dd6d3c32185e5112213c5cd84447674d32c9b53e8065b578532a962ebc952a3","sha512":"f5d05ffecceee72b0b64f8c452049f0bb92e2bf39ba79124b202d8e085bb6a79f035095dae3e9260184bc6d0ad554614c855d9cfb8a9ecdeeaf6c5f1bfa6d91d","ssdeep":"192:t6ObGxEb0hwL4hgc3K12OVk06rlw464XX7M8wyIcR04f26jyUgsu8jZOnqFsGHNl:tPB14jVvlw464XrM85Iq0Ff7oNJnYk","tlshash":"6092b9d8b0e0b0b42bd714a2c47f055af27e786d194e80a0f292d4d87db8d9e416bf79","size":21193,"data":"","first_seen":"2024-03-12T19:30:51Z","last_seen":"2026-03-24T09:41:05.748779Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/5620.0332d780b6bdcb1ab953.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4980f12746e8f1f25091651e73cd32e0","sha1":"134db785888418cbff14b55f21bd61f02a94abdf","sha256":"843555aed5d9235a7a75975f704465333aa7dfc26a74a0c5b45bfefca70a39d4","sha512":"00d1021ab441e5c5b89f88309385674264789b4f54952365b51ac87809380f3ab677a5a3d19ca4ff1419d0d39da621ee3871f4d2d0a54f5046fc9fe70f9faf7f","ssdeep":"384:owlpNXP3MOXQkuhGoqlDfWV0e/HjYEty5urNurPrYuA+GRNxnbDBq7F4t:oWpNXP3MOjuQfS0e/DLkrjPyNxbg7F4t","tlshash":"0eb2f9d8b286745183d360b5453f150bf23a1958684d8068f12afcea7db895e923bf7c","size":25713,"data":"","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.760927Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/368.21e7eb9195a96904ed87.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd82a6a5db115e06ef9dbdb6831cb676","sha1":"d7287fb92c4b7cd91b700a5cbf20f8e1d49ac0be","sha256":"4d5d07e5c5c7f57ec12e86b4476044240ccafe6c4532e89566888ea3ac2391a9","sha512":"8fc5133b0e77877736a6673c140d8d363c5fcc5d5e04dc43206f84c4e8c0aa34031907514512a3ab0fdef209cdeb25b61fc1c078a1f52a09b8fcae7be2d41acf","ssdeep":"768:qaF8BQMrKjBA3Ab7HltLuCu6XkCVG6Sfk/:OBQMrLiqPk/","tlshash":"7303d48835d0f0a052e350a9803f590eb2ba5c7cd50bb85837edd8f51bb688e1227f79","size":41048,"data":"","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.772886Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2698.baf792c5ce348cb0b7a4.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2997feaeb00c42bb1539bbed95d5e52e","sha1":"9eb4f54000d5ea1e83db7ee0bcce29f8085a35a1","sha256":"99ab282ba45940915c40ab86d623b10e66df2a9643db5d60308ce0c507757497","sha512":"2ee9dc7ffe51a6f7f30eaabab93f2c9b2641f73272dae5b2a08e9c3df0e9f1a2eaa3ded8be9d60ccd0b0d040207f39fc0b69feb0496a947ae404fcb2f5979884","ssdeep":"768:dYkuXWXpK1R215kOW2m6SRUt4Taf2xc2cZXwIW78KSW3T0sy0DT5p0g1vc2vGUTD:TJe/chiIWZqUtPhNMNeY2ppcry","tlshash":"50a3536b72679ca24cec611c3c3b4307b29d9e9ab80f5c5cbe5ed1849409db3b079672","size":103664,"data":"","first_seen":"2024-12-24T12:43:45.665033Z","last_seen":"2026-03-24T09:41:05.779988Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1191.43e6892f50bec3fc61fc.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"959a4fa73049ab2ce8945cd4fe99932d","sha1":"c09bf1d865d77af0428ce16cd58454c680b2553e","sha256":"8caad9ff15ab41a874f0a3743a674355b1716decaf48b0e413cef0609ca4e835","sha512":"73638d78bfe7ab1cfc775897cb3683690e9afcf047f671d0e6b1c30552da749afb457a9d75e5292de7c261b8bc7c9f22976b1641dfe2807018b9e44475766138","ssdeep":"12288:Kz8a5LCAjbA+6MQPKpCI7rjNvd4dgHYPlK1ZgF2A:w8DCM+6MQxmrjN1464","tlshash":"62458b281a2bf744d409d0dbfa373d84c59dd18aa40b24e24fb557b35ba1797eaacc03","size":1275068,"data":"","first_seen":"2024-03-12T19:30:52Z","last_seen":"2026-03-24T09:41:05.825397Z","times_seen":638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2701.a1afd4bd90d4a81c27cd.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b3302abf1aaaef9bd2486006ec71428","sha1":"5686f8b949897dbaa68c4b9eaa56fe48328ccfe0","sha256":"73858c6da620e6d13ce8d7fe035a8f96eb95f13b3a2bebed6e686377295c4f0c","sha512":"28a8d526599cc20f793d2f2a8ce4b5bd30ece5a49bc1a2c653b3c6d763ae152e6b1c8a7640bde354b08624c12ed47ba3b03a45783a966547d84b94b0160b213a","ssdeep":"192:gZe3aHm/3przC5/Tbj7+z2+cDhFt66sXP2B+6PAPuCNRbBV:gZCX/JzC5/Xj7+z2+cDhFt66sXPxAAPJ","tlshash":"43223049f2115c9c48f4044ef46d2f19f295375e90ad0848b9eeac8eb521f99723eb33","size":10502,"data":"","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.763405Z","times_seen":1019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/main.58d8ad8e908360448ff6.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c5efca0a1e058011b1df80607848a3d","sha1":"ff836b5bc5c91f1437f8cad89fb25cd557082ca2","sha256":"444439fd6c89f7eafd5190e9f4b08b732503fccc9166309d0c95294035048173","sha512":"5cee37597268b0145e1c4fa31d40268bc1b2e713945278f77005862a2f0314295c046e413aa9d38d10e5689504fbbf6262324cf450f3cffafa80a45c82188350","ssdeep":"768:RTq6Xx7M3Hivn+Zkj/G7WDfRfuV/eaEW4c92PIoaF3NGBvmTQvpYtaYNXaxLnoRx:VqWtM3HZZwG7WDfRfYGboF3NGBvmTKYN","tlshash":"41231a8ebfe1f0b243735198e12fd406b27a1958680dd9e0d743c9e0787a9899277f39","size":45606,"data":"","first_seen":"2024-12-24T12:43:45.687603Z","last_seen":"2026-03-24T09:41:05.743341Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2565.5c6f9bd11886f9819fcb.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab0e72c30a4e324d0f305a1999d297fb","sha1":"5ab09abe8610e8476de86a8f2aedf40eebdff741","sha256":"eb67e75913636cf77984ffe1703e2a66ab5ae6ea2d6e9945dd764b0e85c1faa1","sha512":"0aeabe60a2aeb8c01d79a8c02ac0e4b73315ffe59fa46ead442e84402b81abd26388d9392469b0e753b1b15c7493807430eec6ecf038444ee243f0fd363d5ef1","ssdeep":"3072:zNbqfw4bo14jVjzDmxN5Ftz/ZEKOKlLYn:JaXDmxN5FNPu","tlshash":"dec3e784b0d6b1a443e750a6c23f5c0bb3be259cd58d8594f5a2c4d83eba14d2327fb9","size":123314,"data":"","first_seen":"2024-03-12T19:30:52Z","last_seen":"2026-03-24T09:41:05.792367Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/8304.11b203998b518862e4c7.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"15d381a1fe305e0dd4d20fd59c857362","sha1":"85c35ad2f894ebeceb13a944ab74145c67883d81","sha256":"c2bd39b080b4ac57aeb7c249f9f133badcdd704b62ca57de58073b292dccca61","sha512":"c0c2317044c0c2f1bd686a9bfee6a8623e03e4ca1e5313ec3891144c18ec0c087ec1a70621ef5dd527c357386afb2ac3bba4a3a4a42fc74363a14b6fb1a39b6c","ssdeep":"","tlshash":"dc31958ab2c0b5bc5f63049a44bb4557e0e04998587df11afbe0d0d825acc7f122bb38","size":1601,"data":"","first_seen":"2024-03-12T19:30:51Z","last_seen":"2026-03-24T09:41:05.760204Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/8055.536b2a0d893cbfdd2502.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae4287fe9fa3a2e87ff3aea50e4d5cd4","sha1":"16a9c7ac5cd283fd9f4d5e4801edac12f6e69b9d","sha256":"70374fbfb76b7192fbdc1829fffb48f71ef33fbf2002fa8e7581ea9b9b73819d","sha512":"5eca9fa10362161ad86c2a9a3216b1c43ad0a13b69557c6c5f22606b2dd7254b5bc981e4191ecb27d808461204d21298330eec1350afc22a8b2ce768243ba80c","ssdeep":"49152:8kQqJKBzgbtgm4NOvOPOsmLifyhp+DyOfla1nO3rudYg9GUOG4GmRdxoJWedo5Ga:PgAwJv","tlshash":"25f57c85f6a46dbc40d611e7a86f1948f2b42b4ea4245404f1fecc9c75a4fc8a63fb36","size":3403191,"data":"","first_seen":"2024-12-24T12:43:45.683018Z","last_seen":"2026-03-24T09:41:05.827981Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/6891.1b1c37acadfa9bc7bffb.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"949d2f647f8b6407a7e594b28a1550cc","sha1":"cd43ac6db717943687de77593a5e7a07e8f1d944","sha256":"307aa99246b9df3a6bd5a899decee9a274eb47a625e99719422383520b4a1cd2","sha512":"94d213e64d04df1f61a67d359d31e0dd486f594ecae3ce8ca7179822d8fdada1bb67e3803a1cdabb508940b517cf2fababbcbdf8298ead3d45342840cab173f0","ssdeep":"96:BspAVm8o7ghqTyqpTKQxXhSJuhA8/frouh0VASqpo8Hup7wZ/V7bKjf+dbH9yyqu:PVj/p3saA1pjYwZ/FKr+dbdro4","tlshash":"22a16588f9e5b1f216632572843f600bf134266638ac9010e752a8f06cf08df9937f5e","size":5040,"data":"","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.75757Z","times_seen":1058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/main.58d8ad8e908360448ff6.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:09.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/main.58d8ad8e908360448ff6.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45606,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45551)","md5":"9c5efca0a1e058011b1df80607848a3d","sha1":"ff836b5bc5c91f1437f8cad89fb25cd557082ca2","sha256":"444439fd6c89f7eafd5190e9f4b08b732503fccc9166309d0c95294035048173","sha512":"5cee37597268b0145e1c4fa31d40268bc1b2e713945278f77005862a2f0314295c046e413aa9d38d10e5689504fbbf6262324cf450f3cffafa80a45c82188350","ssdeep":"768:RTq6Xx7M3Hivn+Zkj/G7WDfRfuV/eaEW4c92PIoaF3NGBvmTQvpYtaYNXaxLnoRx:VqWtM3HZZwG7WDfRfYGboF3NGBvmTKYN","tlshash":"41231a8ebfe1f0b243735198e12fd406b27a1958680dd9e0d743c9e0787a9899277f39","first_seen":"2024-12-24T12:43:45.687603Z","last_seen":"2026-03-24T09:41:05.743341Z","times_seen":4,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/8039.de8937287e12968506e8.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/8039.de8937287e12968506e8.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13426,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13289)","md5":"aad5e4c43ec993cbea1d1defac9f87c7","sha1":"d196f0ffe87a12185cf9eb6d883cd7d82fb33513","sha256":"d9f6bfa189fbf1cd34d51d00a13bf5ee72d0621c44d3faa1804398f273e9343c","sha512":"b9cd6e88ad16bbd4d1be4db7d75a43e63ef4e09e29f6351bd36989c2e7f3c313f1af1a6f8a83104b148e6891d91778aa12196916dd703db6dc5669ed14854723","ssdeep":"192:yymwgqTDe3ik7VLL0OjAJ2x8rDtfiOfY63/cqmsLUrRLikYBRB/EBzludkvGa4b:ybwgqG3/A7pfEskRYBCpufb","tlshash":"4952f9a93142305429e3a86264cf20ebac7c8c34388c1df7afd2f995e5b59c29453fd2","first_seen":"2023-11-16T13:11:59Z","last_seen":"2026-03-24T09:41:05.747862Z","times_seen":1056,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/4404.b87614c5f140f1ac7ba6.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/4404.b87614c5f140f1ac7ba6.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21193,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21056)","md5":"0a7db12d02e1643410f4d7ebae562734","sha1":"185fdb682780baf4d86a7d4f1b2ff8628edbdefc","sha256":"2dd6d3c32185e5112213c5cd84447674d32c9b53e8065b578532a962ebc952a3","sha512":"f5d05ffecceee72b0b64f8c452049f0bb92e2bf39ba79124b202d8e085bb6a79f035095dae3e9260184bc6d0ad554614c855d9cfb8a9ecdeeaf6c5f1bfa6d91d","ssdeep":"192:t6ObGxEb0hwL4hgc3K12OVk06rlw464XX7M8wyIcR04f26jyUgsu8jZOnqFsGHNl:tPB14jVvlw464XrM85Iq0Ff7oNJnYk","tlshash":"6092b9d8b0e0b0b42bd714a2c47f055af27e786d194e80a0f292d4d87db8d9e416bf79","first_seen":"2024-03-12T19:30:51Z","last_seen":"2026-03-24T09:41:05.748779Z","times_seen":1042,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/5208.27f99c449cffe34dc675.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/5208.27f99c449cffe34dc675.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:17 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 2827\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16500,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ddc4a913954d2de57b1113de1f1caf01","sha1":"e7adf1bbee0247c45783ca306b71f498da25b36f","sha256":"75067888e6ad400e2dad77ab5193b6c696c87f8c353eca4fb798d016b428275b","sha512":"dc4dfdb285bb2253f0103af83184a877b868252e37ff5fe90d40e92121aae7ec7440d592f375f3c209fca2b2a38e1f9b95feee910c428979b3bd9a5d22766b97","ssdeep":"192:AxRecRba280OF+xRecRbwb57Xi3r6xucvq6xyQGRei7KM/i5hmN6VbFarTq6lKYr:SWH0OiMbxm6x6c7DiuM/Ima77Q","tlshash":"4c72738e2ebc056476bb6916b2c75f2c777c5092180cfc396bec115d5cc2ba49be3681","first_seen":"2024-12-24T12:43:45.618504Z","last_seen":"2026-03-24T09:41:05.750138Z","times_seen":4,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/identify","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:19.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/identify HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:19 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: coguA4mvogFlXGKRabE3MMVL-tBUOHE_pR9u3qpMQp82KB4K_OgQKw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/6891.1b1c37acadfa9bc7bffb.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/6891.1b1c37acadfa9bc7bffb.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 1931\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5040,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4986)","md5":"949d2f647f8b6407a7e594b28a1550cc","sha1":"cd43ac6db717943687de77593a5e7a07e8f1d944","sha256":"307aa99246b9df3a6bd5a899decee9a274eb47a625e99719422383520b4a1cd2","sha512":"94d213e64d04df1f61a67d359d31e0dd486f594ecae3ce8ca7179822d8fdada1bb67e3803a1cdabb508940b517cf2fababbcbdf8298ead3d45342840cab173f0","ssdeep":"96:BspAVm8o7ghqTyqpTKQxXhSJuhA8/frouh0VASqpo8Hup7wZ/V7bKjf+dbH9yyqu:PVj/p3saA1pjYwZ/FKr+dbdro4","tlshash":"22a16588f9e5b1f216632572843f600bf134266638ac9010e752a8f06cf08df9937f5e","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.75757Z","times_seen":1058,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/api/v4/license/client?format=old","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /api/v4/license/client?format=old HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nX-Page-Load-Context: page_load\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nexpires: 0\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-request-id: ywx6bbwd67rt7noshytoa98xya\r\nx-version-id: 9.6.1.8390314674.1384bc9823865b7b1c48f8dbbfa1b69d.false\r\ncontent-length: 22\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c3a085adc6b7ad160a48ce3cd55912a8","sha1":"3422494bec5fa8abf65c22dc5184376235da4dab","sha256":"0cd8dfd017b616709d4cc6560b64ae194977f718aa15ae1a31ebc9db25fe845b","sha512":"3d68de162af612d81c7d24d6e94947e28e8fd0ae6649af5128e6b226e9277aa2b9478b56a519a0bf20852438ea2617d660e2bcd2f8dadf8f138ae32e1a47306c","ssdeep":"","tlshash":"01700002280000ab22880000280082ab802280a0a03800c080b08800282000c20a3000","first_seen":"2023-04-19T15:38:05Z","last_seen":"2026-04-05T08:13:06.476297Z","times_seen":4626,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/identify","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:27.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/identify HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 5aL1LCOaz9-KvoHpykV7YGcDb3WzdWCHu0xhdtF7v1hc0sSIsFE27A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T09:40:08.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, max-age=31556926, public\r\ncontent-security-policy: frame-ancestors 'self' teams.microsoft.com; script-src 'self' cdn.rudderlabs.com js.stripe.com/v3\r\ncontent-type: text/html\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-request-id: j8anuoztcbggxg1grfgepy833w\r\nx-version-id: 9.6.1.8390314674.1384bc9823865b7b1c48f8dbbfa1b69d.false\r\ncontent-length: 3499\r\ndate: Tue, 24 Mar 2026 09:40:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3499,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1693)","md5":"c9311e5bf61d0351592e9c177f53f36e","sha1":"fef30f6f0d9133008394b72f0f7172c83c5f3962","sha256":"e1b2a1dbddf162bec37238f8fea64fe061a491819af18e3f686cb2f4146f0959","sha512":"7b642ebfdc4bf509b2bfd7dfe70bf4e8bd9dd77c63f4a8c4795c706276d55875f8dba5066683b5f98ff1e0fedb8dcffd66edb1e0f52a872a9ea3579af9e03cf2","ssdeep":"","tlshash":"33711452cc12a44a2a33a939fbb7327dd041d02bcb76ac21b5cd5199cfe1ed04a63776","first_seen":"2024-12-24T12:43:45.605724Z","last_seen":"2026-03-24T09:41:05.758932Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1552,"timings":{"blocked":648,"dns":118,"connect":257,"send":0,"wait":257,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/8304.11b203998b518862e4c7.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/8304.11b203998b518862e4c7.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 917\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1601,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"15d381a1fe305e0dd4d20fd59c857362","sha1":"85c35ad2f894ebeceb13a944ab74145c67883d81","sha256":"c2bd39b080b4ac57aeb7c249f9f133badcdd704b62ca57de58073b292dccca61","sha512":"c0c2317044c0c2f1bd686a9bfee6a8623e03e4ca1e5313ec3891144c18ec0c087ec1a70621ef5dd527c357386afb2ac3bba4a3a4a42fc74363a14b6fb1a39b6c","ssdeep":"","tlshash":"dc31958ab2c0b5bc5f63049a44bb4557e0e04998587df11afbe0d0d825acc7f122bb38","first_seen":"2024-03-12T19:30:51Z","last_seen":"2026-03-24T09:41:05.760204Z","times_seen":1042,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/5620.0332d780b6bdcb1ab953.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/5620.0332d780b6bdcb1ab953.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25713,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25659)","md5":"4980f12746e8f1f25091651e73cd32e0","sha1":"134db785888418cbff14b55f21bd61f02a94abdf","sha256":"843555aed5d9235a7a75975f704465333aa7dfc26a74a0c5b45bfefca70a39d4","sha512":"00d1021ab441e5c5b89f88309385674264789b4f54952365b51ac87809380f3ab677a5a3d19ca4ff1419d0d39da621ee3871f4d2d0a54f5046fc9fe70f9faf7f","ssdeep":"384:owlpNXP3MOXQkuhGoqlDfWV0e/HjYEty5urNurPrYuA+GRNxnbDBq7F4t:oWpNXP3MOjuQfS0e/DLkrjPyNxbg7F4t","tlshash":"0eb2f9d8b286745183d360b5453f150bf23a1958684d8068f12afcea7db895e923bf7c","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.760927Z","times_seen":1042,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"api.rudderlabs.com/sourceConfig/?p=npm\u0026v=1.0.16","fqdn":"api.rudderlabs.com","domain":"rudderlabs.com","tld":"com"},"ip":{"addr":"108.157.229.85","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rudderlabs.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 14 Mar 2026 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:86:B6:0C:EF:B5:73:B3:9C:95:6C:AC:AA:2B:CD:B0:61:54:BE:ED","sha256":"D4:9C:B0:44:B1:74:D9:C2:3C:30:53:4B:AA:93:E7:18:08:C2:D2:4A:6F:E6:33:FE:46:BD:E9:82:59:B2:1C:4A"}}},"request":{"raw":"GET /sourceConfig/?p=npm\u0026v=1.0.16 HTTP/1.1\r\nHost: api.rudderlabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Basic MWFvZWpQcWhnT05NSTcyMENzQlNSV3p6UlE5Og==\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 513\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\naccess-control-expose-headers: X-Request-ID\r\nx-request-id: 754b10f0-2765-11f1-a0d6-713bb513747f\r\ncontent-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fedd444eadd43dacc7e53f24b46bddf8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: JJ-l7gB-ZICJA-vYk-6xgYav4nO5NUng7buLvvpGzvACgwqMm_yL3A==\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"41b0737b33f2d5e062d05886b80c981c","sha1":"59d833666192abd233bd276cd3a7ebdfdfba689f","sha256":"8d7ac097259dc5d357b7eea1dde1954a743aece4965b7fc8ad856d51ffc796ca","sha512":"78ee9fce3da0d2cacda60c25214225034deb41c51d370fbe99a21e276d069c000a09e2edb785863e0e37ce1fd6f714f356f36abda716ee04f8167406ecaa981f","ssdeep":"","tlshash":"8af0c030fa7461bb0b150c8bd6a91e03b058252080016c1cc35d447c40efeba0b1f660","first_seen":"2026-03-24T09:41:05.762303Z","last_seen":"2026-03-24T09:41:05.762303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2701.a1afd4bd90d4a81c27cd.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2701.a1afd4bd90d4a81c27cd.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 3288\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10502,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10446)","md5":"6b3302abf1aaaef9bd2486006ec71428","sha1":"5686f8b949897dbaa68c4b9eaa56fe48328ccfe0","sha256":"73858c6da620e6d13ce8d7fe035a8f96eb95f13b3a2bebed6e686377295c4f0c","sha512":"28a8d526599cc20f793d2f2a8ce4b5bd30ece5a49bc1a2c653b3c6d763ae152e6b1c8a7640bde354b08624c12ed47ba3b03a45783a966547d84b94b0160b213a","ssdeep":"192:gZe3aHm/3przC5/Tbj7+z2+cDhFt66sXP2B+6PAPuCNRbBV:gZCX/JzC5/Xj7+z2+cDhFt66sXPxAAPJ","tlshash":"43223049f2115c9c48f4044ef46d2f19f295375e90ad0848b9eeac8eb521f99723eb33","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.763405Z","times_seen":1019,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":258,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1542.c90979dfc4aadbe945ba.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/1542.c90979dfc4aadbe945ba.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:36 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123813,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"a54d863e5fc59f73b38bb6fd51146f81","sha1":"e1314f623f915362e2f8b25f7995b019925fa2d7","sha256":"f21f53aa72f6b5b2b7ee85498afb38be7b0fdee2cb1c561b0829b2e8ae4dd312","sha512":"bdfe82c38dc0dbbd482ee48b05c1bb5d34b8625ca1c947aa10a3a0c78c3037c28e3adfd544f69bf2b4c5e14cab9d4ebf4e348996b406ad96839988541ff74e74","ssdeep":"1536:6vNVfpzYRuH5i/EZ0JDovEgX5TX9uESYz9KSuWO:61Ft0z8QUxXZf96","tlshash":"e2c3f8ec3995f9616af711a700af2803733d6a1b280c4550a215fddeb5f801eb16bf9e","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.76467Z","times_seen":1059,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/8055.fd111666a03a1f725bd1.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:12.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/8055.fd111666a03a1f725bd1.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:18 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":296652,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10828)","md5":"7e7c3ee6351340aa788f84309697dcd3","sha1":"09de28de8f01b90a5a9cc94d984ac941bb079d61","sha256":"c7b3a25b0bcded7f4031c7e30f9c39b09150cf9358c983918b5a9df6c0ff775d","sha512":"c6ce000136e5a904bdcdeb146521e587fd921552e8e87ab77733cb9e6fb80bd35112edca38e3d848b6713a66b73188712d0c53393187f1c062a0a0d7a41545fa","ssdeep":"6144:35v8dlXNn8A+bGmOUe8A0Dr7nK3Tlpxo8G1mZcgd/tDrDXXoB:35v8dlXNn8A+bGmOUe8A0Dr7nK3Tlpxe","tlshash":"8254bad1b9f91038a0b7969bf6819afeb97cd8118e131e67a435333cc7c61d712b1618","first_seen":"2025-11-30T06:38:00.093224Z","last_seen":"2026-03-24T09:41:05.766142Z","times_seen":3,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/api/v4/plugins/webapp","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /api/v4/plugins/webapp HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nX-Page-Load-Context: page_load\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\nexpires: 0\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-request-id: oni3fezj1jnazq51dyk68wjsjh\r\nx-version-id: 9.6.1.8390314674.1384bc9823865b7b1c48f8dbbfa1b69d.false\r\ncontent-length: 408\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1490,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9912428f293f89803fbafc4702b05704","sha1":"999cb612622175732ad3c6367f7517f333ccb120","sha256":"a7e9a12d2b5328138a44c711d2156a357c741f8b94aa817bada1e04e97513ebc","sha512":"3f0766012be37077c4d9cc18990be097a91b4ddb4a5d10b978d2ff17c442387c823261369d9b7ac00d3c2b368697245286d2a719a861b3ccf656e5a3afd6e781","ssdeep":"","tlshash":"e231086ec95c50ea1f137bed440b2981dfedf396ae61ed99c193ad208aa70f18107437","first_seen":"2024-12-24T12:43:45.632969Z","last_seen":"2026-03-24T09:41:05.767414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/34c82b247a366d047105.png","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/34c82b247a366d047105.png HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1800 x 1500, 8-bit colormap, non-interlaced","md5":"c30f3344788f93968f046bd9472d5cd5","sha1":"f1a47cdd59c63d86bf516e97309dd914c6fdf249","sha256":"c7acc53012cab5faeb1252bafd0cce4b9c8ee134eb3ba723d5577f8d8172e2d9","sha512":"90d7592e8f4db356641713f5f6358d978689bea4077dd1d2fb3a29e30be4f3b4f143a147dac8b0d2e915fac6edebd1c90b7dc2d75e5902fbabef2c6d6f5da610","ssdeep":"3072:Ldkcpkub4H4P2rQYY9ciYXaXngOZp0IgXtbC4KwU9llv:LwuboYLcvaXg+prgXZC4ZU9l5","tlshash":"bdd3132a762ea29f88ebe0f5240a4df8db711c5b1a2742542cfbdef1320fd21c5515d6","first_seen":"2023-05-26T06:41:44Z","last_seen":"2026-04-05T08:13:06.460228Z","times_seen":4260,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/3bd5f5c5dd54ccb0c7c2.woff2","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/3bd5f5c5dd54ccb0c7c2.woff2 HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31556926, public\r\ncontent-type: font/woff\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 43236\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43236,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 43236, version 1.0","md5":"a9557eb451f17dcd8e687327ea9383a0","sha1":"78ad7ac0d04e1c0439c26d47978622b5b75b472a","sha256":"2e3b1d34ac67763ab50652da19305d4b3694c6b6e6bf35f4b98411ce4af646d2","sha512":"2b4934d472e301159bd07d7bc50ae396d3c7ae952af2a0219dc18c7237fef16c6578cf212cd2d04c6537dd26492a00a11c36458b21fb929126a10b2f1d6aed18","ssdeep":"768:XnvkvvzWpxpYZfeRsyjTHOHdBoSaLPr2ZGvL9HirHkQazamxZfBN3Qs9eA:XnvknOfYZjyfD3LPr2ZCirkQG9Vx9J","tlshash":"9713f132cd25486dddabfab10ac79c3af4198a2b05b646d93abe1e3e44680d3450343f","first_seen":"2023-04-13T05:13:35Z","last_seen":"2026-04-05T08:13:06.444188Z","times_seen":5295,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/3577.7ae35657cb3e001e2052.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/3577.7ae35657cb3e001e2052.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35987,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35933)","md5":"29119edaa468b41b9abb5f1ef82df334","sha1":"d101194f858659d3cab6bec42e8de47e4186d0ff","sha256":"8f70d74cfc59c3446dca78dae77274b47aeec4126c7d49ecaa0883815b2b8078","sha512":"1f3f228e359534a7943ff77df51750b02ac4a18eec551dfedf0d051d5939441317235b3de5118a3a4ddb3bea93bb02012f812bf70debf91fdf77b1a9db63c028","ssdeep":"768:mhwkrbbyhivoPPcgMtBr+xAPH68fRwTfjVcgIUYMl1TCgyfB3cW9lf:TiUAPa8aSl","tlshash":"81f209a2b6d1f05217b313da90350404f3395a0d794c99bdb3399cdbbcd294a62fba39","first_seen":"2024-03-12T19:30:52Z","last_seen":"2026-03-24T09:41:05.769842Z","times_seen":1032,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/7119.930911ffa6ae2965d862.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/7119.930911ffa6ae2965d862.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:18 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":597041,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"c8d8f7209ebd8b5e944305bd3d29a1a8","sha1":"bfdb8c8ae5f9d6ee08c8feb4c826da7574d40202","sha256":"dc33953300cd853a0889f9eec3766eca6a87b6939ea0825abe23f959b1fb0cdb","sha512":"e3d61cedc59721b6e7fc34ced66817df85a6a2dfb18e333c1eec7188af5bd04d4d756c2f137ffc61b470063bfbc5c603a01556d2360c0324c1fbe358284a95a1","ssdeep":"6144:ZVE/UyqqayYASQJx2MvTH+W+q00TGyu1kLilXEuMV:UtvTH+W+q00TGyu1kLilXEuMV","tlshash":"97c4751109c6243cfd37e539a1e84ea5253d4653c8221e7d7afab6afa3c24d9c063e53","first_seen":"2025-11-30T06:38:00.114067Z","last_seen":"2026-03-24T09:41:05.77107Z","times_seen":3,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/identify","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/identify HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: JA6In9SyF9iXPPXz40lbvyKYqHorvUUX0gO6N4uWc-Ajc-6HP6znAQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":46,"dns":12,"connect":9,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/17a50e2f200ecc8c4a58.svg","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/17a50e2f200ecc8c4a58.svg HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ad67124d34d510eb4ae0296eddffe1c","sha1":"72fbdf600cab205e3e912ef1eff769b737bac5b2","sha256":"f2ffd852f49af931d6c9b5661593f1a728aa88100a7aa97678163c0027e67954","sha512":"4087bf9b8f418c89a40f158554cf597c2de7bb7c4b2aa9e9c2a3bdcd65765a9203b01c186ed0da74ae831157449900f047c51f3ef454dab004993c926254b8d9","ssdeep":"96:lKgGeTbvl2unHvGFGM3bc3sEQyWCHaQOJMS6AulNrw+xL4+VarU4It9S09PbmTQ+:Np2HNo8O6QOWS6dlN5ZZaQr7IlubA/7","tlshash":"721285e96b70a2fca8c75f5edf32a858665ea4b96d3286c1c13def581493dc4e502c00","first_seen":"2023-11-16T13:12:00Z","last_seen":"2026-04-05T08:13:06.438689Z","times_seen":3447,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/368.21e7eb9195a96904ed87.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/368.21e7eb9195a96904ed87.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41048,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40913)","md5":"dd82a6a5db115e06ef9dbdb6831cb676","sha1":"d7287fb92c4b7cd91b700a5cbf20f8e1d49ac0be","sha256":"4d5d07e5c5c7f57ec12e86b4476044240ccafe6c4532e89566888ea3ac2391a9","sha512":"8fc5133b0e77877736a6673c140d8d363c5fcc5d5e04dc43206f84c4e8c0aa34031907514512a3ab0fdef209cdeb25b61fc1c078a1f52a09b8fcae7be2d41acf","ssdeep":"768:qaF8BQMrKjBA3Ab7HltLuCu6XkCVG6Sfk/:OBQMrLiqPk/","tlshash":"7303d48835d0f0a052e350a9803f590eb2ba5c7cd50bb85837edd8f51bb688e1227f79","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.772886Z","times_seen":1051,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/api/v4/config/client?format=old","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /api/v4/config/client?format=old HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nX-Page-Load-Context: page_load\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\nexpires: 0\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-request-id: 5xf7eujhopdaugi3qpkqz87qhy\r\nx-version-id: 9.6.1.8390314674.1384bc9823865b7b1c48f8dbbfa1b69d.false\r\ncontent-length: 1350\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3603,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"24383be945fb3ade6a3ac044334f5791","sha1":"b6d804427a3cf04b2b14270fce9d9ef1986cd52c","sha256":"fe55fd48d3c346bffc42c95b67d4f1704ff2e307553f153dfacec210fbf63e76","sha512":"f407b0c778b1bdc42c1a231db679bb83cc9f29558707561f32819075fcf9541635a25be3a08a50f6b76661a4c2b282aa14a22eb4a9766cebc6780897942f5727","ssdeep":"","tlshash":"3d710f9697102cfb438e96fc241ee4569ecd9441c89d9c2af460cf4f3de2eca12855b3","first_seen":"2024-12-24T12:43:45.624636Z","last_seen":"2026-03-24T09:41:05.774283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/7654b55b2f3442e91404.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/7654b55b2f3442e91404.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:18 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 621\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1309,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (981)","md5":"340e65ffd5c17713efc9107c06304f7b","sha1":"54b718c687ce8460e10d501c1eb53a8098942c1e","sha256":"3a9a5def8b9c311e5ae43abde85c63133185eed4f0d9f67fea4b00a8308cf066","sha512":"d1a3d0cb2799ad68fdb02038e949665a028e3f49948a92d0e8e657bbc97821c0260f6bb7d443c4cbd55c20cbe5ed2a0068a7bc6cb5d9858a0c684fe29fe81c80","ssdeep":"","tlshash":"cb2174238801a17339b7c9ee48cabaa59134da9360a10bf5747862785e11076b253f7b","first_seen":"2023-04-19T15:38:05Z","last_seen":"2026-04-05T08:13:06.466939Z","times_seen":5052,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/2958b47a121a8bd748c4.woff","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/2958b47a121a8bd748c4.woff HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31556926, public\r\ncontent-type: font/woff\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 17664\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17664,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 17664, version 1.0","md5":"a285fd2fa58e8356bb1f2ded93dd9bae","sha1":"60e314d1fab362343e1202a6bebe887d1c0bcce1","sha256":"3cbc2e2d08c770dbc76e2acf02362a15ec4003225e82da774df15c1966286b8a","sha512":"d64bee646d6ccc1ae538e74fccae69602a8e50b0c49be91e46943d3ab26fb4ccd0efb74cccf9a1c1b46bdb8e5538cc2124b6125389d1fca396a3b5b060568fef","ssdeep":"384:kpL6opgW6lziDkiZ7yYvXqloU6j3i9Ar0ITLSnyadGRJgV8:kgopgW6o/ZOC91UAPLiyz","tlshash":"4e82e1a45c6a25fedd2f7334390e5d7066785b0d3cc11ab3e53224b0277570a4eb764a","first_seen":"2023-05-26T06:41:44Z","last_seen":"2026-04-02T16:35:33.547745Z","times_seen":964,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/track","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:23.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/track HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: ItHyEZJjXwh-vuq3jSKwYSIVZW5qv7u6BxO0thqUAzB17_iGgfYDTw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/track","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:25.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/track HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: qwkeoeY-l1Q1kO3ye8ylMQ47lH48MTF_7coiNcrdDFVJuNHwPDouUQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/7703.d9ed98e201401c2beb22.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/7703.d9ed98e201401c2beb22.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11743,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5875), with LF, NEL line terminators","md5":"f73b0167fe4f850698bc2f2b384fb6a2","sha1":"39ed6a85ea3be18d5f1bbec9bf3d077d41b412f8","sha256":"efd039d642c8307f6c14638dbdff8579d29941a7e54139f78f25e9f0d43781c7","sha512":"6a28e16187ad8c9bddfeacb3427cfd6882173f5dd7c9bf3b1883c519fcfca85d61c82d887bf3ae6e175ee960b321f69ca129f72ad223256ff66f8bda57519e30","ssdeep":"192:5rT0Xzb4q10URNYdUOmTgt7SbACFnZwkrW2859BWgQN8/8kvOM:1+zb4q11MUvoSdZwkrFO9IRM","tlshash":"0632b9c4b25274a147f25094516f4802f67f2e11a88de481f782e45428bee9ff1b7f7a","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.77638Z","times_seen":1057,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/7378.0b94e714d0e252a84cc0.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/7378.0b94e714d0e252a84cc0.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 2998\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7137,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7000)","md5":"526d43f2eee2876a1c49036f24fdb72a","sha1":"f8075604b14ef496853f067bd64dc8d0abe49a53","sha256":"dddd6da2844278eabc9604772073725570aec1061f4c70e0de3646dfd80c2402","sha512":"38825751a4a6d3a3ec5fc00d74583ef3b2e5d4a1487682f1e97a305c1a4db0759c9b3e8819de8cd7e2689fb7ac7f0a5b515e8ac4c44d3d79e25c14a4789c7a1d","ssdeep":"96:XvUIbvGKuG8LDw7JW0GKhQaK/PI311qrL7MQ1JPKthEULkvOY6CM5Jag9MODXr1s:f/ZAPC5XKKjcJPsAvzmUMRrh4JmSi2uG","tlshash":"ffe1a5d5b099f0a157b738a5103f540eb33d292d385dc1a4a311d8e4bcf869dd22bf5a","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.777031Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/identify","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/identify HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 7-Ki-1aqDVZYiJngn3-OKGVPOR5AMC3Ve35dMhhyJGhBoFeXg0FkEw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/track","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:29.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/track HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: lAsf8Q9edE72PhRLwDpFCig2QYswxAEzXLq--VQxzll5MGF_Vt09zQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1191.43e6892f50bec3fc61fc.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/1191.43e6892f50bec3fc61fc.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:36 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1275068,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65448)","md5":"ef69fc83909bb44f651b0a61a10665b0","sha1":"38456b50ca8f1891e44f98f280aed43aace7eac9","sha256":"6d848e246120d20526d7feced15c6bcdda1870adea110bbbe9bfdb9fa3b1e56a","sha512":"81bafb65de3f1feb0f49ffb78425f27d83932e5de29be84b6168a4587bed7743e1620902fb6d1e2b5ae7e505bd67ec0163c33e24197f3cd41d024639b5e0a2bc","ssdeep":"12288:K8p8bekE1XWRu9chPKpCI7rjNvd4dgHYPlK1ZgF2u:XF8u9chxmrjN146G","tlshash":"f235a9182a5ef740d819d0dbe93b3d84c69de296b40b18e24f7157b31ab1397eb9cc12","first_seen":"2026-03-24T09:41:05.777925Z","last_seen":"2026-03-24T09:41:05.777925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2534.9cd47e7cf931cba451f2.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2534.9cd47e7cf931cba451f2.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 3819\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10349,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10295)","md5":"50a4d7ba0deb15006489ed7b3de3b0fe","sha1":"d188b752326c187af405759031d0d9426993dc2e","sha256":"56dabe5904236d8330b841754807f6ae7feb6e8642347d52645e9da2eb894e42","sha512":"626ffdd4363cfc26fef464858ffb15b09ad362afee635fa5804ce53d229a908cb05126204045a88a85b9f104fe14cd5a3febf2da60a24b3df14c47553eb6ee78","ssdeep":"192:EVKfPrhbfeg/F8AHJj+/ArI5h1bzxB1U75HPrCBMHt6:Y4rRtLK/Arob1LMyMN6","tlshash":"f922b8c976c1783a0ae321a2816f215ab27f68c67cdd90019061f9d03c78f6f466bdac","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.779004Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2698.baf792c5ce348cb0b7a4.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2698.baf792c5ce348cb0b7a4.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103664,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2997feaeb00c42bb1539bbed95d5e52e","sha1":"9eb4f54000d5ea1e83db7ee0bcce29f8085a35a1","sha256":"99ab282ba45940915c40ab86d623b10e66df2a9643db5d60308ce0c507757497","sha512":"2ee9dc7ffe51a6f7f30eaabab93f2c9b2641f73272dae5b2a08e9c3df0e9f1a2eaa3ded8be9d60ccd0b0d040207f39fc0b69feb0496a947ae404fcb2f5979884","ssdeep":"768:dYkuXWXpK1R215kOW2m6SRUt4Taf2xc2cZXwIW78KSW3T0sy0DT5p0g1vc2vGUTD:TJe/chiIWZqUtPhNMNeY2ppcry","tlshash":"50a3536b72679ca24cec611c3c3b4307b29d9e9ab80f5c5cbe5ed1849409db3b079672","first_seen":"2024-12-24T12:43:45.665033Z","last_seen":"2026-03-24T09:41:05.779988Z","times_seen":4,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/icon_152x152.png","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:11.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/icon_152x152.png HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:11 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced","md5":"09bf699de53eb734bcfe307e873dce16","sha1":"6ea499ea4e90ef6bceb52ffc0da5faeaed8b1395","sha256":"c324524db4a04406d9617f8959e32ca6bed843c7640118d3398a62ae10d23751","sha512":"9435245bd28b9971d00dcd28d58420236dd2aeae130832675d602382790879bf4f1a9fce984e27aeacec2730d42b34a3cddb37ce039ede07ed79789ce3f4d31f","ssdeep":"96:hsqSZEYgpXEoJn4Rr/pLRchMGdJF86KmEApy3naNgyybhg:exZlgpXEWnAtRcHdpSaNR","tlshash":"6d918ecdb057cbb338a99662e772149bf663d203b94221d60c5dc5a9810d5eebec9030","first_seen":"2023-05-26T06:41:44Z","last_seen":"2026-04-05T08:13:06.481815Z","times_seen":4667,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/8055.536b2a0d893cbfdd2502.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:12.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/8055.536b2a0d893cbfdd2502.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3403191,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cd59805a9068ea006486afa8dfe5a2c5","sha1":"1414f851d228e2646bc3a88471a5e1e9bfdea8e0","sha256":"0b79bdccfa5afc5c1cdcfcc421eaeaffadc8eb912748a3c01af77925feb699fd","sha512":"f1a5f267f06e9d290fdc62d8df32a46b9618f475fc687f8416f3b565bed8b48fcbe52dc86b5e805dd60ce8935a942876dadf10ca93ddd2db1983c8158d7fb137","ssdeep":"12288:8kQ8jJKBwognEoHbUYx/DgmfVzSmDI/6+Gs:8kQqJKBzgH75gmgm4j","tlshash":"86255c4afe542b3905c321e3b8af0985b7b4234ea4609420f9fdc85d2664fc8a67f775","first_seen":"2025-11-30T06:38:00.121917Z","last_seen":"2026-03-24T09:41:05.785655Z","times_seen":3,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/6005.1fe7461d1a3f03f7dcc0.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/6005.1fe7461d1a3f03f7dcc0.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20660,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20606)","md5":"b037f1cf3fdba45bbf773851c2e05b30","sha1":"8f0e1d56d8105f283f061d7900d849e83e2d6dc3","sha256":"d9eded087b9f1c7de4436d2a2851789da35d192563641dd4cb36b9ac2ab472b4","sha512":"098750d414af257bbc7d210e1efe139b45cc7af1f6dd38f3cbf7c7d33c24044e1960c2a78d0268215e7bb1e7905c0fc5da39aec3f63e0a04736d74787b3656fc","ssdeep":"384:SRStRAxDHUJOE+5J2qEGAwn3KYFZ6vopeMkc3eaFNnio9ho5kns:SRStSxDZ50NGAwnPFZ6vMkANij5Es","tlshash":"9e929153f650edbc40d380aa3016290cb3e45e0f45257459f5aec99edba8f8d53aeb31","first_seen":"2024-08-27T07:20:22Z","last_seen":"2026-03-24T09:41:05.786754Z","times_seen":29,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/plugins/com.mattermost.nps/com.mattermost.nps_e0f4f7088d82c850_bundle.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/plugins/com.mattermost.nps/com.mattermost.nps_e0f4f7088d82c850_bundle.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:30 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1016091,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58036)","md5":"b7303a3336d3f0c6cc64a582bac55b40","sha1":"3648f4e715ecd7cac48e6d0b86306536a8cc6138","sha256":"518fba0f9c1c91add08845a8f4dee283175915fea01465f997937b8b99e1b068","sha512":"6aff9cdd8e4c7d4cf17f213538880329540bf8d056ae19f57edada086a457290a26bcbefe315f9d87e5570d03575b76fd1d11df84ceb2907e58eb3a29af4d99c","ssdeep":"12288:xmBWa/6lpjp+Axu9cOGOxpPIxRb+jldLQdaSZ7qmW0cy50WfeI6CY:xmB6leQu9cOGOORb+jladaSZ7qm+I6CY","tlshash":"da25078c7147fa10c64690a7e43f3841d67de646a40e04d1af39c6f3bdb1b99ca3ae25","first_seen":"2023-12-19T12:24:04Z","last_seen":"2026-04-05T08:13:06.514608Z","times_seen":3679,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/track","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/track HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: drfecypgwg0Ufzkqv-sLUjZBbiXgxUrTckSx5qAvxAeWIKIPyab3Vw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/5431.65e34fec1095099b99b0.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/5431.65e34fec1095099b99b0.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100539,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"75d6f0871cd2815fcecc3e40a1c4823b","sha1":"a17eabd1747cef595eb463b252610a008ced06b7","sha256":"488dbd9e8796857a2e81a0c60d5d8a4464988a0030bfca809e5120c386e3018a","sha512":"5c2b02e2d38f99961409a32da4117384f7c2b2e7d779029499a72ebcb8de5e935587f4b41bbf5a5a595565cab76e02eb1404bfe82de095eabd9d2d931e15d6bb","ssdeep":"768:8J7dIh+3w0kPAoxBWojDA6QvKxdqrseAyPJnhxygmUutgJbtZKJXu3GwGvCzqN7S:/+g9WojcBCTZhZIFmff0qLVApY9eHau","tlshash":"aaa3fa58f1647058e2639157602f480af3752a6ca42c88c4b3bbd8f97ef185e533ef69","first_seen":"2024-05-16T15:04:18Z","last_seen":"2026-03-24T09:41:05.78861Z","times_seen":7,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/track","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:17.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/track HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:17 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: p-1Ul9JqqGZwQmPspc3_-tZ4TjarfZhpEedzLnycvSFYH3OPWeNanw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/page","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:27.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/page HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: BlMo-WOp8zH5KF4DYHXWXlnLXdPOGM83525-1ZXfae0REnOtqp7d4w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2514.41b4f83d1eb1943bb302.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2514.41b4f83d1eb1943bb302.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:17 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27252,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2810)","md5":"3d47cd21d6f4a3003e3f55509e1aaf61","sha1":"93e7f6b44eb23cfbfd89287661039c54a5a8cfe7","sha256":"a18b90819127270444eb305b783ed6ea1e819c98c00247591a9a156c4eff4da6","sha512":"c405fb4a3942f1e84c1fa1ff46802d29676d52faf41c669c87bae7d2d63baad8ea1b90be37948a3e712da733cc8c5b01ce7eb95d568e1ad7e50a171347dc2b74","ssdeep":"192:LAPFXAUdim0sKpJgE9FfO8NnGWClADujQDySrLhQd73tMhMH3JbrqT2NYGz32bmJ:RnHCKDujQDyMT8xGKei28DX","tlshash":"15c22df6dd4c05805b67c6416bc777a89b5df16d89828c52f00329acb7e72a093eb2cd","first_seen":"2025-11-30T06:38:00.145986Z","last_seen":"2026-03-24T09:41:05.789626Z","times_seen":3,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/6645.f299a1ef0e7956d27df0.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/6645.f299a1ef0e7956d27df0.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:18 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183360,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (361)","md5":"fe15c72bf4218726b73501698a78aaf8","sha1":"17bdf29edc6ae4b599650769eea29cf01e41fcb1","sha256":"e99bb0679dc5862a2c50a81f016af2707aef70064d8ae1384d44857d98fe1d03","sha512":"80441072f36f2cb34accf752762969c2af7d2b242b8af3486515335b01898591dbe122a4f599779f92610a19dca6f15ff496062b95ade68cd31d73113b5c1e75","ssdeep":"3072:RaUNLhmIGgAdU8/G/BP9IZpHWJ23OtI+AFDP+YVzljhiIS:gUNLhmIGgAdU8/G/BP9IZpHWJ23dvljM","tlshash":"f50431dce6bd29802312d0d435839a61b71da25adc0fed7de7a2359cabc4244c5a37ce","first_seen":"2023-08-28T17:06:08Z","last_seen":"2026-03-24T09:41:05.79083Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2565.5c6f9bd11886f9819fcb.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2565.5c6f9bd11886f9819fcb.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123314,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54902), with LF, NEL line terminators","md5":"ab0e72c30a4e324d0f305a1999d297fb","sha1":"5ab09abe8610e8476de86a8f2aedf40eebdff741","sha256":"eb67e75913636cf77984ffe1703e2a66ab5ae6ea2d6e9945dd764b0e85c1faa1","sha512":"0aeabe60a2aeb8c01d79a8c02ac0e4b73315ffe59fa46ead442e84402b81abd26388d9392469b0e753b1b15c7493807430eec6ecf038444ee243f0fd363d5ef1","ssdeep":"3072:zNbqfw4bo14jVjzDmxN5Ftz/ZEKOKlLYn:JaXDmxN5FNPu","tlshash":"dec3e784b0d6b1a443e750a6c23f5c0bb3be259cd58d8594f5a2c4d83eba14d2327fb9","first_seen":"2024-03-12T19:30:52Z","last_seen":"2026-03-24T09:41:05.792367Z","times_seen":1042,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1072.27b27310dbf060108088.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/1072.27b27310dbf060108088.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:36 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83504,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1d0937a7c7c705df5a962fc60d1c45b","sha1":"6d171e117ff221d19d897660e435dca1b032fea0","sha256":"eb05154007d3380f99f84dcb7469eed8b30072901b08a54f47f4f8a9f23868f8","sha512":"8cdadb1f7536feb60496ab09e66c8729f866f62445892d779c16e1d76604b02ace5b74c59fa5a2ff0dc9c19fb31d3e579d8fd6780591e4bbc2c21090eed3d20f","ssdeep":"1536:NmkJqMC4T/dBq9C+9Rn07DNBMXPNlhNcuWzb/:RIM5rdB1anuDNsK","tlshash":"3683b9ca76e7f0e24fe9a091807b035bf2387b45b80c5150f215eed67019da6b763b29","first_seen":"2024-12-24T12:43:45.675222Z","last_seen":"2026-03-24T09:41:05.794741Z","times_seen":4,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/9604.5d838f221b541a3dc704.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:12.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/9604.5d838f221b541a3dc704.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89648,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6737ce2190516ebf33fe3581fd388505","sha1":"70fd119eabf39bc1fce4f62149e7420f35b014cb","sha256":"46d42b6903ceaee2e0d9b43593d07dc2faad3849eb33fc63df66b54dbda10efb","sha512":"1b26f3f7c8c5730ca373d1e424abf03c44ea6821ca0c487f7633b6ec9acad877e6c8609e5abcd8ef0d0cdf32fd32671b260fd27c03a46f2eb54c33da7181052e","ssdeep":"1536:L0rCj453DvlZ4zf5UB7zHjVbEHX7quv+tY8OdAWJkUs5hp:LLj45zvv4zf5UB7zji/8OV4","tlshash":"8a9393c97a99b06ca3dfe135503f590bf27b6e81640d8121f662c5c53c7a49ac323e6e","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.795855Z","times_seen":1056,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/5215.48db9473baee83d3fed5.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/5215.48db9473baee83d3fed5.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 1333\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2739,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2685)","md5":"9ef2eae8d18ab8b573ca473781d81628","sha1":"e9ab508d6d00f8fb554471fa512b43f6ad8c8d7b","sha256":"4447128eb75d70ea055c12ff3d229b856cd18279119533da9f6a1c194e693f54","sha512":"12aa116114f55a98c6f9a561276f718ff2367857ba0159323e117bcd156e9cc344cc8ba171efd5f328c9589a93729bc7b8d61c280ff575e9f1bec18087675732","ssdeep":"","tlshash":"88514706f1957c6c363b2046841f1551f2e52f1fec282c5cb2e7ccdaa895d84213db31","first_seen":"2024-03-12T19:30:54Z","last_seen":"2026-03-24T09:41:05.797118Z","times_seen":16,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/page","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/page HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: jZebWFAT10L8j3mqqu5p82UtaRWZtuWS2_-rA14IvKGGg2oUhl1rIQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":56,"dns":13,"connect":15,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/page","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/page HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: DKZr3JPeEkYsEt11XcMmgRXKsKokD3lmxzskWamUqhfOSaSw4q5dJA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/5208.11c7f48da67f458e2fd4.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/5208.11c7f48da67f458e2fd4.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50602)","md5":"6402935eeac5be8f3cb12f6ce7e29004","sha1":"39f5dd3c9936459c1e87e15c4f56ac57b1c4f064","sha256":"ce70e8228a11a40f78185995a94d82d0c7075c4fc2395e54d795568e29616627","sha512":"4b637c7752435221c6fa2414b1331f8543825135e3b858f941e01b5b34856dffb85b20a53428e02b75f609b1d7ddba551d554cc876bd398afc36a986e7cb279f","ssdeep":"1536:37a0xvPwTGH0xdvsZsNHRD9WkyoN1bqfiQwJl+w23U:jHibuZeJ","tlshash":"c333b6c8baaabdd91ff874d0443643abf26e941bb4041a72e6116f957011dd1e3f3b28","first_seen":"2024-12-24T12:43:45.659859Z","last_seen":"2026-03-24T09:41:05.798325Z","times_seen":4,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"api.rudderlabs.com/sourceConfig/?p=npm\u0026v=1.0.16","fqdn":"api.rudderlabs.com","domain":"rudderlabs.com","tld":"com"},"ip":{"addr":"108.157.229.85","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rudderlabs.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 14 Mar 2026 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:86:B6:0C:EF:B5:73:B3:9C:95:6C:AC:AA:2B:CD:B0:61:54:BE:ED","sha256":"D4:9C:B0:44:B1:74:D9:C2:3C:30:53:4B:AA:93:E7:18:08:C2:D2:4A:6F:E6:33:FE:46:BD:E9:82:59:B2:1C:4A"}}},"request":{"raw":"OPTIONS /sourceConfig/?p=npm\u0026v=1.0.16 HTTP/1.1\r\nHost: api.rudderlabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\naccess-control-expose-headers: X-Request-ID\r\nx-request-id: 7535b430-2765-11f1-8b60-9fa247e85cf3\r\ncontent-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 900\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH\r\naccess-control-allow-headers: authorization\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fedd444eadd43dacc7e53f24b46bddf8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: bHokuLit50TWdkre3BW53cp6bmN4D6_hjM6wM7Ylf96VaLIen2HiYg==\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":71,"dns":31,"connect":8,"send":0,"wait":135,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2811.0a81c7ef9daf162ebe35.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:12.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2811.0a81c7ef9daf162ebe35.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":939976,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24502)","md5":"2eb3dc2533fdf7065036616080361fb6","sha1":"5ade924ca30b697096e62060ccaf1ddb3ac9632e","sha256":"60f27b59ae0d7d36d7b4f736bb574c8c0f9b1ed663bdb3a4b9335cb7a870c7fc","sha512":"878b3666ae25214702fc0ab9023e7b89686ec13e6f4596aa72f5f0542628fbc95e8425c4f64b8bd4d60c7c1bcfd165e6ba822179e78a7a71b57a8b73f9527d27","ssdeep":"24576:6101OHkQDuOh7N4u22btMAhTkcRKYgtjy2Y:6101OHkQDuORN4uNbtMAhT9qtjy2Y","tlshash":"1f154a85b2d1b03053e36166807f110ab37a2519644ec858f27ed8e57fb998ea237f7c","first_seen":"2024-12-24T12:43:45.696729Z","last_seen":"2026-03-24T09:41:05.799453Z","times_seen":4,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/plugins/playbooks/api/v0/settings","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /plugins/playbooks/api/v0/settings HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\ncontent-type: text/plain; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-length: 15\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":15,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6e4f49c66e3dfa5d360ee2159e3e2557","sha1":"72e6f75c0b99546e7fba8cf5226e7f1a27bc64fa","sha256":"baa4b18c6f945201d808e8f91fc45da18f0df06a193d605d8000f336cff59c0a","sha512":"1538c2780ae1d77973785e09b12da94fe85d8db11b28e73ce53fc4c0b21692f868b9f9454303701021634709be8009e4f1acd7b4e7166b0e8b38609472132775","ssdeep":"","tlshash":"6360000000000330f003000c03000033c0c0c03c030000300000c003000300c0030cc0","first_seen":"2023-04-19T15:38:06Z","last_seen":"2026-04-05T08:13:06.484399Z","times_seen":4387,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/7654b55b2f3442e91404.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/7654b55b2f3442e91404.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:18 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 621\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1309,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (981)","md5":"340e65ffd5c17713efc9107c06304f7b","sha1":"54b718c687ce8460e10d501c1eb53a8098942c1e","sha256":"3a9a5def8b9c311e5ae43abde85c63133185eed4f0d9f67fea4b00a8308cf066","sha512":"d1a3d0cb2799ad68fdb02038e949665a028e3f49948a92d0e8e657bbc97821c0260f6bb7d443c4cbd55c20cbe5ed2a0068a7bc6cb5d9858a0c684fe29fe81c80","ssdeep":"","tlshash":"cb2174238801a17339b7c9ee48cabaa59134da9360a10bf5747862785e11076b253f7b","first_seen":"2023-04-19T15:38:05Z","last_seen":"2026-04-05T08:13:06.466939Z","times_seen":5052,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/3294.89356d3bfc84cb9cf509.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/3294.89356d3bfc84cb9cf509.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105484,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"7a3e8920331287af7532259902200920","sha1":"75bcd76380713704f9dcb694a6dff9ac706bc3a7","sha256":"363d5e1e0a0371b5c3af0a1928e6f07e44030b5ad4d7f23f48034d3a2c5d9af0","sha512":"49d9201b0587b1155782ad31efab7478aa2524ca422b1f7c9768a37115b546158898cbc89c0448d0595a68787d06e1fdc35be7ee2d4133ada8f1074a1950c4de","ssdeep":"3072:E0IWFP1h/geQIMlGAw3vBL0mNKHBwN3NpnQ2oY8RG0u3vfLqJ/drG2M4:kGsmcHBlGC1dld","tlshash":"66a3b661b18161722a4313e4442e030e6e3e7979678c941b73acedd72d66dca463ffa2","first_seen":"2024-03-12T19:30:53Z","last_seen":"2026-03-24T09:41:05.801592Z","times_seen":46,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/images/favicon/favicon-default-16x16.png","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:11.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/images/favicon/favicon-default-16x16.png HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31556926, public\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 591\r\ndate: Tue, 24 Mar 2026 09:40:11 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"bfc287bc5a6de024b484dbaea6a98aaf","sha1":"5673fbbf79fdbd22023ec51391a3022065b7f2cb","sha256":"95b3fb3a3a78c11a465e16ae375886577577668bf9c7fd6be20e879a2314d5da","sha512":"619c5c1ddf2c7cf41ebb45f56aef2b22f92c0dd93a309353784712dc26bc9cfa87475d7ca557f58425bb1fd4db4d46e348c712bf00733ac16bd8cbf4c430e7f1","ssdeep":"","tlshash":"d6f00ce0ebba79fc979e820c10a391178db7491f3ac0a037643691981a0747c991ca22","first_seen":"2023-05-26T06:41:44Z","last_seen":"2026-04-05T08:13:06.501177Z","times_seen":4679,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/4205.c276cc800c208d330bb9.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/4205.c276cc800c208d330bb9.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250194,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"4b85159b1e4424093e496d18fd45728a","sha1":"1c9724de20401caa21a18dfa08c0d5e0bceecf99","sha256":"85d2d82dbcf95b48d9e9af26c1b8fe837e903b252c902e08790ae2d950082e3f","sha512":"f4d40e1b474269f2fbada56c7dadeeb20b1575c3b54da0f48e56f8af1b7c715b72e31fdd62afa4f25743c7b5fae2fd14a86ba41670292b145492d8adf77db259","ssdeep":"3072:tLRTWNYHd7laP4XWZnytMPZqVGa+U1+5+S+P+F+jYXMwfE/Iu4oSd:t1TvWP4XWZnytMPZqcJUYsBGoFwfEc","tlshash":"d134a605f0617c6c04da017bf82e5944a2e53b9d54b1a008f6faccdebaa4fc9476e736","first_seen":"2025-11-30T06:38:00.102948Z","last_seen":"2026-03-24T09:41:05.803536Z","times_seen":3,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/7654b55b2f3442e91404.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/7654b55b2f3442e91404.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:18 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 621\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1309,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (981)","md5":"340e65ffd5c17713efc9107c06304f7b","sha1":"54b718c687ce8460e10d501c1eb53a8098942c1e","sha256":"3a9a5def8b9c311e5ae43abde85c63133185eed4f0d9f67fea4b00a8308cf066","sha512":"d1a3d0cb2799ad68fdb02038e949665a028e3f49948a92d0e8e657bbc97821c0260f6bb7d443c4cbd55c20cbe5ed2a0068a7bc6cb5d9858a0c684fe29fe81c80","ssdeep":"","tlshash":"cb2174238801a17339b7c9ee48cabaa59134da9360a10bf5747862785e11076b253f7b","first_seen":"2023-04-19T15:38:05Z","last_seen":"2026-04-05T08:13:06.466939Z","times_seen":5052,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2514.3b0b11ab4b6c88c22e31.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2514.3b0b11ab4b6c88c22e31.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2073889,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"3fe6ed7cbd0269cbabc1be3205107b89","sha1":"77185d1dea2d90d04f88b11e17b3b259a424fe8f","sha256":"298e036c0793f49bee9167d9e5725bd1d59c72112d3efba7f81e7ea2c7c115d8","sha512":"ef373261d09902e29d751181896cce0abead7c2097df9c00352db3378b344b0f05bc74eb27607ad7ea8f409a6de7e2ae697404d48eaf15e71fb805a0d3de96c6","ssdeep":"6144:pDSC/2Nuh4zhCMxOMQdKedz0GedWdATRedMEvtEvoEvtEv2d9gzfhqj/M297U:QBS8hNEvtEvoEvtEv2duzfhqTMy7U","tlshash":"4f35098537e4e5e1439799e8043a2809f33bbd3ea06ab050fbc5c9e1f96648a513df35","first_seen":"2025-11-30T06:38:00.134191Z","last_seen":"2026-03-24T09:41:05.80444Z","times_seen":3,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/2440.38a9bfb3a4a3b8c951c1.css","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/2440.38a9bfb3a4a3b8c951c1.css HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:17 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23600)","md5":"dae4beab2c7923f759a64d1a74f24daa","sha1":"48ae099e4aab7c6b4ba4b421edc36a1d2e342d36","sha256":"6d6d6c35fe2a0434e608bfc18a2fcd8172af038aa0ad21b8abec58193e17d0c0","sha512":"debba9d971d271054653d043314e2d029ef72e2a34d8dd622bb41a945bf09cf276b0989fcfa36f45e82fe58940d1cfd56d0c77e7e91a7650246e6b8e4b14bfcf","ssdeep":"192:z6ROzoLaQn1M9ll0weFl1zkMPgefBEALkLiqRd2s3cnNlsBRrUco7lcCSjyX5:MgckMPgefBEA4LiqRd2s3cnNU5o5Ou","tlshash":"79b28b0b735a6b13b81d4d7ab08b23f069956a1cf311c153a5ac96a18cd2c7f059ebfc","first_seen":"2023-08-28T17:06:08Z","last_seen":"2026-03-24T09:41:05.806387Z","times_seen":21,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/145.487644412738b336a698.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/145.487644412738b336a698.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:36 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":376874,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"237ad3306d6ce8cd60788f4909e6d786","sha1":"f7b1f8af1d5641eb9916134f4de627c8d8cb2b5a","sha256":"b8761f269c2c4949ad6317fa9267ca9ec7f5f7e777ae0b756c94bd6c1f724246","sha512":"2f6517c077374943959d7ba03b0f5d837efda372139fe92f5c1454c08f7f4ddc8554433714a4855a8a38676cbf4eb546d231bcc4e1095c5ec2f20e92f72827f1","ssdeep":"6144:TcA9YWmzgqyaz7bVf0nTxt3H0zZCpQ6R6zQHwnE/h+pEt4zhLardxWEiQ1Ew8Och:TcA9Y1gqyaBf0nTxt3H0zZCpQ6R6zQHy","tlshash":"1e8408c8b6e7b8d14fc694d484bf4247f4297925742cb400f620e9a2b451ee3a2f7b36","first_seen":"2024-12-24T12:43:45.69466Z","last_seen":"2026-03-24T09:41:05.807637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/4617.88e5428809e56688db84.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/4617.88e5428809e56688db84.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:37 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14952,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14815)","md5":"23af4994846d7557b3304dd5b6742848","sha1":"df6bb18c13af487aec439ef3ce36d8f5a5c04fd6","sha256":"3a220f4e80684f3b536009aee70c8bab031e9530ae3aeebeb01bf038f10ec1c3","sha512":"7c97ef7a8c26b2a8fc8c40916ba243821aeef1ef5207067a93a460a8ad7130b46beb104babdda80d32577a2b601dace402e3b8f53d962523a1aeadf21243ed57","ssdeep":"192:yuteuCXjP8skODf9BE6sFkIJoaw8H1Ok62+KVyvhwJzFnuVoIdCyCdG:yWkP8NOD1etZ2aV1dRyvStIYG","tlshash":"ff6263f8b0d1b0b066672021c47f182ea23f7895b84c5564f767e5cd39b469ec223bda","first_seen":"2024-03-12T19:30:52Z","last_seen":"2026-03-24T09:41:05.808843Z","times_seen":1051,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/6640.2badf0e09b393fe70fc3.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/6640.2badf0e09b393fe70fc3.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31556926, public\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 344\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":344,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12eb0c59d671bc968860ec1e65e71581","sha1":"352891b790f6e77302bec7069c26eb6792056445","sha256":"b1e54bc195f55e42ddbdf7f20cba099662a054676c6d635a5e4f24c8c16100ec","sha512":"86d87e56ae83e1c9d87aeab437e9c525b1814c8c49ac9e7849ba1926f9bced1efeaf9dbbe06b5f01873fe161e9108bbd2d5d89d2e39d228bd35701ba6628270b","ssdeep":"","tlshash":"17e0c0a5ccb23cd5a03b5fc994380c22a0f420a5310450d0ab0f08b5542359e2c52e71","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.809855Z","times_seen":28,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/page","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:19.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/page HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:19 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: _P6_7CoyY1a6ceNIqM0bJjAYuJ27gW3it3GfkFvkpcwpVHk_gMo1YQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/track","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:21.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/track HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: et4_64Clqskuo2GX2cqApWV90DRKpe-c5RQ0xGmN_hv7F2s9CuMhtA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/plugins/playbooks/playbooks_d2ca242431bde84c_bundle.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/plugins/playbooks/playbooks_d2ca242431bde84c_bundle.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:32 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4972883,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65474)","md5":"99c7b2cbdac586ce9da5761f77173b04","sha1":"2efd40c3588fafee3aeca5d3dbd33aed02ed5087","sha256":"440853b6a6c958d61dfb99158a10d6d73960d80ac5371fc8a406268fb194dd2a","sha512":"f512ebfcde890bb89a1c0c2d18575d971b616c4daa294fba14f3623ded30e93f57bd79a8105d98f8e125a2f778d2f189ebaa1d443ab2cd47c99848e74afe4375","ssdeep":"12288:5F+b3Ya95jKHPnr0sjvvAzG6MvL3Kp8ILYsc5Zdc:5E3Hj+Pnr0KgG6MvLvAYsc5ZK","tlshash":"ef352a8a7394faa2439651d9043f2805f33e2d3de06eb850f794d8e5f925c5e423ab39","first_seen":"2025-08-03T16:54:59.841284Z","last_seen":"2026-03-24T09:41:05.811065Z","times_seen":344,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"pdat.matterlytics.com/v1/track","fqdn":"pdat.matterlytics.com","domain":"matterlytics.com","tld":"com"},"ip":{"addr":"65.9.46.64","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:29.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matterlytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:76:70:65:AC:F0:1C:10:34:21:1C:DD:91:9F:A7:2D:38:05:10:E6","sha256":"62:18:24:F1:6C:EB:C2:97:84:C0:E9:AF:87:D3:55:3F:66:18:0D:3F:A5:CC:E6:00:EC:2D:B5:7B:5C:20:95:F2"}}},"request":{"raw":"OPTIONS /v1/track HTTP/1.1\r\nHost: pdat.matterlytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: anonymousid,authorization,content-type\r\nOrigin: https://mattermost-kldev.duckdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nserver: CloudFront\r\ndate: Tue, 24 Mar 2026 09:40:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 960\r\nx-cache: Error from cloudfront\r\nvia: 1.1 8aa819fa9ebdf851190f85415ebafd60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 6RnOTrHlWSwrMmsQ7BN7DKLxUeRO1lXEjtevwlTL0UxgYn1fn3mVOw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/1618.310a8ec69eb176a29494.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:10.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/1618.310a8ec69eb176a29494.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:36 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1576359,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65465), with no line terminators","md5":"ee761621aab67dbfe61bbf5ed8c7317d","sha1":"8e206783e4b70ef7191616d73db2aa18421cd7b2","sha256":"05f7b450fd5bf65c21d19f5cba38f17b4e12d4400c1cf52e2dc545ab8ccd9808","sha512":"937cfb49c95440b1a920e7ac163a09c0352908d368d79fdba6facd466d1cbc5ae943cb85dd3f689fb449f72540dba6a1eca7614414ee15960e0c715b4b906f45","ssdeep":"12288:FgPv6a6mpeDBqzennqns/U5IxMonE/2c3Ul2U81ChZjon2hzkPWplsZUCpqrgcpW:Fg1","tlshash":"c425ee7d1e148d6a9aa970471087fe4a5bec2c3bb74c5ec43edde85cd2f008a704a95b","first_seen":"2025-11-30T06:38:00.129109Z","last_seen":"2026-03-24T09:41:05.812305Z","times_seen":3,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/files/3c9c38b500586f2d033d.woff2","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:15.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/files/3c9c38b500586f2d033d.woff2 HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=%22RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ%22; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31556926, public\r\ncontent-type: font/woff\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 44936\r\ndate: Tue, 24 Mar 2026 09:40:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44936,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 44936, version 1.0","md5":"97593b89e95959c7f41c47cf407d1f63","sha1":"714db8a8c2f2425dbe450f83ff25c51cefd244d6","sha256":"486c67592731a0b36a89dba1fd0b97aeb73f236bbf60dbf28d7c6b5723c07989","sha512":"60b7f23066c15773932c0411d81637ecc06a6d6437bbb6f558a3e99a9e7329215de0d5f9e97297a26fa2a926f6968cb4aae257d373060742ecf7f76d835a08d2","ssdeep":"768:LqdrKS1Tsv95/B3ENfCNtXdWSwwz5bKSHDU0MjQBdmr2qMUilTbO7lX:LC/1wD/xCfCdWSwoN/H3MsBU2qMU4O71","tlshash":"901302492d75a0b97c1c2bb9e357361bbaed9fe1b428761302c278b41273f652693341","first_seen":"2023-04-13T05:13:35Z","last_seen":"2026-04-05T08:13:06.479188Z","times_seen":4431,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/remote_entry.js?bt=1711110898290","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:09.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/remote_entry.js?bt=1711110898290 HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:39 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15770,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15712)","md5":"593a75c292e646e47d2c12e12a0f43e3","sha1":"c45f29556fe4de635770da7118a7e0b88e399dcf","sha256":"5acabb9672dd32cc1f8664fc1ecc63348c69975b95b865c099f00a9867c3e02b","sha512":"87f19ccf227de6f86a3255c33aaa3c3f3d6bc36f55e80f4f5448834add3f17966c4d668a34096a5d656009fe60acfbfae5f7936ca6c045982f1ddc820d49ad30","ssdeep":"384:bRpg9kg4YtgeV5TKV26oaMnLH/Wg+aRYW733N7mQPW3e:9pgt4Lg5Z6oEg+aL3d75f","tlshash":"01627ddeb7d8a4e1a52200a8f53ed1c1b418b629344ea8f0f547dd34205ddd5a7f2a73","first_seen":"2024-12-24T12:43:45.700906Z","last_seen":"2026-03-24T09:41:05.814027Z","times_seen":4,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/680.4da078dab52828997dac.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:12.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/680.4da078dab52828997dac.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 22 Mar 2024 12:54:38 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63090,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62941)","md5":"f98478108568b8c4f70d14e7423810eb","sha1":"64cca00d936e413ed81f91b1f217aa2e7696e25b","sha256":"45ca9f9160471313818e7facbbfd8fdddc53412da402897cf8d5100be4ecd894","sha512":"bbf256c331cba93a6886983e3ef3e31e21acec13110558c941cf38690be4cf9efd186168d56b41373e8a981c78ae3935fc785e91aa3ef56a1f631a27f5b9095b","ssdeep":"1536:V1DMT+5y0nnMVGsIIkTcGq83Mk22n9j9AEZg2FGQ:V1DlXsIIkTcGq8B229j/Zg2FGQ","tlshash":"0d53b3c272c7f22507a902d904294102fb6c5db5349e8c4cf5d8e8d77da6c99a27afb8","first_seen":"2023-08-28T17:06:07Z","last_seen":"2026-03-24T09:41:05.815037Z","times_seen":1059,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"mattermost-kldev.duckdns.org/static/plugins/com.mattermost.calls/com.mattermost.calls_904eb58b92e5dc2b_bundle.js","fqdn":"mattermost-kldev.duckdns.org","domain":"mattermost-kldev.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"152.67.194.89","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mattermost-kldev.duckdns.org/","date":"2026-03-24T09:40:13.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mattermost-kldev.duckdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 07:57:43 GMT","end":"Wed, 29 Apr 2026 07:57:42 GMT"},"fingerprint":{"sha1":"16:6E:66:1C:EF:F8:0B:78:A2:15:58:E2:E7:44:FE:6B:B3:5B:29:65","sha256":"31:93:10:72:52:89:E8:9B:86:16:07:79:41:4D:96:89:7B:E2:59:53:72:CB:2B:84:3B:65:C8:2E:9D:22:FF:75"}}},"request":{"raw":"GET /static/plugins/com.mattermost.calls/com.mattermost.calls_904eb58b92e5dc2b_bundle.js HTTP/1.1\r\nHost: mattermost-kldev.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19cF6ggUFlDlrj4Ol7JyumvkvQ6UaNH1dO9Y75pP%2F12kaXCHVvA5nH5jIfcp%2BEDKD%2F9xq3UrQm33g%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX1%2B%2FZYgMyYYj2FV0J%2FKNNm6cJIuYKzbpwJz1CN%2Bbyfv2CsxRevkb2zsJ; rl_group_id=RudderEncrypt%3AU2FsdGVkX1%2ByRrV8lv8X%2Fi2Qk%2Bjrvi2cnioHmC5yaNs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2FMRWlKTF7XCLLGvQTho%2FKVrpRSy0s8tH0%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX1%2BbUO%2ByPx0PJFHCXRzDifWo3S6nE303jFs%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BubW1DWFmndlBbwCEuPMKf%2F2gi2Fu48Cs%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX189omaSlc97BFssuPPwaRUh5po0P53Fnz0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31556926, public\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 14 Mar 2025 08:55:33 GMT\r\npermissions-policy: \r\nreferrer-policy: no-referrer\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Tue, 24 Mar 2026 09:40:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3842087,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34413), with LF, NEL line terminators","md5":"4fc53c25abfa66ca994f6a92c0589252","sha1":"16e0611399fcdd37df96538de9cdf5d0143e3444","sha256":"b100292092de50cfc9584f5bd72be70521ac9f62163857a943eb7f36a9129033","sha512":"300c229ef629879c11a807ae62eac267cd2001239d424b1ae05c0f1cad1ae826acab237b61467a8f2afdc8ad011b18e84da622728cd12d21f1ef5cd225ab89bd","ssdeep":"12288:s+yh39g0sj7kAEzk+JicCP3B9EcPdzUIx4aiYl0RAZU:sZhNg0Npzk+Jiz/B9EcP9UIx4aicE","tlshash":"6035824c2a4ef3518a59a0e7c43b2d05d22cd615b40f48659f7093b36ab079bf3ede26","first_seen":"2026-03-24T09:41:05.817038Z","last_seen":"2026-03-24T09:41:05.817038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"mattermost-kldev.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}}]}