Report - bdxzgmwfkwmfwknfhpgz.dynserv.org/

Report Overview

Submitted URL
bdxzgmwfkwmfwknfhpgz.dynserv.org/
IP
142.4.4.15
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2023-05-30 21:11:05
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
27
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bdxzgmwfkwmfwknfhpgz.dynserv.org	unknown	unknown	No data	No data	4.3 kB	298 kB	142.4.4.15
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-30	999 B	2.1 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-05-30	455 B	1.5 kB	216.58.207.202
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-05-30	542 B	22 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-30 21:10:47	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:47	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:47	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:47	high	142.4.4.15	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	high	142.4.4.15	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-05-30 21:10:48	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:48	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
2023-05-30 21:10:49	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.dynserv .org Domain
2023-05-30 21:10:50	medium	Client IP	142.4.4.15	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/util.js	12 kB	2023-03-07	2024-05-07
Pretty URL bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/util.js IP 142.4.4.15 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:23 Last Seen2024-05-07 13:14:54 Times Seen582 Hash 31f3e8b0cbedca627878a2b6d868bc14 3ece9010adc07dd3dc27ced0e22e7ac8bcd16e14 b5424d77c6e517893b9adc5a6cf11428e58461ad9768ad056d918ff1d295c5f6 Loading...

	bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/main.js	3.4 kB	2023-04-11	2024-01-05
Pretty URL bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/main.js IP 142.4.4.15 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 09:26:11 Last Seen2024-01-05 02:40:13 Times Seen35 Hash 4c8ee1b78780a500aa861804e10495ca d43e210f0387e661270a4ddd97dcc2ead78eb9e6 3a9f6b0f2f995c700ef976a5be35f6cf4751708ca94f5530f48e59ad784045db Loading...

	bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.min.js	96 kB	2023-03-07	2024-05-09
Pretty URL bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.min.js IP 142.4.4.15 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:25 Last Seen2024-05-09 23:18:45 Times Seen10870 Hash 895323ed2f7258af4fae2c738c8aea49 276c87ff3e1e3155679c318938e74e5c1b76d809 ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8 Loading...

	bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrolly.min.js	830 B	2023-03-07	2024-05-03
Pretty URL bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrolly.min.js IP 142.4.4.15 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:10:00 Last Seen2024-05-03 23:30:03 Times Seen305 Hash cdaa947ce14cf917fd3fbb34bbf69292 6807fda8e44d95117e7007563a4db951818df82b 08d27f460466e4b36d9eb2cfef27e442ca206f87d6cbb157f98c16704c999a2a Loading...

	bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrollex.min.js	2.3 kB	2023-03-07	2024-05-07
Pretty URL bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrollex.min.js IP 142.4.4.15 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:41 Last Seen2024-05-07 13:14:54 Times Seen149 Hash 830ab00c7d7a5be0c57f91e35bd32376 57fa1d1de2eca4fabbe75d6d160edc45cc398075 acc48ffb07316007622f24af9f0bb81ad3cfcabe3531e3bcc7bbc6a6ce9c8096 Loading...

	bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/skel.min.js	9.1 kB	2023-03-07	2024-05-03
Pretty URL bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/skel.min.js IP 142.4.4.15 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:23 Last Seen2024-05-03 14:18:46 Times Seen398 Hash df4f8930f3747bbadcdeb7dfe326ed73 475a99682e46ad061915a11a9adb3fad82258d3c afa9ae8eec6cb530d00256d71c700f9f0d72d298bd50f3af7f4450aa9aed2c98 Loading...

HTTP Transactions (16)

URL IP Response Size

bdxzgmwfkwmfwknfhpgz.dynserv.org/

142.4.4.15

200 OK

2.4 kB

URL User Request GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
2.4 kB (2405 bytes)
Hash
04305f3e04c019d6fb6f88d08ac874a0
0e2ebe0568361d643015d7bf8d19fe6c5d5a34fa
f963ce31835bab39cd497074a72a00bd910c5d7e12345334a2d85f193832407b

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET / HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:48 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
X-Powered-By: PHP/5.4.16
Content-Length: 2405
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrolly.min.js

142.4.4.15

200 OK

830 B

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrolly.min.js
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
ASCII text, with very long lines (770)
Size
830 B (830 bytes)
Hash
cdaa947ce14cf917fd3fbb34bbf69292
6807fda8e44d95117e7007563a4db951818df82b
08d27f460466e4b36d9eb2cfef27e442ca206f87d6cbb157f98c16704c999a2a

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/js/jquery.scrolly.min.js HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:53 GMT
ETag: "33e-5f28abf56e45e"
Accept-Ranges: bytes
Content-Length: 830
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrollex.min.js

142.4.4.15

200 OK

2.3 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.scrollex.min.js
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
ASCII text, with very long lines (2164)
Size
2.3 kB (2256 bytes)
Hash
830ab00c7d7a5be0c57f91e35bd32376
57fa1d1de2eca4fabbe75d6d160edc45cc398075
acc48ffb07316007622f24af9f0bb81ad3cfcabe3531e3bcc7bbc6a6ce9c8096

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/js/jquery.scrollex.min.js HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:51 GMT
ETag: "8d0-5f28abf3fe98e"
Accept-Ranges: bytes
Content-Length: 2256
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/skel.min.js

142.4.4.15

200 OK

9.1 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/skel.min.js
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
ASCII text, with very long lines (9033)
Size
9.1 kB (9084 bytes)
Hash
df4f8930f3747bbadcdeb7dfe326ed73
475a99682e46ad061915a11a9adb3fad82258d3c
afa9ae8eec6cb530d00256d71c700f9f0d72d298bd50f3af7f4450aa9aed2c98

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/js/skel.min.js HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:51 GMT
ETag: "237c-5f28abf459e7e"
Accept-Ranges: bytes
Content-Length: 9084
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/util.js

142.4.4.15

200 OK

12 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/util.js
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
ASCII text
Size
12 kB (11847 bytes)
Hash
31f3e8b0cbedca627878a2b6d868bc14
3ece9010adc07dd3dc27ced0e22e7ac8bcd16e14
b5424d77c6e517893b9adc5a6cf11428e58461ad9768ad056d918ff1d295c5f6

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/js/util.js HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:52 GMT
ETag: "2e47-5f28abf4b536e"
Accept-Ranges: bytes
Content-Length: 11847
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/css/main.css

142.4.4.15

200 OK

67 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/css/main.css
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
Unicode text, UTF-8 text, with very long lines (493)
Size
67 kB (66810 bytes)
Hash
36549283466ca731b655e7e9e3faa1f3
dfba4073a9d337c3dc26b9ce8ad30414991dd28e
84621b4970087ce8da7611c8082e36366968eb84fb69d8ac2770b83730140bea

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/css/main.css HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:50 GMT
ETag: "104fa-5f28abf2ec6d6"
Accept-Ranges: bytes
Content-Length: 66810
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/main.js

142.4.4.15

200 OK

3.4 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/main.js
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
HTML document, ASCII text
Size
3.4 kB (3413 bytes)
Hash
4c8ee1b78780a500aa861804e10495ca
d43e210f0387e661270a4ddd97dcc2ead78eb9e6
3a9f6b0f2f995c700ef976a5be35f6cf4751708ca94f5530f48e59ad784045db

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/js/main.js HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:53 GMT
ETag: "d55-5f28abf5ca11e"
Accept-Ranges: bytes
Content-Length: 3413
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ffe48e416e451f83878b22109c5272b1
e174921d2b163f772299b2a1fe2d98938044f8c6
66e404ced00b672e3e57d5b79a70b6f4e40a5675d62fe5a654770c1198cde661

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 May 2023 21:10:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.min.js

142.4.4.15

200 OK

96 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/js/jquery.min.js
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
ASCII text, with very long lines (32038)
Size
96 kB (95957 bytes)
Hash
895323ed2f7258af4fae2c738c8aea49
276c87ff3e1e3155679c318938e74e5c1b76d809
ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/js/jquery.min.js HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:52 GMT
ETag: "176d5-5f28abf5117fe"
Accept-Ranges: bytes
Content-Length: 95957
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

fonts.googleapis.com/css?family=Scope+One|Trocchi

216.58.207.202

200 OK

883 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Scope+One|Trocchi
IP
216.58.207.202:443
ASN
#15169 GOOGLE

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
gzip compressed data, max compression\012- data
Size
883 B (883 bytes)
Hash
755db942ab54a2bf1e8d68895193c7e9
490408d1060d38c9b57ed7e02205dc488fd59927
9b5f48ae9c460d80a8915f3ccbea0645704f538af43e0db61fd1bbc51827d8ec

HTTP Headers

GET /css?family=Scope+One|Trocchi HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 30 May 2023 21:10:49 GMT
date: Tue, 30 May 2023 21:10:49 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/css/font-awesome.min.css

142.4.4.15

200 OK

30 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/css/font-awesome.min.css
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
ASCII text, with very long lines (30240)
Size
30 kB (30403 bytes)
Hash
7e3f3c12c932a397bafadb7dfda07ebb
a3ee202873390015bbebdce1d4a150c8208043c5
b952b7cf4dd78b5a73326ac7eaf18b9e9ffd06cadff2a54fbe5eaba7c8a42d30

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/css/font-awesome.min.css HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/css/main.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:49 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:50 GMT
ETag: "76c3-5f28abf347fae"
Accept-Ranges: bytes
Content-Length: 30403
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b4b40aa902e030c3962325bfbc1aa3a4
a4ba1f4ef41182df919a3d52c5b453880c43a45f
db2652de35ec8788a924075eadc88c711e2f245d8165ff00c726461b83d114a7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 May 2023 21:10:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/scopeone/v14/WBLnrEXKYFlGHrOKmGDFXEXN.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/scopeone/v14/WBLnrEXKYFlGHrOKmGDFXEXN.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21476, version 1.0\012- data
Size
22 kB (21476 bytes)
Hash
a878907ddd89b1297c403056fb8dd7c6
7f3abf80113131c1ed85b2e672cf0676b9ddb213
04d42fe0d237f08ca29124bf940758a372618c923a344766e20f9d00f6f5db9c

HTTP Headers

GET /s/scopeone/v14/WBLnrEXKYFlGHrOKmGDFXEXN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://bdxzgmwfkwmfwknfhpgz.dynserv.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21476
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 04:42:29 GMT
expires: Sun, 26 May 2024 04:42:29 GMT
cache-control: public, max-age=31536000
age: 318501
last-modified: Wed, 27 Apr 2022 16:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b4b40aa902e030c3962325bfbc1aa3a4
a4ba1f4ef41182df919a3d52c5b453880c43a45f
db2652de35ec8788a924075eadc88c711e2f245d8165ff00c726461b83d114a7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 May 2023 21:10:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/fonts/fontawesome-webfont.woff2?v=4.6.3

142.4.4.15

200 OK

72 kB

URL GET HTTP/1.1
bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type
Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Size
72 kB (71896 bytes)
Hash
e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /design/assets/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/design/assets/css/font-awesome.min.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 21:10:50 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Wed, 18 Jan 2023 14:36:49 GMT
ETag: "118d8-5f28abf1da035"
Accept-Ranges: bytes
Content-Length: 71896
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

bdxzgmwfkwmfwknfhpgz.dynserv.org/favicon.ico

142.4.4.15

404 Not Found

0 B

URL GET HTTP/1.0
bdxzgmwfkwmfwknfhpgz.dynserv.org/favicon.ico
IP
142.4.4.15:80
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
http://bdxzgmwfkwmfwknfhpgz.dynserv.org/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bdxzgmwfkwmfwknfhpgz.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bdxzgmwfkwmfwknfhpgz.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 404 Not Found
Date: Tue, 30 May 2023 21:10:50 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
X-Powered-By: PHP/5.4.16
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN