Report - luminous-druid-397b44.netlify.app/

Report Overview

Submitted URL
luminous-druid-397b44.netlify.app/
IP
34.159.25.198
ASN
#396982 GOOGLE-CLOUD-PLATFORM
Submitted
2023-03-11 16:08:54
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-25T05:09:25Z	333 B	391 B	34.117.237.239
t1.daumcdn.net	20239	2014-10-06T11:09:48Z	2023-03-24T19:12:46Z	2.1 kB	111 kB	23.36.77.48
t1.kakaocdn.net	42755	2017-02-02T01:05:59Z	2023-03-25T16:35:04Z	430 B	34 kB	23.36.77.25
logins.daum.net	155365	2012-09-10T16:18:16Z	2023-03-14T11:55:56Z	443 B	6.4 kB	121.53.85.29
status.thawte.com	5123	2017-11-27T13:33:51Z	2023-03-25T05:13:32Z	341 B	739 B	192.229.221.95
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-25T05:09:02Z	2.4 kB	6.2 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-24T18:20:20Z	413 B	5.9 kB	34.160.144.191
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-25T04:18:49Z	1.0 kB	2.1 kB	192.229.221.95
m1.daumcdn.net	77925	2012-10-14T18:14:17Z	2023-03-17T18:04:17Z	433 B	2.8 kB	121.53.85.20
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-24T16:33:49Z	2.7 kB	541 kB	34.120.237.76
luminous-druid-397b44.netlify.app	unknown			2.2 kB	18 kB	34.159.58.69
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-24T18:14:23Z	782 B	2.4 kB	35.241.9.150
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-24T18:17:07Z	606 B	127 B	54.186.188.230

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-11 16:08:44	medium	Client IP	Internal IP	ET HUNTING Suspicious Netlify Hosted DNS Request - Possible Phishing Landing
2023-03-11 16:08:44	medium	Client IP	Internal IP	ET HUNTING Suspicious Netlify Hosted DNS Request - Possible Phishing Landing
2023-03-11 16:08:44	medium	Client IP	34.159.58.69	ET HUNTING Suspicious Netlify Hosted GET Request - Possible Phishing Landing
2023-03-11 16:08:44	medium	Client IP	34.159.58.69	ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-03-11	medium	luminous-druid-397b44.netlify.app/	Daum
2023-03-11	medium	luminous-druid-397b44.netlify.app/	Daum
2023-03-11	medium	luminous-druid-397b44.netlify.app/	Daum
2023-03-11	medium	luminous-druid-397b44.netlify.app/	Daum
2023-03-11	medium	luminous-druid-397b44.netlify.app/	Daum

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	t1.daumcdn.net/id/statics/common/js-lib/jquery-1.12.1.min.js	97 kB	2023-03-07	2024-03-26
Pretty URL t1.daumcdn.net/id/statics/common/js-lib/jquery-1.12.1.min.js IP 23.36.77.48 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2024-03-26 12:35:24 Times Seen1671 Hash 1d244cb043be8157f0050ce9e45c9ef2 f16bd01623fd56d1372ea2eb55cd52a28cd883f8 2359d383bf2d4ab65ebf7923bdf74ce40e4093f6e58251b395a64034b3c39772 Loading...

	t1.daumcdn.net/kas/static/ba.min.js	168 kB	2023-03-14	2023-04-05
Pretty URL t1.daumcdn.net/kas/static/ba.min.js IP 23.36.77.48 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 19:28:53 Last Seen2023-04-05 15:47:45 Times Seen12 Hash 688ead915859b0feec3810cd421b5b60 3cfcfed97fe12f827da081668d355b5188dd6a11 b57f879a35204b7be0c525250b17fc3f54f84a0785e3179b76ff6b8c0750291e Loading...

	t1.daumcdn.net/id/statics/common/js-lib/jquery.cookie-1.3.1.min.js	1.0 kB	2023-03-07	2023-04-26
Pretty URL t1.daumcdn.net/id/statics/common/js-lib/jquery.cookie-1.3.1.min.js IP 23.36.77.48 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:17:42 Last Seen2023-04-26 07:32:21 Times Seen6 Hash da07a4fc29985c13565455fd2eac19c9 dec8c5df52edc1310458e42b7e262ae6647e9bf0 e59bba1708d06698afe08ebc4c9ce3c9a14e1fca0d7826e824bd6ed04a153b54 Loading...

HTTP Transactions (34)

URL IP Response Size

luminous-druid-397b44.netlify.app/

34.159.58.69

301 Moved Permanently

57 B

URL HTTP/1.1
luminous-druid-397b44.netlify.app/
IP
34.159.58.69:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
ASCII text, with no line terminators
Size
57 B (57 bytes)
Hash
31ad7b6a7c21f3ebb6abbc57910fc8d7
4d6d2211b0c1d871ee3e8adfe6ea845b73f1b0e5
54e238b5ef189a1c6e49e448fa84c65c0635084a938ff97c89bf28849d49227e

Detections

Analyzer	Verdict	Alert
openphish	Daum

NIDS	Severity	Alert
suricata	medium	ET HUNTING Suspicious Netlify Hosted GET Request - Possible Phishing Landing

HTTP Headers

GET / HTTP/1.1
Host: luminous-druid-397b44.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Location: https://luminous-druid-397b44.netlify.app/
Server: Netlify
X-Nf-Request-Id: 01GV8PWYPH22FNSP3S21K6KDN3
Date: Sat, 11 Mar 2023 16:08:43 GMT
Content-Length: 57
Content-Type: text/plain; charset=utf-8

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9ce33c47154f4826255fe9bbe54d72be
e10a363c007a6d15ed43eb35b4e5c246d85c5eed
cf423db1a8ad1dce1b5c25f6025d14411b4a46e95a6001288949f046e244bc24

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CF423DB1A8AD1DCE1B5C25F6025D14411B4A46E95A6001288949F046E244BC24"
Last-Modified: Fri, 10 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3820
Expires: Sat, 11 Mar 2023 17:12:24 GMT
Date: Sat, 11 Mar 2023 16:08:44 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
99824e6e553dd5649b1d199589a6dab2
00b2c24f6ef22620045c3b2ef7a63ea9ac8cc0a2
3a4695284040436fd256023da7d39bab8b16f8a2d4f7105c0f995f610dcab2d2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A4695284040436FD256023DA7D39BAB8B16F8A2D4F7105C0F995F610DCAB2D2"
Last-Modified: Thu, 09 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4078
Expires: Sat, 11 Mar 2023 17:16:42 GMT
Date: Sat, 11 Mar 2023 16:08:44 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1a564ae484daef6a82bb08116ad794eb
f75350abf28a42c16324901035889a1f3af700a1
225214187df3f50835a8aafcc4555fe47cf0b78938b71d34fb422942292b153b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "225214187DF3F50835A8AAFCC4555FE47CF0B78938B71D34FB422942292B153B"
Last-Modified: Fri, 10 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3832
Expires: Sat, 11 Mar 2023 17:12:36 GMT
Date: Sat, 11 Mar 2023 16:08:44 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Backoff, Alert, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 11 Mar 2023 15:09:09 GMT
content-type: application/json
age: 3575
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: edUCXVQ6aWTmbfFXZnZTQzozlexaKanGhRkMzczLheTTi6LeAVOGuiZtWT+LN6U6zsUeym+tCmk=
x-amz-request-id: JD3B2B0MKBYNV9BK
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 11 Mar 2023 15:19:20 GMT
age: 2964
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

192.229.221.95

200 OK

314 B

URL HTTP/1.1
ocsp.digicert.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
314 B (314 bytes)
Hash
638b25a7c3c61877c8c79a907ea8a521
9c6e4176c3106f32fde03ec3fb7c3c2d8b397113
c9ff30876e59c50b1dcbf1a5c3cb9714b15a93efd90cc081c6e31bcc97d33f61

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2838
Cache-Control: max-age=150351
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 16:08:44 GMT
Etag: "640c44c5-13a"
Expires: Mon, 13 Mar 2023 09:54:35 GMT
Last-Modified: Sat, 11 Mar 2023 09:07:17 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 314

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 11 Mar 2023 16:08:44 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

luminous-druid-397b44.netlify.app/

34.159.58.69

200 OK

6.8 kB

URL HTTP/2
luminous-druid-397b44.netlify.app/
IP
34.159.58.69:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6591), with CRLF line terminators
Size
6.8 kB (6812 bytes)
Hash
7800fa91e499004163a0fc98a22c13e8
aea20a240bfaecae1c70e1624f99666fbdd5c123
f417c07440180d6e8b568223d62fc47ce90af683b920f21d5a91521dfb1a59eb

Detections

Analyzer	Verdict	Alert
openphish	Daum

NIDS	Severity	Alert
suricata	medium	ET HUNTING Suspicious Netlify Hosted GET Request - Possible Phishing Landing

HTTP Headers

GET / HTTP/1.1
Host: luminous-druid-397b44.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
age: 131783
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=UTF-8
date: Fri, 10 Mar 2023 03:32:21 GMT
etag: "96ebbc7639bc82697c166892f2ca1bdc-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01GV8PWZ0CSFTJ6G2HK5GEMQC2
content-length: 6812
X-Firefox-Spdy: h2

t1.daumcdn.net/id/statics/common/js-lib/jquery-1.12.1.min.js

23.36.77.48

200 OK

34 kB

URL HTTP/2
t1.daumcdn.net/id/statics/common/js-lib/jquery-1.12.1.min.js
IP
23.36.77.48:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (32039)
Size
34 kB (33894 bytes)
Hash
3de00538dc691e30ec954eaa4a1ef48d
49fe8f74363608b4df58503eb94cba0f81f842e6
e7520169ff0229bd79a5208fe110b672e16f4edc07c283e869fde88fe05237a5

HTTP Headers

GET /id/statics/common/js-lib/jquery-1.12.1.min.js HTTP/1.1
Host: t1.daumcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: openresty
content-type: text/javascript
content-length: 33894
last-modified: Tue, 05 Dec 2017 04:26:37 GMT
accept-ranges: bytes
content-encoding: gzip
x-wcss: dC1jb21tb24wMS1id2NhY2hlNDE6MDpjaHR0cDoxMg==
cache-control: max-age=314076040
expires: Mon, 21 Feb 2033 19:29:24 GMT
date: Sat, 11 Mar 2023 16:08:44 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2

t1.daumcdn.net/kas/static/ba.min.js

23.36.77.48

200 OK

52 kB

URL HTTP/2
t1.daumcdn.net/kas/static/ba.min.js
IP
23.36.77.48:0
ASN
#20940 Akamai International B.V.

File type
Unicode text, UTF-8 text, with very long lines (65318)
Size
52 kB (51943 bytes)
Hash
0c144fb24d555087509626175e94a803
a350d86ef29df96e6e952e5f15c600a58d180d01
d969a07b0a380fec1761c4dbb41b6d9a1ca275f92c1013b059f0d0a192d02b46

HTTP Headers

GET /kas/static/ba.min.js HTTP/1.1
Host: t1.daumcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
last-modified: Mon, 06 Mar 2023 02:05:42 GMT
server: openresty
content-type: text/javascript
content-length: 51943
accept-ranges: bytes
content-encoding: gzip
x-wcss: dC1jb21tb24wMS1id2NhY2hlMTowOmNodHRwOjI4
cache-control: max-age=2168
expires: Sat, 11 Mar 2023 16:44:52 GMT
date: Sat, 11 Mar 2023 16:08:44 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2

t1.daumcdn.net/id/statics/common/js-lib/jquery.cookie-1.3.1.min.js

23.36.77.48

200 OK

556 B

URL HTTP/2
t1.daumcdn.net/id/statics/common/js-lib/jquery.cookie-1.3.1.min.js
IP
23.36.77.48:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (1000), with no line terminators
Size
556 B (556 bytes)
Hash
ddbf2993691b74887788c7d9ad05eab5
27e69a651909724f390e1e60067b860c460481b3
adf434531c6865180421051619c7c2bec22d6c8b51838eae0fd484c0b930667a

HTTP Headers

GET /id/statics/common/js-lib/jquery.cookie-1.3.1.min.js HTTP/1.1
Host: t1.daumcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: openresty
content-type: text/javascript
content-length: 556
last-modified: Tue, 12 Dec 2017 07:29:04 GMT
accept-ranges: bytes
content-encoding: gzip
x-wcss: dC1jb21tb24wMS1id2NhY2hlMjY6MDpjaHR0cDoyOA==
cache-control: max-age=313842030
expires: Sat, 19 Feb 2033 02:29:14 GMT
date: Sat, 11 Mar 2023 16:08:44 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, ETag, Backoff, Expires, Alert, Pragma, Cache-Control, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 11 Mar 2023 15:12:31 GMT
age: 3374
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
34074a698d329d4ef360e4e7e1d233e6
6b6a57a57c5b9e486faf50ff03acfd0ba2c13f14
bf3031c8640f9bc3d1ab94e5e45cdba32f39cc4590f11821317fdce573012fb9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF3031C8640F9BC3D1AB94E5E45CDBA32F39CC4590F11821317FDCE573012FB9"
Last-Modified: Thu, 09 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3990
Expires: Sat, 11 Mar 2023 17:15:15 GMT
Date: Sat, 11 Mar 2023 16:08:45 GMT
Connection: keep-alive

t1.kakaocdn.net/login/bridge/bnr_login.jpg

23.36.77.25

200 OK

34 kB

URL HTTP/2
t1.kakaocdn.net/login/bridge/bnr_login.jpg
IP
23.36.77.25:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 640x192, components 3\012- data
Size
34 kB (34156 bytes)
Hash
01f752ff00784adec5b4d9a948275a7d
18a749a134376fa977507c24e4552b8a961ad085
c23075fed39a60ba7795b620a786e22922975f8ea7e6dbcf8fb14c524c979364

HTTP Headers

GET /login/bridge/bnr_login.jpg HTTP/1.1
Host: t1.kakaocdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: openresty
last-modified: Wed, 14 Apr 2021 07:26:18 GMT
content-type: image/jpeg
content-length: 34156
accept-ranges: bytes
x-wcss: dC1jb21tb24wMS1id2NhY2hlNzowOmNodHRwOjMy
cache-control: max-age=15241
expires: Sat, 11 Mar 2023 20:22:46 GMT
date: Sat, 11 Mar 2023 16:08:45 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2

push.services.mozilla.com/

54.186.188.230

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.186.188.230:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +/GLqw6SFuitCcMEkdqksw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Op3kmkZkCodWa08djNcTQyKpV50=

ocsp.digicert.com/

192.229.221.95

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
0b0201d19e475f858639366820441fe7
a8f700a9032b0d8361e07e1f05ed8b57a12a230a
8f6f4fd9e852379965f7e59883f4249834a1cd93bfb523f3896bbefd2d5951c3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6243
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 16:08:45 GMT
Last-Modified: Sat, 11 Mar 2023 14:24:42 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

192.229.221.95

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
5300c911944dbecd5ddcb33653acc446
06c5040e6efa4ee39ff7239440ed6d23cbbf083f
80be9751bb2d747e6987a502d8b9e5c0f7f2de48128dfd35ad189dcd2e971fa9

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5025
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 16:08:45 GMT
Etag: "640b41fa-1d7"
Last-Modified: Sat, 11 Mar 2023 14:45:00 GMT
Server: ECAcc (amb/6B67)
X-Cache: HIT
Content-Length: 471

logins.daum.net/contents/min/css/login.css?ver=220419011956?ver=220419011956

121.53.85.29

200 OK

6.1 kB

URL HTTP/1.1
logins.daum.net/contents/min/css/login.css?ver=220419011956?ver=220419011956
IP
121.53.85.29:0
ASN
#7625 Kakao Corp

File type
Unicode text, UTF-8 text, with very long lines (1112)
Size
6.1 kB (6148 bytes)
Hash
1d25edcde2f6b6f20616fafb1d36048e
46cbe855b424af3176bdad0ee848882e76598c33
21f4e02683be0cd4e403b6d33b490e2240d8900c8f04adc4d7c566bbc0a50bf4

HTTP Headers

GET /contents/min/css/login.css?ver=220419011956?ver=220419011956 HTTP/1.1
Host: logins.daum.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Accept-Ranges: bytes
ETag: W/"33920-1677030572000"
Last-Modified: Wed, 22 Feb 2023 01:49:32 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sat, 11 Mar 2023 16:08:45 GMT
Server: Apache Tomcat

luminous-druid-397b44.netlify.app/contents/min/js/login-default.js?ver=220419011956

34.159.58.69

404 Not Found

1.2 kB

URL HTTP/2
luminous-druid-397b44.netlify.app/contents/min/js/login-default.js?ver=220419011956
IP
34.159.58.69:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (331)
Size
1.2 kB (1245 bytes)
Hash
3530ab3fb068ffb26ab9b3e9184cfcbe
5abe9ee23f42cb727de0567589872f2f5aad57c7
18c9246dec79e05803b6c95c0247f989bf655c1e1809d591b2be37f8bf6f2e22

Detections

Analyzer	Verdict	Alert
openphish	Daum

HTTP Headers

GET /contents/min/js/login-default.js?ver=220419011956 HTTP/1.1
Host: luminous-druid-397b44.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
age: 2
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Sat, 11 Mar 2023 16:08:44 GMT
etag: 1678409504-ssl-df
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01GV8PX0XJRR71P2N3X1AK1BB4
content-length: 1245
X-Firefox-Spdy: h2

t1.daumcdn.net/id/logins/2021/retina/logo_daum.png

23.36.77.48

200 OK

7.0 kB

URL HTTP/2
t1.daumcdn.net/id/logins/2021/retina/logo_daum.png
IP
23.36.77.48:0
ASN
#20940 Akamai International B.V.

File type
PNG image data, 284 x 116, 8-bit/color RGBA, non-interlaced\012- data
Size
7.0 kB (6954 bytes)
Hash
2f6246d7e414abee9e4e317724c19859
cd0f7364d154afe364de63bdb8f715a313959f8f
ff56c9fe19071846d8234a1bdd40e53c97e132048b8407f4de6c8c0eb83a84eb

HTTP Headers

GET /id/logins/2021/retina/logo_daum.png HTTP/1.1
Host: t1.daumcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://logins.daum.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 25 Mar 2021 06:20:17 GMT
server: openresty
content-type: image/png
content-length: 6954
accept-ranges: bytes
x-wcss: dC1jb21tb24wMS1id2NhY2hlMjY6MDpjaHR0cDoyOA==
cache-control: max-age=2594
expires: Sat, 11 Mar 2023 16:52:00 GMT
date: Sat, 11 Mar 2023 16:08:46 GMT
X-Firefox-Spdy: h2

t1.daumcdn.net/id/logins/2021/retina/ico_login_220323.png

23.36.77.48

200 OK

16 kB

URL HTTP/2
t1.daumcdn.net/id/logins/2021/retina/ico_login_220323.png
IP
23.36.77.48:0
ASN
#20940 Akamai International B.V.

File type
PNG image data, 400 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
16 kB (15759 bytes)
Hash
722acb0d8e38fa996df058842156e481
d6ee6e9e286f4ce56c5f15494a7fbd21fa5e8e1b
859e4b599658dd3fd8260e83a4488d730da27620418709b9d67cf8c79d770488

HTTP Headers

GET /id/logins/2021/retina/ico_login_220323.png HTTP/1.1
Host: t1.daumcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://logins.daum.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 23 Mar 2022 10:33:03 GMT
server: openresty
content-type: image/png
content-length: 15759
accept-ranges: bytes
x-wcss: dC1jb21tb24wMS1id2NhY2hlMjE6MDpjaHR0cDoxNg==
cache-control: max-age=7192
expires: Sat, 11 Mar 2023 18:08:38 GMT
date: Sat, 11 Mar 2023 16:08:46 GMT
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10893
Expires: Sat, 11 Mar 2023 19:10:19 GMT
Date: Sat, 11 Mar 2023 16:08:46 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10893
Expires: Sat, 11 Mar 2023 19:10:19 GMT
Date: Sat, 11 Mar 2023 16:08:46 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10893
Expires: Sat, 11 Mar 2023 19:10:19 GMT
Date: Sat, 11 Mar 2023 16:08:46 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg

34.120.237.76

200 OK

5.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.5 kB (5512 bytes)
Hash
6c23372c93f0515a6133f5adc26c1712
3c8388cf727cb7007308ee0b42da57f5f0db489a
e24a8f21c65c6bc26698c85adb81f3712f4df9ab2dbe8075a77ea947640f8be6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5512
x-amzn-requestid: db69d563-a267-49fd-a63a-9de5282ac108
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZKRGW-IAMFmuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba241-69cb4960369f1da8583e36db;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: pU47Uf1OAos6ZmhKohYesj3ZDaImrzXzul-FQ5DRSh_A25EK7S8GmA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:51:55 GMT
etag: "3c8388cf727cb7007308ee0b42da57f5f0db489a"
content-type: image/jpeg
age: 65811
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6461 bytes)
Hash
57a25c00fa7cdf85ee8a0c2c7747ec92
47f208a0c9379c760d2cd7bb3d825dcff10ecaf1
91398352ace48027b953778032d734318460d3a1c80ee674586bd2e8df241946

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6461
x-amzn-requestid: 9a3e415b-c4d0-4160-941e-7cd26795e573
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZKREojIAMFTtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba241-16c54b003338f3c90bd958fc;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: HvTlSmLWd1U6wcxMNnArtsw4Cjy4ZgyMsqPz1sUlNDluHhvlmy8oIA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:50:49 GMT
age: 65877
etag: "47f208a0c9379c760d2cd7bb3d825dcff10ecaf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F676713c6-f6d7-46be-a2a3-ef48825207e6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6648 bytes)
Hash
2f424440d693260c47fc8053f3fee8c3
0aedb0d70b5828a7b3e981e958c856988cd1185e
c18592348905442cbec754d5836e5a7893890dc7939fb7e00420cbd5eb6e83df

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F676713c6-f6d7-46be-a2a3-ef48825207e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6648
x-amzn-requestid: 9bd30314-db94-456a-93ff-58d0850e1167
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BZhsbGtUoAMFwqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6406e31c-6ca0c23767d9d7f94b3a3c97;Sampled=0
x-amzn-remapped-date: Tue, 07 Mar 2023 07:09:16 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PicgwWEnjSFNSrcsm5eigownqfddacD3vJirgXMBG9afM5npoSczdA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 0ec9ddba08fcd99386924593dbdbd44a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 13:22:45 GMT
age: 9961
etag: "0aedb0d70b5828a7b3e981e958c856988cd1185e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7384 bytes)
Hash
6e828c35d1a85eabbe81b801d6b1ad33
040b83c5c73a4b02c65e44408b8f2385e0002791
5c27268f33fc448dc3824ae0ad3ed411a204fbc076a3356b3381b2495036c6a3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7384
x-amzn-requestid: d70a1ba5-1bc7-427b-b1cf-cc93b97c2b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZLmGTmoAMF7lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba249-05a5a68e7d2e2b343b802da1;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:34:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: AwAUbn-HKAtgtrxYTeDFUIYTT4oLbXJA9wEI1VPsuDJhUNKK3_UHRg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b2d3922a177f6cecf9222a78a0a1ad32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:50:49 GMT
age: 65877
etag: "040b83c5c73a4b02c65e44408b8f2385e0002791"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

luminous-druid-397b44.netlify.app/favicon.ico

34.159.58.69

404 Not Found

7.8 kB

URL HTTP/2
luminous-druid-397b44.netlify.app/favicon.ico
IP
34.159.58.69:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (331)
Size
7.8 kB (7792 bytes)
Hash
35bca8ad3fe8450c0a854dba1abfdb44
626c23f3377670df30ba7a4f6fa9074efbc62a97
529a053c60763d2db1c1e0512a27ecb74a140b02b1d8e6ef152680b7eb40b829

Detections

Analyzer	Verdict	Alert
openphish	Daum

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: luminous-druid-397b44.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Sat, 11 Mar 2023 16:08:46 GMT
etag: 1678409504-ssl-df
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01GV8PX11G1NDG3P16891YBJQ7
X-Firefox-Spdy: h2

34.120.237.76

200 OK

510 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 296 x 148\012- data
Size
510 kB (509554 bytes)
Hash
8aaaf2f10ef3b4bdba0a3e87363f431a
2395f71c326974fad24daac2eae607dda08a2c26
2612bdecbf6dc5e349d69c92bd557d35b41b3672d361f343d19123d0ce72de9c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 509554
x-amzn-requestid: 358fb422-72a7-4e2a-b173-2f57ec2b5f51
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BfjO0HCGoAMFrrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64094bf8-2ac79d011c36a5ee28c36d64;Sampled=0
x-amzn-remapped-date: Thu, 09 Mar 2023 03:01:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: zLT96BrXwF1sZAxojd9GWpDdKkDj741TruR6scOYhSZK2HljA_6fZA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 03:37:03 GMT
age: 45103
etag: "2395f71c326974fad24daac2eae607dda08a2c26"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

status.thawte.com/

192.229.221.95

200 OK

471 B

URL HTTP/1.1
status.thawte.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f70d7327f0284baa9c6140e235ab520d
6adc6329ebeffa24aac585322ebc598221bcd926
7c570b90c256565f614285cbb6dfb7252ca9ab00e4dceb5a7e311602f8b41d98

HTTP Headers

POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4894
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 16:08:47 GMT
Last-Modified: Sat, 11 Mar 2023 14:47:13 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471

m1.daumcdn.net/svc/image/U03/common_icon/523121BA0553E80001

121.53.85.20

200 OK

2.4 kB

URL HTTP/2
m1.daumcdn.net/svc/image/U03/common_icon/523121BA0553E80001
IP
121.53.85.20:0
ASN
#7625 Kakao Corp

File type
PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Size
2.4 kB (2415 bytes)
Hash
1cd4000f4aec4dae42b8339327138baa
f42fb71ff91ec2f42aa98576359d71af2afdc176
7e3ba7ef0ff57d4657887046229cd070e8c607a44bb73b596ec464b90d4e369b

HTTP Headers

GET /svc/image/U03/common_icon/523121BA0553E80001 HTTP/1.1
Host: m1.daumcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 11 Mar 2023 16:08:48 GMT
content-type: image/png
content-length: 2415
expires: Sat, 11 Mar 2023 18:42:22 GMT
last-modified: Fri, 12 Dec 2014 02:37:01 GMT
content-disposition: inline; filename="523121BA0553E80001"
cache-control: max-age=21600
x-wcss: dC1jb21tb24wMS1id2NhY2hlMTk6MDpjaHR0cDoyMA==
age: 12385
X-Firefox-Spdy: h2

luminous-druid-397b44.netlify.app/contents/min/js/login-default.js?ver=220419011956

34.159.58.69

404 Not Found

0 B

URL HTTP/2
luminous-druid-397b44.netlify.app/contents/min/js/login-default.js?ver=220419011956
IP
34.159.58.69:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	Daum

HTTP Headers

GET /contents/min/js/login-default.js?ver=220419011956 HTTP/1.1
Host: luminous-druid-397b44.netlify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://luminous-druid-397b44.netlify.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Sat, 11 Mar 2023 16:08:44 GMT
etag: 1678409504-ssl-df
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01GV8PWZ41HG5XQEYHS80FG3F6
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (34)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN