Report - www.londonlockandglass.com/tmp/nc.exe

Report Overview

Submitted URL
www.londonlockandglass.com/tmp/nc.exe
IP
35.214.14.190
ASN
#15169 GOOGLE
Submitted
2023-06-02 04:27:07
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
maps.google.com	1899	1997-09-15	2012-09-11	2023-06-01	870 B	116 kB	142.250.74.46
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-06-02	559 B	22 kB	142.250.74.35
www.londonlockandglass.com	unknown	2010-12-14	2015-05-21	2023-06-01	3.0 kB	926 kB	35.214.14.190
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-01	2.3 kB	4.9 kB	142.250.74.3
maps.googleapis.com	33876	2005-01-25	2019-10-17	2023-06-01	484 B	575 B	142.250.74.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-02 04:26:49	medium	Client IP	35.214.14.190	ET INFO Executable Served From /tmp/ Directory - Malware Hosting Behaviour
2023-06-02 04:26:49	medium	Client IP	35.214.14.190	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
2023-06-02 04:26:49	medium	Client IP	35.214.14.190	ET HUNTING Observed Suspicious Request nc.exe in URI

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include.12ecec.js	21 kB	2023-05-09	2023-12-28
Pretty URL www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include.12ecec.js IP 35.214.14.190 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 04:05:45 Last Seen2023-12-28 10:50:16 Times Seen42 Hash 5a53825dee93494066fc22d207857144 b2681a8e0a22c7d77eac1a1c05c47cabb06db513 c7de7fd184dac3fd591f012faa4cb3dc726aa5e48ee516a32627e90873b4194f Loading...

	www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include-footer.c58c74.js	1.4 MB	2023-06-02	2023-06-02
Pretty URL www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include-footer.c58c74.js IP 35.214.14.190 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-02 06:27:08 Last Seen2023-06-02 06:27:08 Times Seen2 Hash 03dad590e2d8e9349f76cd7df1bcece8 c3bf0b0d87e3296aa98775bea56bf52ae43e123f 2c8d6d32d3340b7ef87ef5d856ca503450b711bb4d2bae8171c6008d24cc2d31 Loading...

	maps.google.com/maps-api-v3/api/js/52/9/common.js	278 kB	2023-04-12	2023-12-24
Pretty URL maps.google.com/maps-api-v3/api/js/52/9/common.js IP 142.250.74.46 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-12 20:29:04 Last Seen2023-12-24 03:21:29 Times Seen3447 Hash 332f39ae8977fe6d1dd7997a3f00d37c c74c48dd8e35471bae69e98e6537f989c17b17fb 5886c5a48029d78e1e819e262d4ce17f689acfe53948ba010d9db7c86d23ff22 Loading...

	maps.google.com/maps-api-v3/api/js/52/9/util.js	166 kB	2023-04-12	2023-12-24
Pretty URL maps.google.com/maps-api-v3/api/js/52/9/util.js IP 142.250.74.46 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-12 20:29:04 Last Seen2023-12-24 03:21:29 Times Seen3451 Hash cf88d8527d3612265df06578b589a536 01762cf59b50c9fb2a45ec68e04902e69460b966 476d5c5476192feb55e2caf6b5f1f82d14442b3879f168e7d1345d8eac747e39 Loading...

HTTP Transactions (17)

URL IP Response Size

www.londonlockandglass.com/tmp/nc.exe

35.214.14.190

403 Forbidden

820 B

URL User Request GET HTTP/2
www.londonlockandglass.com/tmp/nc.exe
IP
35.214.14.190:443
ASN
#15169 GOOGLE

Certificate
IssuerLet's Encrypt
Subject*.londonlockandglass.com
FingerprintFD:7A:9A:E3:24:73:51:60:CF:2C:A3:C9:A7:A1:24:9B:73:4D:01:53
ValiditySat, 15 Apr 2023 16:38:45 GMT - Fri, 14 Jul 2023 16:38:44 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (391)
Size
820 B (820 bytes)
Hash
2d8d5ebcb55eb8e3029933bc45162363
6b76ec61bb0f2bf19b3fd44bf03e44220bb2e75d
b88f730a22b47de2ac63318b92f79708c6868158083f6e157694b43933c172a6

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO Executable Served From /tmp/ Directory - Malware Hosting Behaviour
suricata	medium	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
suricata	medium	ET HUNTING Observed Suspicious Request nc.exe in URI

HTTP Headers

GET /tmp/nc.exe HTTP/1.1
Host: www.londonlockandglass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
server: nginx
date: Fri, 02 Jun 2023 04:26:49 GMT
content-type: text/html; charset=UTF-8
expires: Fri, 02 Jun 2023 05:26:42 GMT
pragma: public
cache-control: max-age=3600, public
x-powered-by: W3 Total Cache/2.3.1
vary: Accept-Encoding, X-Forwarded-Proto
last-modified: Fri, 02 Jun 2023 04:26:42 GMT
etag: W/"2d8d5ebcb55eb8e3029933bc45162363"
x-httpd: 1
referrer-policy: no-referrer-when-downgrade
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 04:26:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include-footer.c58c74.js

35.214.14.190

200 OK

422 kB

URL GET HTTP/2
www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include-footer.c58c74.js
IP
35.214.14.190:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerLet's Encrypt
Subject*.londonlockandglass.com
FingerprintFD:7A:9A:E3:24:73:51:60:CF:2C:A3:C9:A7:A1:24:9B:73:4D:01:53
ValiditySat, 15 Apr 2023 16:38:45 GMT - Fri, 14 Jul 2023 16:38:44 GMT

File type
ASCII text, with very long lines (1562)
Size
422 kB (421817 bytes)
Hash
03dad590e2d8e9349f76cd7df1bcece8
c3bf0b0d87e3296aa98775bea56bf52ae43e123f
2c8d6d32d3340b7ef87ef5d856ca503450b711bb4d2bae8171c6008d24cc2d31

HTTP Headers

GET /wp-content/cache/minify/c0051.default.include-footer.c58c74.js HTTP/1.1
Host: www.londonlockandglass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.londonlockandglass.com/tmp/nc.exe
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 02 Jun 2023 04:26:49 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 06:44:46 GMT
vary: Accept-Encoding
etag: W/"64783e5e-14f9fb"
expires: Sat, 01 Jun 2024 04:26:49 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 04:26:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
02593b51cd737e1085e5837a9a47c755
aab410449655b9fddf070f3e25a1a8e5aee59530
0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 04:26:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true

142.250.74.74

200 OK

23 B

URL GET HTTP/2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
JSON data\012- , ASCII text
Size
23 B (23 bytes)
Hash
8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356

HTTP Headers

GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.londonlockandglass.com
DNT: 1
Connection: keep-alive
Referer: https://www.londonlockandglass.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 02 Jun 2023 04:26:50 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.londonlockandglass.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
02593b51cd737e1085e5837a9a47c755
aab410449655b9fddf070f3e25a1a8e5aee59530
0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 04:26:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.londonlockandglass.com/wp-includes/images/w-logo-blue-white-bg.png

35.214.14.190

200 OK

4.1 kB

URL GET HTTP/2
www.londonlockandglass.com/wp-includes/images/w-logo-blue-white-bg.png
IP
35.214.14.190:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerLet's Encrypt
Subject*.londonlockandglass.com
FingerprintFD:7A:9A:E3:24:73:51:60:CF:2C:A3:C9:A7:A1:24:9B:73:4D:01:53
ValiditySat, 15 Apr 2023 16:38:45 GMT - Fri, 14 Jul 2023 16:38:44 GMT

File type
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4119 bytes)
Hash
000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0

HTTP Headers

GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: www.londonlockandglass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.londonlockandglass.com/tmp/nc.exe
DNT: 1
Connection: keep-alive
Cookie: SVcRfi-nswapBx=N2maiduH; VcLQDJ=plQgftex%5DTX9m3; LWYISEj-Ra=KgCGOwR%5D9BHh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 02 Jun 2023 04:26:50 GMT
content-type: image/png
content-length: 4119
last-modified: Thu, 11 Jun 2020 04:19:37 GMT
etag: "5ee1b0d9-1017"
expires: Sat, 01 Jun 2024 04:26:50 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7e9d63d81a25205bd12ab8b258a264e6
2dfa41d339fd897120f53297f4e0f9fa20c117c1
768ca6e8ca2f678019baeaca289964229311ea185556db48650c297dbe996136

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 04:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7e9d63d81a25205bd12ab8b258a264e6
2dfa41d339fd897120f53297f4e0f9fa20c117c1
768ca6e8ca2f678019baeaca289964229311ea185556db48650c297dbe996136

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 04:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

maps.google.com/maps-api-v3/api/js/52/9/common.js

142.250.74.46

200 OK

62 kB

URL GET HTTP/2
maps.google.com/maps-api-v3/api/js/52/9/common.js
IP
142.250.74.46:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

File type
ASCII text, with very long lines (580)
Size
62 kB (61801 bytes)
Hash
332f39ae8977fe6d1dd7997a3f00d37c
c74c48dd8e35471bae69e98e6537f989c17b17fb
5886c5a48029d78e1e819e262d4ce17f689acfe53948ba010d9db7c86d23ff22

HTTP Headers

GET /maps-api-v3/api/js/52/9/common.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.londonlockandglass.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 61801
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 00:10:44 GMT
expires: Sat, 01 Jun 2024 00:10:44 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 12 Apr 2023 16:08:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 15371
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

maps.google.com/maps-api-v3/api/js/52/9/util.js

142.250.74.46

200 OK

52 kB

URL GET HTTP/2
maps.google.com/maps-api-v3/api/js/52/9/util.js
IP
142.250.74.46:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

File type
ASCII text, with very long lines (564)
Size
52 kB (52057 bytes)
Hash
cf88d8527d3612265df06578b589a536
01762cf59b50c9fb2a45ec68e04902e69460b966
476d5c5476192feb55e2caf6b5f1f82d14442b3879f168e7d1345d8eac747e39

HTTP Headers

GET /maps-api-v3/api/js/52/9/util.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.londonlockandglass.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 52057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 04:23:08 GMT
expires: Sat, 01 Jun 2024 04:23:08 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 12 Apr 2023 16:08:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7e9d63d81a25205bd12ab8b258a264e6
2dfa41d339fd897120f53297f4e0f9fa20c117c1
768ca6e8ca2f678019baeaca289964229311ea185556db48650c297dbe996136

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 04:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include.394268.css

35.214.14.190

200 OK

471 kB

URL GET HTTP/2
www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include.394268.css
IP
35.214.14.190:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerLet's Encrypt
Subject*.londonlockandglass.com
FingerprintFD:7A:9A:E3:24:73:51:60:CF:2C:A3:C9:A7:A1:24:9B:73:4D:01:53
ValiditySat, 15 Apr 2023 16:38:45 GMT - Fri, 14 Jul 2023 16:38:44 GMT

File type

Size
471 kB (471211 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/cache/minify/c0051.default.include.394268.css HTTP/1.1
Host: www.londonlockandglass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.londonlockandglass.com/tmp/nc.exe
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 02 Jun 2023 04:26:49 GMT
content-type: text/css
last-modified: Thu, 01 Jun 2023 07:33:11 GMT
vary: Accept-Encoding
etag: W/"647849b7-730ab"
expires: Sat, 01 Jun 2024 04:26:49 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrE.woff2

142.250.74.35

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrE.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21528, version 1.0\012- data
Size
22 kB (21528 bytes)
Hash
1bfee3e98396ef2e378eca9689d4c859
5ac6383a9367f7f0bdfb55e477b0b976fdff3942
d3bf5c7f14111380b95d877ae25c01388693756986fdf6f8231deae0c209d7bc

HTTP Headers

GET /s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.londonlockandglass.com
DNT: 1
Connection: keep-alive
Referer: https://www.londonlockandglass.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 08:00:52 GMT
expires: Sun, 26 May 2024 08:00:52 GMT
cache-control: public, max-age=31536000
age: 505558
last-modified: Mon, 18 Jul 2022 19:57:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include.12ecec.js

35.214.14.190

200 OK

21 kB

URL GET HTTP/2
www.londonlockandglass.com/wp-content/cache/minify/c0051.default.include.12ecec.js
IP
35.214.14.190:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerLet's Encrypt
Subject*.londonlockandglass.com
FingerprintFD:7A:9A:E3:24:73:51:60:CF:2C:A3:C9:A7:A1:24:9B:73:4D:01:53
ValiditySat, 15 Apr 2023 16:38:45 GMT - Fri, 14 Jul 2023 16:38:44 GMT

File type
ASCII text, with very long lines (2078)
Size
21 kB (20665 bytes)
Hash
5a53825dee93494066fc22d207857144
b2681a8e0a22c7d77eac1a1c05c47cabb06db513
c7de7fd184dac3fd591f012faa4cb3dc726aa5e48ee516a32627e90873b4194f

HTTP Headers

GET /wp-content/cache/minify/c0051.default.include.12ecec.js HTTP/1.1
Host: www.londonlockandglass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.londonlockandglass.com/tmp/nc.exe
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 02 Jun 2023 04:26:49 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 07:33:11 GMT
vary: Accept-Encoding
etag: W/"647849b7-50b9"
expires: Sat, 01 Jun 2024 04:26:49 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

www.londonlockandglass.com/favicon.ico

35.214.14.190

302 Found

4.1 kB

URL GET HTTP/2
www.londonlockandglass.com/favicon.ico
IP
35.214.14.190:443
ASN
#15169 GOOGLE

Requested by
https://www.londonlockandglass.com/tmp/nc.exe
Certificate
IssuerLet's Encrypt
Subject*.londonlockandglass.com
FingerprintFD:7A:9A:E3:24:73:51:60:CF:2C:A3:C9:A7:A1:24:9B:73:4D:01:53
ValiditySat, 15 Apr 2023 16:38:45 GMT - Fri, 14 Jul 2023 16:38:44 GMT

File type

Size
4.1 kB (4119 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.londonlockandglass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.londonlockandglass.com/tmp/nc.exe
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Fri, 02 Jun 2023 04:26:50 GMT
content-type: text/html; charset=UTF-8
location: https://www.londonlockandglass.com/wp-includes/images/w-logo-blue-white-bg.png
x-powered-by: W3 Total Cache/2.3.1
link: <https://www.londonlockandglass.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
set-cookie: SVcRfi-nswapBx=N2maiduH; expires=Sat, 03-Jun-2023 04:26:50 GMT; Max-Age=86400; path=/; secure
VcLQDJ=plQgftex%5DTX9m3; expires=Sat, 03-Jun-2023 04:26:50 GMT; Max-Age=86400; path=/; secure
LWYISEj-Ra=KgCGOwR%5D9BHh; expires=Sat, 03-Jun-2023 04:26:50 GMT; Max-Age=86400; path=/; secure
vary: X-Forwarded-Proto
cache-control: max-age=3600
expires: Fri, 02 Jun 2023 05:26:50 GMT
x-httpd: 1
referrer-policy: no-referrer-when-downgrade
host-header: 6b7412fb82ca5edfd0917e3957f05d89
x-proxy-cache: MISS
x-proxy-cache-info: 0302 NC:000000 UP:SKIP_CACHE_SET_COOKIE
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers