urlquery - report: hrsaedwgzd.duckdns.org/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
r3.o.lencr.org (6)	344	2020-12-02 08:52:13 UTC	2022-10-11 04:25:38 UTC	23.36.76.226
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2022-10-12 05:30:37 UTC	93.184.220.29
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-10-11 04:28:44 UTC	44.237.51.86
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-10-12 04:58:59 UTC	34.120.237.76
js.users.51.la (1)	53024	2012-05-30 15:10:11 UTC	2022-10-12 05:57:23 UTC	103.143.19.103
www.nta.go.jp (1)	0	2022-06-02 22:30:28 UTC	2022-10-12 08:38:10 UTC	54.230.111.115	Domain (nta.go.jp) ranked at: 320855
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-10-11 04:29:03 UTC	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-10-11 04:25:38 UTC	34.117.237.239
hrsaedwgzd.duckdns.org (11)	0	2022-09-26 14:44:52 UTC	2022-10-11 19:10:12 UTC	45.12.138.13	Unknown ranking
ocsp.globalsign.com (3)	2075	2012-05-25 06:20:55 UTC	2022-10-12 04:59:30 UTC	104.18.20.226

Scan Date	Severity	Indicator	Comment
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN
2022-10-11	2	hrsaedwgzd.duckdns.org/	National Tax Agency JAPAN

Scan Date	Severity	Indicator	Comment
2022-10-12	2	hrsaedwgzd.duckdns.org/static/js/jquery-3.3.1.min.js	Phishing
2022-10-12	2	hrsaedwgzd.duckdns.org/static/js/jquery.cookie.js	Phishing
2022-10-12	2	hrsaedwgzd.duckdns.org/	Phishing

Scan Date	Severity	Indicator	Comment
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed
2022-10-12	2	hrsaedwgzd.duckdns.org	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-01-19 00:24:45 +0000	11 - 0 - 9	jmfonhercq.duckdns.org/	45.12.138.13
2023-01-12 10:46:45 +0000	11 - 19 - 9	oytbgsfrff.duckdns.org/	45.12.138.13
2023-01-12 10:46:29 +0000	11 - 19 - 9	orzfmqskxm.duckdns.org/	45.12.138.13
2023-01-09 01:43:41 +0000	11 - 19 - 9	vxhvirunpm.duckdns.org/	45.12.138.13
2023-01-07 18:38:41 +0000	11 - 19 - 9	ftmpnixfws.duckdns.org/	45.12.138.13

Date	UQ / IDS / BL	URL	IP
2023-02-05 11:34:52 +0000	3 - 6 - 1	kahbrkdbfk.duckdns.org/	63.251.217.141
2023-02-05 10:25:39 +0000	0 - 4 - 0	colutpqpwu.duckdns.org/	45.88.168.227
2023-02-05 10:20:16 +0000	0 - 6 - 0	pcuevubpla.duckdns.org/	45.155.42.125
2023-02-05 10:12:30 +0000	0 - 6 - 0	tcfwbwdvhg.duckdns.org/	45.88.168.186
2023-02-05 09:53:57 +0000	3 - 6 - 1	rgntbgodyv.duckdns.org/	141.98.134.169

Date	UQ / IDS / BL	URL	IP
2022-10-12 09:48:05 +0000	12 - 0 - 25	hrsaedwgzd.duckdns.org/	45.12.138.13
2022-09-27 08:29:38 +0000	12 - 0 - 23	hrsaedwgzd.duckdns.org/	45.12.138.13

Date	UQ / IDS / BL	URL	IP
2023-01-22 08:24:34 +0000	30 - 0 - 16	omaalqiion.duckdns.org/	45.12.138.144
2023-01-22 08:21:53 +0000	30 - 0 - 16	myhrkoqavq.duckdns.org/	45.12.138.144
2023-01-21 21:22:12 +0000	30 - 0 - 16	alcsewvqdk.duckdns.org/	45.12.138.144
2023-01-21 20:00:12 +0000	30 - 0 - 16	jiqegntptc.duckdns.org/	45.12.138.144
2023-01-21 18:39:32 +0000	27 - 0 - 15	omaalqiion.duckdns.org/	45.12.138.144

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5495AD212166703DCD1D17D7AA6FF4D1C40E73DFAD703D24F00F60F35BC7D56C" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5866 Expires: Wed, 12 Oct 2022 11:25:40 GMT Date: Wed, 12 Oct 2022 09:47:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e0602913f3d432ffbfaa654440972ee1 Sha1: e5aaf31749e65875fd840091f9a3bba641de413d Sha256: 5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 261932b3f4152958f41400ee3238929090ae97fb2f58d41dcddc5c0a2593f5c1 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4004 Cache-Control: max-age=89403 Date: Wed, 12 Oct 2022 09:47:54 GMT Etag: "634537e1-1d7" Expires: Thu, 13 Oct 2022 10:37:57 GMT Last-Modified: Tue, 11 Oct 2022 09:31:13 GMT Server: ECS (ska/F710) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: b209415a4022eda48f95a2a51130b607 Sha1: 4ed1a623a108787ce4efcdf91030b1e031dcfa99 Sha256: 261932b3f4152958f41400ee3238929090ae97fb2f58d41dcddc5c0a2593f5c1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: a39e0827fa31257562bb681e312ec2944a862e9ad4e568a803f6e09e994a6018 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A39E0827FA31257562BB681E312EC2944A862E9AD4E568A803F6E09E994A6018" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7353 Expires: Wed, 12 Oct 2022 11:50:27 GMT Date: Wed, 12 Oct 2022 09:47:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ceb45134349ef6afcb5b4bb730678041 Sha1: 15dc3ecb18e30e77cd7c694dd237bff9be583e7a Sha256: a39e0827fa31257562bb681e312ec2944a862e9ad4e568a803f6e09e994a6018
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: Cnv5uSQUjE1/+t03y/1IssththdHsdJMwAyPy+PGGIDazio43kZcwOfBsm9jSX6xrfZTPxUCjEQ= x-amz-request-id: DF6ZZRJ4AY184ND8 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Wed, 12 Oct 2022 09:01:13 GMT age: 2801 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Wed, 12 Oct 2022 09:47:54 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4b39e7b6ed6a10ed18d52941676c2ee790fc4b0693c257b337cb97d9b395f3f9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4B39E7B6ED6A10ED18D52941676C2EE790FC4B0693C257B337CB97D9B395F3F9" Last-Modified: Mon, 10 Oct 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21600 Expires: Wed, 12 Oct 2022 15:47:54 GMT Date: Wed, 12 Oct 2022 09:47:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 673cff3b47255c2e85ad533ca72fadef Sha1: fffe13d807acdfdd71c5799bc110ac55b4068035 Sha256: 4b39e7b6ed6a10ed18d52941676c2ee790fc4b0693c257b337cb97d9b395f3f9
GET /static/gs_vk/reset.css HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/gs_vk/reset.css FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: e0e6a4ef211b0c936b3a38abe91cda1ebbbcc4a3c2d8e706ef7a1dc2c55427c3 45.12.138.13 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT content-length: 884 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-374" expires: Wed, 12 Oct 2022 21:47:55 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: CSV text\012- , ASCII text, with CRLF line terminators Size: 884 Md5: a77d6f26781539c015b1b1d84dac9c06 Sha1: 6f9e90a2e3c9f2bcb9337e577150bde1d3a29ccb Sha256: e0e6a4ef211b0c936b3a38abe91cda1ebbbcc4a3c2d8e706ef7a1dc2c55427c3 Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed
GET /static/gs_vk/index.css HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/gs_vk/index.css FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: de36d3e9e989de40ae0bf5252af018ef55fdc0ed938042bdba11147f1127e431 45.12.138.13 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT content-length: 748 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-2ec" expires: Wed, 12 Oct 2022 21:47:55 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 748 Md5: 91692497e479f6cc955e4de6d627a499 Sha1: bb57de5c2d4dafee21f66645d776d3064f4b79bd Sha256: de36d3e9e989de40ae0bf5252af018ef55fdc0ed938042bdba11147f1127e431 Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 93e99055eb4a94f808eed2fac338d6c480047c30a56498b2a65036a7d5bdea04 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6474 Cache-Control: max-age=86809 Date: Wed, 12 Oct 2022 09:47:55 GMT Etag: "6345241a-1d7" Expires: Thu, 13 Oct 2022 09:54:44 GMT Last-Modified: Tue, 11 Oct 2022 08:06:50 GMT Server: ECS (ska/F710) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 34c15fee665f03aab24038618bb2d9a7 Sha1: 6b90ea5a496581b83daf1764938d1db1a5a32bb4 Sha256: 93e99055eb4a94f808eed2fac338d6c480047c30a56498b2a65036a7d5bdea04
GET /static/gs_vk/logo.png HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/gs_vk/logo.png FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: bf1532dfb899554f52b0a98c2870c9a6f19e6abaf74288c6de321813fed91666 45.12.138.13 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT content-length: 2973 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-b9d" expires: Fri, 11 Nov 2022 09:47:55 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 275 x 29, 8-bit/color RGBA, non-interlaced\012- data Size: 2973 Md5: c6d404ecaa7646ff497deaad55392996 Sha1: 1c66c5caf35e3e633d1cb1e09a334362ad11f5fb Sha256: bf1532dfb899554f52b0a98c2870c9a6f19e6abaf74288c6de321813fed91666 Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: fItsNjJYv2OdkU3+cCcyYQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 44.237.51.86 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 44.237.51.86 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: EMG3Njw3rNncf+xOaWVc16BRRdo= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/gs_vk/syozai_icon.png HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/gs_vk/syozai_icon.png FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: 5aa0964ac2cb5cbb5823d166f55495ac12747f3fbf2b56f7d290ac161eb2aead 45.12.138.13 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT content-length: 1297 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-511" expires: Fri, 11 Nov 2022 09:47:55 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 15 x 24, 8-bit/color RGBA, non-interlaced\012- data Size: 1297 Md5: d038e6e8e4472bbcf6e5dac6a23d5a0e Sha1: fce966980cd73b2d732e0081b7e8dc9751db160d Sha256: 5aa0964ac2cb5cbb5823d166f55495ac12747f3fbf2b56f7d290ac161eb2aead Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed
GET /static/gs_vk/index.png HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/gs_vk/index.png FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: c0315642042bbc5f62714e1bf1ee5df4fd567a38745af3c67ff09b025a56efbb 45.12.138.13 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT content-length: 104029 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-1965d" expires: Fri, 11 Nov 2022 09:47:55 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 750x516, components 3\012- data Size: 104029 Md5: 3b288cf2cf8b233a1f459e89dc209d79 Sha1: 08aa186779070d33edbca5dece75e2760dfa4065 Sha256: c0315642042bbc5f62714e1bf1ee5df4fd567a38745af3c67ff09b025a56efbb Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed
GET /static/gs_vk/banner.png HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/gs_vk/banner.png FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: 2fe3b5cadeb4ad9fec7ee39d1f2170c6bb656436597087aa9a582713e53bed75 45.12.138.13 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT content-length: 220877 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-35ecd" expires: Fri, 11 Nov 2022 09:47:55 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 670 x 238, 8-bit/color RGB, non-interlaced\012- data Size: 220877 Md5: 2f987a1099c7a986fa860cf0e80d7b5d Sha1: 0a3e6dfbf3b0e7d361ba9fc088e2ef7805ec0310 Sha256: 2fe3b5cadeb4ad9fec7ee39d1f2170c6bb656436597087aa9a582713e53bed75 Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed
POST /gsgccr3dvtlsca2020 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsgccr3dvtlsca2020 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: f9d2efb6113a4df072d995cd62941664e043e5841c65c7d1c237e217e58bf055 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 12 Oct 2022 09:47:55 GMT Content-Length: 1414 Connection: keep-alive Expires: Sun, 16 Oct 2022 07:37:38 GMT ETag: "e2ed566d3befe550684fa948b583e48b07c82e41" Last-Modified: Wed, 12 Oct 2022 07:37:39 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 1667 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 758eeab94fdfb4ed-OSL --- Additional Info --- Magic: data Size: 1414 Md5: 5c6f47d74b3066c5da84d9c20d7e52b9 Sha1: e2ed566d3befe550684fa948b583e48b07c82e41 Sha256: f9d2efb6113a4df072d995cd62941664e043e5841c65c7d1c237e217e58bf055
GET /21240581.js HTTP/1.1 Host: js.users.51.la User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: js.users.51.la/21240581.js FQDN: js.users.51.la IP: 103.143.19.103 HASH: 07d02a0148b6511022ea5ba02eab78bf74dc6d6540974b4fcc6319d43ef67495 103.143.19.103 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Server: CloudWAF Date: Wed, 12 Oct 2022 09:47:56 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: HWWAFSESID=9bee92a4e57366a31c4; path=/ HWWAFSESTIME=1665568073111; path=/ Cache-Control: max-age=360000 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with very long lines (4898) Size: 2310 Md5: 648d332a1a1b5037f4e0ebc4a16255e5 Sha1: 5238cd54b0126b54bd371267320e9854a1930491 Sha256: 07d02a0148b6511022ea5ba02eab78bf74dc6d6540974b4fcc6319d43ef67495
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406" Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6032 Expires: Wed, 12 Oct 2022 11:28:28 GMT Date: Wed, 12 Oct 2022 09:47:56 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f97cde01f1afd5ed30319169445ec773 Sha1: 1cb25a8da62cdf1f9ab1b2b35d03163037691b33 Sha256: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406" Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6032 Expires: Wed, 12 Oct 2022 11:28:28 GMT Date: Wed, 12 Oct 2022 09:47:56 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f97cde01f1afd5ed30319169445ec773 Sha1: 1cb25a8da62cdf1f9ab1b2b35d03163037691b33 Sha256: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406" Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6032 Expires: Wed, 12 Oct 2022 11:28:28 GMT Date: Wed, 12 Oct 2022 09:47:56 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f97cde01f1afd5ed30319169445ec773 Sha1: 1cb25a8da62cdf1f9ab1b2b35d03163037691b33 Sha256: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
GET /static/js/jquery-3.3.1.min.js HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/js/jquery-3.3.1.min.js FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: 478cb109f9130ea566b5300aec9ad733f961e1961edba78e46fa6b284e222666 45.12.138.13 HTTP/2 200 OK content-type: application/javascript server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT last-modified: Thu, 17 Mar 2022 06:46:08 GMT vary: Accept-Encoding etag: W/"6232d930-1538f" expires: Wed, 12 Oct 2022 21:47:55 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 34609 Md5: 1f887fac8963ab70a297aa4e04685ded Sha1: 25770ee2bcb22639717449b04abff6848327b5b5 Sha256: 478cb109f9130ea566b5300aec9ad733f961e1961edba78e46fa6b284e222666 Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - fortinet: Phishing - quad9: Sinkholed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd963da4f-2224-4a6b-870c-5a00d4eeea55.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d4238fc77feff12cc6b2affe91b69cab59d54432d664b2bcd9fda46b229a46c3 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6391 x-amzn-requestid: e102aa4b-a49b-410a-8e7d-a4b0c199527f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Z3B7fEIEoAMFi2Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6345e37c-166ba51a39a11397074a990c;Sampled=0 x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:24 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: _SU9U-oPxR9eP_v2NEhokLeiaS7pwa-2aoFNCDbD-59eSlCF73r29w== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google date: Tue, 11 Oct 2022 21:48:37 GMT etag: "da11e5b4d9a5f744d41b868ab2b214d4eed5ae61" age: 43159 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6391 Md5: 695b6d44466cc04c8a285331df94e54d Sha1: da11e5b4d9a5f744d41b868ab2b214d4eed5ae61 Sha256: d4238fc77feff12cc6b2affe91b69cab59d54432d664b2bcd9fda46b229a46c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b27843b-6db3-4814-9994-17e045a63aa0.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f6ca02d3b0be808254383577ebf224ab3ca4b30b7d9444a3e2350bab5f32b4ac 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8672 x-amzn-requestid: 047fc0d0-4b2a-4a36-b8b3-84694166b941 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Z3AlJGwPIAMFc6g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6345e153-1c4105347211bfc94955ddd4;Sampled=0 x-amzn-remapped-date: Tue, 11 Oct 2022 21:34:12 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: U2o0vdvzMkBZ_Ctl5xj2BCBPReopRlewWlkYgywFbavP3sjTf99TxQ== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google date: Tue, 11 Oct 2022 21:48:15 GMT age: 43181 etag: "582b175bb7906f1172f0b57ba35bb2b852354191" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8672 Md5: 11e980738145ef210c79c53661250c69 Sha1: 582b175bb7906f1172f0b57ba35bb2b852354191 Sha256: f6ca02d3b0be808254383577ebf224ab3ca4b30b7d9444a3e2350bab5f32b4ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74c4905d-ef25-43db-8882-67009cd34f1a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: cd3724bfc1355b419c46df1259bfa40b4b4517a81bd45a4392d34e22c14a3d6e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3985 x-amzn-requestid: 6da73a65-c346-4040-9a03-63d5d6845adf x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Z1Cr1HeVoAMFubg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-634517e5-34af0c8d6dc8218963b7319c;Sampled=0 x-amzn-remapped-date: Tue, 11 Oct 2022 07:14:45 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: LAjdvQ29NhOnJjwigVkIjb7vx5tCPJPrHOOPmUD5Vh9N45WN4ZZXCg== via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google date: Wed, 12 Oct 2022 07:45:22 GMT age: 7354 etag: "3bbdd5560213e9b49ab7c079c5f2549d68890720" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3985 Md5: eda06240feabfa1b019765fe963c2d9c Sha1: 3bbdd5560213e9b49ab7c079c5f2549d68890720 Sha256: cd3724bfc1355b419c46df1259bfa40b4b4517a81bd45a4392d34e22c14a3d6e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb346a582-22c0-4785-8cff-aa89fd5eefb6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f3d97dd5f258fa504cd4e2274e702126f521e11a903cb23974809563b6f0e9cc 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11116 x-amzn-requestid: 56e8fcb1-77ce-4b86-bc89-d0c68d564539 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Z3AkiGkvoAMFmiA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6345e150-1c5c41db4c614cd766b82ef4;Sampled=0 x-amzn-remapped-date: Tue, 11 Oct 2022 21:34:08 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 0fGlW3iuuVzY6_VMl3MpX9PoqzpY-CoNPlJey79E9_NQXkLj3crcVg== via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google date: Tue, 11 Oct 2022 21:58:41 GMT age: 42555 etag: "918aac143d82bf543ee326bd26a7c256ffb2d7de" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11116 Md5: f42ff23003d006daab01a5317a8231a7 Sha1: 918aac143d82bf543ee326bd26a7c256ffb2d7de Sha256: f3d97dd5f258fa504cd4e2274e702126f521e11a903cb23974809563b6f0e9cc
GET /static/js/jquery.cookie.js HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/js/jquery.cookie.js FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: ed61faceb742dc7ed7d2ab608956857c337ede92bdc4ad11e3d0f6f1bdf6ee47 45.12.138.13 HTTP/2 200 OK content-type: application/javascript server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT last-modified: Thu, 17 Mar 2022 06:46:08 GMT vary: Accept-Encoding etag: W/"6232d930-c31" expires: Wed, 12 Oct 2022 21:47:55 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 13608 Md5: 5042be5364fd39125d7aecdc12f0b41a Sha1: f23950dacd74a5a0f3b0bae4476f5589f08cbd79 Sha256: ed61faceb742dc7ed7d2ab608956857c337ede92bdc4ad11e3d0f6f1bdf6ee47 Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - fortinet: Phishing - quad9: Sinkholed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d2e6a3-fdda-4fcf-8005-616606887def.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 78f7e4cc530967e019ba13b85b5ae9350c80d138a5f3727be81a4b72e5e00491 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9712 x-amzn-requestid: c47fefde-d06c-4c1e-ab92-189808a9b67e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Z3BLOEEsoAMFRyA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6345e247-1dde77920432dd6d0f0736f2;Sampled=0 x-amzn-remapped-date: Tue, 11 Oct 2022 21:38:15 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: huq5TSvB_Bpijd-7dGWX0MSBQCibVRH_w5B53GVY30oAv1TUIU7xJg== via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Tue, 11 Oct 2022 21:48:15 GMT age: 43181 etag: "b90edfbd7f9f5ee0a4d11597c8a9f79f75ff0efb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9712 Md5: 0cb1cec13e512112d85f494c2207dad9 Sha1: b90edfbd7f9f5ee0a4d11597c8a9f79f75ff0efb Sha256: 78f7e4cc530967e019ba13b85b5ae9350c80d138a5f3727be81a4b72e5e00491
POST /gsrsaovsslca2018 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsrsaovsslca2018 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: 0d7d6a1c0a0fcd5af42b7fe7721684eafabc3ebb7952c5f64093fe862a88bff4 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 12 Oct 2022 09:47:56 GMT Content-Length: 1432 Connection: keep-alive Expires: Sun, 16 Oct 2022 08:13:03 GMT ETag: "251978052e3bbd2699005ca5d45dff1f5c02ee11" Last-Modified: Wed, 12 Oct 2022 08:13:04 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 758eeabecfaab4ed-OSL --- Additional Info --- Magic: data Size: 1432 Md5: 8c6cab83cdd29f0870a63a788c171564 Sha1: 251978052e3bbd2699005ca5d45dff1f5c02ee11 Sha256: 0d7d6a1c0a0fcd5af42b7fe7721684eafabc3ebb7952c5f64093fe862a88bff4
GET /favicon.ico HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Cookie: __tins__21240581=%7B%22sid%22%3A%201665568076239%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201665569876239%7D; __51cke__=; __51laig__=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/favicon.ico FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 HASH: 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 45.12.138.13 HTTP/2 404 Not Found content-type: text/html server: nginx date: Wed, 12 Oct 2022 09:47:56 GMT content-length: 146 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 146 Md5: 8eec510e57f5f732fd2cce73df7b73ef Sha1: 3c0af39ecb3753c5fee3b53d063c7286019eac3b Sha256: 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed
GET /template/img/template/headerbackground.jpg HTTP/1.1 Host: www.nta.go.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.nta.go.jp/template/img/template/headerbackground.jpg FQDN: www.nta.go.jp IP: 54.230.111.115 HASH: 9f7bcb50485acc2487f525f5d0d49bf0e3c239ee0150685a621b7e84d67818c7 54.230.111.115 HTTP/2 200 OK content-type: image/jpeg content-length: 29881 server: Apache x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff last-modified: Fri, 30 Mar 2018 05:48:34 GMT accept-ranges: bytes date: Wed, 12 Oct 2022 09:47:56 GMT etag: "74b9-5689aca6dd080" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: fZHLKEQtHzA1NkOWDiCQI3_1ZXF1N8RFnM5daQxgG_BEhhnM7nd9rg== age: 98 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 980x113, components 3\012- data Size: 29881 Md5: e5e2087ec026ba50dceab21313cde200 Sha1: 32528b75731905a34f01e6b4cdf3937f72c4098f Sha256: 9f7bcb50485acc2487f525f5d0d49bf0e3c239ee0150685a621b7e84d67818c7
POST /gsgccr3dvtlsca2020 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsgccr3dvtlsca2020 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: faa071e058477a7d00f4a5f082a55c177f8a3fd7caeba5ed9425c8851cc15b18 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 12 Oct 2022 09:47:57 GMT Content-Length: 1414 Connection: keep-alive Expires: Sun, 16 Oct 2022 06:29:07 GMT ETag: "aecd68d1b0c3cb756ed5a7ea28f9b0c3e61741c6" Last-Modified: Wed, 12 Oct 2022 06:29:08 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 3057 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 758eeac40ec5b4ed-OSL --- Additional Info --- Magic: data Size: 1414 Md5: 56ef92a4333c103e6227556cd2893bcc Sha1: aecd68d1b0c3cb756ed5a7ea28f9b0c3e61741c6 Sha256: faa071e058477a7d00f4a5f082a55c177f8a3fd7caeba5ed9425c8851cc15b18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 0ff68c4572b0eda2ddce4ce76b39cd268dcf5182acdaacb0274c23e2c5f50b3d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12284 x-amzn-requestid: 7df5e0e3-155f-4cfd-b1e1-62310edf4516 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Z3B7JFbxIAMFxnw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6345e37a-0882e1333f26304f1d89c3c9;Sampled=0 x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:22 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: 7WAk09ANiNHmH9U2PMQRQ8WjASq6GKpEw-zsLtg97Y-DedBaEumK5A== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google date: Tue, 11 Oct 2022 21:59:07 GMT age: 42536 etag: "19dd911262d941074183edd995d59abc84a42cd5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12284 Md5: 5a61ea2d6a9b25c5567339c60f503bc6 Sha1: 19dd911262d941074183edd995d59abc84a42cd5 Sha256: 0ff68c4572b0eda2ddce4ce76b39cd268dcf5182acdaacb0274c23e2c5f50b3d
GET / HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: hrsaedwgzd.duckdns.org/ FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 45.12.138.13 HTTP/2 200 OK content-type: text/html server: nginx date: Wed, 12 Oct 2022 09:47:54 GMT last-modified: Thu, 22 Sep 2022 08:30:24 GMT vary: Accept-Encoding etag: W/"632c1d20-f3f" strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - fortinet: Phishing - quad9: Sinkholed
GET /static/gs_vk/public.css HTTP/1.1 Host: hrsaedwgzd.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hrsaedwgzd.duckdns.org/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: hrsaedwgzd.duckdns.org/static/gs_vk/public.css FQDN: hrsaedwgzd.duckdns.org IP: 45.12.138.13 45.12.138.13 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 12 Oct 2022 09:47:55 GMT last-modified: Tue, 09 Aug 2022 08:07:50 GMT vary: Accept-Encoding etag: W/"62f215d6-818" expires: Wed, 12 Oct 2022 21:47:55 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Alerts: urlquery: - DynDNS domain detected Blocklists: - openphish: National Tax Agency JAPAN - quad9: Sinkholed

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "5495AD212166703DCD1D17D7AA6FF4D1C40E73DFAD703D24F00F60F35BC7D56C" 

                                        
                                            
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5866 

                                        
                                            
Expires: Wed, 12 Oct 2022 11:25:40 GMT 

                                        
                                            
Date: Wed, 12 Oct 2022 09:47:54 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    e0602913f3d432ffbfaa654440972ee1

                                                Sha1:   e5aaf31749e65875fd840091f9a3bba641de413d

                                                Sha256: 5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A39E0827FA31257562BB681E312EC2944A862E9AD4E568A803F6E09E994A6018" 

                                        
                                            
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7353 

                                        
                                            
Expires: Wed, 12 Oct 2022 11:50:27 GMT 

                                        
                                            
Date: Wed, 12 Oct 2022 09:47:54 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    ceb45134349ef6afcb5b4bb730678041

                                                Sha1:   15dc3ecb18e30e77cd7c694dd237bff9be583e7a

                                                Sha256: a39e0827fa31257562bb681e312ec2944a862e9ad4e568a803f6e09e994a6018

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 12 Oct 2022 09:47:54 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 6474 

                                        
                                            
Cache-Control: max-age=86809 

                                        
                                            
Date: Wed, 12 Oct 2022 09:47:55 GMT 

                                        
                                            
Etag: "6345241a-1d7" 

                                        
                                            
Expires: Thu, 13 Oct 2022 09:54:44 GMT 

                                        
                                            
Last-Modified: Tue, 11 Oct 2022 08:06:50 GMT 

                                        
                                            
Server: ECS (ska/F710) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    34c15fee665f03aab24038618bb2d9a7

                                                Sha1:   6b90ea5a496581b83daf1764938d1db1a5a32bb4

                                                Sha256: 93e99055eb4a94f808eed2fac338d6c480047c30a56498b2a65036a7d5bdea04

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: fItsNjJYv2OdkU3+cCcyYQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         44.237.51.86

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: EMG3Njw3rNncf+xOaWVc16BRRdo= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 79 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.20.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Wed, 12 Oct 2022 09:47:55 GMT 

                                        
                                            
Content-Length: 1414 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Sun, 16 Oct 2022 07:37:38 GMT 

                                        
                                            
ETag: "e2ed566d3befe550684fa948b583e48b07c82e41" 

                                        
                                            
Last-Modified: Wed, 12 Oct 2022 07:37:39 GMT 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 1667 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 758eeab94fdfb4ed-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1414

                                                Md5:    5c6f47d74b3066c5da84d9c20d7e52b9

                                                Sha1:   e2ed566d3befe550684fa948b583e48b07c82e41

                                                Sha256: f9d2efb6113a4df072d995cd62941664e043e5841c65c7d1c237e217e58bf055

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406" 

                                        
                                            
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6032 

                                        
                                            
Expires: Wed, 12 Oct 2022 11:28:28 GMT 

                                        
                                            
Date: Wed, 12 Oct 2022 09:47:56 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f97cde01f1afd5ed30319169445ec773

                                                Sha1:   1cb25a8da62cdf1f9ab1b2b35d03163037691b33

                                                Sha256: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406" 

                                        
                                            
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6032 

                                        
                                            
Expires: Wed, 12 Oct 2022 11:28:28 GMT 

                                        
                                            
Date: Wed, 12 Oct 2022 09:47:56 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f97cde01f1afd5ed30319169445ec773

                                                Sha1:   1cb25a8da62cdf1f9ab1b2b35d03163037691b33

                                                Sha256: 1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd963da4f-2224-4a6b-870c-5a00d4eeea55.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6391 

                                        
                                            
x-amzn-requestid: e102aa4b-a49b-410a-8e7d-a4b0c199527f 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Z3B7fEIEoAMFi2Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6345e37c-166ba51a39a11397074a990c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:24 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: _SU9U-oPxR9eP_v2NEhokLeiaS7pwa-2aoFNCDbD-59eSlCF73r29w== 

                                        
                                            
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 11 Oct 2022 21:48:37 GMT 

                                        
                                            
etag: "da11e5b4d9a5f744d41b868ab2b214d4eed5ae61" 

                                        
                                            
age: 43159 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6391

                                                Md5:    695b6d44466cc04c8a285331df94e54d

                                                Sha1:   da11e5b4d9a5f744d41b868ab2b214d4eed5ae61

                                                Sha256: d4238fc77feff12cc6b2affe91b69cab59d54432d664b2bcd9fda46b229a46c3

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74c4905d-ef25-43db-8882-67009cd34f1a.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 3985 

                                        
                                            
x-amzn-requestid: 6da73a65-c346-4040-9a03-63d5d6845adf 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Z1Cr1HeVoAMFubg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-634517e5-34af0c8d6dc8218963b7319c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 11 Oct 2022 07:14:45 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: LAjdvQ29NhOnJjwigVkIjb7vx5tCPJPrHOOPmUD5Vh9N45WN4ZZXCg== 

                                        
                                            
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 12 Oct 2022 07:45:22 GMT 

                                        
                                            
age: 7354 

                                        
                                            
etag: "3bbdd5560213e9b49ab7c079c5f2549d68890720" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   3985

                                                Md5:    eda06240feabfa1b019765fe963c2d9c

                                                Sha1:   3bbdd5560213e9b49ab7c079c5f2549d68890720

                                                Sha256: cd3724bfc1355b419c46df1259bfa40b4b4517a81bd45a4392d34e22c14a3d6e

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 79 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.20.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Wed, 12 Oct 2022 09:47:56 GMT 

                                        
                                            
Content-Length: 1432 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Sun, 16 Oct 2022 08:13:03 GMT 

                                        
                                            
ETag: "251978052e3bbd2699005ca5d45dff1f5c02ee11" 

                                        
                                            
Last-Modified: Wed, 12 Oct 2022 08:13:04 GMT 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 758eeabecfaab4ed-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1432

                                                Md5:    8c6cab83cdd29f0870a63a788c171564

                                                Sha1:   251978052e3bbd2699005ca5d45dff1f5c02ee11

                                                Sha256: 0d7d6a1c0a0fcd5af42b7fe7721684eafabc3ebb7952c5f64093fe862a88bff4

                                        
                                            GET /template/img/template/headerbackground.jpg HTTP/1.1 

                                        
                                            
Host: www.nta.go.jp

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://hrsaedwgzd.duckdns.org/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         54.230.111.115

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
content-length: 29881 

                                        
                                            
server: Apache 

                                        
                                            
x-frame-options: SAMEORIGIN 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
last-modified: Fri, 30 Mar 2018 05:48:34 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Wed, 12 Oct 2022 09:47:56 GMT 

                                        
                                            
etag: "74b9-5689aca6dd080" 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: fZHLKEQtHzA1NkOWDiCQI3_1ZXF1N8RFnM5daQxgG_BEhhnM7nd9rg== 

                                        
                                            
age: 98 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 980x113, components 3\012- data

                                                Size:   29881

                                                Md5:    e5e2087ec026ba50dceab21313cde200

                                                Sha1:   32528b75731905a34f01e6b4cdf3937f72c4098f

                                                Sha256: 9f7bcb50485acc2487f525f5d0d49bf0e3c239ee0150685a621b7e84d67818c7

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 12284 

                                        
                                            
x-amzn-requestid: 7df5e0e3-155f-4cfd-b1e1-62310edf4516 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Z3B7JFbxIAMFxnw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6345e37a-0882e1333f26304f1d89c3c9;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:22 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: 7WAk09ANiNHmH9U2PMQRQ8WjASq6GKpEw-zsLtg97Y-DedBaEumK5A== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 11 Oct 2022 21:59:07 GMT 

                                        
                                            
age: 42536 

                                        
                                            
etag: "19dd911262d941074183edd995d59abc84a42cd5" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   12284

                                                Md5:    5a61ea2d6a9b25c5567339c60f503bc6

                                                Sha1:   19dd911262d941074183edd995d59abc84a42cd5

                                                Sha256: 0ff68c4572b0eda2ddce4ce76b39cd268dcf5182acdaacb0274c23e2c5f50b3d

URL	hrsaedwgzd.duckdns.org/
IP	45.12.138.13 (United States)
ASN	#35913 DEDIPATH-LLC
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-10-12 09:48:05 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	25
urlquery alerts	12 DynDNS domain detected
Tags	None

Overview

Domain Summary (10)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.12.138.13

Last 5 reports on ASN: DEDIPATH-LLC

Last 2 reports on domain: hrsaedwgzd.duckdns.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (33)

Overview

Domain Summary (10)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.12.138.13

Last 5 reports on ASN: DEDIPATH-LLC

Last 2 reports on domain: hrsaedwgzd.duckdns.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (33)

Network Intrusion Detection Systems