Report - dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=4D6368F454EC41940A4C98A6@AdobeOrg&d_nsid=0&d_mid=69436974516067359574123842252167051553&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&ts=1723179029456

Report Overview

Visited public
2024-09-13 20:55:26
Tags
URL
dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=4D6368F454EC41940A4C98A6@AdobeOrg&d_nsid=0&d_mid=69436974516067359574123842252167051553&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&ts=1723179029456
Finishing URL
dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=4D6368F454EC41940A4C98A6@AdobeOrg&d_nsid=0&d_mid=69436974516067359574123842252167051553&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&ts=1723179029456
IP / ASN
54.72.145.176
#16509 AMAZON-02
Title
dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=4D6368F454EC41940A4C98A6@AdobeOrg&d_nsid=0&d_mid=69436974516067359574123842252167051553&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&ts=1723179029456

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-12 18:12:12	327 B	887 B	23.36.77.32
dpm.demdex.net	204	2008-08-12	2012-05-22 07:45:05	2024-09-12 18:12:22	699 B	942 B	52.17.26.217

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash df2d88b80b39ed651ca6b7ee3465b1c4 1bd6e2288cd500728b6ea8a9ebe97c25aeedc550 604a907a35f947c7cf17c8f09efd5fbd8836864aedc55fbc49b66b8cc95bd089 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "604A907A35F947C7CF17C8F09EFD5FBD8836864AEDC55FBC49B66B8CC95BD089" Last-Modified: Thu, 12 Sep 2024 14:37:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9919 Expires: Fri, 13 Sep 2024 23:40:20 GMT Date: Fri, 13 Sep 2024 20:55:01 GMT Connection: keep-alive`

	dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=4D6368F454EC41940A4C98A6@AdobeOrg&d_nsid=0&d_mid=69436974516067359574123842252167051553&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&ts=1723179029456	52.17.26.217	200 OK	209 B
URL User Request GET HTTP/2 dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=4D6368F454EC41940A4C98A6@AdobeOrg&d_nsid=0&d_mid=69436974516067359574123842252167051553&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&ts=1723179029456 IP 52.17.26.217:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subject.demdex.com Fingerprint93:2B:25:C9:7D:F3:84:F2:B5:D4:6D:94:82:06:BE:AE:41:F8:A4:2D ValidityTue, 26 Sep 2023 00:00:00 GMT - Sat, 26 Oct 2024 23:59:59 GMT File type JSON text data Size 209 B (209 bytes) Hash 659d653c3b500740d7f0947913ae3094 65b1784f8c49362d8b8c58032f35df7e088575a7 946b5ac53f67af3d894d6057453667032679a975df45637b3ba258efac23124d HTTP Headers GET /id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=4D6368F454EC41940A4C98A6@AdobeOrg&d_nsid=0&d_mid=69436974516067359574123842252167051553&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&ts=1723179029456 HTTP/1.1 Host: dpm.demdex.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 13 Sep 2024 20:55:01 GMT content-type: application/json;charset=utf-8 content-length: 209 x-tid: nOHmNxImSaw= strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 UTC p3p: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" dcs: dcs-prod-irl1-2-v065-00a509b9a.edge-irl1.demdex.com 4 ms set-cookie: demdex=51567040503653510934115111433103218534; Max-Age=15552000; Expires=Wed, 12 Mar 2025 20:55:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None content-encoding: gzip X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers