Report - substackcdn.com/image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png

Report Overview

Visited public
2024-08-05 17:19:57
Tags
Submit Tags
URL
substackcdn.com/image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png
Finishing URL
substackcdn.com/image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png
IP / ASN
54.240.174.25
#16509 AMAZON-02
Title
generic-app-button-pt@2x.png (PNG Image, 268 × 80 pixels)

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown				2.3 kB	6.2 kB	23.36.77.32
substackcdn.com	unknown				1.2 kB	9.1 kB	54.240.174.103

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-08-05 17:19:48	high	112.218.68.155	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 084406a853d82fa208410ee4bc78b67c 1c6276ec2e9a0fa10937dc34d821a64633c7d16a 6d567507b5502a9e553e77b519b679e83b3a8a01896731cec08bd1da0699b379 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "6D567507B5502A9E553E77B519B679E83B3A8A01896731CEC08BD1DA0699B379" Last-Modified: Sat, 03 Aug 2024 18:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20705 Expires: Mon, 05 Aug 2024 23:04:37 GMT Date: Mon, 05 Aug 2024 17:19:32 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash addc02313d62bf977d4b5dd463b48637 49b5e37e2888a9db981bd54827c4f4c7b9f7b53a 9b553a61256a129f9c5c31614a702c4f0441a3f018cc2b3897ab2cc16e184eeb HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "9B553A61256A129F9C5C31614A702C4F0441A3F018CC2B3897AB2CC16E184EEB" Last-Modified: Sat, 03 Aug 2024 18:28:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7405 Expires: Mon, 05 Aug 2024 19:22:57 GMT Date: Mon, 05 Aug 2024 17:19:32 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 8bd7201be8d12c4b511d2c5643b45dbc f2ecb2ebafbf4f8d92f92007753001befcedc634 25cb2e6ad29d4503f32121fbe37e2b0f4ce64a7f6cb57233ebf16df5d6b78d53 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "25CB2E6AD29D4503F32121FBE37E2B0F4CE64A7F6CB57233EBF16DF5D6B78D53" Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2770 Expires: Mon, 05 Aug 2024 18:05:42 GMT Date: Mon, 05 Aug 2024 17:19:32 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 3653abf0951eea060f104ae59d60cf7c 75790e8c59cb78c77ab522e7dc7140b62a046bb9 d059eeda67b64dd02259f5a9352df39cc808e3f9e03068a434e0f6486814893d HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "D059EEDA67B64DD02259F5A9352DF39CC808E3F9E03068A434E0F6486814893D" Last-Modified: Sat, 03 Aug 2024 18:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6795 Expires: Mon, 05 Aug 2024 19:12:47 GMT Date: Mon, 05 Aug 2024 17:19:32 GMT Connection: keep-alive`

	GET substackcdn.com/image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png	54.240.174.103	200 OK	2.3 kB
URL User Request GET HTTP/2 substackcdn.com/image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png IP 54.240.174.103:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectsubstackcdn.com Fingerprint45:88:C9:EE:A8:FF:B6:B7:61:94:F4:A5:32:81:96:94:34:AF:B9:47 ValidityTue, 13 Feb 2024 00:00:00 GMT - Thu, 13 Mar 2025 23:59:59 GMT File type PNG image data, 268 x 80, 8-bit/color RGBA, non-interlaced Size 2.3 kB (2288 bytes) Hash 5dba4ad154c4ba89659456a908c948d8 331866914500d192e311a199783778503bdd26cd e0fbe9a7444e059e46f800a2253f5e7f45d35b16e790add41f54da5f8e99567d HTTP Headers GET /image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png HTTP/1.1 Host: substackcdn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: image/png content-length: 2288 date: Sun, 04 Aug 2024 18:13:51 GMT x-powered-by: Express cache-control: public, max-age=0 content-disposition: inline; filename="generic-app-button-pt@2x.png" content-security-policy: script-src 'none' etag: "ezpMiL_OR-mmsV2wkd_I5_I1eGrvP94oQbjywc7Ktfs/RVy8iOGY1LTE5MTFhZGEyMjg4Ig" server: imgproxy x-request-id: 4V0yu5b0dnq1gkxPmAM8l x-cache: Hit from cloudfront via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: HsYDBlh3_EF_vsRPq_SATaMQbGW6g__q7ZGLS7QAPYjPpZKIXuLqbg== age: 83141 X-Firefox-Spdy: h2

	GET substackcdn.com/favicon.ico	54.240.174.103	403 Forbidden	5.7 kB
URL GET HTTP/3 substackcdn.com/favicon.ico IP 54.240.174.103:443 ASN #16509 AMAZON-02 Requested by https://substackcdn.com/image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png Certificate IssuerAmazon Subjectsubstackcdn.com Fingerprint45:88:C9:EE:A8:FF:B6:B7:61:94:F4:A5:32:81:96:94:34:AF:B9:47 ValidityTue, 13 Feb 2024 00:00:00 GMT - Thu, 13 Mar 2025 23:59:59 GMT File type HTML document, ASCII text, with very long lines (4236) Size 5.7 kB (5672 bytes) Hash bca1df02a0628fc70e30b2da04196f86 31e2cb8925ca0919cfac79433ef56153089d144c 0110c2f49d1306a06102917e9303ac55ecf81a1542dce3a6e4fc94df00841213 HTTP Headers GET /favicon.ico HTTP/1.1 Host: substackcdn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://substackcdn.com/image/fetch/w_270,c_limit,f_auto,q_auto:good,fl_progressive:steep/https:/substack.com/img/email/generic-app-button-pt@2x.png Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 403 Forbidden content-type: text/html content-length: 5672 alt-svc: h3=":443"; ma=86400 last-modified: Fri, 03 Feb 2023 22:02:04 GMT etag: "bca1df02a0628fc70e30b2da04196f86" x-amz-error-code: AccessDenied x-amz-error-message: Access Denied date: Mon, 05 Aug 2024 17:19:32 GMT server: AmazonS3 x-cache: Error from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 9FKPyj1Jcj3WcaUWlR3kJV5koUuUDTH7YZ83jUy3Ur-JIyv2soNzKg==`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 78be19d93b8add0d8f3c63b67e490038 2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6 b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726" Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18666 Expires: Mon, 05 Aug 2024 22:30:40 GMT Date: Mon, 05 Aug 2024 17:19:34 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 78be19d93b8add0d8f3c63b67e490038 2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6 b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726" Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18666 Expires: Mon, 05 Aug 2024 22:30:40 GMT Date: Mon, 05 Aug 2024 17:19:34 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 78be19d93b8add0d8f3c63b67e490038 2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6 b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726" Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18666 Expires: Mon, 05 Aug 2024 22:30:40 GMT Date: Mon, 05 Aug 2024 17:19:34 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers