######################################################################################################################################
=======================================================================================================================================
Hostname 	www.gov.il 	  	ISP 	Tehila Project - Prime Minister Office's
Continent 	Asia 	  	Flag 	
IL
Country 	Israel 	  	Country Code 	IL
Region 	Unknown 	  	Local time 	07 Jan 2020 23:10 IST
City 	Unknown 	  	Postal Code 	Unknown
IP Address 	147.237.0.206 	  	Latitude 	31.5
  	  	  	Longitude 	34.75
======================================================================================================================================
######################################################################################################################################
> www.gov.il
Server:		38.132.106.139
Address:	38.132.106.139#53

Non-authoritative answer:
www.gov.il	canonical name = gov.il.
Name:	gov.il
Address: 147.237.0.206
> 
######################################################################################################################################
[+] Target : www.gov.il

[+] IP Address : 147.237.0.206

[+] Headers :

[+] Cache-Control : private
[+] Content-Type : text/html; charset=utf-8
[+] Content-Encoding : gzip
[+] Vary : Accept-Encoding
[+] Set-Cookie : ASP.NET_SessionId=xobys5jw4vw4pydkfg0opgcu; path=/; HttpOnly, U_Gov_ID=5204a801-2eca-4674-9918-7f77d0b3ae55; expires=Thu, 06-Feb-2020 21:16:01 GMT; path=/, p_hosting=!S+uhRH8WA4svpIl5W83P7gYiG+8SSE8SpuA5MqFHsorvRQ/0pU2dJvJXcfTF4k07Ia5MQ3Qiis/zeQ==; path=/; Httponly; Secure
[+] Content-fid : jJISJz+eoxfQt9pMBzlp+TtkP6BavPbv3Bmu6E+OFpY=
[+] Access-Control-Allow-Origin : https://my.gov.il
[+] X-Frame-Options : SAMEORIGIN
[+] X-Xss-Protection : 1; mode=block
[+] Date : Tue, 07 Jan 2020 21:16:00 GMT
[+] Content-Length : 10058
[+] Strict-Transport-Security : max-age=16070400; includeSubDomains

[+] SSL Certificate Information : 

[+] commonName : www.gov.il
[+] countryName : US
[+] organizationName : DigiCert Inc
[+] organizationalUnitName : www.digicert.com
[+] commonName : Thawte RSA CA 2018
[+] Version : 3
[+] Serial Number : 06DCFF248B3E5454A19E87FD4F26C602
[+] Not Before : Feb 18 00:00:00 2019 GMT
[+] Not After : Mar 23 12:00:00 2021 GMT
[+] OCSP : ('http://status.thawte.com',)
[+] subject Alt Name : (('DNS', 'www.gov.il'), ('DNS', 'www.www.gov.il'))
[+] CA Issuers : ('http://cacerts.thawte.com/ThawteRSACA2018.crt',)
[+] CRL Distribution Points : ('http://cdp.thawte.com/ThawteRSACA2018.crl',)

[+] Whois Lookup : 

[+] NIR : None
[+] ASN Registry : ripencc
[+] ASN : 8867
[+] ASN CIDR : 147.237.0.0/24
[+] ASN Country Code : IL
[+] ASN Date : 2010-02-16
[+] ASN Description : TEHILA-AS, IL
[+] cidr : 147.237.0.0/16
[+] name : IL-GOVT-NET
[+] handle : AT979-RIPE
[+] range : 147.237.0.0 - 147.237.255.255
[+] description : Israeli Government Network
[+] country : IL
[+] state : None
[+] city : None
[+] address : Israel Ministry Of Finance
1 Netanel Lorech st
Jerusalem Israel
[+] postal_code : None
[+] emails : ['abuse@tehila.gov.il', 'report@CERT.gov.il']
[+] created : 1970-01-01T00:00:00Z
[+] updated : 2019-12-04T13:10:10Z

[+] Crawling Target...

[+] Looking for robots.txt........[ Not Found ]
[+] Looking for sitemap.xml.......[ Not Found ]
[+] Extracting CSS Links..........[ 4 ]
[+] Extracting Javascript Links...[ 0 ]
[+] Extracting Internal Links.....[ 3 ]
[+] Extracting External Links.....[ 6 ]
[+] Extracting Images.............[ 0 ]

[+] Total Links Extracted : 13

[+] Dumping Links in /opt/FinalRecon/dumps/www.gov.il.dump
[+] Completed!
#######################################################################################################################################
[i] Scanning Site: https://www.gov.il 



B A S I C   I N F O 
====================


[+] Site Title: 
[+] IP address: 147.237.0.206
[+] Web Server: Could Not Detect
[+] CMS: Could Not Detect 
[+] Cloudflare: Not Detected
[+] Robots File: Could NOT Find robots.txt! 




W H O I S   L O O K U P
========================

	
% The data in the WHOIS database of the .il registry is provided
% by ISOC-IL for information purposes, and to assist persons in 
% obtaining information about or related to a domain name 
% registration record. ISOC-IL does not guarantee its accuracy.
% By submitting a WHOIS query, you agree that you will use this
% Data only for lawful purposes and that, under no circumstances
% will you use this Data to: (1) allow, enable, or otherwise 
% support the transmission of mass unsolicited, commercial 
% advertising or solicitations via e-mail (spam); 
% or  (2) enable high volume, automated, electronic processes that 
% apply to ISOC-IL (or its systems).
% ISOC-IL reserves the right to modify these terms at any time.
% By submitting this query, you agree to abide by this policy.
 
% No data was found to match the request criteria.


% Rights to the data above are restricted by copyright.




G E O  I P  L O O K  U P
=========================

[i] IP Address: 147.237.0.206 
[i] Country: Israel 
[i] State:  
[i] City:  
[i] Latitude: 31.5 
[i] Longitude: 34.75 




H T T P   H E A D E R S
=======================


[i]  HTTP/1.1 302 Found
[i]  Cache-Control: private
[i]  Content-Type: text/html; charset=utf-8
[i]  Location: /error.htm?aspxerrorpath=/
[i]  Content-fid: jJISJz+eoxfQt9pMBzlp+TtkP6BavPbv3Bmu6E+OFpY=
[i]  Set-Cookie: U_Gov_ID=dc46c39b-5235-4a6e-9e79-6ce8de89c39d; expires=Thu, 06-Feb-2020 21:16:29 GMT; path=/
[i]  Access-Control-Allow-Origin: https://my.gov.il
[i]  X-Frame-Options: SAMEORIGIN
[i]  X-Xss-Protection: 1; mode=block
[i]  Date: Tue, 07 Jan 2020 21:16:29 GMT
[i]  Connection: close
[i]  Content-Length: 143
[i]  Set-Cookie: p_hosting=!2LkOaPW7kfz4MCB5W83P7gYiG+8SSJ1fQN4mtcfnETqSmGptis0H3fpQytvKj8HU8sTuo3nKpHaI+A==; path=/; Httponly; Secure
[i]  Strict-Transport-Security: max-age=16070400; includeSubDomains
[i]  HTTP/1.0 404 Not Found
[i]  Content-Type: text/html; charset=UTF-8
[i]  Cache-Control: no-cache
[i]  Pragma: no-cache
[i]  Expires: 0
[i]  Connection: close
[i]  Strict-Transport-Security: max-age=16070400; includeSubDomains




D N S   L O O K U P
===================

gov.il.			599	IN	SOA	dns.gov.il. hostmaster.tehila.gov.il. 2020010704 600 200 604800 3600
gov.il.			599	IN	MX	5 mail.tehila.gov.il.
gov.il.			599	IN	NS	dns3.gov.il.
gov.il.			599	IN	NS	ilns.ilan.net.il.
gov.il.			599	IN	NS	sns-pb.isc.org.
gov.il.			599	IN	NS	nse.ns.il.
gov.il.			599	IN	NS	lookup.iucc.ac.il.
gov.il.			599	IN	NS	ns3.ns.il.
gov.il.			599	IN	NS	ns2.ns.il.
gov.il.			599	IN	NS	nsb.ns.il.
gov.il.			599	IN	NS	ns1.ns.il.
gov.il.			599	IN	NS	ns4.ns.il.
gov.il.			599	IN	NS	nsa.ns.il.
gov.il.			599	IN	A	147.237.0.206
gov.il.			599	IN	TXT	"v=spf1 ip4:147.237.70.0/24 include:inforumail.com ~all"




S U B N E T   C A L C U L A T I O N
====================================

Address       = 147.237.0.206
Network       = 147.237.0.206 / 32
Netmask       = 255.255.255.255
Broadcast     = not needed on Point-to-Point links
Wildcard Mask = 0.0.0.0
Hosts Bits    = 0
Max. Hosts    = 1   (2^0 - 0)
Host Range    = { 147.237.0.206 - 147.237.0.206 }



N M A P   P O R T   S C A N
============================

Starting Nmap 7.70 ( https://nmap.org ) at 2020-01-07 21:16 UTC
Nmap scan report for gov.il (147.237.0.206)
Host is up (0.14s latency).

PORT     STATE    SERVICE
21/tcp   filtered ftp
22/tcp   filtered ssh
23/tcp   filtered telnet
80/tcp   open     http
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     https
3389/tcp filtered ms-wbt-server

Nmap done: 1 IP address (1 host up) scanned in 2.76 seconds



S U B - D O M A I N   F I N D E R
==================================


[i] Total Subdomains Found : 499

[+] Subdomain: e.120.gov.il
[-] IP: 147.237.9.44

[+] Subdomain: www.120.gov.il
[-] IP: 147.237.1.143

[+] Subdomain: votes20.gov.il
[-] IP: 147.237.0.161

[+] Subdomain: www.votes20.gov.il
[-] IP: 147.237.0.161

[+] Subdomain: www.balot20.gov.il
[-] IP: 147.237.8.133

[+] Subdomain: bechirot20.gov.il
[-] IP: 147.237.0.182

[+] Subdomain: e.bechirot20.gov.il
[-] IP: 147.237.8.53

[+] Subdomain: www.bechirot20.gov.il
[-] IP: 147.237.0.182

[+] Subdomain: 70.gov.il
[-] IP: 45.60.23.86

[+] Subdomain: industory70.gov.il
[-] IP: 199.203.209.219

[+] Subdomain: www.industory70.gov.il
[-] IP: 199.203.209.219

[+] Subdomain: bechirot21.gov.il
[-] IP: 147.237.1.60

[+] Subdomain: e.bechirot21.gov.il
[-] IP: 147.237.8.53

[+] Subdomain: search1.gov.il
[-] IP: 147.237.76.69

[+] Subdomain: moin1.gov.il
[-] IP: 147.237.72.116

[+] Subdomain: www.moin1.gov.il
[-] IP: 147.237.72.116

[+] Subdomain: 102.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: mm.102.gov.il
[-] IP: 31.168.39.82

[+] Subdomain: www.102.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: shaam2.gov.il
[-] IP: 147.237.80.4

[+] Subdomain: www.shaam2.gov.il
[-] IP: 147.237.80.4

[+] Subdomain: dns3.gov.il
[-] IP: 62.219.20.20

[+] Subdomain: 105.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: www.105.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: votes-19.gov.il
[-] IP: 147.237.76.160

[+] Subdomain: www.votes-19.gov.il
[-] IP: 147.237.76.160

[+] Subdomain: aa.gov.il
[-] IP: 212.150.73.83

[+] Subdomain: mail.aa.gov.il
[-] IP: 185.163.149.233

[+] Subdomain: caa.gov.il
[-] IP: 185.241.6.35

[+] Subdomain: mrelay1.caa.gov.il
[-] IP: 199.203.58.15

[+] Subdomain: mrelay2.caa.gov.il
[-] IP: 31.154.176.144

[+] Subdomain: ad.caa.gov.il
[-] IP: 185.241.6.35

[+] Subdomain: nsbi.caa.gov.il
[-] IP: 82.81.86.170

[+] Subdomain: en.caa.gov.il
[-] IP: 185.241.6.35

[+] Subdomain: lpnv.caa.gov.il
[-] IP: 199.203.58.98

[+] Subdomain: nsnv.caa.gov.il
[-] IP: 199.203.58.10

[+] Subdomain: www.caa.gov.il
[-] IP: 185.241.6.35

[+] Subdomain: lpiz.caa.gov.il
[-] IP: 31.154.177.250

[+] Subdomain: iaa.gov.il
[-] IP: 45.60.14.127

[+] Subdomain: elaigaia.iaa.gov.il
[-] IP: 192.115.177.166

[+] Subdomain: ford.iaa.gov.il
[-] IP: 192.115.177.253

[+] Subdomain: space.iaa.gov.il
[-] IP: 192.115.177.182

[+] Subdomain: eagle.iaa.gov.il
[-] IP: 192.115.177.1

[+] Subdomain: vcmobile.iaa.gov.il
[-] IP: 192.115.178.20

[+] Subdomain: gaiaelai.iaa.gov.il
[-] IP: 192.115.177.247

[+] Subdomain: roni.iaa.gov.il
[-] IP: 192.115.177.129

[+] Subdomain: dotan.iaa.gov.il
[-] IP: 192.115.177.131

[+] Subdomain: pronto.iaa.gov.il
[-] IP: 192.115.177.151

[+] Subdomain: volvo.iaa.gov.il
[-] IP: 192.115.177.159

[+] Subdomain: ftp.iaa.gov.il
[-] IP: 192.115.178.2

[+] Subdomain: ber.iaa.gov.il
[-] IP: 192.115.178.18

[+] Subdomain: chrysler.iaa.gov.il
[-] IP: 192.115.177.186

[+] Subdomain: autodiscover.iaa.gov.il
[-] IP: 192.115.178.19

[+] Subdomain: paris.iaa.gov.il
[-] IP: 192.115.178.6

[+] Subdomain: bos.iaa.gov.il
[-] IP: 192.115.177.231

[+] Subdomain: albatros.iaa.gov.il
[-] IP: 192.115.178.3

[+] Subdomain: cerberus.iaa.gov.il
[-] IP: 192.115.177.201

[+] Subdomain: petrvs.iaa.gov.il
[-] IP: 192.115.178.19

[+] Subdomain: spacet.iaa.gov.il
[-] IP: 192.115.177.183

[+] Subdomain: ctet.iaa.gov.il
[-] IP: 192.115.177.176

[+] Subdomain: amit.iaa.gov.il
[-] IP: 192.115.178.4

[+] Subdomain: ctit.iaa.gov.il
[-] IP: 192.115.177.176

[+] Subdomain: ingw.iaa.gov.il
[-] IP: 192.115.178.1

[+] Subdomain: swallow.iaa.gov.il
[-] IP: 192.115.178.17

[+] Subdomain: legacy.iaa.gov.il
[-] IP: 192.115.178.19

[+] Subdomain: mail.sheba.gov.il
[-] IP: 91.228.248.11

[+] Subdomain: piba.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: e.piba.gov.il
[-] IP: 147.237.77.172

[+] Subdomain: www.piba.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: eca.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: public.eca.gov.il
[-] IP: 199.203.213.152

[+] Subdomain: archive.eca.gov.il
[-] IP: 147.237.77.230

[+] Subdomain: mgk.eca.gov.il
[-] IP: 147.237.1.224

[+] Subdomain: mail.eca.gov.il
[-] IP: 199.203.213.145

[+] Subdomain: forum.eca.gov.il
[-] IP: 147.237.8.75

[+] Subdomain: ica.gov.il
[-] IP: 147.237.1.132

[+] Subdomain: www.ica.gov.il
[-] IP: 147.237.1.132

[+] Subdomain: jda.gov.il
[-] IP: 194.90.203.41

[+] Subdomain: web.jda.gov.il
[-] IP: 62.219.225.18

[+] Subdomain: www.golda.gov.il
[-] IP: 147.237.72.227

[+] Subdomain: mda.gov.il
[-] IP: 147.237.1.63

[+] Subdomain: antisemitism.mda.gov.il
[-] IP: 82.166.39.220

[+] Subdomain: www.mda.gov.il
[-] IP: 147.237.1.63

[+] Subdomain: mail.mpda.gov.il
[-] IP: 147.237.73.205

[+] Subdomain: energy-sea.gov.il
[-] IP: 147.237.1.109

[+] Subdomain: www.energy-sea.gov.il
[-] IP: 147.237.1.109

[+] Subdomain: mfa.gov.il
[-] IP: 147.237.76.106

[+] Subdomain: www.israel-mfa.gov.il
[-] IP: 147.237.72.235

[+] Subdomain: imsva01.mfa.gov.il
[-] IP: 192.115.203.155

[+] Subdomain: mailrt1.mfa.gov.il
[-] IP: 82.166.162.225

[+] Subdomain: imsva02.mfa.gov.il
[-] IP: 192.115.203.151

[+] Subdomain: mailrt2.mfa.gov.il
[-] IP: 82.166.162.227

[+] Subdomain: addisababa.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: canada.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: luanda.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: riga.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: sofia.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: philadelphia.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: brasilia.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: pretoria.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: nicosia.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: abuja.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: guatemala.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: manila.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: panama.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: lima.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: roma.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: astana.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: vienna.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: ankara.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: canberra.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: atlanta.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: bogota.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: bratislava.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: geneva.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: ottawa.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: zagreb.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: vic.mfa.gov.il
[-] IP: 147.237.77.135

[+] Subdomain: matc.mfa.gov.il
[-] IP: 147.237.1.253

[+] Subdomain: e.matc.mfa.gov.il
[-] IP: 147.237.9.183

[+] Subdomain: mctc.mfa.gov.il
[-] IP: 147.237.2.58

[+] Subdomain: e.mctc.mfa.gov.il
[-] IP: 147.237.9.185

[+] Subdomain: metc.mfa.gov.il
[-] IP: 147.237.2.94

[+] Subdomain: e.metc.mfa.gov.il
[-] IP: 147.237.9.184

[+] Subdomain: e.mfa.gov.il
[-] IP: 147.237.76.105

[+] Subdomain: belgrade.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: yaounde.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: rome.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: ukraine.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: singapore.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: sanjose.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: hague.mfa.gov.il
[-] IP: 212.143.236.4

[+] Subdomain: thehague.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: prague.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: beijing.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: hongkong.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: mumbai.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: shanghai.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: nairobi.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: delhi.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: helsinki.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: miami.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: hanoi.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: tbilisi.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: bangkok.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: newyork.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: montreal.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: ddconfisrael.mfa.gov.il
[-] IP: 147.237.1.150

[+] Subdomain: mail.mfa.gov.il
[-] IP: 82.166.162.226

[+] Subdomain: istanbul.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: seoul.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: stockholm.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: vatican.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: abidjan.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: amman.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: copenhagen.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: dublin.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: berlin.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: www.berlin.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: lisbon.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: london.mfa.gov.il
[-] IP: 94.76.203.102

[+] Subdomain: yangon.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: washington.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: wellington.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: boston.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: houston.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: bern.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: israel-un.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: sanfrancisco.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: montevideo.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: chicago.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: santiago.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: santodomingo.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: oslo.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: www.oslo.mfa.gov.il
[-] IP: 212.143.236.4

[+] Subdomain: quito.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: toronto.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: tokyo.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: dakar.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: sansalvador.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: buenosaires.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: paris.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: brussels.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: athens.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: e.moments.mfa.gov.il
[-] IP: 147.237.9.55

[+] Subdomain: e.cadet.mfa.gov.il
[-] IP: 147.237.77.116

[+] Subdomain: tashkent.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: consularappointment.mfa.gov.il
[-] IP: 147.237.1.226

[+] Subdomain: mailrt.mfa.gov.il
[-] IP: 82.166.162.226

[+] Subdomain: budapest.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: bucharest.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: kathmandu.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: eu.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: baku.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: guangzhou.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: mashav.mfa.gov.il
[-] IP: 147.237.76.106

[+] Subdomain: www.mashav.mfa.gov.il
[-] IP: 147.237.76.106

[+] Subdomain: kiev.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: warsaw.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: new.mfa.gov.il
[-] IP: 147.237.76.106

[+] Subdomain: moscow.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: www.mfa.gov.il
[-] IP: 147.237.76.106

[+] Subdomain: bombay.mfa.gov.il
[-] IP: 212.143.236.4

[+] Subdomain: yoursay.mfa.gov.il
[-] IP: 23.102.153.48

[+] Subdomain: survey.mfa.gov.il
[-] IP: 147.237.1.170

[+] Subdomain: mexico-city.mfa.gov.il
[-] IP: 147.237.76.32

[+] Subdomain: mofa.gov.il
[-] IP: 194.90.0.9

[+] Subdomain: mail.mofa.gov.il
[-] IP: 82.166.162.226

[+] Subdomain: 118revacha.gov.il
[-] IP: 212.235.14.160

[+] Subdomain: www.118revacha.gov.il
[-] IP: 212.235.14.160

[+] Subdomain: midrasha.gov.il
[-] IP: 147.237.1.82

[+] Subdomain: www.midrasha.gov.il
[-] IP: 147.237.1.82

[+] Subdomain: votes20-media.gov.il
[-] IP: 147.237.0.175

[+] Subdomain: www.votes20-media.gov.il
[-] IP: 147.237.0.175

[+] Subdomain: moia.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: old.moia.gov.il
[-] IP: 147.237.72.234

[+] Subdomain: e.moia.gov.il
[-] IP: 147.237.76.46

[+] Subdomain: archive.moia.gov.il
[-] IP: 147.237.76.51

[+] Subdomain: dynamiclogin.moia.gov.il
[-] IP: 147.237.76.143

[+] Subdomain: return.moia.gov.il
[-] IP: 147.237.76.143

[+] Subdomain: app.moia.gov.il
[-] IP: 147.237.72.192

[+] Subdomain: dynamicforms.moia.gov.il
[-] IP: 147.237.76.143

[+] Subdomain: contactus.moia.gov.il
[-] IP: 147.237.76.143

[+] Subdomain: account.moia.gov.il
[-] IP: 147.237.76.143

[+] Subdomain: test.account.moia.gov.il
[-] IP: 147.237.76.144

[+] Subdomain: hebrew.moia.gov.il
[-] IP: 147.237.77.140

[+] Subdomain: updatehebrew.moia.gov.il
[-] IP: 147.237.77.141

[+] Subdomain: www.moia.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: huka.gov.il
[-] IP: 212.235.5.230

[+] Subdomain: taasuka.gov.il
[-] IP: 54.164.196.81

[+] Subdomain: e.taasuka.gov.il
[-] IP: 147.237.77.133

[+] Subdomain: old.meshel.taasuka.gov.il
[-] IP: 147.237.72.131

[+] Subdomain: t.meshel.taasuka.gov.il
[-] IP: 147.237.76.64

[+] Subdomain: vpn.taasuka.gov.il
[-] IP: 109.226.20.98

[+] Subdomain: t.taasuka.gov.il
[-] IP: 147.237.76.60

[+] Subdomain: et.taasuka.gov.il
[-] IP: 147.237.76.63

[+] Subdomain: outmail-10.tehila.gov.il
[-] IP: 147.237.70.203

[+] Subdomain: e.mini10.tehila.gov.il
[-] IP: 147.237.8.244

[+] Subdomain: outmail-20.tehila.gov.il
[-] IP: 147.237.70.204

[+] Subdomain: outmail-30.tehila.gov.il
[-] IP: 147.237.70.205

[+] Subdomain: outmail-40.tehila.gov.il
[-] IP: 147.237.70.206

[+] Subdomain: outmail-1.tehila.gov.il
[-] IP: 147.237.70.201

[+] Subdomain: e.mini11.tehila.gov.il
[-] IP: 147.237.8.245

[+] Subdomain: e.mini21.tehila.gov.il
[-] IP: 147.237.9.8

[+] Subdomain: e.mini31.tehila.gov.il
[-] IP: 147.237.9.33

[+] Subdomain: outmail-2.tehila.gov.il
[-] IP: 147.237.70.202

[+] Subdomain: e.mini12.tehila.gov.il
[-] IP: 147.237.8.246

[+] Subdomain: e.mini2.tehila.gov.il
[-] IP: 147.237.8.202

[+] Subdomain: e.mini13.tehila.gov.il
[-] IP: 147.237.8.247

[+] Subdomain: e.mini3.tehila.gov.il
[-] IP: 147.237.8.203

[+] Subdomain: e.mini14.tehila.gov.il
[-] IP: 147.237.8.248

[+] Subdomain: e.mini4.tehila.gov.il
[-] IP: 147.237.8.204

[+] Subdomain: e.mini15.tehila.gov.il
[-] IP: 147.237.9.2

[+] Subdomain: e.mini5.tehila.gov.il
[-] IP: 147.237.8.205

[+] Subdomain: e.mini26.tehila.gov.il
[-] IP: 147.237.9.28

[+] Subdomain: e.mini6.tehila.gov.il
[-] IP: 147.237.8.206

[+] Subdomain: e.mini7.tehila.gov.il
[-] IP: 147.237.8.207

[+] Subdomain: e.mini8.tehila.gov.il
[-] IP: 147.237.8.242

[+] Subdomain: e.mini19.tehila.gov.il
[-] IP: 147.237.9.6

[+] Subdomain: e.mini9.tehila.gov.il
[-] IP: 147.237.8.243

[+] Subdomain: sa.tehila.gov.il
[-] IP: 147.237.74.10

[+] Subdomain: smartcard.tehila.gov.il
[-] IP: 147.237.72.54

[+] Subdomain: e.tehila.gov.il
[-] IP: 147.237.77.51

[+] Subdomain: www.mobile.tehila.gov.il
[-] IP: 147.237.74.106

[+] Subdomain: msense.tehila.gov.il
[-] IP: 147.237.1.62

[+] Subdomain: listmng.tehila.gov.il
[-] IP: 147.237.77.31

[+] Subdomain: watch.tehila.gov.il
[-] IP: 147.237.73.254

[+] Subdomain: tlush.tehila.gov.il
[-] IP: 147.237.77.28

[+] Subdomain: mail.tehila.gov.il
[-] IP: 147.237.71.125

[+] Subdomain: outmail.tehila.gov.il
[-] IP: 147.237.70.200

[+] Subdomain: sca.voucher.ecom.tehila.gov.il
[-] IP: 147.237.8.22

[+] Subdomain: test.sca.voucher.ecom.tehila.gov.il
[-] IP: 147.237.72.143

[+] Subdomain: sca.counter.ecom.tehila.gov.il
[-] IP: 147.237.8.21

[+] Subdomain: test.sca.counter.ecom.tehila.gov.il
[-] IP: 147.237.72.132

[+] Subdomain: agmon.tehila.gov.il
[-] IP: 147.237.77.115

[+] Subdomain: e.agmon.tehila.gov.il
[-] IP: 147.237.77.114

[+] Subdomain: et.agmon.tehila.gov.il
[-] IP: 147.237.8.136

[+] Subdomain: sca.geo.tehila.gov.il
[-] IP: 147.237.8.20

[+] Subdomain: sso-s.tehila.gov.il
[-] IP: 147.237.76.189

[+] Subdomain: edns.tehila.gov.il
[-] IP: 147.237.71.1

[+] Subdomain: stats.tehila.gov.il
[-] IP: 147.237.77.199

[+] Subdomain: t-stats.tehila.gov.il
[-] IP: 147.237.76.140

[+] Subdomain: vstats.tehila.gov.il
[-] IP: 147.237.76.130

[+] Subdomain: m.vstats.tehila.gov.il
[-] IP: 147.237.0.183

[+] Subdomain: list.tehila.gov.il
[-] IP: 147.237.71.100

[+] Subdomain: maillist.tehila.gov.il
[-] IP: 147.237.77.30

[+] Subdomain: sfe-ext.tehila.gov.il
[-] IP: 147.237.76.195

[+] Subdomain: cma.gov.il
[-] IP: 147.237.0.8

[+] Subdomain: dira.cma.gov.il
[-] IP: 147.237.2.130

[+] Subdomain: insurancedata.cma.gov.il
[-] IP: 147.237.2.134

[+] Subdomain: harb.cma.gov.il
[-] IP: 147.237.1.188

[+] Subdomain: www.harb.cma.gov.il
[-] IP: 147.237.1.188

[+] Subdomain: life.cma.gov.il
[-] IP: 147.237.2.133

[+] Subdomain: pe.cma.gov.il
[-] IP: 147.237.1.37

[+] Subdomain: www.pe.cma.gov.il
[-] IP: 147.237.1.37

[+] Subdomain: fsl.cma.gov.il
[-] IP: 147.237.1.236

[+] Subdomain: nihul.cma.gov.il
[-] IP: 147.237.2.105

[+] Subdomain: contactinfo.cma.gov.il
[-] IP: 147.237.2.137

[+] Subdomain: employersinfocmp.cma.gov.il
[-] IP: 147.237.2.89

[+] Subdomain: car.cma.gov.il
[-] IP: 147.237.2.101

[+] Subdomain: pensyanet.cma.gov.il
[-] IP: 147.237.1.182

[+] Subdomain: bituachnet.cma.gov.il
[-] IP: 147.237.2.22

[+] Subdomain: gemelnet.cma.gov.il
[-] IP: 147.237.2.30

[+] Subdomain: agent.cma.gov.il
[-] IP: 147.237.0.138

[+] Subdomain: www.agent.cma.gov.il
[-] IP: 147.237.0.138

[+] Subdomain: otot.cma.gov.il
[-] IP: 147.237.10.136

[+] Subdomain: briut.cma.gov.il
[-] IP: 147.237.2.131

[+] Subdomain: www.tipa.gov.il
[-] IP: 213.8.142.72

[+] Subdomain: ashra.gov.il
[-] IP: 45.60.34.1

[+] Subdomain: owa.ashra.gov.il
[-] IP: 81.218.107.92

[+] Subdomain: mail.ashra.gov.il
[-] IP: 81.218.107.91

[+] Subdomain: dira.gov.il
[-] IP: 147.237.1.108

[+] Subdomain: www.dira.gov.il
[-] IP: 147.237.1.108

[+] Subdomain: mra.gov.il
[-] IP: 147.237.0.22

[+] Subdomain: www.mra.gov.il
[-] IP: 147.237.0.22

[+] Subdomain: govextra.gov.il
[-] IP: 147.237.2.206

[+] Subdomain: ncsa.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: www.ncsa.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: ns1.isa.gov.il
[-] IP: 194.90.36.211

[+] Subdomain: ns2.isa.gov.il
[-] IP: 212.68.130.212

[+] Subdomain: traveler03.isa.gov.il
[-] IP: 82.166.76.91

[+] Subdomain: mx013.isa.gov.il
[-] IP: 212.150.186.99

[+] Subdomain: traveler04.isa.gov.il
[-] IP: 82.166.76.93

[+] Subdomain: ns1.magna.isa.gov.il
[-] IP: 194.90.36.211

[+] Subdomain: ns2.magna.isa.gov.il
[-] IP: 212.68.130.212

[+] Subdomain: filing.magna.isa.gov.il
[-] IP: 194.90.36.201

[+] Subdomain: install.magna.isa.gov.il
[-] IP: 194.90.36.206

[+] Subdomain: tofes.magna.isa.gov.il
[-] IP: 194.90.36.204

[+] Subdomain: infodist.magna.isa.gov.il
[-] IP: 194.90.36.203

[+] Subdomain: www.magna.isa.gov.il
[-] IP: 194.90.36.202

[+] Subdomain: filing.drpmagna.isa.gov.il
[-] IP: 62.0.37.2

[+] Subdomain: infodist.drpmagna.isa.gov.il
[-] IP: 62.0.37.3

[+] Subdomain: www.drpmagna.isa.gov.il
[-] IP: 62.0.37.5

[+] Subdomain: rne.isa.gov.il
[-] IP: 62.0.37.10

[+] Subdomain: yael.isa.gov.il
[-] IP: 194.90.36.197

[+] Subdomain: install.yael.isa.gov.il
[-] IP: 194.90.36.198

[+] Subdomain: drpyael.isa.gov.il
[-] IP: 62.0.37.8

[+] Subdomain: ssltel.isa.gov.il
[-] IP: 82.166.76.94

[+] Subdomain: mxtel.isa.gov.il
[-] IP: 82.166.76.93

[+] Subdomain: ssl.isa.gov.il
[-] IP: 212.143.90.170

[+] Subdomain: votes.isa.gov.il
[-] IP: 194.90.36.195

[+] Subdomain: drpvotes.isa.gov.il
[-] IP: 62.0.37.7

[+] Subdomain: isaexams.isa.gov.il
[-] IP: 194.90.36.205

[+] Subdomain: mailout.isa.gov.il
[-] IP: 212.143.90.172

[+] Subdomain: www.isa.gov.il
[-] IP: 194.90.36.207

[+] Subdomain: bugsbunny.isa.gov.il
[-] IP: 212.143.90.174

[+] Subdomain: molsa.gov.il
[-] IP: 147.237.77.130

[+] Subdomain: dc.molsa.gov.il
[-] IP: 147.237.8.212

[+] Subdomain: e.molsa.gov.il
[-] IP: 147.237.77.129

[+] Subdomain: moodle.molsa.gov.il
[-] IP: 192.115.99.206

[+] Subdomain: raf.molsa.gov.il
[-] IP: 147.237.8.214

[+] Subdomain: meser.molsa.gov.il
[-] IP: 147.237.8.213

[+] Subdomain: employment.molsa.gov.il
[-] IP: 147.237.1.232

[+] Subdomain: e.employment.molsa.gov.il
[-] IP: 147.237.9.94

[+] Subdomain: kehilot.molsa.gov.il
[-] IP: 147.237.72.135

[+] Subdomain: www.kehilot.molsa.gov.il
[-] IP: 147.237.72.135

[+] Subdomain: mosa.gov.il
[-] IP: 147.237.77.130

[+] Subdomain: 360.mosa.gov.il
[-] IP: 147.237.0.136

[+] Subdomain: p.raf.mosa.gov.il
[-] IP: 147.237.72.147

[+] Subdomain: www.tami.mosa.gov.il
[-] IP: 147.237.77.180

[+] Subdomain: surveysadmin.mosa.gov.il
[-] IP: 147.237.77.207

[+] Subdomain: ws.mosa.gov.il
[-] IP: 147.237.77.7

[+] Subdomain: t.ws.mosa.gov.il
[-] IP: 147.237.72.144

[+] Subdomain: t.it.mosa.gov.il
[-] IP: 147.237.8.221

[+] Subdomain: www.it.mosa.gov.il
[-] IP: 147.237.76.141

[+] Subdomain: eplacement.mosa.gov.il
[-] IP: 147.237.9.81

[+] Subdomain: kehilot.mosa.gov.il
[-] IP: 147.237.72.135

[+] Subdomain: www.mosa.gov.il
[-] IP: 147.237.77.130

[+] Subdomain: rsa.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: e.rsa.gov.il
[-] IP: 147.237.76.48

[+] Subdomain: data.gov.il
[-] IP: 35.186.245.19

[+] Subdomain: e.data.gov.il
[-] IP: 35.227.231.125

[+] Subdomain: ims.data.gov.il
[-] IP: 147.237.0.119

[+] Subdomain: t.data.gov.il
[-] IP: 34.96.115.158

[+] Subdomain: new.data.gov.il
[-] IP: 147.237.0.26

[+] Subdomain: www.data.gov.il
[-] IP: 35.186.245.19

[+] Subdomain: metadata.gov.il
[-] IP: 147.237.1.94

[+] Subdomain: registered.metadata.gov.il
[-] IP: 147.237.8.186

[+] Subdomain: klita.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: ua.gov.il
[-] IP: 147.237.2.178

[+] Subdomain: pua.gov.il
[-] IP: 147.237.0.62

[+] Subdomain: mail.pua.gov.il
[-] IP: 213.8.71.150

[+] Subdomain: www.pua.gov.il
[-] IP: 147.237.0.62

[+] Subdomain: sviva.gov.il
[-] IP: 147.237.77.18

[+] Subdomain: arabic.sviva.gov.il
[-] IP: 147.237.77.18

[+] Subdomain: moe-sync.sviva.gov.il
[-] IP: 82.102.145.186

[+] Subdomain: e.sviva.gov.il
[-] IP: 147.237.77.248

[+] Subdomain: greenlicensing.sviva.gov.il
[-] IP: 23.102.153.48

[+] Subdomain: www.greenlicensing.sviva.gov.il
[-] IP: 23.102.153.48

[+] Subdomain: english.sviva.gov.il
[-] IP: 147.237.72.129

[+] Subdomain: analytics.sviva.gov.il
[-] IP: 147.237.1.56

[+] Subdomain: www.sviva.gov.il
[-] IP: 147.237.77.18

[+] Subdomain: yoursay.sviva.gov.il
[-] IP: 23.102.153.48

[+] Subdomain: rab.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: vpn.rab.gov.il
[-] IP: 82.81.97.152

[+] Subdomain: www.rab.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: biodb.gov.il
[-] IP: 147.237.76.216

[+] Subdomain: e.biodb.gov.il
[-] IP: 147.237.76.215

[+] Subdomain: www.biodb.gov.il
[-] IP: 147.237.76.216

[+] Subdomain: gpophotoheb.gov.il
[-] IP: 147.237.77.58

[+] Subdomain: wlb.gov.il
[-] IP: 147.237.1.100

[+] Subdomain: rachelstomb.gov.il
[-] IP: 62.219.50.120

[+] Subdomain: esb.gov.il
[-] IP: 147.237.0.72

[+] Subdomain: elections.esb.gov.il
[-] IP: 147.237.0.163

[+] Subdomain: test.esb.gov.il
[-] IP: 147.237.0.73

[+] Subdomain: www.esb.gov.il
[-] IP: 147.237.0.72

[+] Subdomain: israc.gov.il
[-] IP: 82.166.151.112

[+] Subdomain: www2.israc.gov.il
[-] IP: 212.179.115.120

[+] Subdomain: www.israc.gov.il
[-] IP: 82.166.151.112

[+] Subdomain: tac.gov.il
[-] IP: 147.237.0.248

[+] Subdomain: www.tac.gov.il
[-] IP: 147.237.0.248

[+] Subdomain: rbc.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: e.rbc.gov.il
[-] IP: 147.237.77.127

[+] Subdomain: archive.rbc.gov.il
[-] IP: 147.237.77.128

[+] Subdomain: sides.rbc.gov.il
[-] IP: 147.237.76.58

[+] Subdomain: adfs.rbc.gov.il
[-] IP: 10.67.136.16

[+] Subdomain: sts.rbc.gov.il
[-] IP: 46.16.143.144

[+] Subdomain: esgbridge1.soreq-ndc.gov.il
[-] IP: 192.115.64.251

[+] Subdomain: mailsq1.soreq-ndc.gov.il
[-] IP: 192.115.64.251

[+] Subdomain: analysis1.soreq-ndc.gov.il
[-] IP: 192.115.64.38

[+] Subdomain: web-bb.soreq-ndc.gov.il
[-] IP: 192.115.64.54

[+] Subdomain: linux-bb.soreq-ndc.gov.il
[-] IP: 192.115.64.36

[+] Subdomain: db.soreq-ndc.gov.il
[-] IP: 192.115.64.50

[+] Subdomain: web.soreq-ndc.gov.il
[-] IP: 192.115.64.12

[+] Subdomain: ndc.soreq-ndc.gov.il
[-] IP: 192.115.64.2

[+] Subdomain: esgbridge.soreq-ndc.gov.il
[-] IP: 192.115.64.252

[+] Subdomain: yochai.soreq-ndc.gov.il
[-] IP: 192.115.64.65

[+] Subdomain: vpn.soreq-ndc.gov.il
[-] IP: 192.115.64.250

[+] Subdomain: ftp.soreq-ndc.gov.il
[-] IP: 192.115.64.1

[+] Subdomain: rabbitmq.soreq-ndc.gov.il
[-] IP: 192.115.64.15

[+] Subdomain: togasrq.soreq-ndc.gov.il
[-] IP: 192.115.64.85

[+] Subdomain: mailsq.soreq-ndc.gov.il
[-] IP: 192.115.64.252

[+] Subdomain: router.soreq-ndc.gov.il
[-] IP: 192.115.64.254

[+] Subdomain: ncs.soreq-ndc.gov.il
[-] IP: 192.115.64.6

[+] Subdomain: analysis.soreq-ndc.gov.il
[-] IP: 192.115.64.8

[+] Subdomain: ns.soreq-ndc.gov.il
[-] IP: 192.115.64.1

[+] Subdomain: yochai-w.soreq-ndc.gov.il
[-] IP: 192.115.64.75

[+] Subdomain: ndcx.soreq-ndc.gov.il
[-] IP: 192.115.64.4

[+] Subdomain: postfix.soreq-ndc.gov.il
[-] IP: 192.115.64.10

[+] Subdomain: iaec.gov.il
[-] IP: 147.237.77.184

[+] Subdomain: www.iaec.gov.il
[-] IP: 147.237.77.184

[+] Subdomain: plc.gov.il
[-] IP: 147.237.0.95

[+] Subdomain: e.plc.gov.il
[-] IP: 147.237.8.95

[+] Subdomain: bmc.gov.il
[-] IP: 62.90.118.191

[+] Subdomain: mgs.bmc.gov.il
[-] IP: 192.115.99.163

[+] Subdomain: login.mgs.bmc.gov.il
[-] IP: 192.115.99.163

[+] Subdomain: www.bmc.gov.il
[-] IP: 62.90.118.191

[+] Subdomain: maila.gmc.gov.il
[-] IP: 212.179.254.180

[+] Subdomain: mailb.gmc.gov.il
[-] IP: 212.179.254.181

[+] Subdomain: remote.gmc.gov.il
[-] IP: 212.179.254.175

[+] Subdomain: seg.gmc.gov.il
[-] IP: 212.179.254.170

[+] Subdomain: mymail.gmc.gov.il
[-] IP: 212.179.254.187

[+] Subdomain: awm.gmc.gov.il
[-] IP: 212.179.254.171

[+] Subdomain: myfiles.gmc.gov.il
[-] IP: 212.179.254.172

[+] Subdomain: mail.pmc.gov.il
[-] IP: 212.179.54.35

[+] Subdomain: tlvmc.gov.il
[-] IP: 192.115.163.124

[+] Subdomain: mx2.tlvmc.gov.il
[-] IP: 192.115.163.125

[+] Subdomain: www.tlvmc.gov.il
[-] IP: 192.115.163.124

[+] Subdomain: mail-relay.tlvmc.gov.il
[-] IP: 192.115.163.126

[+] Subdomain: mail.wmc.gov.il
[-] IP: 31.168.96.225

[+] Subdomain: vpn.wmc.gov.il
[-] IP: 31.168.96.231

[+] Subdomain: hymc.gov.il
[-] IP: 62.90.118.183

[+] Subdomain: hymc-mail.hymc.gov.il
[-] IP: 147.234.17.35

[+] Subdomain: moc.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: mocj1.moc.gov.il
[-] IP: 62.219.94.3

[+] Subdomain: archive.moc.gov.il
[-] IP: 82.80.47.97

[+] Subdomain: admin.moc.gov.il
[-] IP: 82.80.47.97

[+] Subdomain: www.moc.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: dns.ladpc.gov.il
[-] IP: 147.236.237.2

[+] Subdomain: server11.mrc.gov.il
[-] IP: 147.237.76.237

[+] Subdomain: server1.mrc.gov.il
[-] IP: 147.237.76.234

[+] Subdomain: server12.mrc.gov.il
[-] IP: 147.237.76.238

[+] Subdomain: server2.mrc.gov.il
[-] IP: 147.237.76.235

[+] Subdomain: server13.mrc.gov.il
[-] IP: 147.237.8.113

[+] Subdomain: server3.mrc.gov.il
[-] IP: 147.237.8.112

[+] Subdomain: server14.mrc.gov.il
[-] IP: 147.237.1.174

[+] Subdomain: server4.mrc.gov.il
[-] IP: 147.237.1.175

[+] Subdomain: mrp.mrc.gov.il
[-] IP: 147.237.76.233

[+] Subdomain: mrq.mrc.gov.il
[-] IP: 147.237.76.236

[+] Subdomain: mr.mrc.gov.il
[-] IP: 147.237.2.189

[+] Subdomain: ejobs.mrc.gov.il
[-] IP: 147.237.0.237

[+] Subdomain: morc.gov.il
[-] IP: 147.237.1.91

[+] Subdomain: www.morc.gov.il
[-] IP: 147.237.1.91

[+] Subdomain: csc.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: e.csc.gov.il
[-] IP: 147.237.76.133

[+] Subdomain: 4future.csc.gov.il
[-] IP: 147.237.0.185

[+] Subdomain: archive.csc.gov.il
[-] IP: 147.237.76.134

[+] Subdomain: phonebook.csc.gov.il
[-] IP: 147.237.9.101

[+] Subdomain: surveys.csc.gov.il
[-] IP: 147.237.0.24

[+] Subdomain: www.csc.gov.il
[-] IP: 147.237.0.206

[+] Subdomain: nsc.gov.il
[-] IP: 147.237.1.127

[+] Subdomain: mail.nsc.gov.il
[-] IP: 147.237.73.205

[+] Subdomain: e.new.nsc.gov.il
[-] IP: 147.237.9.27

[+] Subdomain: itc.gov.il
[-] IP: 212.235.14.159

[+] Subdomain: www.itc.gov.il
[-] IP: 212.235.14.159

[+] Subdomain: topocad.gov.il
[-] IP: 147.237.76.242

[+] Subdomain: old.topocad.gov.il
[-] IP: 147.237.76.220

[+] Subdomain: www.topocad.gov.il
[-] IP: 147.237.76.242

[+] Subdomain: mossad.gov.il
[-] IP: 147.237.0.71
#######################################################################################################################################
[+] Starting At 2020-01-07 16:16:49.609019
[+] Collecting Information On: https://www.gov.il/
[#] Status: 200
--------------------------------------------------
[+] Xss Protection Detected !
- Cache-Control: private
- Content-Type: text/html; charset=utf-8
- Content-Encoding: gzip
- Vary: Accept-Encoding
- Set-Cookie: ASP.NET_SessionId=e2ca3uopmvyfcsgky5o41lpe; path=/; HttpOnly, U_Gov_ID=ad092880-609d-43a7-a3b4-bbf2ad6bc7ac; expires=Thu, 06-Feb-2020 21:16:49 GMT; path=/, p_hosting=!PTY4FI6yhZbq10l5W83P7gYiG+8SSEvF2hIGoUejF1+hxQ4VcUGhGbC7X5i4RNZ6bl2aoVx6hqqIvg==; path=/; Httponly; Secure
- Content-fid: jJISJz+eoxfQt9pMBzlp+fwMbKsz9NtGx0HaTwmA3Jo=
- Access-Control-Allow-Origin: https://my.gov.il
- X-Frame-Options: SAMEORIGIN
- X-Xss-Protection: 1; mode=block
- Date: Tue, 07 Jan 2020 21:16:48 GMT
- Content-Length: 10058
- Strict-Transport-Security: max-age=16070400; includeSubDomains
--------------------------------------------------
[#] Finding Location..!
[#] status: success
[#] country: Israel
[#] countryCode: IL
[#] region: JM
[#] regionName: Jerusalem
[#] city: Jerusalem
[#] zip: 
[#] lat: 31.7683
[#] lon: 35.2137
[#] timezone: Asia/Jerusalem
[#] isp: GOVT
[#] org: 
[#] as: AS8867 E-Gov - Tehila Project - Prime Minister Office's
[#] query: 147.237.0.206
--------------------------------------------------
[x] Didn't Detect WAF Presence on: https://www.gov.il/
--------------------------------------------------
[#] Starting Reverse DNS
[!] Found 32 any Domain
- 102.gov.il
- archive.piba.gov.il
- csc.gov.il
- eca.gov.il
- first.gov.il
- gimlaim.gov.il
- gov.il
- israel.gov.il
- mcs.gov.il
- mops.gov.il
- mse.gov.il
- piba.gov.il
- rbc.gov.il
- search.gov.il
- shabas.gov.il
- shivyon.gov.il
- vatikim.gov.il
- www.102.gov.il
- www.cwv.gov.il
- www.energy.gov.il
- www.first.gov.il
- www.gov.il
- www.guides.gov.il
- www.ips.gov.il
- www.israel.gov.il
- www.mcs.gov.il
- www.moia.gov.il
- www.oz.gov.il
- www.piba.gov.il
- www.president.gov.il
- www.shabas.gov.il
- www.tourism.gov.il
--------------------------------------------------
[!] Scanning Open Port
[#] 80/tcp  open http
[#] 443/tcp  open https
--------------------------------------------------
[+] Getting SSL Info
{'OCSP': ('http://status.thawte.com',),
 'caIssuers': ('http://cacerts.thawte.com/ThawteRSACA2018.crt',),
 'crlDistributionPoints': ('http://cdp.thawte.com/ThawteRSACA2018.crl',),
 'issuer': ((('countryName', 'US'),),
            (('organizationName', 'DigiCert Inc'),),
            (('organizationalUnitName', 'www.digicert.com'),),
            (('commonName', 'Thawte RSA CA 2018'),)),
 'notAfter': 'Mar 23 12:00:00 2021 GMT',
 'notBefore': 'Feb 18 00:00:00 2019 GMT',
 'serialNumber': '06DCFF248B3E5454A19E87FD4F26C602',
 'subject': ((('commonName', 'www.gov.il'),),),
 'subjectAltName': (('DNS', 'www.gov.il'), ('DNS', 'www.www.gov.il')),
 'version': 3}
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

--------------------------------------------------
[+] Collecting Information Disclosure!
[#] Detecting sitemap.xml file
[-] sitemap.xml file not Found!?
[#] Detecting robots.txt file
[-] robots.txt file not Found!?
[#] Detecting GNU Mailman
[-] GNU Mailman App Not Detected!?
--------------------------------------------------
[+] Crawling Url Parameter On: https://www.gov.il/
--------------------------------------------------
[#] Searching Html Form !
[-] No Html Form Found!?
--------------------------------------------------
[-] No DOM Paramter Found!?
--------------------------------------------------
[!] 5 Internal Dynamic Parameter Discovered
[+] https://www.gov.il///Content/Ver_3/GeneralStyle?v=Vdan_FNDJR7sKs7UoDW0NZprBCBD_sajA0S5_Be2RtY1.css
[+] https://www.gov.il///Content/Ver_3/BootstrapRtl?v=c1HRKvPx_xWtthzhL6qsWbHLw694yf91KblKnQU6_gQ1.css
[+] https://www.gov.il///Content/Ver_3/SpaceRtl?v=V2IBLHshEpU_bw-R-NC662xxh9OPYxMIAjKshheqg8I1.css
[+] https://www.gov.il///Content/Ver_3/Home/css?v=w1VGg7LE5gdVCPfilBcVvIk9R5CYFNbLmp_TZ-jiwM81.css
[+] https://www.gov.il///he/departments/policies?policyType=30280ed5-306f-4f0b-a11d-cacf05d36648
--------------------------------------------------
[!] 5 External Dynamic Parameter Discovered
[#] https://t.me/share/url?url=
[#] https://twitter.com/intent/tweet?url=
[#] https://www.linkedin.com/shareArticle?mini=true&url=
[#] https://facebook.com/sharer.php?u=
[#] https://web.whatsapp.com/send?text=
--------------------------------------------------
[!] 42 Internal links Discovered
[+] https://www.gov.il///Content/Images/favicon.ico
[+] https://www.gov.il/
[+] https://www.gov.il//javascript:void(0)
[+] https://www.gov.il//javascript:void(0)
[+] https://www.gov.il///he/subjects/certificates_and_passports
[+] https://www.gov.il///he/subjects/law_and_government
[+] https://www.gov.il///he/subjects/environment
[+] https://www.gov.il///he/subjects/people_with_disabilities
[+] https://www.gov.il///he/subjects/enforcement_and_security_forces
[+] https://www.gov.il///he/subjects/construction_and_housing
[+] https://www.gov.il///he/subjects/health_and_wellness
[+] https://www.gov.il///he/subjects/education
[+] https://www.gov.il///he/subjects/economy_and_finance
[+] https://www.gov.il///he/subjects/parents_and_children
[+] https://www.gov.il///he/subjects/labor_and_employment
[+] https://www.gov.il///he/subjects/immigration_and_absorption
[+] https://www.gov.il///he/subjects/automotive_and_transportation
[+] https://www.gov.il///he/subjects/industry_and_trade
[+] https://www.gov.il///he/subjects/culture_and_tourism
[+] https://www.gov.il///he/service/apply_for_new_driver_drivers_license
[+] https://www.gov.il///he/service/birth_certificate
[+] https://www.gov.il///he/service/changing_address
[+] https://www.gov.il///he/service/departure_prohibition_order_info_2
[+] https://www.gov.il///he/service/police_fine_payment
[+] https://www.gov.il///he/service/renew_id_appendix
[+] https://www.gov.il///he/service/driving_license_renewal
[+] https://www.gov.il///he/service/car_licence_renewal
[+] https://www.gov.il///he/service/unemployment_benefits
[+] https://www.gov.il///he/service/naming_baby
[+] https://www.gov.il///he/service/information_system_for_victims_of_crime
[+] https://www.gov.il///he/departments/
[+] https://www.gov.il/he/Departments/government_ict_authority/map/hod_hasharon
[+] https://www.gov.il///he/departments/bureaus/
[+] https://www.gov.il/he/departments/central-government-call-center
[+] https://www.gov.il///he/performance/
[+] https://www.gov.il///he/Departments/news/new-central-call-center
[+] https://www.gov.il///he/Departments/Guides/reform
[+] https://www.gov.il///he/Departments/news/new_online_service_stations_in_malls
[+] https://www.gov.il/apps/mops/firearm_license_calculator/
[+] https://www.gov.il///he/Departments/publications/reports/20second
[+] https://www.gov.il//" onclick=
[+] https://www.gov.il//" target=
--------------------------------------------------
[!] 1 External links Discovered
[#] https://foi.gov.il/
--------------------------------------------------
[#] Mapping Subdomain..
[!] Found 1 Subdomain
- www.gov.il
--------------------------------------------------
[!] Done At 2020-01-07 16:17:55.559225
#######################################################################################################################################
[INFO] ------TARGET info------
[*] TARGET: https://www.gov.il/
[*] TARGET IP: 147.237.0.206
[INFO] NO load balancer detected for www.gov.il...
[*] DNS servers: gov.il.
[*] TARGET server:
[*] CC: IL
[*] Country: Israel
[*] RegionCode: JM
[*] RegionName: Jerusalem
[*] City: Jerusalem
[*] ASN: AS8867
[*] BGP_PREFIX: 147.237.0.0/16
[*] ISP: Tehila-AS E-Gov - Tehila Project - Prime Minister Office's, IL
[INFO] SSL/HTTPS certificate detected
[*] Issuer: issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Thawte RSA CA 2018
[*] Subject: subject=CN = www.gov.il
[INFO] DNS enumeration:
[INFO] Possible abuse mails are:
[*] abuse@tehila.gov.il
[*] abuse@www.gov.il
[*] cert-team@cert.gov.il
[INFO] NO PAC (Proxy Auto Configuration) file FOUND
[INFO] Starting FUZZing in http://www.gov.il/FUzZzZzZzZz...
[INFO] Status code 	 Folders 
[ALERT] Look in the source code. It may contain passwords
[INFO] Links found from https://www.gov.il/ http://147.237.0.206/:
[*] https://facebook.com/sharer.php?u=
[*] https://foi.gov.il/
[*] https://t.me/share/url?url=
[*] https://twitter.com/intent/tweet?url=
[*] https://web.whatsapp.com/send?text=
[*] https://www.googletagmanager.com/ns.html?id=GTM-TQNJKX
[*] https://www.gov.il/
[*] https://www.gov.il/apps/mops/firearm_license_calculator/
[*] https://www.gov.il/he/departments/
[*] https://www.gov.il/he/departments/bureaus/
[*] https://www.gov.il/he/departments/central-government-call-center
[*] https://www.gov.il/he/Departments/government_ict_authority/map/hod_hasharon
[*] https://www.gov.il/he/Departments/Guides/reform
[*] https://www.gov.il/he/Departments/news/new-central-call-center
[*] https://www.gov.il/he/Departments/news/new_online_service_stations_in_malls
[*] https://www.gov.il/he/departments/policies?policyType=30280ed5-306f-4f0b-a11d-cacf05d36648
[*] https://www.gov.il/he/Departments/publications/reports/20second
[*] https://www.gov.il/he/performance/
[*] https://www.gov.il/he/service/apply_for_new_driver_drivers_license
[*] https://www.gov.il/he/service/birth_certificate
[*] https://www.gov.il/he/service/car_licence_renewal
[*] https://www.gov.il/he/service/changing_address
[*] https://www.gov.il/he/service/departure_prohibition_order_info_2
[*] https://www.gov.il/he/service/driving_license_renewal
[*] https://www.gov.il/he/service/information_system_for_victims_of_crime
[*] https://www.gov.il/he/service/naming_baby
[*] https://www.gov.il/he/service/police_fine_payment
[*] https://www.gov.il/he/service/renew_id_appendix
[*] https://www.gov.il/he/service/unemployment_benefits
[*] https://www.gov.il/he/subjects/automotive_and_transportation
[*] https://www.gov.il/he/subjects/certificates_and_passports
[*] https://www.gov.il/he/subjects/construction_and_housing
[*] https://www.gov.il/he/subjects/culture_and_tourism
[*] https://www.gov.il/he/subjects/economy_and_finance
[*] https://www.gov.il/he/subjects/education
[*] https://www.gov.il/he/subjects/enforcement_and_security_forces
[*] https://www.gov.il/he/subjects/environment
[*] https://www.gov.il/he/subjects/health_and_wellness
[*] https://www.gov.il/he/subjects/immigration_and_absorption
[*] https://www.gov.il/he/subjects/industry_and_trade
[*] https://www.gov.il/he/subjects/labor_and_employment
[*] https://www.gov.il/he/subjects/law_and_government
[*] https://www.gov.il/he/subjects/parents_and_children
[*] https://www.gov.il/he/subjects/people_with_disabilities
[*] https://www.linkedin.com/shareArticle?mini=true&url=
cut: intervalle de champ incorrecte
Saisissez « cut --help » pour plus d'informations.
[INFO] Shodan detected the following opened ports on 147.237.0.206:
[*] 1
[*] 3
[*] 443
[*] 80
[INFO] ------VirusTotal SECTION------
[INFO] VirusTotal passive DNS only stores address records. The following domains resolved to the given IP address:
[INFO] Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset:
[INFO] Latest files that are not detected by any antivirus solution and were downloaded by VirusTotal from the IP address provided:
[INFO] ------Alexa Rank SECTION------
[INFO] Percent of Visitors Rank in Country:
[INFO] Percent of Search Traffic:
[INFO] Percent of Unique Visits:
[INFO] Total Sites Linking In:
[*] Total  Sites
[INFO] Useful links related to www.gov.il - 147.237.0.206:
[*] https://www.virustotal.com/pt/ip-address/147.237.0.206/information/
[*] https://www.hybrid-analysis.com/search?host=147.237.0.206
[*] https://www.shodan.io/host/147.237.0.206
[*] https://www.senderbase.org/lookup/?search_string=147.237.0.206
[*] https://www.alienvault.com/open-threat-exchange/ip/147.237.0.206
[*] http://pastebin.com/search?q=147.237.0.206
[*] http://urlquery.net/search.php?q=147.237.0.206
[*] http://www.alexa.com/siteinfo/www.gov.il
[*] http://www.google.com/safebrowsing/diagnostic?site=www.gov.il
[*] https://censys.io/ipv4/147.237.0.206
[*] https://www.abuseipdb.com/check/147.237.0.206
[*] https://urlscan.io/search/#147.237.0.206
[*] https://github.com/search?q=147.237.0.206&type=Code
[INFO] Useful links related to AS8867 - 147.237.0.0/16:
[*] http://www.google.com/safebrowsing/diagnostic?site=AS:8867
[*] https://www.senderbase.org/lookup/?search_string=147.237.0.0/16
[*] http://bgp.he.net/AS8867
[*] https://stat.ripe.net/AS8867
[INFO] Date: 07/01/20 | Time: 16:18:29
[INFO] Total time: 1 minute(s) and 44 second(s)
#######################################################################################################################################
Trying "gov.il"
Trying "gov.il"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28275
;; flags: qr rd ra; QUERY: 1, ANSWER: 15, AUTHORITY: 11, ADDITIONAL: 14

;; QUESTION SECTION:
;gov.il.				IN	ANY

;; ANSWER SECTION:
gov.il.			0	IN	SOA	dns.gov.il. hostmaster.tehila.gov.il. 2020010704 600 200 604800 3600
gov.il.			0	IN	TXT	"v=spf1 ip4:147.237.70.0/24 include:inforumail.com ~all"
gov.il.			0	IN	A	147.237.0.206
gov.il.			0	IN	NS	lookup.iucc.ac.il.
gov.il.			0	IN	NS	nsa.ns.il.
gov.il.			0	IN	NS	ns4.ns.il.
gov.il.			0	IN	NS	nsb.ns.il.
gov.il.			0	IN	NS	dns3.gov.il.
gov.il.			0	IN	NS	ns2.ns.il.
gov.il.			0	IN	NS	sns-pb.isc.org.
gov.il.			0	IN	NS	ns1.ns.il.
gov.il.			0	IN	NS	nse.ns.il.
gov.il.			0	IN	NS	ns3.ns.il.
gov.il.			0	IN	NS	ilns.ilan.net.il.
gov.il.			0	IN	MX	5 mail.tehila.gov.il.

;; AUTHORITY SECTION:
gov.il.			600	IN	NS	sns-pb.isc.org.
gov.il.			600	IN	NS	nse.ns.il.
gov.il.			600	IN	NS	ns4.ns.il.
gov.il.			600	IN	NS	ns3.ns.il.
gov.il.			600	IN	NS	lookup.iucc.ac.il.
gov.il.			600	IN	NS	nsa.ns.il.
gov.il.			600	IN	NS	ns2.ns.il.
gov.il.			600	IN	NS	nsb.ns.il.
gov.il.			600	IN	NS	ns1.ns.il.
gov.il.			600	IN	NS	ilns.ilan.net.il.
gov.il.			600	IN	NS	dns3.gov.il.

;; ADDITIONAL SECTION:
lookup.iucc.ac.il.	3796	IN	A	128.139.34.240
lookup.iucc.ac.il.	3796	IN	AAAA	2001:bf8:900:6::808b:22f0
ilns.ilan.net.il.	3796	IN	A	128.139.35.5
ns3.ns.il.		3796	IN	A	194.0.11.103
ns3.ns.il.		3796	IN	AAAA	2001:678:e:103::53
nse.ns.il.		3796	IN	A	192.115.141.253
sns-pb.isc.org.		628	IN	A	192.5.4.1
sns-pb.isc.org.		628	IN	AAAA	2001:500:2e::1
ns1.ns.il.		3796	IN	A	194.146.106.122
ns1.ns.il.		3796	IN	AAAA	2001:67c:1010:31::53
ns2.ns.il.		3796	IN	A	162.88.57.1
ns2.ns.il.		3796	IN	AAAA	2600:2000:3005::1
nsa.ns.il.		3796	IN	A	192.115.7.53
nsb.ns.il.		3796	IN	A	192.115.7.60

Received 857 bytes from 2001:18c0:121:6900:724f:b8ff:fefd:5b6a#53 in 59 ms
#######################################################################################################################################
; <<>> DiG 9.11.5-P4-5.1+b1-Debian <<>> +trace gov.il any
;; global options: +cmd
.			85997	IN	NS	j.root-servers.net.
.			85997	IN	NS	i.root-servers.net.
.			85997	IN	NS	d.root-servers.net.
.			85997	IN	NS	b.root-servers.net.
.			85997	IN	NS	a.root-servers.net.
.			85997	IN	NS	h.root-servers.net.
.			85997	IN	NS	e.root-servers.net.
.			85997	IN	NS	m.root-servers.net.
.			85997	IN	NS	g.root-servers.net.
.			85997	IN	NS	f.root-servers.net.
.			85997	IN	NS	l.root-servers.net.
.			85997	IN	NS	c.root-servers.net.
.			85997	IN	NS	k.root-servers.net.
.			85997	IN	RRSIG	NS 8 0 518400 20200120170000 20200107160000 33853 . D7t1mhH1txTYmEsgH9M9vkmZAL3714AsQoZCvNSyTQAPZ+Dz3OrQJH62 SfYVWre78vELCvOf98RAGnVYU+h25+co+6zhcgqYU72/0wnEk6FsvJEh ksfPmHdRceO9/uZFyA8hLipUQC0EXi+sQhn8Cnd1f59H7/SdBWL8amtS T8y0b7Nhb8bRKej/YeSnPejL4z8cFgkmWIxz7NOXRIk/7gRttq0iD4Qm C/JsgIIyvhSqQZ5EkpctdRR7aMu036FYLx54o00qcaDqUc43hf5AQG2U 9a/FXMks+OiKCFr8hwY5ciDzFxfSj+Kd0w6J6ojJGufvovRvKdWDpNHV 9Kz5Mg==
;; Received 525 bytes from 38.132.106.139#53(38.132.106.139) in 204 ms

il.			172800	IN	NS	ns2.ns.il.
il.			172800	IN	NS	ilns.ilan.net.il.
il.			172800	IN	NS	nsa.ns.il.
il.			172800	IN	NS	nsb.ns.il.
il.			172800	IN	NS	lookup.iucc.ac.il.
il.			172800	IN	NS	ns3.ns.il.
il.			172800	IN	NS	sns-pb.isc.org.
il.			172800	IN	NS	nse.ns.il.
il.			172800	IN	NS	ns1.ns.il.
il.			86400	IN	DS	38495 8 2 CD89F213712829A920CC89C9D20EC89C3EAFF922D4DD03B76C7923AA 7C43FB08
il.			86400	IN	RRSIG	DS 8 1 86400 20200120170000 20200107160000 33853 . aFeb92jX4MMzldAVSEIjdrG1rvVkkJN6Riq9Ax7xySHlVt62S4Og6Zz3 aTdESd45NzaA3Z4HWh+UrqK7E/J+wH0FiuNLJ4zMN4+GTBlreF7gHUHb e9j2kXta8vC2IC61QfEl94h9fOqnHp3/jw4iLoeNikSOP9L+PORF/B1W 71vlIGFf8DgDSC/CEa71Ow+IM8gy5FoXpPiqWgTaPAVkgELRdIcpEU8m 0yGNuCW8yjC2d54MHuIF14wHFkpGcfOUmQbYdqHwXRPlcQvRiSQ9t2/p YPMLGOPyuOQaC1Zuhx0iwoD0JmFrJhedA8uJBJZoTd0rds55AbZz71uE TFLoYQ==
couldn't get address for 'ns2.ns.il': not found
;; Received 878 bytes from 192.112.36.4#53(g.root-servers.net) in 152 ms

gov.il.			600	IN	MX	5 mail.tehila.gov.il.
gov.il.			600	IN	NS	dns3.gov.il.
gov.il.			600	IN	NS	nsb.ns.il.
gov.il.			600	IN	NS	ns1.ns.il.
gov.il.			600	IN	NS	ilns.ilan.net.il.
gov.il.			600	IN	NS	sns-pb.isc.org.
gov.il.			600	IN	NS	ns2.ns.il.
gov.il.			600	IN	NS	lookup.iucc.ac.il.
gov.il.			600	IN	NS	nsa.ns.il.
gov.il.			600	IN	NS	ns4.ns.il.
gov.il.			600	IN	NS	nse.ns.il.
gov.il.			600	IN	NS	ns3.ns.il.
gov.il.			600	IN	A	147.237.0.206
gov.il.			600	IN	TXT	"v=spf1 ip4:147.237.70.0/24 include:inforumail.com ~all"
gov.il.			600	IN	SOA	dns.gov.il. hostmaster.tehila.gov.il. 2020010704 600 200 604800 3600
;; Received 3264 bytes from 2001:678:e:103::53#53(ns3.ns.il) in 96 ms
######################################################################################################################################
[*] Performing General Enumeration of Domain: gov.il
[-] DNSSEC is not configured for gov.il
[*] 	 SOA dns.gov.il 147.237.71.1
[*] 	 NS ilns.ilan.net.il 128.139.35.5
[*] 	 Bind Version for 128.139.35.5 Pre-Release 0.0.0.0 - Good Luck
[*] 	 NS ns3.ns.il 194.0.11.103
[*] 	 Bind Version for 194.0.11.103 ns-1.il.br1.bind
[*] 	 NS ns3.ns.il 2001:678:e:103::53
[*] 	 Bind Version for 2001:678:e:103::53 ns-1.il.us4.bind
[*] 	 NS nsa.ns.il 192.115.7.53
[*] 	 NS ns4.ns.il 204.61.216.134
[*] 	 Bind Version for 204.61.216.134 host
[*] 	 NS ns4.ns.il 2001:500:14:6134:ad::1
[*] 	 Bind Version for 2001:500:14:6134:ad::1 host
[*] 	 NS lookup.iucc.ac.il 128.139.34.240
[*] 	 Bind Version for 128.139.34.240 .il ccTLD registry, version alpha-charlie-fox-tango
[*] 	 NS lookup.iucc.ac.il 2001:bf8:900:6::808b:22f0
[*] 	 Bind Version for 2001:bf8:900:6::808b:22f0 .il ccTLD registry, version alpha-charlie-fox-tango
[*] 	 NS dns3.gov.il 62.219.20.20
[*] 	 NS nsb.ns.il 192.115.7.60
[*] 	 NS sns-pb.isc.org 192.5.4.1
[*] 	 Bind Version for 192.5.4.1 9.12.2-P2
[*] 	 NS sns-pb.isc.org 2001:500:2e::1
[*] 	 Bind Version for 2001:500:2e::1 9.12.2-P2
[*] 	 NS ns1.ns.il 194.146.106.122
[*] 	 Bind Version for 194.146.106.122 contact info@netnod.se
[*] 	 NS ns1.ns.il 2001:67c:1010:31::53
[*] 	 Bind Version for 2001:67c:1010:31::53 contact info@netnod.se
[*] 	 NS nse.ns.il 192.115.141.253
[*] 	 MX mail.tehila.gov.il 147.237.71.125
[*] 	 A gov.il 147.237.0.206
[*] 	 TXT gov.il v=spf1 ip4:147.237.70.0/24 include:inforumail.com ~all
[*] Enumerating SRV Records
[-] No SRV Records Found for gov.il
[+] 0 Records Found
######################################################################################################################################
[*] Processing domain gov.il
[*] Using system resolvers ['38.132.106.139', '194.187.251.67', '185.93.180.131', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
[+] Getting nameservers
128.139.35.5 - ilns.ilan.net.il
[-] Getting nameservers failed
[-] Zone transfer failed

[+] TXT records found
"v=spf1 ip4:147.237.70.0/24 include:inforumail.com ~all"

[+] MX records found, added to target list
5 mail.tehila.gov.il.

[*] Scanning gov.il for A records
147.237.0.206 - gov.il                          
147.237.71.125 - mail.tehila.gov.il     
192.124.249.12 - archive.gov.il                   
147.237.1.112 - business.gov.il                  
35.186.245.19 - data.gov.il                               
147.237.71.1 - dns.gov.il                        
62.219.20.20 - dns3.gov.il               
91.240.146.235 - edu.gov.il                            
147.237.72.201 - forms.gov.il                              
147.237.77.27 - forum.gov.il             
147.237.2.241 - go.gov.il                     
147.237.74.22 - helpdesk.gov.il              
147.237.1.176 - health.gov.il                
147.237.9.250 - idp.gov.il                    
147.237.0.194 - info.gov.il                   
147.237.2.212 - lms.gov.il                       
127.0.0.1 - localhost.gov.il              
147.237.0.206 - local.gov.il               
147.237.2.176 - login.gov.il                 
147.237.74.1 - mail.gov.il                       
147.237.0.13 - mobile.gov.il                   
147.237.9.191 - my.gov.il                  
147.237.0.202 - new.gov.il                     
147.237.72.93 - pm.gov.il                      
147.237.0.206 - search.gov.il                      
147.237.0.46 - survey.gov.il                     
147.237.0.178 - test.gov.il                  
147.237.0.206 - www.gov.il       
#######################################################################################################################################
 AVAILABLE PLUGINS
 -----------------

  CertificateInfoPlugin
  CompressionPlugin
  OpenSslCcsInjectionPlugin
  RobotPlugin
  HeartbleedPlugin
  FallbackScsvPlugin
  SessionRenegotiationPlugin
  SessionResumptionPlugin
  OpenSslCipherSuitesPlugin
  HttpHeadersPlugin
  EarlyDataPlugin



 CHECKING HOST(S) AVAILABILITY
 -----------------------------

   147.237.0.206:443                       => 147.237.0.206 




 SCAN RESULTS FOR 147.237.0.206:443 - 147.237.0.206
 --------------------------------------------------

 * OpenSSL CCS Injection:
                                          OK - Not vulnerable to OpenSSL CCS injection

 * Deflate Compression:
                                          OK - Compression disabled

 * SSLV2 Cipher Suites:
      Server rejected all cipher suites.

 * OpenSSL Heartbleed:
                                          OK - Not vulnerable to Heartbleed

 * Certificate Information:
     Content
       SHA1 Fingerprint:                  a5db79c6dda93e750a6b1627169983763d3174a1
       Common Name:                       www.gov.il
       Issuer:                            Thawte RSA CA 2018
       Serial Number:                     9122848193343707011113841482598368770
       Not Before:                        2019-02-18 00:00:00
       Not After:                         2021-03-23 12:00:00
       Signature Algorithm:               sha256
       Public Key Algorithm:              RSA
       Key Size:                          2048
       Exponent:                          65537 (0x10001)
       DNS Subject Alternative Names:     ['www.gov.il', 'www.www.gov.il']

     Trust
       Hostname Validation:               FAILED - Certificate does NOT match 147.237.0.206
       Android CA Store (9.0.0_r9):       OK - Certificate is trusted
       Apple CA Store (iOS 12, macOS 10.14, watchOS 5, and tvOS 12):OK - Certificate is trusted
       Java CA Store (jdk-12.0.1):        OK - Certificate is trusted
       Mozilla CA Store (2019-03-14):     OK - Certificate is trusted
       Windows CA Store (2019-05-27):     OK - Certificate is trusted
       Symantec 2018 Deprecation:         WARNING: Certificate distrusted by Google and Mozilla on September 2018
       Received Chain:                    www.gov.il --> Thawte RSA CA 2018 --> DigiCert Global Root CA
       Verified Chain:                    www.gov.il --> Thawte RSA CA 2018 --> DigiCert Global Root CA
       Received Chain Contains Anchor:    WARNING - Received certificate chain contains the anchor certificate
       Received Chain Order:              OK - Order is valid
       Verified Chain contains SHA1:      OK - No SHA1-signed certificate in the verified certificate chain

     Extensions
       OCSP Must-Staple:                  NOT SUPPORTED - Extension not found
       Certificate Transparency:          OK - 3 SCTs included

     OCSP Stapling
                                          NOT SUPPORTED - Server did not send back an OCSP response

 * TLSV1_3 Cipher Suites:
      Server rejected all cipher suites.

 * Downgrade Attacks:
       TLS_FALLBACK_SCSV:                 OK - Supported

 * ROBOT Attack:
                                          OK - Not vulnerable, RSA cipher suites not supported

 * SSLV3 Cipher Suites:
      Server rejected all cipher suites.

 * TLS 1.2 Session Resumption Support:
      With Session IDs:                  OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
      With TLS Tickets:                  NOT SUPPORTED - TLS ticket not assigned.

 * Session Renegotiation:
       Client-initiated Renegotiation:    VULNERABLE - Server honors client-initiated renegotiations
       Secure Renegotiation:              OK - Supported

 * TLSV1_1 Cipher Suites:
       Forward Secrecy                    OK - Supported
       RC4                                OK - Not Supported

     Preferred:
        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                               256 bits      HTTP 404 Not Found                                          
     Accepted:
        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                               256 bits      HTTP 404 Not Found                                          
        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                               128 bits      HTTP 404 Not Found                                          

 * TLSV1_2 Cipher Suites:
       Forward Secrecy                    OK - Supported
       RC4                                OK - Not Supported

     Preferred:
        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384                            256 bits      HTTP 404 Not Found                                          
     Accepted:
        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384                            256 bits      HTTP 404 Not Found                                          
        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384                            256 bits      HTTP 404 Not Found                                          
        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                               256 bits      HTTP 404 Not Found                                          
        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256                            128 bits      HTTP 404 Not Found                                          
        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256                            128 bits      HTTP 404 Not Found                                          
        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                               128 bits      HTTP 404 Not Found                                          

 * TLSV1 Cipher Suites:
       Forward Secrecy                    OK - Supported
       RC4                                OK - Not Supported

     Preferred:
        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                               256 bits      HTTP 404 Not Found                                          
     Accepted:
        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                               256 bits      HTTP 404 Not Found                                          
        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                               128 bits      HTTP 404 Not Found                                          


 SCAN COMPLETED IN 19.12 S
 -------------------------
#######################################################################################################################################

Domains still to check: 1
	Checking if the hostname gov.il. given is in fact a domain...

Analyzing domain: gov.il.
	Checking NameServers using system default resolver...
		IP: 128.139.35.5 (Israel)
			HostName: ilns.ilan.net.il 			Type: NS
			HostName: ilns.ilan.net.il			Type: PTR
		WARNING! It seems that the NS server does not have an IP!

	Checking MailServers using system default resolver...
		IP: 147.237.71.125 (Israel)
			HostName: mail.tehila.gov.il 			Type: MX

	Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
		No zone transfer found on nameserver 128.139.35.5

	Checking SPF record...
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 147.237.70.0/24, but only the network IP
		New IP found: 147.237.70.0

	Checking SPF record...
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 192.114.70.0/24, but only the network IP
		New IP found: 192.114.70.0
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 212.150.211.0/24, but only the network IP
		New IP found: 212.150.211.0
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 212.29.237.0/24, but only the network IP
		New IP found: 212.29.237.0
		New IP found: 54.235.64.30
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 82.166.0.0/24, but only the network IP
		New IP found: 82.166.0.0
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 194.90.186.0/24, but only the network IP
		New IP found: 194.90.186.0
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 82.166.225.0/24, but only the network IP
		New IP found: 82.166.225.0
		New IP found: 54.214.13.30
		New IP found: 54.214.13.37
		New IP found: 54.214.19.26
		New IP found: 54.214.19.44
		WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 209.88.196.0/24, but only the network IP
		New IP found: 209.88.196.0

	Checking SPF record...
		No SPF record

	Checking 192 most common hostnames using system default resolver...
		IP: 147.237.0.206 (Israel)
			HostName: www.gov.il. 			Type: A
		IP: 147.237.74.1 (Israel)
			HostName: mail.gov.il. 			Type: A
		IP: 147.237.0.178 (Israel)
			HostName: test.gov.il. 			Type: A
		IP: 147.237.71.1 (Israel)
			HostName: dns.gov.il. 			Type: A
		IP: 147.237.0.206 (Israel)
			HostName: www.gov.il. 			Type: A
			HostName: search.gov.il. 			Type: A
		IP: 147.237.2.176 (Israel)
			HostName: login.gov.il. 			Type: A
		IP: 147.237.1.132 (Israel)
			Sub Domain: ica.gov.il. <- New Subdomain!
			HostName: ica.gov.il. 			Type: A

	Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
		Checking netblock 128.139.35.0
		Checking netblock 147.237.1.0
		Checking netblock 82.166.0.0
		Checking netblock 147.237.0.0
		Checking netblock 147.237.2.0
		Checking netblock 54.235.64.0
		Checking netblock 82.166.225.0
		Checking netblock 212.150.211.0
		Checking netblock 147.237.71.0
		Checking netblock 192.114.70.0
		Checking netblock 54.214.13.0
		Checking netblock 54.214.19.0
		Checking netblock 147.237.74.0
		Checking netblock 194.90.186.0
		Checking netblock 209.88.196.0
		Checking netblock 212.29.237.0
		Checking netblock 147.237.70.0

	Searching for gov.il. emails in Google

	Checking 21 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
		Host 128.139.35.5 is up (reset ttl 64)
		Host 147.237.1.132 is up (reset ttl 64)
		Host 82.166.0.0 is up (reset ttl 64)
		Host 147.237.0.178 is up (reset ttl 64)
		Host 147.237.2.176 is up (reset ttl 64)
		Host 54.235.64.30 is up (reset ttl 64)
		Host 82.166.225.0 is up (reset ttl 64)
		Host 212.150.211.0 is up (reset ttl 64)
		Host 147.237.71.1 is up (reset ttl 64)
		Host 192.114.70.0 is up (reset ttl 64)
		Host 54.214.13.30 is up (reset ttl 64)
		Host 54.214.19.44 is up (reset ttl 64)
		Host 147.237.74.1 is up (reset ttl 64)
		Host 194.90.186.0 is up (reset ttl 64)
		Host 209.88.196.0 is up (reset ttl 64)
		Host 212.29.237.0 is up (reset ttl 64)
		Host 147.237.0.206 is up (reset ttl 64)
		Host 54.214.19.26 is up (reset ttl 64)
		Host 54.214.13.37 is up (reset ttl 64)
		Host 147.237.71.125 is up (reset ttl 64)
		Host 147.237.70.0 is up (reset ttl 64)

	Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
		Scanning ip 128.139.35.5 (ilns.ilan.net.il (PTR)):
			53/tcp  open   domain       syn-ack ttl 52 (unknown banner: Pre-Release 0.0.0.0 - Good Luck)
				| dns-nsid: 
				|_  bind.version: Pre-Release 0.0.0.0 - Good Luck
				| fingerprint-strings: 
				|   DNSVersionBindReqTCP: 
				|     version
				|     bind
				|_    Pre-Release 0.0.0.0 - Good Luck
		Scanning ip 147.237.1.132 (ica.gov.il.):
			80/tcp  open   http         syn-ack ttl 57
				| fingerprint-strings: 
				|   GetRequest, HTTPOptions: 
				|     HTTP/1.0 404 Not Found
				|     Content-Type: text/html; charset=UTF-8
				|     Cache-Control: no-cache
				|     Pragma: no-cache
				|     Expires: 0
				|     Connection: close
				|     <!DOCTYPE html>
				|     <html lang="he">
				|     <head>
				|     <title>error page</title>
				|     <meta charset="utf-8">
				|     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				|     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				|     <style>
				|     -webkit-box-sizing:border-box;
				|     -moz-box-sizing:border-box;
				|     box-sizing:border-box;
				|     body {
				|     direction:rtl;
				|     text-align:right;
				|     height: 100%;
				|     font-family:arial;
				|     display:flex;
				|     margin: 0;
				|     header
				|     height:90px;
				|     color:#285c7e;
				|     .wra {
				|     flex:1 1 auto;
				|     display: flex;
				|_    flex-flow:column nowrap;
			443/tcp open   ssl/https    syn-ack ttl 117
				| fingerprint-strings: 
				|   GetRequest, HTTPOptions: 
				|     HTTP/1.0 404 Not Found
				|     Content-Type: text/html; charset=UTF-8
				|     Cache-Control: no-cache
				|     Pragma: no-cache
				|     Expires: 0
				|     Connection: close
				|     <!DOCTYPE html>
				|     <html lang="he">
				|     <head>
				|     <title>error page</title>
				|     <meta charset="utf-8">
				|     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				|     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				|     <style>
				|     -webkit-box-sizing:border-box;
				|     -moz-box-sizing:border-box;
				|     box-sizing:border-box;
				|     body {
				|     direction:rtl;
				|     text-align:right;
				|     height: 100%;
				|     font-family:arial;
				|     display:flex;
				|     margin: 0;
				|     header
				|     height:90px;
				|     color:#285c7e;
				|     .wra {
				|     flex:1 1 auto;
				|     display: flex;
				|_    flex-flow:column nowrap;
		Scanning ip 82.166.0.0 ():
			21/tcp   open   ftp          syn-ack ttl 114 FileZilla ftpd 0.9.41 beta
				| ftp-syst: 
				|_  SYST: UNIX emulated by FileZilla
			80/tcp   open   http         syn-ack ttl 50  Microsoft IIS httpd 8.0
				| http-methods: 
				|   Supported Methods: OPTIONS TRACE GET HEAD POST
				|_  Potentially risky methods: TRACE
				|_http-server-header: Microsoft-IIS/8.0
				|_http-title: 403 - Forbidden: Access is denied.
			443/tcp  open   ssl/http     syn-ack ttl 50  Microsoft IIS httpd 8.0
				| http-methods: 
				|   Supported Methods: OPTIONS TRACE GET HEAD POST
				|_  Potentially risky methods: TRACE
				|_http-server-header: Microsoft-IIS/8.0
				|_http-title: 403 - Forbidden: Access is denied.
				| ssl-cert: Subject: commonName=gis.mei-lod.co.il
				| Subject Alternative Name: DNS:gis.mei-lod.co.il, DNS:www.gis.mei-lod.co.il
				| Issuer: commonName=COMODO RSA Domain Validation Secure Server CA/organizationName=COMODO CA Limited/stateOrProvinceName=Greater Manchester/countryName=GB
				| Public Key type: rsa
				| Public Key bits: 2048
				| Signature Algorithm: sha256WithRSAEncryption
				| Not valid before: 2018-06-03T00:00:00
				| Not valid after:  2020-06-13T23:59:59
				| MD5:   d20d 942b e836 6332 756d 0d01 1596 8dd0
				|_SHA-1: 8c8a 9293 5e35 8bb7 5fcc 8da3 a5e5 783c 6847 6f34
			8008/tcp open   http         syn-ack ttl 51
				| fingerprint-strings: 
				|   FourOhFourRequest: 
				|     HTTP/1.1 302 Found
				|     Location: https://:8010/nice%20ports%2C/Tri%6Eity.txt%2ebak
				|     Connection: close
				|     X-Frame-Options: SAMEORIGIN
				|     X-XSS-Protection: 1; mode=block
				|     X-Content-Type-Options: nosniff
				|     Content-Security-Policy: frame-ancestors
				|   GenericLines, HTTPOptions, RTSPRequest, SIPOptions: 
				|     HTTP/1.1 302 Found
				|     Location: https://:8010
				|     Connection: close
				|     X-Frame-Options: SAMEORIGIN
				|     X-XSS-Protection: 1; mode=block
				|     X-Content-Type-Options: nosniff
				|     Content-Security-Policy: frame-ancestors
				|   GetRequest: 
				|     HTTP/1.1 302 Found
				|     Location: https://:8010/
				|     Connection: close
				|     X-Frame-Options: SAMEORIGIN
				|     X-XSS-Protection: 1; mode=block
				|     X-Content-Type-Options: nosniff
				|_    Content-Security-Policy: frame-ancestors
				| http-methods: 
				|_  Supported Methods: GET HEAD POST OPTIONS
				|_http-title: Did not follow redirect to https://82.166.0.0:8010/
				|_https-redirect: ERROR: Script execution failed (use -d to debug)
			OS Info: Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
		Scanning ip 147.237.0.178 (test.gov.il.):
		Scanning ip 147.237.2.176 (login.gov.il.):
			80/tcp  open   http         syn-ack ttl 57
				| fingerprint-strings: 
				|   GetRequest, HTTPOptions: 
				|     HTTP/1.0 404 Not Found
				|     Content-Type: text/html; charset=UTF-8
				|     Cache-Control: no-cache
				|     Pragma: no-cache
				|     Expires: 0
				|     Connection: close
				|     <!DOCTYPE html>
				|     <html lang="he">
				|     <head>
				|     <title>error page</title>
				|     <meta charset="utf-8">
				|     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				|     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				|     <style>
				|     -webkit-box-sizing:border-box;
				|     -moz-box-sizing:border-box;
				|     box-sizing:border-box;
				|     body {
				|     direction:rtl;
				|     text-align:right;
				|     height: 100%;
				|     font-family:arial;
				|     display:flex;
				|     margin: 0;
				|     header
				|     height:90px;
				|     color:#285c7e;
				|     .wra {
				|     flex:1 1 auto;
				|     display: flex;
				|_    flex-flow:column nowrap;
				|_http-title: error page
			443/tcp open   ssl/https    syn-ack ttl 52
				| fingerprint-strings: 
				|   GetRequest, HTTPOptions: 
				|     HTTP/1.0 404 Not Found
				|     Content-Type: text/html; charset=UTF-8
				|     Cache-Control: no-cache
				|     Pragma: no-cache
				|     Expires: 0
				|     Connection: close
				|     <!DOCTYPE html>
				|     <html lang="he">
				|     <head>
				|     <title>error page</title>
				|     <meta charset="utf-8">
				|     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				|     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				|     <style>
				|     -webkit-box-sizing:border-box;
				|     -moz-box-sizing:border-box;
				|     box-sizing:border-box;
				|     body {
				|     direction:rtl;
				|     text-align:right;
				|     height: 100%;
				|     font-family:arial;
				|     display:flex;
				|     margin: 0;
				|     header
				|     height:90px;
				|     color:#285c7e;
				|     .wra {
				|     flex:1 1 auto;
				|     display: flex;
				|_    flex-flow:column nowrap;
				|_http-title: error page
				| ssl-cert: Subject: commonName=login.gov.il
				| Subject Alternative Name: DNS:login.gov.il, DNS:www.login.gov.il
				| Issuer: commonName=Thawte RSA CA 2018/organizationName=DigiCert Inc/countryName=US
				| Public Key type: rsa
				| Public Key bits: 2048
				| Signature Algorithm: sha256WithRSAEncryption
				| Not valid before: 2018-10-29T00:00:00
				| Not valid after:  2020-10-28T12:00:00
				| MD5:   dbf0 836d f2ee b97d e4ef 0b1f 7a3d e8be
				|_SHA-1: 53f5 0a79 32da 480c 5cd4 ed84 9266 e2cc f213 f48b
		Scanning ip 54.235.64.30 ():
		Scanning ip 82.166.225.0 ():
		Scanning ip 212.150.211.0 ():
		Scanning ip 147.237.71.1 (dns.gov.il.):
		Scanning ip 192.114.70.0 ():
		Scanning ip 54.214.13.30 ():
		Scanning ip 54.214.19.44 ():
		Scanning ip 147.237.74.1 (mail.gov.il.):
			443/tcp open   ssl/http     syn-ack ttl 245 Microsoft IIS httpd 10.0
				|_http-favicon: Unknown favicon MD5: 39917FA48E318B4527565B93FFB395ED
				| http-methods: 
				|_  Supported Methods: GET HEAD POST OPTIONS
				|_http-server-header: Microsoft-IIS/10.0
				| http-title: Outlook
				|_Requested resource was https://147.237.74.1/owa/auth/logon.aspx?url=https%3a%2f%2f147.237.74.1%2fowa%2f&reason=0
				| ssl-cert: Subject: commonName=ext-mail.gov.il
				| Subject Alternative Name: DNS:ext-mail.gov.il, DNS:www.ext-mail.gov.il
				| Issuer: commonName=Thawte RSA CA 2018/organizationName=DigiCert Inc/countryName=US
				| Public Key type: rsa
				| Public Key bits: 2048
				| Signature Algorithm: sha256WithRSAEncryption
				| Not valid before: 2019-03-03T00:00:00
				| Not valid after:  2021-04-01T12:00:00
				| MD5:   bc63 0132 2574 e533 e13b c8c6 b392 4bae
				|_SHA-1: d051 33dd cd54 98cd 57c0 c28c ecb5 c684 90e8 b013
			465/tcp open   smtp         syn-ack ttl 244 Microsoft Exchange smtpd
				| smtp-commands: Mailgov-Exch-01.mail.gov.il Hello [104.245.145.189], SIZE 37748736, PIPELINING, DSN, ENHANCEDSTATUSCODES, STARTTLS, X-ANONYMOUSTLS, AUTH GSSAPI NTLM LOGIN, X-EXPS GSSAPI NTLM, 8BITMIME, BINARYMIME, CHUNKING, XEXCH50, SMTPUTF8, XRDST, XSHADOWREQUEST, 
				|_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT 
				| smtp-ntlm-info: 
				|   Target_Name: MAIL
				|   NetBIOS_Domain_Name: MAIL
				|   NetBIOS_Computer_Name: MAILGOV-EXCH-01
				|   DNS_Domain_Name: mail.gov.il
				|   DNS_Computer_Name: Mailgov-Exch-01.mail.gov.il
				|   DNS_Tree_Name: mail.gov.il
				|_  Product_Version: 10.0.17763
				| ssl-cert: Subject: commonName=Mailgov-Exch-01
				| Subject Alternative Name: DNS:Mailgov-Exch-01, DNS:Mailgov-Exch-01.mail.gov.il
				| Issuer: commonName=Mailgov-Exch-01
				| Public Key type: rsa
				| Public Key bits: 2048
				| Signature Algorithm: sha1WithRSAEncryption
				| Not valid before: 2019-02-06T15:40:30
				| Not valid after:  2024-02-06T15:40:30
				| MD5:   c335 c18b 5956 5441 fdb8 d1b4 3138 c46d
				|_SHA-1: 5465 b227 3160 0788 9247 b6c4 12f7 d836 1843 9964
			995/tcp open   ssl/pop3     syn-ack ttl 244 Microsoft Exchange 2007-2010 pop3d
				|_pop3-capabilities: USER SASL(PLAIN) UIDL TOP
				| ssl-cert: Subject: commonName=ext-mail.gov.il
				| Subject Alternative Name: DNS:ext-mail.gov.il, DNS:www.ext-mail.gov.il
				| Issuer: commonName=Thawte RSA CA 2018/organizationName=DigiCert Inc/countryName=US
				| Public Key type: rsa
				| Public Key bits: 2048
				| Signature Algorithm: sha256WithRSAEncryption
				| Not valid before: 2019-03-03T00:00:00
				| Not valid after:  2021-04-01T12:00:00
				| MD5:   bc63 0132 2574 e533 e13b c8c6 b392 4bae
				|_SHA-1: d051 33dd cd54 98cd 57c0 c28c ecb5 c684 90e8 b013
				Device type: WAP|media device|phone|general purpose
				Running (JUST GUESSING): Netgear embedded (96%), Apple iOS 5.X|6.X|7.X|8.X (92%), Apple OS X 10.8.X|10.11.X (91%), Linux 2.6.X (90%)
			OS Info: Service Info: Host: Mailgov-Exch-01.mail.gov.il; OS: Windows; CPE: cpe:/o:microsoft:windows
				|_clock-skew: -2s
		Scanning ip 194.90.186.0 ():
		Scanning ip 209.88.196.0 ():
		Scanning ip 212.29.237.0 ():
		Scanning ip 147.237.0.206 (search.gov.il.):
		Scanning ip 54.214.19.26 ():
		Scanning ip 54.214.13.37 ():
		Scanning ip 147.237.71.125 (mail.tehila.gov.il):
		Scanning ip 147.237.70.0 ():
	WebCrawling domain's web servers... up to 50 max links.

	+ URL to crawl: http://ica.gov.il.
	+ Date: 2020-01-07

	+ Crawling URL: http://ica.gov.il.:
		+ Links: 
			+ Crawling http://ica.gov.il.  (timed out) 
		+ Searching for directories...
		+ Searching open folders... 


	+ URL to crawl: http://ica.gov.il.:443
	+ Date: 2020-01-07

	+ Crawling URL: http://ica.gov.il.:443:
		+ Links: 
			+ Crawling http://ica.gov.il.:443  (timed out) 
		+ Searching for directories...
		+ Searching open folders... 


	+ URL to crawl: http://login.gov.il.
	+ Date: 2020-01-07

	+ Crawling URL: http://login.gov.il.:
		+ Links: 
			+ Crawling http://login.gov.il. 
		+ Searching for directories...
		+ Searching open folders... 


	+ URL to crawl: http://login.gov.il.:443
	+ Date: 2020-01-07

	+ Crawling URL: http://login.gov.il.:443:
		+ Links: 
			+ Crawling http://login.gov.il.:443 
		+ Searching for directories...
		+ Searching open folders... 


	+ URL to crawl: https://mail.gov.il.
	+ Date: 2020-01-07

	+ Crawling URL: https://mail.gov.il.:
		+ Links: 
			+ Crawling https://mail.gov.il. 
		+ Searching for directories...
		+ Searching open folders... 

--Finished--
Summary information for domain gov.il.
-----------------------------------------

	Domain Ips Information:
		IP: 128.139.35.5
			HostName: ilns.ilan.net.il 			Type: NS
			HostName: ilns.ilan.net.il			Type: PTR
			Country: Israel
			Is Active: True (reset ttl 64)
			Port: 53/tcp  open   domain       syn-ack ttl 52 (unknown banner: Pre-Release 0.0.0.0 - Good Luck)
				Script Info: | dns-nsid: 
				Script Info: |_  bind.version: Pre-Release 0.0.0.0 - Good Luck
				Script Info: | fingerprint-strings: 
				Script Info: |   DNSVersionBindReqTCP: 
				Script Info: |     version
				Script Info: |     bind
				Script Info: |_    Pre-Release 0.0.0.0 - Good Luck
		IP: 147.237.1.132
			Sub Domain: ica.gov.il.
			HostName: ica.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
			Port: 80/tcp  open   http         syn-ack ttl 57
				Script Info: | fingerprint-strings: 
				Script Info: |   GetRequest, HTTPOptions: 
				Script Info: |     HTTP/1.0 404 Not Found
				Script Info: |     Content-Type: text/html; charset=UTF-8
				Script Info: |     Cache-Control: no-cache
				Script Info: |     Pragma: no-cache
				Script Info: |     Expires: 0
				Script Info: |     Connection: close
				Script Info: |     <!DOCTYPE html>
				Script Info: |     <html lang="he">
				Script Info: |     <head>
				Script Info: |     <title>error page</title>
				Script Info: |     <meta charset="utf-8">
				Script Info: |     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				Script Info: |     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				Script Info: |     <style>
				Script Info: |     -webkit-box-sizing:border-box;
				Script Info: |     -moz-box-sizing:border-box;
				Script Info: |     box-sizing:border-box;
				Script Info: |     body {
				Script Info: |     direction:rtl;
				Script Info: |     text-align:right;
				Script Info: |     height: 100%;
				Script Info: |     font-family:arial;
				Script Info: |     display:flex;
				Script Info: |     margin: 0;
				Script Info: |     header
				Script Info: |     height:90px;
				Script Info: |     color:#285c7e;
				Script Info: |     .wra {
				Script Info: |     flex:1 1 auto;
				Script Info: |     display: flex;
				Script Info: |_    flex-flow:column nowrap;
			Port: 443/tcp open   ssl/https    syn-ack ttl 117
				Script Info: | fingerprint-strings: 
				Script Info: |   GetRequest, HTTPOptions: 
				Script Info: |     HTTP/1.0 404 Not Found
				Script Info: |     Content-Type: text/html; charset=UTF-8
				Script Info: |     Cache-Control: no-cache
				Script Info: |     Pragma: no-cache
				Script Info: |     Expires: 0
				Script Info: |     Connection: close
				Script Info: |     <!DOCTYPE html>
				Script Info: |     <html lang="he">
				Script Info: |     <head>
				Script Info: |     <title>error page</title>
				Script Info: |     <meta charset="utf-8">
				Script Info: |     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				Script Info: |     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				Script Info: |     <style>
				Script Info: |     -webkit-box-sizing:border-box;
				Script Info: |     -moz-box-sizing:border-box;
				Script Info: |     box-sizing:border-box;
				Script Info: |     body {
				Script Info: |     direction:rtl;
				Script Info: |     text-align:right;
				Script Info: |     height: 100%;
				Script Info: |     font-family:arial;
				Script Info: |     display:flex;
				Script Info: |     margin: 0;
				Script Info: |     header
				Script Info: |     height:90px;
				Script Info: |     color:#285c7e;
				Script Info: |     .wra {
				Script Info: |     flex:1 1 auto;
				Script Info: |     display: flex;
				Script Info: |_    flex-flow:column nowrap;
		IP: 82.166.0.0
			Type: SPF
			Is Active: True (reset ttl 64)
			Port: 21/tcp   open   ftp          syn-ack ttl 114 FileZilla ftpd 0.9.41 beta
				Script Info: | ftp-syst: 
				Script Info: |_  SYST: UNIX emulated by FileZilla
			Port: 80/tcp   open   http         syn-ack ttl 50  Microsoft IIS httpd 8.0
				Script Info: | http-methods: 
				Script Info: |   Supported Methods: OPTIONS TRACE GET HEAD POST
				Script Info: |_  Potentially risky methods: TRACE
				Script Info: |_http-server-header: Microsoft-IIS/8.0
				Script Info: |_http-title: 403 - Forbidden: Access is denied.
			Port: 443/tcp  open   ssl/http     syn-ack ttl 50  Microsoft IIS httpd 8.0
				Script Info: | http-methods: 
				Script Info: |   Supported Methods: OPTIONS TRACE GET HEAD POST
				Script Info: |_  Potentially risky methods: TRACE
				Script Info: |_http-server-header: Microsoft-IIS/8.0
				Script Info: |_http-title: 403 - Forbidden: Access is denied.
				Script Info: | ssl-cert: Subject: commonName=gis.mei-lod.co.il
				Script Info: | Subject Alternative Name: DNS:gis.mei-lod.co.il, DNS:www.gis.mei-lod.co.il
				Script Info: | Issuer: commonName=COMODO RSA Domain Validation Secure Server CA/organizationName=COMODO CA Limited/stateOrProvinceName=Greater Manchester/countryName=GB
				Script Info: | Public Key type: rsa
				Script Info: | Public Key bits: 2048
				Script Info: | Signature Algorithm: sha256WithRSAEncryption
				Script Info: | Not valid before: 2018-06-03T00:00:00
				Script Info: | Not valid after:  2020-06-13T23:59:59
				Script Info: | MD5:   d20d 942b e836 6332 756d 0d01 1596 8dd0
				Script Info: |_SHA-1: 8c8a 9293 5e35 8bb7 5fcc 8da3 a5e5 783c 6847 6f34
			Port: 8008/tcp open   http         syn-ack ttl 51
				Script Info: | fingerprint-strings: 
				Script Info: |   FourOhFourRequest: 
				Script Info: |     HTTP/1.1 302 Found
				Script Info: |     Location: https://:8010/nice%20ports%2C/Tri%6Eity.txt%2ebak
				Script Info: |     Connection: close
				Script Info: |     X-Frame-Options: SAMEORIGIN
				Script Info: |     X-XSS-Protection: 1; mode=block
				Script Info: |     X-Content-Type-Options: nosniff
				Script Info: |     Content-Security-Policy: frame-ancestors
				Script Info: |   GenericLines, HTTPOptions, RTSPRequest, SIPOptions: 
				Script Info: |     HTTP/1.1 302 Found
				Script Info: |     Location: https://:8010
				Script Info: |     Connection: close
				Script Info: |     X-Frame-Options: SAMEORIGIN
				Script Info: |     X-XSS-Protection: 1; mode=block
				Script Info: |     X-Content-Type-Options: nosniff
				Script Info: |     Content-Security-Policy: frame-ancestors
				Script Info: |   GetRequest: 
				Script Info: |     HTTP/1.1 302 Found
				Script Info: |     Location: https://:8010/
				Script Info: |     Connection: close
				Script Info: |     X-Frame-Options: SAMEORIGIN
				Script Info: |     X-XSS-Protection: 1; mode=block
				Script Info: |     X-Content-Type-Options: nosniff
				Script Info: |_    Content-Security-Policy: frame-ancestors
				Script Info: | http-methods: 
				Script Info: |_  Supported Methods: GET HEAD POST OPTIONS
				Script Info: |_http-title: Did not follow redirect to https://82.166.0.0:8010/
				Script Info: |_https-redirect: ERROR: Script execution failed (use -d to debug)
			Os Info:  OS: Windows; CPE: cpe:/o:microsoft:windows
		IP: 147.237.0.178
			HostName: test.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
		IP: 147.237.2.176
			HostName: login.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
			Port: 80/tcp  open   http         syn-ack ttl 57
				Script Info: | fingerprint-strings: 
				Script Info: |   GetRequest, HTTPOptions: 
				Script Info: |     HTTP/1.0 404 Not Found
				Script Info: |     Content-Type: text/html; charset=UTF-8
				Script Info: |     Cache-Control: no-cache
				Script Info: |     Pragma: no-cache
				Script Info: |     Expires: 0
				Script Info: |     Connection: close
				Script Info: |     <!DOCTYPE html>
				Script Info: |     <html lang="he">
				Script Info: |     <head>
				Script Info: |     <title>error page</title>
				Script Info: |     <meta charset="utf-8">
				Script Info: |     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				Script Info: |     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				Script Info: |     <style>
				Script Info: |     -webkit-box-sizing:border-box;
				Script Info: |     -moz-box-sizing:border-box;
				Script Info: |     box-sizing:border-box;
				Script Info: |     body {
				Script Info: |     direction:rtl;
				Script Info: |     text-align:right;
				Script Info: |     height: 100%;
				Script Info: |     font-family:arial;
				Script Info: |     display:flex;
				Script Info: |     margin: 0;
				Script Info: |     header
				Script Info: |     height:90px;
				Script Info: |     color:#285c7e;
				Script Info: |     .wra {
				Script Info: |     flex:1 1 auto;
				Script Info: |     display: flex;
				Script Info: |_    flex-flow:column nowrap;
				Script Info: |_http-title: error page
			Port: 443/tcp open   ssl/https    syn-ack ttl 52
				Script Info: | fingerprint-strings: 
				Script Info: |   GetRequest, HTTPOptions: 
				Script Info: |     HTTP/1.0 404 Not Found
				Script Info: |     Content-Type: text/html; charset=UTF-8
				Script Info: |     Cache-Control: no-cache
				Script Info: |     Pragma: no-cache
				Script Info: |     Expires: 0
				Script Info: |     Connection: close
				Script Info: |     <!DOCTYPE html>
				Script Info: |     <html lang="he">
				Script Info: |     <head>
				Script Info: |     <title>error page</title>
				Script Info: |     <meta charset="utf-8">
				Script Info: |     <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
				Script Info: |     <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
				Script Info: |     <style>
				Script Info: |     -webkit-box-sizing:border-box;
				Script Info: |     -moz-box-sizing:border-box;
				Script Info: |     box-sizing:border-box;
				Script Info: |     body {
				Script Info: |     direction:rtl;
				Script Info: |     text-align:right;
				Script Info: |     height: 100%;
				Script Info: |     font-family:arial;
				Script Info: |     display:flex;
				Script Info: |     margin: 0;
				Script Info: |     header
				Script Info: |     height:90px;
				Script Info: |     color:#285c7e;
				Script Info: |     .wra {
				Script Info: |     flex:1 1 auto;
				Script Info: |     display: flex;
				Script Info: |_    flex-flow:column nowrap;
				Script Info: |_http-title: error page
				Script Info: | ssl-cert: Subject: commonName=login.gov.il
				Script Info: | Subject Alternative Name: DNS:login.gov.il, DNS:www.login.gov.il
				Script Info: | Issuer: commonName=Thawte RSA CA 2018/organizationName=DigiCert Inc/countryName=US
				Script Info: | Public Key type: rsa
				Script Info: | Public Key bits: 2048
				Script Info: | Signature Algorithm: sha256WithRSAEncryption
				Script Info: | Not valid before: 2018-10-29T00:00:00
				Script Info: | Not valid after:  2020-10-28T12:00:00
				Script Info: | MD5:   dbf0 836d f2ee b97d e4ef 0b1f 7a3d e8be
				Script Info: |_SHA-1: 53f5 0a79 32da 480c 5cd4 ed84 9266 e2cc f213 f48b
		IP: 54.235.64.30
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 82.166.225.0
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 212.150.211.0
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 147.237.71.1
			HostName: dns.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
		IP: 192.114.70.0
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 54.214.13.30
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 54.214.19.44
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 147.237.74.1
			HostName: mail.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
			Port: 443/tcp open   ssl/http     syn-ack ttl 245 Microsoft IIS httpd 10.0
				Script Info: |_http-favicon: Unknown favicon MD5: 39917FA48E318B4527565B93FFB395ED
				Script Info: | http-methods: 
				Script Info: |_  Supported Methods: GET HEAD POST OPTIONS
				Script Info: |_http-server-header: Microsoft-IIS/10.0
				Script Info: | http-title: Outlook
				Script Info: |_Requested resource was https://147.237.74.1/owa/auth/logon.aspx?url=https%3a%2f%2f147.237.74.1%2fowa%2f&reason=0
				Script Info: | ssl-cert: Subject: commonName=ext-mail.gov.il
				Script Info: | Subject Alternative Name: DNS:ext-mail.gov.il, DNS:www.ext-mail.gov.il
				Script Info: | Issuer: commonName=Thawte RSA CA 2018/organizationName=DigiCert Inc/countryName=US
				Script Info: | Public Key type: rsa
				Script Info: | Public Key bits: 2048
				Script Info: | Signature Algorithm: sha256WithRSAEncryption
				Script Info: | Not valid before: 2019-03-03T00:00:00
				Script Info: | Not valid after:  2021-04-01T12:00:00
				Script Info: | MD5:   bc63 0132 2574 e533 e13b c8c6 b392 4bae
				Script Info: |_SHA-1: d051 33dd cd54 98cd 57c0 c28c ecb5 c684 90e8 b013
			Port: 465/tcp open   smtp         syn-ack ttl 244 Microsoft Exchange smtpd
				Script Info: | smtp-commands: Mailgov-Exch-01.mail.gov.il Hello [104.245.145.189], SIZE 37748736, PIPELINING, DSN, ENHANCEDSTATUSCODES, STARTTLS, X-ANONYMOUSTLS, AUTH GSSAPI NTLM LOGIN, X-EXPS GSSAPI NTLM, 8BITMIME, BINARYMIME, CHUNKING, XEXCH50, SMTPUTF8, XRDST, XSHADOWREQUEST, 
				Script Info: |_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT 
				Script Info: | smtp-ntlm-info: 
				Script Info: |   Target_Name: MAIL
				Script Info: |   NetBIOS_Domain_Name: MAIL
				Script Info: |   NetBIOS_Computer_Name: MAILGOV-EXCH-01
				Script Info: |   DNS_Domain_Name: mail.gov.il
				Script Info: |   DNS_Computer_Name: Mailgov-Exch-01.mail.gov.il
				Script Info: |   DNS_Tree_Name: mail.gov.il
				Script Info: |_  Product_Version: 10.0.17763
				Script Info: | ssl-cert: Subject: commonName=Mailgov-Exch-01
				Script Info: | Subject Alternative Name: DNS:Mailgov-Exch-01, DNS:Mailgov-Exch-01.mail.gov.il
				Script Info: | Issuer: commonName=Mailgov-Exch-01
				Script Info: | Public Key type: rsa
				Script Info: | Public Key bits: 2048
				Script Info: | Signature Algorithm: sha1WithRSAEncryption
				Script Info: | Not valid before: 2019-02-06T15:40:30
				Script Info: | Not valid after:  2024-02-06T15:40:30
				Script Info: | MD5:   c335 c18b 5956 5441 fdb8 d1b4 3138 c46d
				Script Info: |_SHA-1: 5465 b227 3160 0788 9247 b6c4 12f7 d836 1843 9964
			Port: 995/tcp open   ssl/pop3     syn-ack ttl 244 Microsoft Exchange 2007-2010 pop3d
				Script Info: |_pop3-capabilities: USER SASL(PLAIN) UIDL TOP
				Script Info: | ssl-cert: Subject: commonName=ext-mail.gov.il
				Script Info: | Subject Alternative Name: DNS:ext-mail.gov.il, DNS:www.ext-mail.gov.il
				Script Info: | Issuer: commonName=Thawte RSA CA 2018/organizationName=DigiCert Inc/countryName=US
				Script Info: | Public Key type: rsa
				Script Info: | Public Key bits: 2048
				Script Info: | Signature Algorithm: sha256WithRSAEncryption
				Script Info: | Not valid before: 2019-03-03T00:00:00
				Script Info: | Not valid after:  2021-04-01T12:00:00
				Script Info: | MD5:   bc63 0132 2574 e533 e13b c8c6 b392 4bae
				Script Info: |_SHA-1: d051 33dd cd54 98cd 57c0 c28c ecb5 c684 90e8 b013
				Script Info: Device type: WAP|media device|phone|general purpose
				Script Info: Running (JUST GUESSING): Netgear embedded (96%), Apple iOS 5.X|6.X|7.X|8.X (92%), Apple OS X 10.8.X|10.11.X (91%), Linux 2.6.X (90%)
			Os Info:  Host: Mailgov-Exch-01.mail.gov.il; OS: Windows; CPE: cpe:/o:microsoft:windows
				Script Info: |_clock-skew: -2s
		IP: 194.90.186.0
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 209.88.196.0
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 212.29.237.0
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 147.237.0.206
			HostName: www.gov.il. 			Type: A
			HostName: search.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
		IP: 54.214.19.26
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 54.214.13.37
			Type: SPF
			Is Active: True (reset ttl 64)
		IP: 147.237.71.125
			HostName: mail.tehila.gov.il 			Type: MX
			Country: Israel
			Is Active: True (reset ttl 64)
		IP: 147.237.70.0
			Type: SPF
			Is Active: True (reset ttl 64)

--------------End Summary --------------
-----------------------------------------



	Checking if the hostname ica.gov.il. given is in fact a domain...

Analyzing domain: ica.gov.il.
	Checking NameServers using system default resolver...
		IP: 2.22.230.64 (Europe)
			HostName: eur6.akam.net 			Type: NS
			HostName: ns2-64.akam.net			Type: PTR
		IP: 23.211.133.65 (United States)
			HostName: use4.akam.net 			Type: NS
			HostName: a6-65.akam.net			Type: PTR
		IP: 95.100.173.64 (Europe)
			HostName: eur2.akam.net 			Type: NS
			HostName: a28-64.akam.net			Type: PTR
		IP: 184.26.161.64 (United States)
			HostName: usw2.akam.net 			Type: NS
			HostName: a14-64.akam.net			Type: PTR
		IP: 193.108.91.69 (Europe)
			HostName: ns1-69.akam.net 			Type: NS
			HostName: ns1-69.akam.net			Type: PTR
		IP: 184.85.248.64 (United States)
			HostName: asia4.akam.net 			Type: NS
			HostName: asia4.akam.net			Type: PTR
		IP: 62.219.20.20 (Israel)
			HostName: dns3.gov.il 			Type: NS
			HostName: bzq-62-219-20-20.dcenter.bezeqint.net		Type: PTR
		IP: 23.211.61.64 (United States)
			HostName: asia3.akam.net 			Type: NS
			HostName: a22-64.akam.net			Type: PTR
		IP: 193.108.91.111 (Europe)
			HostName: ns1-111.akam.net 			Type: NS
			HostName: ns1-111.akam.net			Type: PTR

	Checking MailServers using system default resolver...
		WARNING!! There are no MX records for this domain

	Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
		No zone transfer found on nameserver 2.22.230.64
		No zone transfer found on nameserver 193.108.91.111
		No zone transfer found on nameserver 62.219.20.20
		No zone transfer found on nameserver 184.26.161.64
		No zone transfer found on nameserver 95.100.173.64
		No zone transfer found on nameserver 23.211.61.64
		No zone transfer found on nameserver 23.211.133.65
		No zone transfer found on nameserver 184.85.248.64
		No zone transfer found on nameserver 193.108.91.69

	Checking SPF record...
		No SPF record

	Checking 192 most common hostnames using system default resolver...
		IP: 147.237.1.132 (Israel)
			HostName: www.ica.gov.il. 			Type: A
		IP: 147.237.1.179 (Israel)
			HostName: old.ica.gov.il. 			Type: A

	Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
		Checking netblock 2.22.230.0
		Checking netblock 193.108.91.0
		Checking netblock 147.237.1.0
		Checking netblock 62.219.20.0
		Checking netblock 184.26.161.0
		Checking netblock 95.100.173.0
		Checking netblock 23.211.61.0
		Checking netblock 23.211.133.0
		Checking netblock 184.85.248.0

	Searching for ica.gov.il. emails in Google

	Checking 11 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
		Host 2.22.230.64 is up (echo-reply ttl 56)
		Host 193.108.91.111 is up (reset ttl 64)
		Host 147.237.1.132 is up (reset ttl 64)
		Host 62.219.20.20 is up (reset ttl 64)
		Host 184.26.161.64 is up (echo-reply ttl 54)
		Host 95.100.173.64 is up (reset ttl 64)
		Host 147.237.1.179 is up (reset ttl 64)
		Host 23.211.61.64 is up (reset ttl 64)
		Host 23.211.133.65 is up (reset ttl 64)
		Host 184.85.248.64 is up (reset ttl 64)
		Host 193.108.91.69 is up (reset ttl 64)

	Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
		Scanning ip 2.22.230.64 (ns2-64.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 56 (unknown banner: 25926.30)
				| dns-nsid: 
				|   id.server: 25926.31
				|_  bind.version: 17146.2
		Scanning ip 193.108.91.111 (ns1-111.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 27934.29)
				| dns-nsid: 
				|   id.server: 27934.22
				|_  bind.version: 27934.23
		Scanning ip 147.237.1.132 (www.ica.gov.il.):
		Scanning ip 62.219.20.20 (bzq-62-219-20-20.dcenter.bezeqint.net (PTR)):
			22/tcp   open     tcpwrapped    syn-ack ttl 56
				|_ssh-hostkey: ERROR: Script execution failed (use -d to debug)
			80/tcp   open     tcpwrapped    syn-ack ttl 59
			8080/tcp open     tcpwrapped    syn-ack ttl 59
		Scanning ip 184.26.161.64 (a14-64.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 54 (unknown banner: 26479.124)
				| dns-nsid: 
				|   id.server: 26479.124
				|_  bind.version: 26479.125
		Scanning ip 95.100.173.64 (a28-64.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 54 (unknown banner: 33835.6)
				| dns-nsid: 
				|   id.server: 33835.6
				|_  bind.version: 33835.6
		Scanning ip 147.237.1.179 (old.ica.gov.il.):
		Scanning ip 23.211.61.64 (a22-64.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 47 (unknown banner: 32864.156)
				| dns-nsid: 
				|   id.server: 32865.233
				|_  bind.version: 32865.198
				Device type: broadband router|WAP|general purpose|printer|webcam
				Running (JUST GUESSING): Asus embedded (93%), Linux 2.6.X|2.4.X|3.X (93%), Lexmark embedded (90%), AXIS embedded (90%)
		Scanning ip 23.211.133.65 (a6-65.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 27934.29)
				| dns-nsid: 
				|   id.server: 27934.28
				|_  bind.version: 27934.29
				Device type: broadband router|WAP|general purpose
				Running (JUST GUESSING): Asus embedded (92%), Linux 2.6.X|2.4.X|3.X (92%), OpenBSD 4.X (91%)
		Scanning ip 184.85.248.64 (asia4.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 30577.79)
				| dns-nsid: 
				|   id.server: 30577.77
				|_  bind.version: 30577.78
				Device type: broadband router|WAP|general purpose
				Running (JUST GUESSING): Asus embedded (92%), Linux 2.6.X|2.4.X|3.X (92%)
		Scanning ip 193.108.91.69 (ns1-69.akam.net (PTR)):
			53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 27934.28)
				| dns-nsid: 
				|   id.server: 27934.29
				|_  bind.version: 27934.22
				Device type: broadband router|WAP|printer|general purpose|webcam
				Running (JUST GUESSING): Asus embedded (91%), Linux 2.6.X|2.4.X|3.X (91%), Lexmark embedded (90%), AXIS embedded (88%)
	WebCrawling domain's web servers... up to 50 max links.
--Finished--
Summary information for domain ica.gov.il.
-----------------------------------------

	Domain Ips Information:
		IP: 2.22.230.64
			HostName: eur6.akam.net 			Type: NS
			HostName: ns2-64.akam.net			Type: PTR
			Country: Europe
			Is Active: True (echo-reply ttl 56)
			Port: 53/tcp  open   domain       syn-ack ttl 56 (unknown banner: 25926.30)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 25926.31
				Script Info: |_  bind.version: 17146.2
		IP: 193.108.91.111
			HostName: ns1-111.akam.net 			Type: NS
			HostName: ns1-111.akam.net			Type: PTR
			Country: Europe
			Is Active: True (reset ttl 64)
			Port: 53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 27934.29)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 27934.22
				Script Info: |_  bind.version: 27934.23
		IP: 147.237.1.132
			HostName: www.ica.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
		IP: 62.219.20.20
			HostName: dns3.gov.il 			Type: NS
			HostName: bzq-62-219-20-20.dcenter.bezeqint.net		Type: PTR
			Country: Israel
			Is Active: True (reset ttl 64)
			Port: 22/tcp   open     tcpwrapped    syn-ack ttl 56
				Script Info: |_ssh-hostkey: ERROR: Script execution failed (use -d to debug)
			Port: 80/tcp   open     tcpwrapped    syn-ack ttl 59
			Port: 8080/tcp open     tcpwrapped    syn-ack ttl 59
		IP: 184.26.161.64
			HostName: usw2.akam.net 			Type: NS
			HostName: a14-64.akam.net			Type: PTR
			Country: United States
			Is Active: True (echo-reply ttl 54)
			Port: 53/tcp  open   domain       syn-ack ttl 54 (unknown banner: 26479.124)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 26479.124
				Script Info: |_  bind.version: 26479.125
		IP: 95.100.173.64
			HostName: eur2.akam.net 			Type: NS
			HostName: a28-64.akam.net			Type: PTR
			Country: Europe
			Is Active: True (reset ttl 64)
			Port: 53/tcp  open   domain       syn-ack ttl 54 (unknown banner: 33835.6)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 33835.6
				Script Info: |_  bind.version: 33835.6
		IP: 147.237.1.179
			HostName: old.ica.gov.il. 			Type: A
			Country: Israel
			Is Active: True (reset ttl 64)
		IP: 23.211.61.64
			HostName: asia3.akam.net 			Type: NS
			HostName: a22-64.akam.net			Type: PTR
			Country: United States
			Is Active: True (reset ttl 64)
			Port: 53/tcp  open   domain       syn-ack ttl 47 (unknown banner: 32864.156)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 32865.233
				Script Info: |_  bind.version: 32865.198
				Script Info: Device type: broadband router|WAP|general purpose|printer|webcam
				Script Info: Running (JUST GUESSING): Asus embedded (93%), Linux 2.6.X|2.4.X|3.X (93%), Lexmark embedded (90%), AXIS embedded (90%)
		IP: 23.211.133.65
			HostName: use4.akam.net 			Type: NS
			HostName: a6-65.akam.net			Type: PTR
			Country: United States
			Is Active: True (reset ttl 64)
			Port: 53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 27934.29)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 27934.28
				Script Info: |_  bind.version: 27934.29
				Script Info: Device type: broadband router|WAP|general purpose
				Script Info: Running (JUST GUESSING): Asus embedded (92%), Linux 2.6.X|2.4.X|3.X (92%), OpenBSD 4.X (91%)
		IP: 184.85.248.64
			HostName: asia4.akam.net 			Type: NS
			HostName: asia4.akam.net			Type: PTR
			Country: United States
			Is Active: True (reset ttl 64)
			Port: 53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 30577.79)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 30577.77
				Script Info: |_  bind.version: 30577.78
				Script Info: Device type: broadband router|WAP|general purpose
				Script Info: Running (JUST GUESSING): Asus embedded (92%), Linux 2.6.X|2.4.X|3.X (92%)
		IP: 193.108.91.69
			HostName: ns1-69.akam.net 			Type: NS
			HostName: ns1-69.akam.net			Type: PTR
			Country: Europe
			Is Active: True (reset ttl 64)
			Port: 53/tcp  open   domain       syn-ack ttl 57 (unknown banner: 27934.28)
				Script Info: | dns-nsid: 
				Script Info: |   id.server: 27934.29
				Script Info: |_  bind.version: 27934.22
				Script Info: Device type: broadband router|WAP|printer|general purpose|webcam
				Script Info: Running (JUST GUESSING): Asus embedded (91%), Linux 2.6.X|2.4.X|3.X (91%), Lexmark embedded (90%), AXIS embedded (88%)

--------------End Summary --------------
-----------------------------------------
#####################################################################################################################################
traceroute to www.gov.il (147.237.0.206), 30 hops max, 60 byte packets
 1  10.243.204.1 (10.243.204.1)  36.551 ms  36.541 ms  67.095 ms
 2  104.245.145.177 (104.245.145.177)  67.096 ms  67.062 ms  67.042 ms
 3  te0-0-2-1.225.nr11.b010988-1.yyz02.atlas.cogentco.com (38.104.156.9)  67.097 ms te0-1-1-9.219.ccr32.yyz02.atlas.cogentco.com (38.104.158.113)  67.022 ms te0-0-2-1.225.nr11.b010988-1.yyz02.atlas.cogentco.com (38.104.156.9)  67.047 ms
 4  te0-0-0-1.agr14.yyz02.atlas.cogentco.com (154.24.54.41)  67.031 ms  67.013 ms  66.986 ms
 5  ix-ae-16-0.tcore1.tnk-toronto.as6453.net (64.86.33.98)  66.820 ms  66.832 ms  66.763 ms
 6  ix-ae-16-0.tcore1.tnk-toronto.as6453.net (64.86.33.98)  66.772 ms  35.756 ms  73.954 ms
 7  if-ae-2-2.tcore2.tnk-toronto.as6453.net (64.86.33.90)  140.545 ms  211.777 ms  211.674 ms
 8  if-ae-8-2.tcore1.ct8-chicago.as6453.net (66.110.48.2)  230.854 ms if-ae-26-2.tcore2.nto-new-york.as6453.net (216.6.81.28)  211.667 ms  211.673 ms
 9  if-ae-2-39.tcore2.l78-london.as6453.net (80.231.131.17)  230.848 ms if-ae-26-2.tcore2.nto-new-york.as6453.net (216.6.81.28)  211.621 ms  211.569 ms
10  if-ae-9-2.tcore2.wyn-marseille.as6453.net (80.231.200.13)  230.700 ms if-ae-32-3.tcore2.ldn-london.as6453.net (80.231.20.106)  211.542 ms if-ae-2-39.tcore2.l78-london.as6453.net (80.231.131.17)  230.653 ms
11  80.231.200.74 (80.231.200.74)  260.540 ms  260.532 ms if-ae-9-2.tcore2.wyn-marseille.as6453.net (80.231.200.13)  230.532 ms
12  * 80.231.200.74 (80.231.200.74)  182.335 ms *
13  80.231.200.74 (80.231.200.74)  250.847 ms bzq-179-8-82.cust.bezeqint.net (212.179.8.82)  250.821 ms 80.231.200.74 (80.231.200.74)  250.813 ms
14  bzq-25-65-221.cust.bezeqint.net (212.25.65.221)  250.733 ms  250.681 ms *
15  * * bzq-25-65-221.cust.bezeqint.net (212.25.65.221)  239.891 ms
16  * * *
######################################################################################################################################
-----   gov.il   -----


Host's addresses:
__________________

gov.il.                                  310      IN    A        147.237.0.206


Name Servers:
______________

nse.ns.il.                               29346    IN    A        192.115.141.253
ns4.ns.il.                               80253    IN    A        204.61.216.134
sns-pb.isc.org.                          85486    IN    A         192.5.4.1
ns1.ns.il.                               80253    IN    A        194.146.106.122
nsa.ns.il.                               29346    IN    A        192.115.7.53
nsb.ns.il.                               29346    IN    A        192.115.7.60
ns3.ns.il.                               80253    IN    A        194.0.11.103
lookup.iucc.ac.il.                       39974    IN    A        128.139.34.240
dns3.gov.il.                             309      IN    A        62.219.20.20
ilns.ilan.net.il.                        80253    IN    A        128.139.35.5


Mail (MX) Servers:
___________________

mail.tehila.gov.il.                      310      IN    A        147.237.71.125


Google Results:
________________

  perhaps Google is blocking our queries.
 Check manually.


Brute forcing with /usr/share/dnsenum/dns.txt:
_______________________________________________

archive.gov.il.                          292      IN    CNAME    archives.gov.il.
archives.gov.il.                         3292     IN    A        192.124.249.12
dns.gov.il.                              285      IN    A        147.237.71.1
dns3.gov.il.                             286      IN    A        62.219.20.20
environment.gov.il.                      3600     IN    A        147.237.77.18
esb.gov.il.                              600      IN    A        147.237.0.72
forum.gov.il.                            291      IN    A        147.237.77.27
health.gov.il.                           3291     IN    A        147.237.1.176
justice.gov.il.                          600      IN    A        147.237.76.26
mail.gov.il.                             289      IN    A        147.237.74.1
mobile.gov.il.                           290      IN    A        147.237.0.13
ncsa.gov.il.                             600      IN    A        147.237.0.206
police.gov.il.                           3600     IN    A        147.237.76.155
search.gov.il.                           288      IN    CNAME       gov.il.
gov.il.                                  288      IN    A        147.237.0.206
survey.gov.il.                           288      IN    A        147.237.0.46
test.gov.il.                             287      IN    A        147.237.0.178
www.gov.il.                              289      IN    CNAME       gov.il.
gov.il.                                  289      IN    A        147.237.0.206


Launching Whois Queries:
_________________________

 whois ip result:   147.237.0.0        ->      147.237.0.0/16
 c class default:   62.219.20.0        ->      62.219.20.0/24      (whois netrange operation failed)
 whois ip result:   192.124.249.0      ->      192.124.249.0/24


gov.il______

 147.237.0.0/16
 192.124.249.0/24
 62.219.20.0/24

######################################################################################################################################
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-07 16:51 EST
Nmap scan report for 147.237.0.206
Host is up (0.29s latency).
Not shown: 471 filtered ports, 3 closed ports
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT    STATE SERVICE    VERSION
80/tcp  open  tcpwrapped
|_http-title: error page
443/tcp open  tcpwrapped
| ssl-cert: Subject: commonName=www.gov.il
| Subject Alternative Name: DNS:www.gov.il, DNS:www.www.gov.il
| Not valid before: 2019-02-18T00:00:00
|_Not valid after:  2021-03-23T12:00:00
Device type: WAP|media device|phone|general purpose
Running (JUST GUESSING): Netgear embedded (95%), Apple iOS 5.X|6.X|7.X|4.X (91%), Linux 2.6.X (90%), Apple OS X 10.8.X (90%)
OS CPE: cpe:/h:netgear:wnr834bv2 cpe:/o:apple:iphone_os:5.1.1 cpe:/o:apple:iphone_os:6 cpe:/o:apple:iphone_os:7.1.1 cpe:/o:linux:linux_kernel:2.6 cpe:/o:apple:mac_os_x:10.8 cpe:/o:apple:iphone_os:4
Aggressive OS guesses: Netgear WNR834Bv2 WAP (95%), Apple iOS 5.1.1 (91%), Apple iOS 5.1.1 - 6.1 (91%), Apple iOS 7.1.1 (91%), Linux 2.6.18 - 2.6.22 (90%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (90%), Apple iOS 4.3.1 - 4.3.5 (88%), Apple iOS 8.0 - 8.1 (Darwin 14.0.0) (88%), Apple iOS 8.1.2 (Darwin 14.0.0) (88%), Apple iOS 8.3 (Darwin 14.0.0) (88%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 7 hops

TRACEROUTE (using port 80/tcp)
HOP RTT       ADDRESS
1   399.05 ms 10.247.204.1
2   399.14 ms salmondeal.com.0.116.160.in-addr.arpa (160.116.0.161)
3   399.11 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
4   399.15 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
5   399.14 ms bzq-179-8-90.cust.bezeqint.net (212.179.8.90)
6   399.25 ms 10.20.129.99
7   399.30 ms 147.237.0.206
######################################################################################################################################
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-07 16:52 EST
Nmap scan report for 147.237.0.206
Host is up (0.22s latency).
Not shown: 15 filtered ports, 1 closed port
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT     STATE         SERVICE      VERSION
53/udp   open|filtered domain
67/udp   open|filtered dhcps
68/udp   open|filtered dhcpc
69/udp   open|filtered tftp
88/udp   open|filtered kerberos-sec
123/udp  open|filtered ntp
139/udp  open|filtered netbios-ssn
161/udp  open|filtered snmp
162/udp  open|filtered snmptrap
389/udp  open|filtered ldap
520/udp  open|filtered route
2049/udp open|filtered nfs
Too many fingerprints match this host to give specific OS details

TRACEROUTE (using port 138/udp)
HOP RTT       ADDRESS
1   ...
2   338.72 ms 10.247.204.1
3   ...
4   393.60 ms 10.247.204.1
5   384.38 ms 10.247.204.1
6   384.38 ms 10.247.204.1
7   384.38 ms 10.247.204.1
8   384.39 ms 10.247.204.1
9   384.39 ms 10.247.204.1
10  384.41 ms 10.247.204.1
11  ... 19
20  336.67 ms 10.247.204.1
21  168.77 ms 10.247.204.1
22  ... 27
28  168.19 ms 10.247.204.1
29  ...
30  169.49 ms 10.247.204.1
#####################################################################################################################################
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-07 16:57 EST
Nmap scan report for 147.237.0.206
Host is up.

PORT   STATE         SERVICE VERSION
67/tcp filtered      dhcps
67/udp open|filtered dhcps
|_dhcp-discover: ERROR: Script execution failed (use -d to debug)
Too many fingerprints match this host to give specific OS details

TRACEROUTE (using proto 1/icmp)
HOP RTT       ADDRESS
1   337.64 ms 10.247.204.1
2   507.43 ms salmondeal.com.0.116.160.in-addr.arpa (160.116.0.161)
3   507.39 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
4   507.45 ms bzq-219-189-185.cablep.bezeqint.net (62.219.189.185)
5   507.44 ms bzq-179-8-82.cust.bezeqint.net (212.179.8.82)
6   ... 30
#####################################################################################################################################
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-07 16:59 EST
Nmap scan report for 147.237.0.206
Host is up.

PORT   STATE         SERVICE VERSION
68/tcp filtered      dhcpc
68/udp open|filtered dhcpc
Too many fingerprints match this host to give specific OS details

TRACEROUTE (using proto 1/icmp)
HOP RTT       ADDRESS
1   340.90 ms 10.247.204.1
2   516.14 ms salmondeal.com.0.116.160.in-addr.arpa (160.116.0.161)
3   516.09 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
4   516.14 ms bzq-219-189-185.cablep.bezeqint.net (62.219.189.185)
5   516.16 ms bzq-179-8-82.cust.bezeqint.net (212.179.8.82)
6   ... 30
######################################################################################################################################
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-07 17:00 EST
Nmap scan report for 147.237.0.206
Host is up.

PORT   STATE         SERVICE VERSION
69/tcp filtered      tftp
69/udp open|filtered tftp
Too many fingerprints match this host to give specific OS details

TRACEROUTE (using proto 1/icmp)
HOP RTT       ADDRESS
1   337.56 ms 10.247.204.1
2   504.90 ms salmondeal.com.0.116.160.in-addr.arpa (160.116.0.161)
3   504.89 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
4   504.93 ms bzq-219-189-185.cablep.bezeqint.net (62.219.189.185)
5   504.86 ms bzq-179-8-82.cust.bezeqint.net (212.179.8.82)
6   ... 30
######################################################################################################################################
                                             Anonymous JTSEC #OpIsraël Full Recon #10