If this was a spying attempt they'd surely set up a less suspicious domain instead of a subdomain

On a different note, does someone know what this firewall software is called?