Report - 0x0.st/XO5m.txt

Report Overview

Visited public
2024-08-19 04:58:53
Tags
URL
0x0.st/XO5m.txt
Finishing URL
0x0.st/XO5m.txt
IP / ASN
168.119.145.117
#24940 Hetzner Online GmbH
Title
0x0.st/XO5m.txt

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Sent	Received	IP
r11.o.lencr.org	unknown	1.3 kB	3.6 kB	23.33.119.57
r10.o.lencr.org	unknown	981 B	2.7 kB	23.33.119.57
0x0.st	unknown	896 B	358 kB	168.119.145.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-08-19 04:58:28	low	Client IP	168.119.145.117	ET INFO File Sharing Domain Observed in TLS SNI (0x0 .st)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

	URL	IP	Response	Size
	r11.o.lencr.org/	23.33.119.57		504 B
URL r11.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 35ff8dc863582d47ef9d4cb12155b8d7 23c59ae3dfa696099532aa35f63d9521991048d1 e68081077af469094b8a5e9a76457a053b4deda361a03d93db9b56ccef78ef48 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "E68081077AF469094B8A5E9A76457A053B4DEDA361A03D93DB9B56CCEF78EF48" Last-Modified: Mon, 19 Aug 2024 00:42:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17814 Expires: Mon, 19 Aug 2024 09:55:21 GMT Date: Mon, 19 Aug 2024 04:58:27 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.33.119.57		504 B
URL r11.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 219f59137337a0ee601729cab5ec83f6 85f2e3496820405559fd526b44b9a915e0009a4f f9701bf0083b06f4a573774d1a4dd491236216bc08f1006a94ce79144df70a21 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "F9701BF0083B06F4A573774D1A4DD491236216BC08F1006A94CE79144DF70A21" Last-Modified: Sat, 17 Aug 2024 00:55:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5630 Expires: Mon, 19 Aug 2024 06:32:17 GMT Date: Mon, 19 Aug 2024 04:58:27 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 18cce98073c1bf25df62a3ca026dedbf 26ea37fc15ead14ac2047d074f6c4153d57775d0 c5fdde15e0dc09e045c2df21c77d2c87e6c7d4abe86048426f468fcd696054e0 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C5FDDE15E0DC09E045C2DF21C77D2C87E6C7D4ABE86048426F468FCD696054E0" Last-Modified: Sun, 18 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5263 Expires: Mon, 19 Aug 2024 06:26:10 GMT Date: Mon, 19 Aug 2024 04:58:27 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 69a9603269726ce602d708bf57058c4c 8689e9ea81ea9636e7b08c3ed42650553a0c4e3b 1a2339d740b715f3df1900d80114c8376ead57205961a6f896edf37b3ee3a897 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "1A2339D740B715F3DF1900D80114C8376EAD57205961A6F896EDF37B3EE3A897" Last-Modified: Sat, 17 Aug 2024 09:59:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5270 Expires: Mon, 19 Aug 2024 06:26:18 GMT Date: Mon, 19 Aug 2024 04:58:28 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 18f75729f3e25e2eb7f12b70dfce3849 479177b92dda7c4e8763c80a15cbc71c3386d06c 0b7da2da1fcba23c5118479e14828f87a605a32af15d0962f216115a9ff1d02a HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "0B7DA2DA1FCBA23C5118479E14828F87A605A32AF15D0962F216115A9FF1D02A" Last-Modified: Sun, 18 Aug 2024 15:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11351 Expires: Mon, 19 Aug 2024 08:07:39 GMT Date: Mon, 19 Aug 2024 04:58:28 GMT Connection: keep-alive`

	0x0.st/favicon.ico	168.119.145.117	404 Not Found	652 B
URL GET HTTP/2 0x0.st/favicon.ico IP 168.119.145.117:443 ASN #24940 Hetzner Online GmbH Requested by https://0x0.st/XO5m.txt Certificate IssuerLet's Encrypt Subject0x0.st Fingerprint97:35:10:36:8E:6D:D0:FE:9F:9A:24:8A:74:37:C7:F1:F0:EB:73:3E ValiditySat, 27 Jul 2024 22:09:52 GMT - Fri, 25 Oct 2024 22:09:51 GMT File type ASCII text Size 652 B (652 bytes) Hash 00d4a1a940091ddc0e3b7e2fc0077dc6 c9ff0d4be479d7ef27089e2809da92b05aafc3d9 350dd46bd226203c01f203396cdb7721f7f1749fdcb6c5f63d2c042ba29cd47b HTTP Headers `GET /favicon.ico HTTP/1.1 Host: 0x0.st User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://0x0.st/XO5m.txt DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found server: nginx date: Mon, 19 Aug 2024 04:58:28 GMT content-type: text/html; charset=utf-8 content-length: 652 X-Firefox-Spdy: h2`

	r11.o.lencr.org/	23.36.77.32		504 B
URL r11.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 7944981bcac427aa8d0aa016ec63764d 48bf925b10dc02afa8f597af8d26f5bf5efc0b7e 26bde594c33cd3386f4e65e3eaf0fc048fca46ed4a185f5c2aa70e8deeaffb0a HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "26BDE594C33CD3386F4E65E3EAF0FC048FCA46ED4A185F5C2AA70E8DEEAFFB0A" Last-Modified: Sat, 17 Aug 2024 21:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21147 Expires: Mon, 19 Aug 2024 10:50:57 GMT Date: Mon, 19 Aug 2024 04:58:30 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.77.32		504 B
URL r11.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 7944981bcac427aa8d0aa016ec63764d 48bf925b10dc02afa8f597af8d26f5bf5efc0b7e 26bde594c33cd3386f4e65e3eaf0fc048fca46ed4a185f5c2aa70e8deeaffb0a HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "26BDE594C33CD3386F4E65E3EAF0FC048FCA46ED4A185F5C2AA70E8DEEAFFB0A" Last-Modified: Sat, 17 Aug 2024 21:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21147 Expires: Mon, 19 Aug 2024 10:50:57 GMT Date: Mon, 19 Aug 2024 04:58:30 GMT Connection: keep-alive`

	0x0.st/XO5m.txt	168.119.145.117	200 OK	357 kB
URL User Request GET HTTP/2 0x0.st/XO5m.txt IP 168.119.145.117:443 ASN #24940 Hetzner Online GmbH Certificate IssuerLet's Encrypt Subject0x0.st Fingerprint97:35:10:36:8E:6D:D0:FE:9F:9A:24:8A:74:37:C7:F1:F0:EB:73:3E ValiditySat, 27 Jul 2024 22:09:52 GMT - Fri, 25 Oct 2024 22:09:51 GMT File type gzip compressed data, from Unix Size 357 kB (357105 bytes) Hash bf98261c446a70bff1e019be354a7f7f 486b7f9703b1932fa3ec36c81f70fdab08787b86 0948ef989c9c5fa42eda8de17041a23e931fa82dd40682889822b263b4d1455b HTTP Headers `GET /XO5m.txt HTTP/1.1 Host: 0x0.st User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Mon, 19 Aug 2024 04:58:28 GMT content-type: text/plain; charset=utf-8 last-modified: Sun, 04 Aug 2024 11:22:04 GMT vary: Accept-Encoding etag: W/"66af645c-db209" strict-transport-security: max-age=63072000; includeSubDomains; preload x-frame-options: sameorigin x-content-type-options: nosniff x-xss-protection: 1; mode=block content-security-policy: default-src 'none'; media-src 'self'; style-src 'none' 'unsafe-inline'; img-src 'self' https://img.shields.io referrer-policy: no-referrer, strict-origin-when-cross-origin content-encoding: gzip X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers