{"report_id":"1a8321f9-4e33-4ae7-ad54-3bba00cec3d4","version":6,"status":"done","tags":[],"date":"2024-09-04T04:46:23Z","url":{"schema":"http","addr":"154.39.158.19:6092/?id=130548758\u0026currency=PHP\u0026type=2","fqdn":"154.39.158.19","domain":"154.39.158.19","tld":""},"ip":{"addr":"154.39.158.19","port":0,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-28T22:48:06Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-09-03 18:12:24","alert_count":0,"request_count":4,"received_data":3549,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-09-03 18:12:05","alert_count":0,"request_count":5,"received_data":4440,"sent_data":1635,"comment":"","tags":null,"fingerprints":null},{"fqdn":"154.39.158.19:6092","ip":{"addr":"154.39.158.19","port":0,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":398,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zerossl.ocsp.sectigo.com","ip":{"addr":"104.18.38.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-16","domain_rank":4049,"first_seen":"2020-05-09 21:05:29","last_seen":"2024-09-03 18:37:49","alert_count":0,"request_count":1,"received_data":1219,"sent_data":336,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-04","alert":"Sinkholed","trigger":"154.39.158.19","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:45:57.925790071Z","timestamp":1725425157925,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"ED538EA400323F4C987F91C0B0AFC79A8526B62F7AA317DD62BD107CB37850A2\"\r\nLast-Modified: Tue, 03 Sep 2024 09:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5700\r\nExpires: Wed, 04 Sep 2024 06:20:57 GMT\r\nDate: Wed, 04 Sep 2024 04:45:57 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"8d2e6150f7d0845dc26f5bd5cd6f28dd","sha1":"6aad5091620585a5f76065c1888456ee70b88257","sha256":"ed538ea400323f4c987f91c0b0afc79a8526b62f7aa317dd62bd107cb37850a2","sha512":"dd2b8ba0eb764244c92b404bd053d75174a13127c61027fff0a538fa2d3375f480ee774bb73c01010e728b0f9ad66bc3dc9c6a1357e24ef34d10fb84b89bc9a1","ssdeep":"","tlshash":"31f0c0ba27ad7511adf1612025b4e83c2b546cfb74405aa874949041ed10ff8298241c","first_seen":"2024-09-03T15:32:51Z","last_seen":"2024-09-19T22:57:09.758778Z","times_seen":28107,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:45:57.944383338Z","timestamp":1725425157944,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"41C00088AFC20571F6A0C6998324D9517346256AC33696DC706192EC606FE7A7\"\r\nLast-Modified: Mon, 02 Sep 2024 12:20:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=9978\r\nExpires: Wed, 04 Sep 2024 07:32:15 GMT\r\nDate: Wed, 04 Sep 2024 04:45:57 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"66fbf7f95cb55f388373a20d4b1a736e","sha1":"afc34259758a563362367848629ff7639982e1fb","sha256":"41c00088afc20571f6a0c6998324d9517346256ac33696dc706192ec606fe7a7","sha512":"80f0c1a3f29e795722e05ea6260e1ec92780f3f554ace63e7a0e4ad5d030be18b0cde8397bffc652a92306b23ba802aa8a0db463bac3a6827e645816bd5759a0","ssdeep":"","tlshash":"02f00e7956f2e6c3faf8112314a6ed606c227aab780021a279800ac239c67f6678545c","first_seen":"2024-09-02T19:20:57Z","last_seen":"2024-09-19T23:09:36.632755Z","times_seen":35846,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:45:58.359286415Z","timestamp":1725425158359,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"2EFF28E3E6829BF2CFCBC417FD76313D5B5E8BA8A3F0F0DE6A5B5CDC2888E7E5\"\r\nLast-Modified: Mon, 02 Sep 2024 14:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19201\r\nExpires: Wed, 04 Sep 2024 10:05:59 GMT\r\nDate: Wed, 04 Sep 2024 04:45:58 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"1f0091b166a0138433eabf08a4530e4a","sha1":"769d1eeaefb4987198c821ea98e06ea8ba0de215","sha256":"2eff28e3e6829bf2cfcbc417fd76313d5b5e8ba8a3f0f0de6a5b5cdc2888e7e5","sha512":"364d524de90207f10545b2179829782e69bd266bbf207919deaadeb860795d7eb3208b252cf11c3a0012563ee5c90123a384f0a98780a90e6bbe017936f2cf5b","ssdeep":"","tlshash":"c7f00eba34e2a622b7f402a11978d43b6e30dfbcb82552f6a5c043e66c017b80540c4c","first_seen":"2024-09-03T06:12:03Z","last_seen":"2024-09-19T23:01:55.712232Z","times_seen":17078,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:45:58.680653616Z","timestamp":1725425158680,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"F9496CE271A170952F322AE70A9DA041E2A1E49A45FD2056F62A88358ACADD09\"\r\nLast-Modified: Mon, 02 Sep 2024 14:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3565\r\nExpires: Wed, 04 Sep 2024 05:45:23 GMT\r\nDate: Wed, 04 Sep 2024 04:45:58 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ddc456a9c96d929e15c05fe0f98b8768","sha1":"3eb86e0b169ada76e98ed62750b77a24e8b49eb4","sha256":"f9496ce271a170952f322ae70a9da041e2a1e49a45fd2056f62a88358acadd09","sha512":"def3914bb6929bd67e856d5da129f01ff441813cdd1744f2cd1915fa0873fdc8d2b8d23035054848f65aac77fe2310c1c60250b38160102aed9f7f65b3ab9711","ssdeep":"","tlshash":"38f005f247e17580f3e41a21546de3567b14fe3d281055aa005082e0ac81bde55c145c","first_seen":"2024-09-03T07:13:10Z","last_seen":"2024-09-19T23:01:32.914779Z","times_seen":14649,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:46:00.522122601Z","timestamp":1725425160522,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A\"\r\nLast-Modified: Mon, 02 Sep 2024 14:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11498\r\nExpires: Wed, 04 Sep 2024 07:57:38 GMT\r\nDate: Wed, 04 Sep 2024 04:46:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c96a4972e341191f93e963880196f8e1","sha1":"8318aa6dcbdababe8728023ec9ef3aaac10917a9","sha256":"dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a","sha512":"421ac0df88874013ca3d60effb579ccd6e51ef8474cd8656e2632446e6706ce125bd3044bf5ed5826ba1bc65a9b4464617a17758a343c993914c3b07368940cb","ssdeep":"","tlshash":"16f00eb326717a418cf84c21d8cac02e0e28777d058341670a169af36aa17fe150040c","first_seen":"2024-09-02T19:32:31Z","last_seen":"2024-09-19T23:09:22.857014Z","times_seen":21388,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:46:00.523160278Z","timestamp":1725425160523,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A\"\r\nLast-Modified: Mon, 02 Sep 2024 14:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11498\r\nExpires: Wed, 04 Sep 2024 07:57:38 GMT\r\nDate: Wed, 04 Sep 2024 04:46:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c96a4972e341191f93e963880196f8e1","sha1":"8318aa6dcbdababe8728023ec9ef3aaac10917a9","sha256":"dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a","sha512":"421ac0df88874013ca3d60effb579ccd6e51ef8474cd8656e2632446e6706ce125bd3044bf5ed5826ba1bc65a9b4464617a17758a343c993914c3b07368940cb","ssdeep":"","tlshash":"16f00eb326717a418cf84c21d8cac02e0e28777d058341670a169af36aa17fe150040c","first_seen":"2024-09-02T19:32:31Z","last_seen":"2024-09-19T23:09:22.857014Z","times_seen":21388,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:46:00.524138063Z","timestamp":1725425160524,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A\"\r\nLast-Modified: Mon, 02 Sep 2024 14:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11498\r\nExpires: Wed, 04 Sep 2024 07:57:38 GMT\r\nDate: Wed, 04 Sep 2024 04:46:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c96a4972e341191f93e963880196f8e1","sha1":"8318aa6dcbdababe8728023ec9ef3aaac10917a9","sha256":"dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a","sha512":"421ac0df88874013ca3d60effb579ccd6e51ef8474cd8656e2632446e6706ce125bd3044bf5ed5826ba1bc65a9b4464617a17758a343c993914c3b07368940cb","ssdeep":"","tlshash":"16f00eb326717a418cf84c21d8cac02e0e28777d058341670a169af36aa17fe150040c","first_seen":"2024-09-02T19:32:31Z","last_seen":"2024-09-19T23:09:22.857014Z","times_seen":21388,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:46:00.525000386Z","timestamp":1725425160525,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A\"\r\nLast-Modified: Mon, 02 Sep 2024 14:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11498\r\nExpires: Wed, 04 Sep 2024 07:57:38 GMT\r\nDate: Wed, 04 Sep 2024 04:46:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c96a4972e341191f93e963880196f8e1","sha1":"8318aa6dcbdababe8728023ec9ef3aaac10917a9","sha256":"dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a","sha512":"421ac0df88874013ca3d60effb579ccd6e51ef8474cd8656e2632446e6706ce125bd3044bf5ed5826ba1bc65a9b4464617a17758a343c993914c3b07368940cb","ssdeep":"","tlshash":"16f00eb326717a418cf84c21d8cac02e0e28777d058341670a169af36aa17fe150040c","first_seen":"2024-09-02T19:32:31Z","last_seen":"2024-09-19T23:09:22.857014Z","times_seen":21388,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:46:00.52587696Z","timestamp":1725425160525,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A\"\r\nLast-Modified: Mon, 02 Sep 2024 14:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11498\r\nExpires: Wed, 04 Sep 2024 07:57:38 GMT\r\nDate: Wed, 04 Sep 2024 04:46:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c96a4972e341191f93e963880196f8e1","sha1":"8318aa6dcbdababe8728023ec9ef3aaac10917a9","sha256":"dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a","sha512":"421ac0df88874013ca3d60effb579ccd6e51ef8474cd8656e2632446e6706ce125bd3044bf5ed5826ba1bc65a9b4464617a17758a343c993914c3b07368940cb","ssdeep":"","tlshash":"16f00eb326717a418cf84c21d8cac02e0e28777d058341670a169af36aa17fe150040c","first_seen":"2024-09-02T19:32:31Z","last_seen":"2024-09-19T23:09:22.857014Z","times_seen":21388,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.39.158.19:6092/?id=130548758\u0026currency=PHP\u0026type=2","fqdn":"154.39.158.19:6092","domain":"154.39.158.19","tld":"19:6092"},"ip":{"addr":"154.39.158.19","port":0,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-09-04T04:46:01.928Z","timestamp":1725425161928,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /?id=130548758\u0026currency=PHP\u0026type=2 HTTP/1.1\r\nHost: 154.39.158.19:6092\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nDate: Wed, 04 Sep 2024 04:46:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 192\r\nConnection: close\r\nLocation: https://154.39.158.19:6092/?id=130548758\u0026currency=PHP\u0026type=2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":192,"size_decoded":192,"mime_type":"","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5f693d37bdd2247dbbfc1c9ff5a89b10","sha1":"64856469a7b88681df7b2066f1d1e357d8017bb5","sha256":"b34c69f804a3dd4582d14990c33b272d17887fa1170300e549e4205b6e3caf2b","sha512":"7fc5b20edcca82350fb50fb18e184d37877ef23d484b49daa4a9b58ae3c1b73a18eeaca24606ace0ef7b03a6b016a31c39b4c46b2904b10513279779c4710643","ssdeep":"","tlshash":"30c012ff64533c8c88b3357450c3a1d0d0584662a758548455406453b5c33658bc6327","first_seen":"2023-04-18T04:30:35Z","last_seen":"2025-01-06T11:15:56.683786Z","times_seen":19,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-04","alert":"Sinkholed","trigger":"154.39.158.19","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"zerossl.ocsp.sectigo.com/","fqdn":"zerossl.ocsp.sectigo.com","domain":"sectigo.com","tld":"com"},"ip":{"addr":"104.18.38.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-04T04:46:03.836012845Z","timestamp":1725425163836,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: zerossl.ocsp.sectigo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Sep 2024 04:46:03 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 727\r\nConnection: keep-alive\r\nLast-Modified: Tue, 03 Sep 2024 06:55:22 GMT\r\nExpires: Tue, 10 Sep 2024 06:55:21 GMT\r\nEtag: \"0ebd16d5abf822de5b67662f4ee9fec70e251aa8\"\r\nCache-Control: max-age=525557,s-maxage=1800,public,no-transform,must-revalidate\r\nX-CCACDN-Proxy-ID: mcdpinlb3\r\nX-Frame-Options: SAMEORIGIN\r\nCF-Cache-Status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 8bdb5568b83ab529-OSL\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":727,"size_decoded":727,"mime_type":"application/octet-stream","magic":"data","md5":"ea77596d1556465516f25efeb5b71923","sha1":"0ebd16d5abf822de5b67662f4ee9fec70e251aa8","sha256":"1fcf3e960cc8b57cdc1feea41780604e2977bf584c54fc6bbc79de464a032f6f","sha512":"0baf0111dcaaeefdb5f4893cc2467c6128f139b568831227a741a89db40804296144441be26c54b1501ace3aa85d37c49617f510a991fec76c4fbdbbf93dd4de","ssdeep":"","tlshash":"fd01657d0ea0303b06545f866b7c36f29301417e2af2541e346814f27de4332947b945","first_seen":"2024-09-19T22:48:09.425229Z","last_seen":"2024-09-19T22:48:09.425229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}