{"report_id":"2fd37497-414e-4bc6-9737-e01b56ddcd8d","version":6,"status":"done","tags":[],"date":"2024-07-29T07:09:15Z","url":{"schema":"http","addr":"raw.githubusercontent.com/styxz6/luckrypt/main/main.exe","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T07:50:21Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-07-28 18:17:42","alert_count":0,"request_count":7,"received_data":6215,"sent_data":2289,"comment":"","tags":null,"fingerprints":null},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":35802,"first_seen":"2014-03-01 08:08:08","last_seen":"2024-07-28 18:44:23","alert_count":2,"request_count":1,"received_data":9803893,"sent_data":509,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"6cc402cd2d722f480b49225153636771","sha1":"6b9e3393bb651f19e72adfce518d4d2578fcdb8a","sha256":"c66577030568c0ccafafafbe5a416305be93bd2fc125b7cbc05e849db004c5e2","sha512":"55b2b9fbac7643af7d9e10c7a389d0ac847369b832803eea0636a0e6443013fb7bbcad88fb6635e90f34b9dd98684c3e583a535777139814c84a2ad88a064f45","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections","size":9802996,"url":{"schema":"https","addr":"raw.githubusercontent.com/styxz6/luckrypt/main/main.exe","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public InfoSec YARA rules","scan_date":"2024-07-29","alert":"Identifies executable converted using PyInstaller.","trigger":"raw.githubusercontent.com/styxz6/luckrypt/main/main.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/bartblaze/Yara-rules","meta":{"author":"@bartblaze","category":"MALWARE","creation_date":"2020-01-01","description":"Identifies executable converted using PyInstaller.","fingerprint":"ae849936b19be3eb491d658026b252c2f72dcb3c07c6bddecb7f72ad74903eee","first_imported":"2021-12-30","id":"6Pyq57uDDAEHbltmbp7xRT","last_modified":"2021-12-30","rule":"PyInstaller","sharing":"TLP:WHITE","source":"BARTBLAZE","status":"RELEASED","version":"1.0"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-23","alert":"Scan result 47/74","trigger":"c66577030568c0ccafafafbe5a416305be93bd2fc125b7cbc05e849db004c5e2","verdict":"malicious","severity":"","comment":"malicious - 47/74","link":"https://www.virustotal.com/gui/file/c66577030568c0ccafafafbe5a416305be93bd2fc125b7cbc05e849db004c5e2","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public InfoSec YARA rules","scan_date":"2024-07-29","alert":"Identifies executable converted using PyInstaller.","trigger":"raw.githubusercontent.com/styxz6/luckrypt/main/main.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/bartblaze/Yara-rules","meta":{"author":"@bartblaze","category":"MALWARE","creation_date":"2020-01-01","description":"Identifies executable converted using PyInstaller.","fingerprint":"ae849936b19be3eb491d658026b252c2f72dcb3c07c6bddecb7f72ad74903eee","first_imported":"2021-12-30","id":"6Pyq57uDDAEHbltmbp7xRT","last_modified":"2021-12-30","rule":"PyInstaller","sharing":"TLP:WHITE","source":"BARTBLAZE","status":"RELEASED","version":"1.0"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-29T07:08:48.396480901Z","timestamp":1722236928396,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"9BDC1A9C47D76DC96134B04996050573491D15A2D8B6BE4157791B9D6F0766C9\"\r\nLast-Modified: Sat, 27 Jul 2024 06:56:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=15824\r\nExpires: Mon, 29 Jul 2024 11:32:32 GMT\r\nDate: Mon, 29 Jul 2024 07:08:48 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"1923cde36555abe065c52a358521a6f5","sha1":"1cfff065ff7d9706aa7142cc99855769a50f642e","sha256":"9bdc1a9c47d76dc96134b04996050573491d15a2d8b6be4157791b9d6f0766c9","sha512":"1c2273b39652094f1d40cdc92cee45d667771c4ed76b8f6c35b83639bb9d48101b080bb3ba585a76c38dd174d1f38cc2878927d25ff660d1aebb2d1b5bf81106","ssdeep":"","tlshash":"f0f005943196740667900d1627fcc1544d21d4f835146491f56c41aa6850fa501cd40e","first_seen":"2024-07-27T17:43:23Z","last_seen":"2024-08-19T15:34:32.866037Z","times_seen":27742,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-29T07:08:48.615068099Z","timestamp":1722236928615,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"504EFFA12A1CA53EAC798BF38EA5A9EDDE08EC398B53C8DE2885A94F133EA845\"\r\nLast-Modified: Sat, 27 Jul 2024 06:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=15763\r\nExpires: Mon, 29 Jul 2024 11:31:31 GMT\r\nDate: Mon, 29 Jul 2024 07:08:48 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2d61bb5b56bc4df48e399a14ebeea8ca","sha1":"60814ad62b84875481a3fc851280f608dbc0b4f6","sha256":"504effa12a1ca53eac798bf38ea5a9edde08ec398b53c8de2885a94f133ea845","sha512":"d1c9ba23ad9aeb5bd5baeb3a3b024c0215e1a8b8cf36e41e85d155b10bd2bfe97c8f80d6edee2de56cd2f467239848a31db9e214a7ac09eee9d5ece047f14849","ssdeep":"","tlshash":"a9f0c089e6b83d607574290591f1c236092469b4381658d369d01fd678527a044cc5dc","first_seen":"2024-07-27T11:03:53Z","last_seen":"2024-08-19T15:36:31.225644Z","times_seen":17205,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-29T07:08:48.739104015Z","timestamp":1722236928739,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"5D2CC1A96F886C04483D570F2FBA83B9B430796D2FAF9D6D115CCA98BC6B713F\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11517\r\nExpires: Mon, 29 Jul 2024 10:20:45 GMT\r\nDate: Mon, 29 Jul 2024 07:08:48 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"182b9c01b864c7d116c3fc28cbb58d6e","sha1":"644efdd1cd6ee4e5d5ec976387b3dbf47ed51dc1","sha256":"5d2cc1a96f886c04483d570f2fba83b9b430796d2faf9d6d115cca98bc6b713f","sha512":"f1d6cd69db95a577701c3f1f461265338578115386dfb851e46e4ed326beeac57972012be668e3e35d8a1c80606865530a88a1132f1f1dd068f5b4a9e49d119d","ssdeep":"","tlshash":"4bf07585056c7586f378070419e8f2149911eadd2c442da2681043e1fc3b7f241c440c","first_seen":"2024-07-27T14:02:03Z","last_seen":"2024-08-19T15:35:34.356344Z","times_seen":27365,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-29T07:08:49.036311787Z","timestamp":1722236929036,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7D7DF3345B5736CCCE59D0996A373C2CCC915B51D725A47131936CB170207467\"\r\nLast-Modified: Sat, 27 Jul 2024 06:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6391\r\nExpires: Mon, 29 Jul 2024 08:55:20 GMT\r\nDate: Mon, 29 Jul 2024 07:08:49 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0b1ec2ddc6f2bdcb53c4a68f0dadfffa","sha1":"6e2cca0a8a8c68f778c60628583b1c944c3cc2fc","sha256":"7d7df3345b5736ccce59d0996a373c2ccc915b51d725a47131936cb170207467","sha512":"ac8d7b2da92e34d87d0a3a67d1ef18e17f84b7712d83afcb177c4f49f8c5cbbd361d2fd5cc516663220816d7643d1b9cc29ae8d8ccaca2ed959d0f0f6ccb4c73","ssdeep":"","tlshash":"8cf0059105b9f892767185211ef8d62c59609c9d38119cc650c083d13062bde14d4184","first_seen":"2024-07-27T21:53:53Z","last_seen":"2024-08-19T15:33:25.893956Z","times_seen":17718,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/styxz6/luckrypt/main/main.exe","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-29T07:08:48.928Z","timestamp":1722236928928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":"GitHub, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Mar 2024 00:00:00 GMT","end":"Fri, 14 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28","sha256":"09:01:0C:CE:9B:72:21:55:C7:E6:86:B0:77:39:D3:D2:DC:06:05:DE:A1:A4:98:4A:0B:96:5E:18:77:77:26:B5"}}},"request":{"raw":"GET /styxz6/luckrypt/main/main.exe HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: application/octet-stream\r\netag: W/\"67bc1f5a4202662c59ef7dd2f6be5611b5b12a58635059f7066d24b5dfab6733\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 6A14:0DE8:2AFE0AF:2D44978:66A74000\r\naccept-ranges: bytes\r\ndate: Mon, 29 Jul 2024 07:08:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410034-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1722236929.967202,VS0,VE543\r\nvary: Authorization,Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: c31c63e7519896c66a07832fccfca152f97f89f2\r\nexpires: Mon, 29 Jul 2024 07:13:49 GMT\r\nsource-age: 0\r\ncontent-length: 9802996\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9802996,"size_decoded":9802996,"mime_type":"application/octet-stream","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections","md5":"6cc402cd2d722f480b49225153636771","sha1":"6b9e3393bb651f19e72adfce518d4d2578fcdb8a","sha256":"c66577030568c0ccafafafbe5a416305be93bd2fc125b7cbc05e849db004c5e2","sha512":"55b2b9fbac7643af7d9e10c7a389d0ac847369b832803eea0636a0e6443013fb7bbcad88fb6635e90f34b9dd98684c3e583a535777139814c84a2ad88a064f45","ssdeep":"196608:74yyfKdQWyNvB7/aqsAyCCRl9mlaV0wYA+lRV1C++L0J:7afUQlNvoqsRCtJA+9hPJ","tlshash":"b7a633a1f95080f3d5be243d80accc703a3ab77e4f6499ffd36c61968d566c180369a6","first_seen":"2024-07-21T19:51:52Z","last_seen":"2024-08-19T16:10:02.333075Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2210,"timings":{"blocked":35,"dns":1,"connect":13,"send":0,"wait":556,"receive":1578,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public InfoSec YARA rules","scan_date":"2024-07-29","alert":"Identifies executable converted using PyInstaller.","trigger":"raw.githubusercontent.com/styxz6/luckrypt/main/main.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/bartblaze/Yara-rules","meta":{"author":"@bartblaze","category":"MALWARE","creation_date":"2020-01-01","description":"Identifies executable converted using PyInstaller.","fingerprint":"ae849936b19be3eb491d658026b252c2f72dcb3c07c6bddecb7f72ad74903eee","first_imported":"2021-12-30","id":"6Pyq57uDDAEHbltmbp7xRT","last_modified":"2021-12-30","rule":"PyInstaller","sharing":"TLP:WHITE","source":"BARTBLAZE","status":"RELEASED","version":"1.0"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-23","alert":"Scan result 47/74","trigger":"c66577030568c0ccafafafbe5a416305be93bd2fc125b7cbc05e849db004c5e2","verdict":"malicious","severity":"","comment":"malicious - 47/74","link":"https://www.virustotal.com/gui/file/c66577030568c0ccafafafbe5a416305be93bd2fc125b7cbc05e849db004c5e2","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-29T07:08:52.63697961Z","timestamp":1722236932636,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B91855E23D5499619D9F797B60209740F0C9B5C3514D0939124AC1AFA6B577BF\"\r\nLast-Modified: Sat, 27 Jul 2024 06:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10906\r\nExpires: Mon, 29 Jul 2024 10:10:37 GMT\r\nDate: Mon, 29 Jul 2024 07:08:51 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"9a7aa74598eea5bc84f07fc2318a2e3c","sha1":"5de3cab9a17f1d5becc592a7e890fdf7270f6f68","sha256":"b91855e23d5499619d9f797b60209740f0c9b5c3514d0939124ac1afa6b577bf","sha512":"5cf7eef4280950dd71fd13239cd810eb20cb4a1d50d587b0e8a854edd70c21e32da01008974558c505e888ce72d42d3608cc08f40192d3436481f202fe29f8c3","ssdeep":"","tlshash":"9ff0058c11ee76805bb588091dfeda542e647ed9340015e23cd04bdb383436acfc524c","first_seen":"2024-07-27T16:25:30Z","last_seen":"2024-08-19T15:34:56.950136Z","times_seen":13637,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-29T07:08:52.6376889Z","timestamp":1722236932637,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B91855E23D5499619D9F797B60209740F0C9B5C3514D0939124AC1AFA6B577BF\"\r\nLast-Modified: Sat, 27 Jul 2024 06:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10906\r\nExpires: Mon, 29 Jul 2024 10:10:37 GMT\r\nDate: Mon, 29 Jul 2024 07:08:51 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"9a7aa74598eea5bc84f07fc2318a2e3c","sha1":"5de3cab9a17f1d5becc592a7e890fdf7270f6f68","sha256":"b91855e23d5499619d9f797b60209740f0c9b5c3514d0939124ac1afa6b577bf","sha512":"5cf7eef4280950dd71fd13239cd810eb20cb4a1d50d587b0e8a854edd70c21e32da01008974558c505e888ce72d42d3608cc08f40192d3436481f202fe29f8c3","ssdeep":"","tlshash":"9ff0058c11ee76805bb588091dfeda542e647ed9340015e23cd04bdb383436acfc524c","first_seen":"2024-07-27T16:25:30Z","last_seen":"2024-08-19T15:34:56.950136Z","times_seen":13637,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-29T07:08:52.638307971Z","timestamp":1722236932638,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B91855E23D5499619D9F797B60209740F0C9B5C3514D0939124AC1AFA6B577BF\"\r\nLast-Modified: Sat, 27 Jul 2024 06:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10923\r\nExpires: Mon, 29 Jul 2024 10:10:54 GMT\r\nDate: Mon, 29 Jul 2024 07:08:51 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"9a7aa74598eea5bc84f07fc2318a2e3c","sha1":"5de3cab9a17f1d5becc592a7e890fdf7270f6f68","sha256":"b91855e23d5499619d9f797b60209740f0c9b5c3514d0939124ac1afa6b577bf","sha512":"5cf7eef4280950dd71fd13239cd810eb20cb4a1d50d587b0e8a854edd70c21e32da01008974558c505e888ce72d42d3608cc08f40192d3436481f202fe29f8c3","ssdeep":"","tlshash":"9ff0058c11ee76805bb588091dfeda542e647ed9340015e23cd04bdb383436acfc524c","first_seen":"2024-07-27T16:25:30Z","last_seen":"2024-08-19T15:34:56.950136Z","times_seen":13637,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}