{"report_id":"9ade3cb1-e90b-4353-9010-3089120b646e","version":6,"status":"done","tags":[],"date":"2024-09-10T10:58:47Z","url":{"schema":"http","addr":"103.251.43.199/Ecman/Forms/frmLogin.php","fqdn":"103.251.43.199","domain":"103.251.43.199","tld":""},"ip":{"addr":"103.251.43.199","port":0,"asn":133037,"as":"KERALA STATE IT MISSION","country":"India","country_code":"IN"},"final":{"url":{"schema":"http","addr":"103.251.43.199/Ecman/Forms/frmLogin.php","fqdn":"103.251.43.199","domain":"103.251.43.199","tld":"199"},"title":"EcMan"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-28T21:29:02Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-09-09 18:12:09","alert_count":0,"request_count":4,"received_data":3550,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"103.251.43.199","ip":{"addr":"103.251.43.199","port":80,"asn":133037,"as":"KERALA STATE IT MISSION","country":"India","country_code":"IN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":2439,"sent_data":818,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-09-09 18:12:09","alert_count":0,"request_count":3,"received_data":2664,"sent_data":981,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-10","alert":"Sinkholed","trigger":"103.251.43.199","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-10","alert":"Sinkholed","trigger":"103.251.43.199","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"103.251.43.199/Ecman/Forms/frmLogin.php","fqdn":"103.251.43.199","domain":"103.251.43.199","tld":"199"},"ip":{"addr":"103.251.43.199","port":80,"asn":133037,"as":"KERALA STATE IT MISSION","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"70fddd7da1b44bb6150e87c0cc6454bb","sha1":"c1d5f4f2f04519cfe3c0513fd8f97da3994dc888","sha256":"087d69efdb8e7e3b9920229fddbffc4134f405b558bfc607c4b9ba9cd243e2ae","sha512":"568ca8fb4b1a10a36f97afb8e81f6e510f9b63941859ea5d81daa72070be6996ebf06375aed5d7952c0e6c527919590520e06496f5f60f8477c065a0c3505225","ssdeep":"","tlshash":"edb0125441d05c891a3194524f44365039e55625c01a4d41c1710bccd4437edc70a7ed","size":103,"data":"","first_seen":"2024-09-19T21:29:05.556643Z","last_seen":"2024-11-16T11:42:35.639874Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-10T10:58:21.429220492Z","timestamp":1725965901429,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3F59C24A6538550F52A4C9B39D9F57B023C9D44D50A846E742B763F74DFC179D\"\r\nLast-Modified: Sun, 08 Sep 2024 09:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19607\r\nExpires: Tue, 10 Sep 2024 16:25:08 GMT\r\nDate: Tue, 10 Sep 2024 10:58:21 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"85b35ef8e54cfd751670f6a6d56541bd","sha1":"162e94ccf2a785ea99c41f45c3a76815a2f8ae5f","sha256":"3f59c24a6538550f52a4c9b39d9f57b023c9d44d50a846e742b763f74dfc179d","sha512":"ff00c3a57b0afd5271ff47fb423989e1d520fa029b23dbd1c89609059b3e895c3bb49e3a344fd88fb45aee27c76964aa7d7aa720cd0ac48c69890856081e9baf","ssdeep":"","tlshash":"95f075f226a0b79071f105241878de34cb24f7ee30c090ca01dc8481fc187d25281408","first_seen":"2024-09-08T14:22:20Z","last_seen":"2024-09-19T21:53:05.385554Z","times_seen":25465,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-10T10:58:21.491629652Z","timestamp":1725965901491,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"FDFD7BC2CF6ECC38FB1098F0FDB33CC28A034BB850556C8BE63823F4C4718BE2\"\r\nLast-Modified: Tue, 10 Sep 2024 00:20:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=16729\r\nExpires: Tue, 10 Sep 2024 15:37:10 GMT\r\nDate: Tue, 10 Sep 2024 10:58:21 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"6bd7ab339c70a2fbeee4c8c0acd11d01","sha1":"d73d3395447b2a06e32c1e3efb673107259de9d2","sha256":"fdfd7bc2cf6ecc38fb1098f0fdb33cc28a034bb850556c8be63823f4c4718be2","sha512":"7cc6d530bea83774ef6829c6db75313b8685dedaba842aea688588976d0984075c4764c97846f62b255386d8ba552298f55f78cfc5fd38824ff26e8509e1c3f1","ssdeep":"","tlshash":"c8f00efa2aa77170e7a23a2369a6fe6f19307dde7910805250908fd24b60bb8da40009","first_seen":"2024-09-10T06:38:11Z","last_seen":"2024-09-19T21:33:01.953343Z","times_seen":23843,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-10T10:58:21.849706431Z","timestamp":1725965901849,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"31A5B430FF645A4E9DBC799159C6F2154BAB3CFCABED690D1074B3B1726DB99F\"\r\nLast-Modified: Tue, 10 Sep 2024 02:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6465\r\nExpires: Tue, 10 Sep 2024 12:46:06 GMT\r\nDate: Tue, 10 Sep 2024 10:58:21 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"1c3c41e281d3e8bb44af37305931c141","sha1":"edce6dc7a98423c1590cb07c2e97c61d0e6f396a","sha256":"31a5b430ff645a4e9dbc799159c6f2154bab3cfcabed690d1074b3b1726db99f","sha512":"aa478043734330b9e317920e94a8c6ed85b41b3ab2fc0d942ddf4a4cf528d06fd96c7f47d5af20dcbd09f5e22bca690cf6573bc3ff31161769b129b72a18f2cc","ssdeep":"","tlshash":"46f00eab65b5fe40ba761120f8f9e507ae21fefc20a14b65a4d4a6c169117bdc24848c","first_seen":"2024-09-10T06:39:04Z","last_seen":"2024-09-19T21:32:37.390483Z","times_seen":18438,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-10T10:58:21.94508999Z","timestamp":1725965901945,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"1A381B926D3ED1420DC33EC68EB8FF332A94FF175191A0564C07552B80C7A3D7\"\r\nLast-Modified: Tue, 10 Sep 2024 02:33:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7648\r\nExpires: Tue, 10 Sep 2024 13:05:49 GMT\r\nDate: Tue, 10 Sep 2024 10:58:21 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"49e3d04c2eb4d704e7e7c90e2dc519c0","sha1":"33f04bc1c596585870c7b00e24bf9bef4d01dc8e","sha256":"1a381b926d3ed1420dc33ec68eb8ff332a94ff175191a0564c07552b80c7a3d7","sha512":"b276448c67ac2621c13aa9129a5a6eb705d8e1b9d181a21e99024c2a95f79d90a017059ed068d493a42bed982c902b2374e672652d49982305a1081c67c36786","ssdeep":"","tlshash":"c5f00e9a27a3bb01bb25a5106cfad1187e34deee382428c114e449b27487fb5b8c012c","first_seen":"2024-09-10T08:04:08Z","last_seen":"2024-09-19T21:32:06.155063Z","times_seen":14499,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"103.251.43.199/Ecman/Forms/frmLogin.php","fqdn":"103.251.43.199","domain":"103.251.43.199","tld":"199"},"ip":{"addr":"103.251.43.199","port":80,"asn":133037,"as":"KERALA STATE IT MISSION","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-09-10T10:58:22.703Z","timestamp":1725965902703,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Ecman/Forms/frmLogin.php HTTP/1.1\r\nHost: 103.251.43.199\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nVary: Accept-Encoding\r\nServer: Microsoft-IIS/7.0\r\nSet-Cookie: PHPSESSID=md8p1aa2t4040tf9n2n836c896; path=/\r\nX-Powered-By: PHP/5.6.31, ASP.NET\r\nDate: Tue, 10 Sep 2024 10:38:24 GMT\r\nContent-Length: 617\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":617,"size_decoded":1025,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"de75a3d9c5d785de8fa9b022aec495be","sha1":"27a7b29b2ceebf66246003a65e14c370b7863542","sha256":"cfd457f117289d25632b6104a3ffa8b2aff10683154588a171ba4ca69e1885f9","sha512":"1b4688b8fb8fdab24b4b42d96da78d20fc25bcdda8df0d80836eb5bcf309754841e44adb2fc00bbb917f5b3d136c530022461f2106894427ee4f711bec2cc5ca","ssdeep":"","tlshash":"331197a031ccce690613202780b1b95010efed3223164820b8bb477bf1465a95b523da","first_seen":"2024-09-19T21:29:05.554041Z","last_seen":"2024-11-16T11:42:35.632938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":181,"dns":0,"connect":185,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-10","alert":"Sinkholed","trigger":"103.251.43.199","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"103.251.43.199/favicon.ico","fqdn":"103.251.43.199","domain":"103.251.43.199","tld":"199"},"ip":{"addr":"103.251.43.199","port":80,"asn":133037,"as":"KERALA STATE IT MISSION","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://103.251.43.199/Ecman/Forms/frmLogin.php","date":"2024-09-10T10:58:23.187Z","timestamp":1725965903187,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 103.251.43.199\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://103.251.43.199/Ecman/Forms/frmLogin.php\r\nCookie: PHPSESSID=md8p1aa2t4040tf9n2n836c896\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/7.0\r\nX-Powered-By: ASP.NET\r\nDate: Tue, 10 Sep 2024 10:38:24 GMT\r\nContent-Length: 1245\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1245,"size_decoded":1245,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5343c1a8b203c162a3bf3870d9f50fd4","sha1":"04b5b886c20d88b57eea6d8ff882624a4ac1e51d","sha256":"dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f","sha512":"e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949","ssdeep":"","tlshash":"7b21422992983814f69384a061f277c23f078286e66f1b68a023b263e4c26e281d33c4","first_seen":"2023-03-09T23:36:42Z","last_seen":"2026-05-22T17:40:58.766288Z","times_seen":58592,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-10","alert":"Sinkholed","trigger":"103.251.43.199","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-10T10:58:23.59601075Z","timestamp":1725965903596,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"17262F224CDA9BD7912F9BBBF2B674CB97D997485FF1F5040E4CFE73A04360CE\"\r\nLast-Modified: Tue, 10 Sep 2024 02:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13405\r\nExpires: Tue, 10 Sep 2024 14:41:48 GMT\r\nDate: Tue, 10 Sep 2024 10:58:23 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0d73bb8f423c272f8206f468a187cda1","sha1":"ac92ec37ff809a72dc2a4ca83c0e3ffe0e465075","sha256":"17262f224cda9bd7912f9bbbf2b674cb97d997485ff1f5040e4cfe73a04360ce","sha512":"8a59aad49a506b51cbdd3817a5b75567fbc6d2a46a3a932035c027a62585c263de6e17f0e8c7cf95c7ea8ffa797db0f5b430c2bc466872c7cf8a36380e72c408","ssdeep":"","tlshash":"58f005523376e980b4dd147d9ad8f01319243ddc749864590abc4ae17d48ff6b10425d","first_seen":"2024-09-10T12:16:29Z","last_seen":"2024-09-19T21:29:31.271706Z","times_seen":12104,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-10T10:58:23.596992807Z","timestamp":1725965903596,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"17262F224CDA9BD7912F9BBBF2B674CB97D997485FF1F5040E4CFE73A04360CE\"\r\nLast-Modified: Tue, 10 Sep 2024 02:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13405\r\nExpires: Tue, 10 Sep 2024 14:41:48 GMT\r\nDate: Tue, 10 Sep 2024 10:58:23 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0d73bb8f423c272f8206f468a187cda1","sha1":"ac92ec37ff809a72dc2a4ca83c0e3ffe0e465075","sha256":"17262f224cda9bd7912f9bbbf2b674cb97d997485ff1f5040e4cfe73a04360ce","sha512":"8a59aad49a506b51cbdd3817a5b75567fbc6d2a46a3a932035c027a62585c263de6e17f0e8c7cf95c7ea8ffa797db0f5b430c2bc466872c7cf8a36380e72c408","ssdeep":"","tlshash":"58f005523376e980b4dd147d9ad8f01319243ddc749864590abc4ae17d48ff6b10425d","first_seen":"2024-09-10T12:16:29Z","last_seen":"2024-09-19T21:29:31.271706Z","times_seen":12104,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-10T10:58:23.598355987Z","timestamp":1725965903598,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"17262F224CDA9BD7912F9BBBF2B674CB97D997485FF1F5040E4CFE73A04360CE\"\r\nLast-Modified: Tue, 10 Sep 2024 02:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13405\r\nExpires: Tue, 10 Sep 2024 14:41:48 GMT\r\nDate: Tue, 10 Sep 2024 10:58:23 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0d73bb8f423c272f8206f468a187cda1","sha1":"ac92ec37ff809a72dc2a4ca83c0e3ffe0e465075","sha256":"17262f224cda9bd7912f9bbbf2b674cb97d997485ff1f5040e4cfe73a04360ce","sha512":"8a59aad49a506b51cbdd3817a5b75567fbc6d2a46a3a932035c027a62585c263de6e17f0e8c7cf95c7ea8ffa797db0f5b430c2bc466872c7cf8a36380e72c408","ssdeep":"","tlshash":"58f005523376e980b4dd147d9ad8f01319243ddc749864590abc4ae17d48ff6b10425d","first_seen":"2024-09-10T12:16:29Z","last_seen":"2024-09-19T21:29:31.271706Z","times_seen":12104,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}