IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashe7492695b5254a3a63fcffb4f1ee8cec 0361713c6d8129210245347284c7c6babfd28fb7 5d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F"
Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13040
Expires: Fri, 12 Jul 2024 17:29:31 GMT
Date: Fri, 12 Jul 2024 13:52:11 GMT
Connection: keep-alive
|
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6185
Expires: Fri, 12 Jul 2024 15:35:18 GMT
Date: Fri, 12 Jul 2024 13:52:13 GMT
Connection: keep-alive
|
| 45.148.145.146:8080/14675040/70489415/926393?token=HRtYUkpaEAMVCVcLVlpcVFZUV1YBWwBZA1IGVVxQBgVfAQULCwBUXQMTTRAXTUoGVFxrXQYaClgBAgZbCk9BQBVcQmxQVhADFQBWC1IbFEFBWFlRQAIBVgEEAlsLUFANShtAWl0QCFdCXQ0eRlxAF1BDWlUOZ1QERV1WBxtZDUAKVRwRVlxtXVJcAFwAGwJBBBMYFgtLQEMJWkAOVU9BVw9NQlJNVxADWUQNXkgbWwxAX0BGGxoKQ317F04bBhtBA1dDWlZcEAMVRRIQSBtREGpDUUcWSlUAXlFHQANBUxdKG11SQW1RVllfBFEQUFcNRhMOFlAaHENeW1sLTQwRahZQVBEDEAsIBARDTw== |  45.148.145.146 | 200 OK | 0 B |
URL User Request GET HTTP/1.145.148.145.146:8080/14675040/70489415/926393?token=HRtYUkpaEAMVCVcLVlpcVFZUV1YBWwBZA1IGVVxQBgVfAQULCwBUXQMTTRAXTUoGVFxrXQYaClgBAgZbCk9BQBVcQmxQVhADFQBWC1IbFEFBWFlRQAIBVgEEAlsLUFANShtAWl0QCFdCXQ0eRlxAF1BDWlUOZ1QERV1WBxtZDUAKVRwRVlxtXVJcAFwAGwJBBBMYFgtLQEMJWkAOVU9BVw9NQlJNVxADWUQNXkgbWwxAX0BGGxoKQ317F04bBhtBA1dDWlZcEAMVRRIQSBtREGpDUUcWSlUAXlFHQANBUxdKG11SQW1RVllfBFEQUFcNRhMOFlAaHENeW1sLTQwRahZQVBEDEAsIBARDTw== IP45.148.145.146:8080
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /14675040/70489415/926393?token=HRtYUkpaEAMVCVcLVlpcVFZUV1YBWwBZA1IGVVxQBgVfAQULCwBUXQMTTRAXTUoGVFxrXQYaClgBAgZbCk9BQBVcQmxQVhADFQBWC1IbFEFBWFlRQAIBVgEEAlsLUFANShtAWl0QCFdCXQ0eRlxAF1BDWlUOZ1QERV1WBxtZDUAKVRwRVlxtXVJcAFwAGwJBBBMYFgtLQEMJWkAOVU9BVw9NQlJNVxADWUQNXkgbWwxAX0BGGxoKQ317F04bBhtBA1dDWlZcEAMVRRIQSBtREGpDUUcWSlUAXlFHQANBUxdKG11SQW1RVllfBFEQUFcNRhMOFlAaHENeW1sLTQwRahZQVBEDEAsIBARDTw== HTTP/1.1
Host: 45.148.145.146:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 12 Jul 2024 13:52:32 GMT
Content-Type: video/mp2t
Connection: close
Access-Control-Allow-Origin: *
|
| ua-iptv.com:8080/14675040/70489415/926393 |  79.124.41.19 | 302 Found | 0 B |
URL User Request GET HTTP/1.1ua-iptv.com:8080/14675040/70489415/926393 IP79.124.41.19:8080 ASN#31469 Virtual Systems LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /14675040/70489415/926393 HTTP/1.1
Host: ua-iptv.com:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 12 Jul 2024 13:52:12 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
Access-Control-Allow-Origin: *
Location: http://45.148.145.146:8080/14675040/70489415/926393?token=HRtYUkpaEAMVCVcLVlpcVFZUV1YBWwBZA1IGVVxQBgVfAQULCwBUXQMTTRAXTUoGVFxrXQYaClgBAgZbCk9BQBVcQmxQVhADFQBWC1IbFEFBWFlRQAIBVgEEAlsLUFANShtAWl0QCFdCXQ0eRlxAF1BDWlUOZ1QERV1WBxtZDUAKVRwRVlxtXVJcAFwAGwJBBBMYFgtLQEMJWkAOVU9BVw9NQlJNVxADWUQNXkgbWwxAX0BGGxoKQ317F04bBhtBA1dDWlZcEAMVRRIQSBtREGpDUUcWSlUAXlFHQANBUxdKG11SQW1RVllfBFEQUFcNRhMOFlAaHENeW1sLTQwRahZQVBEDEAsIBARDTw==
|