IP 95.100.155.75:0
ASN#20940 Akamai International B.V.
Hash010d9d76f2cffcde2776f30737ea6daa 8f2fbd4790c6a38d70f1e6d4be7b34a6cf562d70 5b0f8b959509a0ebd05f4fd4dca127683100ab3c79a154da1b78247ebf21ffda
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5B0F8B959509A0EBD05F4FD4DCA127683100AB3C79A154DA1B78247EBF21FFDA"
Last-Modified: Sat, 07 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5171
Expires: Tue, 10 Sep 2024 05:13:00 GMT
Date: Tue, 10 Sep 2024 03:46:49 GMT
Connection: keep-alive
|
| v5d3r1.top/MaxC03AsHg/v.txt |  64.94.84.23 | 200 OK | 349 B |
URL User Request GET HTTP/1.1v5d3r1.top/MaxC03AsHg/v.txt IP64.94.84.23:443
CertificateIssuerLet's Encrypt Subjectv5d3r1.top Fingerprint62:6A:7C:BE:2C:8F:D2:37:D9:24:8B:11:D3:8A:BF:1F:43:84:BC:AA ValidityWed, 31 Jul 2024 21:10:22 GMT - Tue, 29 Oct 2024 21:10:21 GMT
File typeASCII text, with CRLF line terminators Hash99e30bb7fe57b373ac6948ada5a4e11d 5555907a8e96f3ac4bba67b1386031d03bf19e5e 4fb3b90a6445f60a510c2f61d52d06af500fe94cfbcd094758a9dbfcdb834d21
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /MaxC03AsHg/v.txt HTTP/1.1
Host: v5d3r1.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Tue, 10 Sep 2024 03:46:50 GMT
Content-Type: text/plain
Content-Length: 349
Connection: keep-alive
Last-Modified: Fri, 30 Aug 2024 21:20:10 GMT
ETag: "1d2-620ed27fccac5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
IP64.94.84.23:443
Requested byhttps://v5d3r1.top/MaxC03AsHg/v.txt CertificateIssuerLet's Encrypt Subjectv5d3r1.top Fingerprint62:6A:7C:BE:2C:8F:D2:37:D9:24:8B:11:D3:8A:BF:1F:43:84:BC:AA ValidityWed, 31 Jul 2024 21:10:22 GMT - Tue, 29 Oct 2024 21:10:21 GMT
File typeHTML document, ASCII text Hashe56847263274c1d4305f1828b43441d9 565b017bf029b790586534b9e0e5ba4287b99c07 b53f2608ce25caf95a19123324611073a62f72d3c4751f1a82ac352d68f17322
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: v5d3r1.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v5d3r1.top/MaxC03AsHg/v.txt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.24.0 (Ubuntu)
Date: Tue, 10 Sep 2024 03:46:50 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|