Report - fapzoo.net

Report Overview

Visitedpublic

2024-07-25 02:27:14

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-24 18:12:02	2.3 kB	6.2 kB	23.36.77.32
fapzoo.net	unknown	unknown	No data	No data	712 B	2.6 kB	82.197.80.119

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-07-25	medium	fapzoo.net	Sinkholed
2024-07-25	medium	fapzoo.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-25

Last Seen2024-08-19

Times Seen8450

Size504 B (504 bytes)

MD58ee91f15329e1523b1f6bd250d539943

SHA16972bcf5758adc1f49f957cace3db5a9946258f9

SHA256817924c0d86deb9a192c4ec3aa86ff6468fd399272a429ad872b4f0b6c73b73e

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "817924C0D86DEB9A192C4EC3AA86FF6468FD399272A429AD872B4F0B6C73B73E"
Last-Modified: Wed, 24 Jul 2024 18:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5235
Expires: Thu, 25 Jul 2024 03:54:03 GMT
Date: Thu, 25 Jul 2024 02:26:48 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-25

Last Seen2024-08-19

Times Seen14052

Size504 B (504 bytes)

MD5559312780d7c69aabb31f612abe74b95

SHA10d0356dc28789b5b2b0164783f2c79b6b7b82f6a

SHA25620293009653baaf415bde5c2223feb0a6562281a1dfbcc6af42d844341da6d26

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "20293009653BAAF415BDE5C2223FEB0A6562281A1DFBCC6AF42D844341DA6D26"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8873
Expires: Thu, 25 Jul 2024 04:54:41 GMT
Date: Thu, 25 Jul 2024 02:26:48 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-24

Last Seen2024-08-19

Times Seen14863

Size504 B (504 bytes)

MD553c120d8bd28a824c423b6b51e6a5f07

SHA18c8f9015ddb4e7bbd18c0b35103ff1e8a0b7d5c1

SHA2560ef528831322336534e6b28ac3db61ac793b2b52f700672aee09ee5b1c92a2c7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0EF528831322336534E6B28AC3DB61AC793B2B52F700672AEE09EE5B1C92A2C7"
Last-Modified: Wed, 24 Jul 2024 18:26:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14885
Expires: Thu, 25 Jul 2024 06:34:53 GMT
Date: Thu, 25 Jul 2024 02:26:48 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-25

Last Seen2024-08-19

Times Seen13091

Size504 B (504 bytes)

MD50b6f864b0a3d0cf483b0830bdb98cded

SHA112564f2826ce74a640c3b65ef52d12f21c8e6f3c

SHA256d32892cb09f33f4057712b1c1b511af5ea5528cd0f23ba90858d659ec4fcd190

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D32892CB09F33F4057712B1C1B511AF5EA5528CD0F23BA90858D659EC4FCD190"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15107
Expires: Thu, 25 Jul 2024 06:38:36 GMT
Date: Thu, 25 Jul 2024 02:26:49 GMT
Connection: keep-alive

GET fapzoo.net/

82.197.80.119

403 Forbidden

787 B

URL User Request GET HTTP

fapzoo.net/

IP / ASN

82.197.80.119

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF, LF line terminators

First Seen2024-02-05

Last Seen2025-08-06

Times Seen1873

Size787 B (787 bytes)

MD5ff715af41f83fb38cd35c4e91c77c46d

SHA111e71530661013137721d635f95630722eaa6afd

SHA256036bacf3bd34365006eac2a78e4520a953a6250e9550dcf9c9d4b0678c225b4c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: fapzoo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 787
date: Thu, 25 Jul 2024 02:26:49 GMT
server: LiteSpeed
platform: hostinger

GET fapzoo.net/favicon.ico

82.197.80.119

404 Not Found

1.2 kB

URL GET HTTP

fapzoo.net/favicon.ico

IP / ASN

82.197.80.119

Requested byhttp://fapzoo.net/

Resource Info

File typeHTML document, ASCII text, with very long lines (355)

First Seen2023-03-07

Last Seen2025-08-05

Times Seen6396

Size1.2 kB (1159 bytes)

MD5e53fdf76753edcd8773ab17ae968bfd6

SHA14bea38cd83442080bdf51cd1db206715f9198955

SHA2563d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fapzoo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fapzoo.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
last-modified: Wed, 20 Mar 2024 18:08:19 GMT
etag: "999-65fb2613-8d4834c38d0b8cc;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1159
date: Thu, 25 Jul 2024 02:26:49 GMT
server: LiteSpeed
platform: hostinger

r10.o.lencr.org/

23.36.76.226

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-25

Last Seen2024-08-19

Times Seen12057

Size504 B (504 bytes)

MD5edb57be0536524541d7ac5d4ee6b5585

SHA1a34a54318477c70e34c9f5e27cba428b4530b05b

SHA256895b01022c914d4f0facb78182c6ed0ee5c7b3c6b10516327dc5f08a54dc0204

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "895B01022C914D4F0FACB78182C6ED0EE5C7B3C6B10516327DC5F08A54DC0204"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11597
Expires: Thu, 25 Jul 2024 05:40:07 GMT
Date: Thu, 25 Jul 2024 02:26:50 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-25

Last Seen2024-08-19

Times Seen12057

Size504 B (504 bytes)

MD5edb57be0536524541d7ac5d4ee6b5585

SHA1a34a54318477c70e34c9f5e27cba428b4530b05b

SHA256895b01022c914d4f0facb78182c6ed0ee5c7b3c6b10516327dc5f08a54dc0204

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "895B01022C914D4F0FACB78182C6ED0EE5C7B3C6B10516327DC5F08A54DC0204"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11597
Expires: Thu, 25 Jul 2024 05:40:07 GMT
Date: Thu, 25 Jul 2024 02:26:50 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-25

Last Seen2024-08-19

Times Seen12057

Size504 B (504 bytes)

MD5edb57be0536524541d7ac5d4ee6b5585

SHA1a34a54318477c70e34c9f5e27cba428b4530b05b

SHA256895b01022c914d4f0facb78182c6ed0ee5c7b3c6b10516327dc5f08a54dc0204

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "895B01022C914D4F0FACB78182C6ED0EE5C7B3C6B10516327DC5F08A54DC0204"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11679
Expires: Thu, 25 Jul 2024 05:41:29 GMT
Date: Thu, 25 Jul 2024 02:26:50 GMT
Connection: keep-alive