{"report_id":"ef412b67-0632-4f5f-bee5-6285a80f73a4","version":6,"status":"done","tags":[],"date":"2024-09-28T22:47:45Z","url":{"schema":"http","addr":"gen.lib.rus.ec/book/index.php?md5=B77B148D05A88BEE67D40A6E085CECB7","fqdn":"gen.lib.rus.ec","domain":"rus.ec","tld":"ec"},"ip":{"addr":"172.67.176.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:neterror?e=dnsNotFound\u0026u=https%3A//libgen.rs/book/index.php%3Fmd5%3DB77B148D05A88BEE67D40A6E085CECB7\u0026c=UTF-8\u0026d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20libgen.rs.","fqdn":"","domain":"","tld":""},"title":"Server Not Found"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-13T11:18:46Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-09-27 18:12:10","alert_count":0,"request_count":4,"received_data":3549,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gen.lib.rus.ec","ip":{"addr":"104.21.96.105","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":629025,"first_seen":"2012-07-01 13:05:06","last_seen":"2024-04-16 03:24:27","alert_count":0,"request_count":1,"received_data":859,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-09-27 18:12:04","alert_count":0,"request_count":2,"received_data":1776,"sent_data":654,"comment":"","tags":null,"fingerprints":null},{"fqdn":"libgen.rs","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-08-27","domain_rank":165239,"first_seen":"2020-08-27 21:20:34","last_seen":"2024-09-26 01:42:48","alert_count":1,"request_count":1,"received_data":0,"sent_data":517,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-28","alert":"Sinkholed","trigger":"libgen.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:neterror?e=dnsNotFound\u0026u=https%3A//libgen.rs/book/index.php%3Fmd5%3DB77B148D05A88BEE67D40A6E085CECB7\u0026c=UTF-8\u0026d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20libgen.rs.","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-28T22:47:20.249314424Z","timestamp":1727563640249,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4868FAF0CF6C4F9BD0D7DB49DCDE0B7358890C362D5281A233AB666A702E1741\"\r\nLast-Modified: Sat, 28 Sep 2024 09:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3475\r\nExpires: Sat, 28 Sep 2024 23:45:15 GMT\r\nDate: Sat, 28 Sep 2024 22:47:20 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"d070dea5a1c30c330443d09132734e63","sha1":"3ca8c0f7cd2afd3a26da8bbe3f8a47c5995294f4","sha256":"4868faf0cf6c4f9bd0d7db49dcde0b7358890c362d5281a233ab666a702e1741","sha512":"1d47570d932cd437b5c1e807b6fe33e353730c9766d6a331819009c38d52f7ce69e3e7c6afb9831c9b670336052c61b543fcb3496cfdc5f32dac08c63a091cff","ssdeep":"","tlshash":"dcf00e723fba3500fa742f0678d5cc651e65aaf8700892d022d09252bd10bd815de01c","first_seen":"2024-09-28T14:22:13Z","last_seen":"2024-10-04T11:26:59.888878Z","times_seen":24632,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-28T22:47:20.287656889Z","timestamp":1727563640287,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0B39AF17A3DE80DB30BBD66BCC0BB8AF598C5D63C6365CC90B60A4A879B953EA\"\r\nLast-Modified: Sat, 28 Sep 2024 05:00:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3470\r\nExpires: Sat, 28 Sep 2024 23:45:10 GMT\r\nDate: Sat, 28 Sep 2024 22:47:20 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"50ec2f197e1e9012dfac7b80e5565a44","sha1":"7cb355942a7be5e49dfdfa0cc6d799118039a724","sha256":"0b39af17a3de80db30bbd66bcc0bb8af598c5d63c6365cc90b60a4a879b953ea","sha512":"7fb11e70049412f1136939e679975b1064d7f7811f310ce9ab36b21c40bef4509a0110da6de64d7d5783d26b7f60ec90a600908cbf9077e4ba99c2f4de84d05a","ssdeep":"","tlshash":"16f0c09615b0f845d6f84d1288e9fab92d302aba350545d215e04ac51a817dd51d0acc","first_seen":"2024-09-28T08:59:02Z","last_seen":"2024-10-04T11:30:50.274102Z","times_seen":12051,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-28T22:47:20.674720895Z","timestamp":1727563640674,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"D98004D3571E1A51D26420F00A34D03BA467DA831291574A99D2A920AABC60DE\"\r\nLast-Modified: Fri, 27 Sep 2024 14:37:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11687\r\nExpires: Sun, 29 Sep 2024 02:02:07 GMT\r\nDate: Sat, 28 Sep 2024 22:47:20 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"7a008f7018d5b98d787afdc07ddf2066","sha1":"88ae935b7f05301000668ad6fb1d83f6a86e82b4","sha256":"d98004d3571e1a51d26420f00a34d03ba467da831291574a99d2a920aabc60de","sha512":"0ea884269848de2d62fa3b9ba4f8e053022bedf0c617cff5ee003f3cfe4133c567d6104c5323a4efc01b5e249704f6c332abee16aa0dea3818d88cef49ec0259","ssdeep":"","tlshash":"d6f00e9955b6f802bbb90d5a38f0e84acd72e9b83900add07cd58be6a4423ec07c5008","first_seen":"2024-09-27T18:46:47Z","last_seen":"2024-10-04T11:30:57.35425Z","times_seen":30020,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-28T22:47:21.08232091Z","timestamp":1727563641082,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4DC8D5735D88454E4817E15C35C32E809DB81CE87FC16809F50BFDA640372948\"\r\nLast-Modified: Sat, 28 Sep 2024 16:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8705\r\nExpires: Sun, 29 Sep 2024 01:12:26 GMT\r\nDate: Sat, 28 Sep 2024 22:47:21 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"667516c0af05a6454902b00dc2899997","sha1":"ee061865ace4f50cb903dc4f70aa535c6ef29ba1","sha256":"4dc8d5735d88454e4817e15c35c32e809db81ce87fc16809f50bfda640372948","sha512":"dd4b74a78911e5d523f8ab1ed502d48b86e1bfaab905223896aa9ba4d865ff0be7c4c80afc8d09a20126f89205fd467d1c4bb5127a8b2feb63c7444b511a96e1","ssdeep":"","tlshash":"80f0059513b2b810e773440529f684271a14ac6c348556da31d8c8d1fc247e4535a558","first_seen":"2024-09-28T21:13:26Z","last_seen":"2024-10-04T11:21:41.550355Z","times_seen":3219,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gen.lib.rus.ec/book/index.php?md5=B77B148D05A88BEE67D40A6E085CECB7","fqdn":"gen.lib.rus.ec","domain":"rus.ec","tld":"ec"},"ip":{"addr":"104.21.96.105","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-09-28T22:47:20.943Z","timestamp":1727563640943,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /book/index.php?md5=B77B148D05A88BEE67D40A6E085CECB7 HTTP/1.1\r\nHost: gen.lib.rus.ec\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 28 Sep 2024 22:47:21 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://libgen.rs/book/index.php?md5=B77B148D05A88BEE67D40A6E085CECB7\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UmtiyZh07SDUL9GuVFxZE6TmPMkCwP2xKKx49so2qlzOsYMywN0RVapp20h%2F5yEBN7l6O81LfmBDKGsp0DOYs1PVO46I2SswjYgeWJ%2FeeFYEl4aLl47uRKVAOigujb4pmg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nSpeculation-Rules: \"/cdn-cgi/speculation\"\r\nServer: cloudflare\r\nCF-RAY: 8ca74653d99a1c0e-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":162,"size_decoded":162,"mime_type":"","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4f8e702cc244ec5d4de32740c0ecbd97","sha1":"3adb1f02d5b6054de0046e367c1d687b6cdf7aff","sha256":"9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a","sha512":"21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f","ssdeep":"","tlshash":"0bc08cadab022cc8b8a73b3861c36160e2ec80701699451101b04a07f1cf1979ec23d1","first_seen":"2023-04-05T03:07:27Z","last_seen":"2025-10-21T23:58:19.216342Z","times_seen":131101,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-28T22:47:22.81533721Z","timestamp":1727563642815,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3B998C5D32C9977245C70FEFE2914D7C202567A1663BD8C79451F17DF99C89D1\"\r\nLast-Modified: Sat, 28 Sep 2024 12:08:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11413\r\nExpires: Sun, 29 Sep 2024 01:57:35 GMT\r\nDate: Sat, 28 Sep 2024 22:47:22 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"9892580ecf39772c685d680d6f4e6928","sha1":"9699605a2728f7b2fda4499c7d3ad4d36fe984d7","sha256":"3b998c5d32c9977245c70fefe2914d7c202567a1663bd8c79451f17df99c89d1","sha512":"897c37b05db2caae5ff9cf5e3b736a138b08f87096ae515f4ee825ecadcf8b8cb3ec8306436d0bb5d4c1b61d0623a4e274dc2bece2d25953ca7d8a07f8f6918d","ssdeep":"","tlshash":"7ff005d51134f96117986076ac55c0731d7578e679c0506e8fb64bf51d34bed1d4c81c","first_seen":"2024-09-28T22:14:55Z","last_seen":"2024-10-04T11:20:46.116371Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-28T22:47:22.821320858Z","timestamp":1727563642821,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3B998C5D32C9977245C70FEFE2914D7C202567A1663BD8C79451F17DF99C89D1\"\r\nLast-Modified: Sat, 28 Sep 2024 12:08:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11413\r\nExpires: Sun, 29 Sep 2024 01:57:35 GMT\r\nDate: Sat, 28 Sep 2024 22:47:22 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"9892580ecf39772c685d680d6f4e6928","sha1":"9699605a2728f7b2fda4499c7d3ad4d36fe984d7","sha256":"3b998c5d32c9977245c70fefe2914d7c202567a1663bd8c79451f17df99c89d1","sha512":"897c37b05db2caae5ff9cf5e3b736a138b08f87096ae515f4ee825ecadcf8b8cb3ec8306436d0bb5d4c1b61d0623a4e274dc2bece2d25953ca7d8a07f8f6918d","ssdeep":"","tlshash":"7ff005d51134f96117986076ac55c0731d7578e679c0506e8fb64bf51d34bed1d4c81c","first_seen":"2024-09-28T22:14:55Z","last_seen":"2024-10-04T11:20:46.116371Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libgen.rs/book/index.php?md5=B77B148D05A88BEE67D40A6E085CECB7","fqdn":"libgen.rs","domain":"libgen.rs","tld":"rs"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-09-28T22:47:21.208Z","timestamp":1727563641208,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /book/index.php?md5=B77B148D05A88BEE67D40A6E085CECB7 HTTP/1.1\r\nHost: libgen.rs\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-28","alert":"Sinkholed","trigger":"libgen.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
