| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc2c08f8e2c667f91e7ee939f41a7ca06 159557c63c8c8ef725ae9b3fec75d5f1810b40d8 68059941cc11a454898b59b485e702d97abe8025bd02657174e26ec24eb68c81
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "68059941CC11A454898B59B485E702D97ABE8025BD02657174E26EC24EB68C81"
Last-Modified: Sun, 11 Aug 2024 06:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11833
Expires: Mon, 12 Aug 2024 19:00:15 GMT
Date: Mon, 12 Aug 2024 15:43:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash14927ac0fa718432ac5839f70891b90c fa1224f50929eaf13800f1cefb874e57ebdd9c12 83614f2bb6b89c6f08c23a06ca037a68eb6557d42829cd1504eae2ddca77739a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "83614F2BB6B89C6F08C23A06CA037A68EB6557D42829CD1504EAE2DDCA77739A"
Last-Modified: Sun, 11 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14910
Expires: Mon, 12 Aug 2024 19:51:32 GMT
Date: Mon, 12 Aug 2024 15:43:02 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash9684a2e412dcba092ae7dd8ab54bfe3d 87dd1ca7b669d577eda349186360c3f4f151e235 9f9e36f92972ab75774f4f88d275424598b73fdc98fc169e0f5355e6a93ec4cc
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9F9E36F92972AB75774F4F88D275424598B73FDC98FC169E0F5355E6A93EC4CC"
Last-Modified: Sun, 11 Aug 2024 12:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13497
Expires: Mon, 12 Aug 2024 19:27:59 GMT
Date: Mon, 12 Aug 2024 15:43:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash920e4f3a49784056e5c5faa263b2f6a7 5070431826e2f4b1988fff3b3e6ff8a4e1a97919 037a14a94c65f88afcab57eae3fc805e8115b35825ec9659f173442b45918e8e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "037A14A94C65F88AFCAB57EAE3FC805E8115B35825EC9659F173442B45918E8E"
Last-Modified: Sun, 11 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12559
Expires: Mon, 12 Aug 2024 19:12:22 GMT
Date: Mon, 12 Aug 2024 15:43:03 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashfa9d9a7703999cfc274f02dcaadb4561 eb147c3d5cebb3001dfeb1e60aa7054d1f2ca51c 1f147459e31f4e1f2f37449a98c122615b2ad8051ac691d52f0fb1cf2892a35c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1F147459E31F4E1F2F37449A98C122615B2AD8051AC691D52F0FB1CF2892A35C"
Last-Modified: Sun, 11 Aug 2024 06:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19995
Expires: Mon, 12 Aug 2024 21:16:18 GMT
Date: Mon, 12 Aug 2024 15:43:03 GMT
Connection: keep-alive
|
|
| GET uptodownload.shop/cdn-cgi/images/icon-exclamation.png?1376755637 | 188.114.97.1 | 200 OK | 452 B |
URL GET HTTP/2uptodownload.shop/cdn-cgi/images/icon-exclamation.png?1376755637 IP 188.114.97.1:443
Requested byhttps://uptodownload.shop/d/f-c.txt CertificateIssuerGoogle Trust Services Subjectuptodownload.shop FingerprintAF:CA:F2:26:A2:4D:34:2F:80:73:0E:B6:0E:6B:EB:AC:63:D2:74:29 ValidityFri, 09 Aug 2024 19:00:26 GMT - Thu, 07 Nov 2024 19:00:25 GMT
File typePNG image data, 54 x 54, 8-bit colormap, non-interlaced Hashc33de66281e933259772399d10a6afe8 b9f9d500f8814381451011d4dcf59cd2d90ad94f f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Sinkholed / Blocked |
GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
Host: uptodownload.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptodownload.shop/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Aug 2024 15:43:03 GMT
content-type: image/png
content-length: 452
last-modified: Wed, 07 Aug 2024 09:34:53 GMT
etag: "66b33fbd-1c4"
server: cloudflare
cf-ray: 8b21942f882db4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Mon, 12 Aug 2024 17:43:03 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashb3cb4fa78d48efd3475d6c2225a3a440 d25b7736221fe0073288e3ec4950389761ae2a06 799a896dc6357139a345e649d5cc7560ec07901f5a272e102018cb4dc18aebd7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "799A896DC6357139A345E649D5CC7560EC07901F5A272E102018CB4DC18AEBD7"
Last-Modified: Sun, 11 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17659
Expires: Mon, 12 Aug 2024 20:37:24 GMT
Date: Mon, 12 Aug 2024 15:43:05 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashb3cb4fa78d48efd3475d6c2225a3a440 d25b7736221fe0073288e3ec4950389761ae2a06 799a896dc6357139a345e649d5cc7560ec07901f5a272e102018cb4dc18aebd7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "799A896DC6357139A345E649D5CC7560EC07901F5A272E102018CB4DC18AEBD7"
Last-Modified: Sun, 11 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17659
Expires: Mon, 12 Aug 2024 20:37:24 GMT
Date: Mon, 12 Aug 2024 15:43:05 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashb3cb4fa78d48efd3475d6c2225a3a440 d25b7736221fe0073288e3ec4950389761ae2a06 799a896dc6357139a345e649d5cc7560ec07901f5a272e102018cb4dc18aebd7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "799A896DC6357139A345E649D5CC7560EC07901F5A272E102018CB4DC18AEBD7"
Last-Modified: Sun, 11 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17659
Expires: Mon, 12 Aug 2024 20:37:24 GMT
Date: Mon, 12 Aug 2024 15:43:05 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashb3cb4fa78d48efd3475d6c2225a3a440 d25b7736221fe0073288e3ec4950389761ae2a06 799a896dc6357139a345e649d5cc7560ec07901f5a272e102018cb4dc18aebd7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "799A896DC6357139A345E649D5CC7560EC07901F5A272E102018CB4DC18AEBD7"
Last-Modified: Sun, 11 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17659
Expires: Mon, 12 Aug 2024 20:37:24 GMT
Date: Mon, 12 Aug 2024 15:43:05 GMT
Connection: keep-alive
|
|
| GET uptodownload.shop/favicon.ico | 188.114.97.1 | 200 OK | 166 kB |
URL GET HTTP/2uptodownload.shop/favicon.ico IP 188.114.97.1:443
Requested byhttps://uptodownload.shop/d/f-c.txt CertificateIssuerGoogle Trust Services Subjectuptodownload.shop FingerprintAF:CA:F2:26:A2:4D:34:2F:80:73:0E:B6:0E:6B:EB:AC:63:D2:74:29 ValidityFri, 09 Aug 2024 19:00:26 GMT - Thu, 07 Nov 2024 19:00:25 GMT
File typeMS Windows icon resource - 1 icon, -56x-56, 32 bits/pixel Size166 kB (165662 bytes) Hash494c7a73ef90cfc010db8bde501e0644 6dfe89632b7a3252c3de5e96f9eab36bbc2e9367 1554be9f4609d3cd02fc428c91006b6862b5eb736d3ec4392cc9236631fec363
GET /favicon.ico HTTP/1.1
Host: uptodownload.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptodownload.shop/d/f-c.txt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 Aug 2024 15:43:03 GMT
content-type: image/x-icon
last-modified: Tue, 13 Feb 2024 01:12:14 GMT
etag: W/"2871e-6113915a21565"
cache-control: max-age=14400
cf-cache-status: HIT
age: 761
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MFhoENxbDSRlcpUN0In1Ft4idb29zxo0rmxLR7SgUm6skIglgJliTQQ6n%2BmB0Fk1xSDKUdzzX8SqjVOST42lGzFEpYtXTcH8F5JvQrrxB2GmEqsrDV14QnTca4%2BB1DByQMmrTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b21942f983cb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET uptodownload.shop/d/f-c.txt | 188.114.97.1 | 200 OK | 4.4 kB |
URL User Request GET HTTP/2uptodownload.shop/d/f-c.txt IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectuptodownload.shop FingerprintAF:CA:F2:26:A2:4D:34:2F:80:73:0E:B6:0E:6B:EB:AC:63:D2:74:29 ValidityFri, 09 Aug 2024 19:00:26 GMT - Thu, 07 Nov 2024 19:00:25 GMT
File typeHTML document, ASCII text, with very long lines (4648), with no line terminators Hashed797cb7eb3c7c5d1dd1dfbac48b8607 18a303418cfa7783b08d75b12cfc350f0e1124ef 7e78a8eca574c7b2e37b8fa463659ce06ec9c8514548a26583aea1e9eac87b5f
GET /d/f-c.txt HTTP/1.1
Host: uptodownload.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 Aug 2024 15:43:03 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCgsTbCHbcvXXl9431SrjSat%2B%2FA9BYb8epbvYqDDwNraJfPD7btcEqxU6fNBceblen2ZVOesolio0efAc6zSD%2FjUUVvDzky%2FZt3Wq7nDa%2FXN3VSUtse1R8HnR7VqNloNyDv6Hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b21942d2ce5b4f4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET uptodownload.shop/cdn-cgi/styles/cf.errors.css | 188.114.97.1 | 200 OK | 24 kB |
URL GET HTTP/2uptodownload.shop/cdn-cgi/styles/cf.errors.css IP 188.114.97.1:443
Requested byhttps://uptodownload.shop/d/f-c.txt CertificateIssuerGoogle Trust Services Subjectuptodownload.shop FingerprintAF:CA:F2:26:A2:4D:34:2F:80:73:0E:B6:0E:6B:EB:AC:63:D2:74:29 ValidityFri, 09 Aug 2024 19:00:26 GMT - Thu, 07 Nov 2024 19:00:25 GMT
File typeASCII text, with very long lines (24050) Hash5e8c69a459a691b5d1b9be442332c87d f24dd1ad7c9080575d92a9a9a2c42620725ef836 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: uptodownload.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uptodownload.shop/d/f-c.txt
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 Aug 2024 15:43:03 GMT
content-type: text/css
last-modified: Wed, 07 Aug 2024 09:34:53 GMT
etag: W/"66b33fbd-5df3"
server: cloudflare
cf-ray: 8b21942f3fbab4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Mon, 12 Aug 2024 17:43:03 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|