| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash335c4af72a92afe06fbd24291c5c5870 7cb8fdbe83e4c47227b68b53c4e72f89e8c83e97 a89b5cdd90d9c8a2fac62f75b3641475d1c04b4712ecc873ce2d6f7b280e6e58
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A89B5CDD90D9C8A2FAC62F75B3641475D1C04B4712ECC873CE2D6F7B280E6E58"
Last-Modified: Sat, 12 Oct 2024 00:30:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2274
Expires: Sat, 12 Oct 2024 08:45:26 GMT
Date: Sat, 12 Oct 2024 08:07:32 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash446c38512c113e0e83ce2eb14625b688 147c71c0122d553d63d092ba192a03f0bb5b1d8d 09c97572f62af3b8fff778376376d3f317c7a167678f2ead6f0d8950df802e53
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "09C97572F62AF3B8FFF778376376D3F317C7A167678F2EAD6F0D8950DF802E53"
Last-Modified: Thu, 10 Oct 2024 16:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2621
Expires: Sat, 12 Oct 2024 08:51:13 GMT
Date: Sat, 12 Oct 2024 08:07:32 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc0478b0cd161f62f480ac8b275d2010f ce1a9d58da42b4c1c6f25c6ab4d0fe629072adc4 fb3e66346ead98f26678af7d3bf732124983ce83aba60e4e6517058ce2394c05
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FB3E66346EAD98F26678AF7D3BF732124983CE83ABA60E4E6517058CE2394C05"
Last-Modified: Fri, 11 Oct 2024 19:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2393
Expires: Sat, 12 Oct 2024 08:47:25 GMT
Date: Sat, 12 Oct 2024 08:07:32 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash7db95baaf7589f4e7e78f4e258544922 44343fc1282f7282fb7d3309e2e5927cfaefdcdf 98f60760645b89dff87ad0cd01deb5c96af32540b9e2fdaac4299f3bb1c2138a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "98F60760645B89DFF87AD0CD01DEB5C96AF32540B9E2FDAAC4299F3BB1C2138A"
Last-Modified: Fri, 11 Oct 2024 20:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2292
Expires: Sat, 12 Oct 2024 08:45:44 GMT
Date: Sat, 12 Oct 2024 08:07:32 GMT
Connection: keep-alive
|
|
| | 151.101.1.195 | 302 Found | 0 B |
URL User Request GET HTTP/2IP 151.101.1.195:443
CertificateIssuerGoogle Trust Services Subjectdevelop.app.sereneapp.com FingerprintB3:5F:0E:26:42:77:8C:A3:C3:FA:9B:4F:1F:0B:89:D0:7A:9C:98:26 ValidityThu, 22 Aug 2024 05:50:58 GMT - Wed, 20 Nov 2024 06:49:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /SKZu HTTP/1.1
Host: bityl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-headers: Content-Type
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 3666
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-type: text/html; charset=utf-8
expires: 0
function-execution-id: uhzhonqgbzoo
location: https://www.worldwideclickweb.com/25J72WZ4/7CSWZ6QM/?sub1=505
pragma: no-cache
referer: bityl.co
server: Google Frontend
strict-transport-security: max-age=31556926
x-cloud-trace-context: 32b283671c26d1900f45f347c0a5e359
x-country-code: NO
x-orig-accept-language: en-US,en;q=0.5
x-powered-by: Express
accept-ranges: bytes
date: Sat, 12 Oct 2024 08:07:32 GMT
x-served-by: cache-hel1410031-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1728720453.813400,VS0,VE181
vary: Origin,cookie,need-authorization, x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 0
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash29432ba0f965dfda8de99ed506874afe 1c9b8a5941e8c26857b576f97c9410ced3a6ec17 059b5ed36685cfa7c9999204eba45352035048067eeb5fca3733608faa2b36b2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "059B5ED36685CFA7C9999204EBA45352035048067EEB5FCA3733608FAA2B36B2"
Last-Modified: Fri, 11 Oct 2024 21:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2358
Expires: Sat, 12 Oct 2024 08:46:51 GMT
Date: Sat, 12 Oct 2024 08:07:33 GMT
Connection: keep-alive
|
|
| o.pki.goog/s/wr3/5is | 142.250.74.131 | | 472 B |
IP 142.250.74.131:0
Hash19f03dcc05fd19f391e05591c43c6d8f 0e82a52db9c3ed4b96db212662c15cf3acaed072 416978e94cd1c1311af5e765dc7a1b06e8f2fd674f275d4583764aa53a334582
POST /s/wr3/5is HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Oct 2024 08:07:33 GMT
Cache-Control: public, max-age=14400
Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/sytroprc:52:0
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting
Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/sytroprc:52:0"}],}
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash0c9e3f1c05b87ebfac11ead3858765ca 07caa910c50600431fc60a2a1125567327d7911c dd52bce791f6efea873148bee1443b133a0f2ace7bd7bab66893bfc444762de2
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD52BCE791F6EFEA873148BEE1443B133A0F2ACE7BD7BAB66893BFC444762DE2"
Last-Modified: Thu, 10 Oct 2024 15:54:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2271
Expires: Sat, 12 Oct 2024 08:45:24 GMT
Date: Sat, 12 Oct 2024 08:07:33 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash243c337d5cb33f8b87ffd929fd5b8dac e166cc5699729974e329ba382b994606a255c312 a587e96d81cacff2dbe822c143fa2f16684379c5d9261fb5a4170663e35ecf95
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A587E96D81CACFF2DBE822C143FA2F16684379C5D9261FB5A4170663E35ECF95"
Last-Modified: Thu, 10 Oct 2024 16:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2399
Expires: Sat, 12 Oct 2024 08:47:32 GMT
Date: Sat, 12 Oct 2024 08:07:33 GMT
Connection: keep-alive
|
|
| GET www.worldwideclickweb.com/25J72WZ4/7CSWZ6QM/?sub1=505 | 188.114.96.1 | 204 No Content | 0 B |
URL User Request GET HTTP/2www.worldwideclickweb.com/25J72WZ4/7CSWZ6QM/?sub1=505 IP 188.114.96.1:443
CertificateIssuerGoogle Trust Services Subjectworldwideclickweb.com Fingerprint5A:A1:D2:99:5A:2A:A5:44:DB:15:23:23:DE:7B:47:07:B5:32:BE:2F ValidityWed, 18 Sep 2024 13:56:58 GMT - Tue, 17 Dec 2024 13:56:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /25J72WZ4/7CSWZ6QM/?sub1=505 HTTP/1.1
Host: www.worldwideclickweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 12 Oct 2024 08:07:33 GMT
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
vary: Origin
x-eflow-request-id: a0d45ce3-fd57-429e-af78-3bd7a550e49b
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AnBRbpbUf%2FkAm%2F9%2BrXo93RmPgX2OZYZxtzn8rTKy2vIqrfs2TaHT9ryEHGKF1rYW8OxmHz12F8a0DGnZH9d2LT6mTnrxpTGpmsAvjtkuq91GlSMjhNBgS2swME1k2T2Alc6oMWoZOsANaIc4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8d1598d00a5456cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashccb7c0a230775ffeed6f8a2d5495f2f4 b64d41f2ff0740b511f8043dd7f00db3d937bdc8 c1086024116cc032f78be5a4521af542f33df4c8534249eaf15c5eeccf4ec5f7
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C1086024116CC032F78BE5A4521AF542F33DF4C8534249EAF15C5EECCF4EC5F7"
Last-Modified: Wed, 09 Oct 2024 23:02:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3667
Expires: Sat, 12 Oct 2024 09:08:41 GMT
Date: Sat, 12 Oct 2024 08:07:34 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashccb7c0a230775ffeed6f8a2d5495f2f4 b64d41f2ff0740b511f8043dd7f00db3d937bdc8 c1086024116cc032f78be5a4521af542f33df4c8534249eaf15c5eeccf4ec5f7
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C1086024116CC032F78BE5A4521AF542F33DF4C8534249EAF15C5EECCF4EC5F7"
Last-Modified: Wed, 09 Oct 2024 23:02:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3667
Expires: Sat, 12 Oct 2024 09:08:41 GMT
Date: Sat, 12 Oct 2024 08:07:34 GMT
Connection: keep-alive
|
|
| bityl.co/ | 151.101.1.195 | | 0 B |
IP 151.101.1.195:0
CertificateIssuerGoogle Trust Services Subjectdevelop.app.sereneapp.com FingerprintB3:5F:0E:26:42:77:8C:A3:C3:FA:9B:4F:1F:0B:89:D0:7A:9C:98:26 ValidityThu, 22 Aug 2024 05:50:58 GMT - Wed, 20 Nov 2024 06:49:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: bityl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://bityl.co/
Accept-Ranges: bytes
Date: Sat, 12 Oct 2024 08:07:35 GMT
X-Served-By: cache-hel1410027-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1728720456.763857,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| bityl.co/home.html | 151.101.1.195 | | 3.6 kB |
IP 151.101.1.195:0
CertificateIssuerGoogle Trust Services Subjectdevelop.app.sereneapp.com FingerprintB3:5F:0E:26:42:77:8C:A3:C3:FA:9B:4F:1F:0B:89:D0:7A:9C:98:26 ValidityThu, 22 Aug 2024 05:50:58 GMT - Wed, 20 Nov 2024 06:49:03 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (431) Hash9d70d7caa8f9e94d42ab93ed230b39bd 06133fceb1db4214911e5ccf8eef77864a4de24c 993f39038aa3ccd1b525183befea853f85e095d56bd6c6de25d1703449e6fbe9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /home.html HTTP/1.1
Host: bityl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "1117fb616294e405055aaee0da83865bf835ab228aa2f5075496478b1cee7567-br"
last-modified: Wed, 21 Aug 2024 06:25:56 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 12 Oct 2024 08:07:36 GMT
x-served-by: cache-hel1410021-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1728720456.080332,VS0,VE224
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3614
X-Firefox-Spdy: h2
|
|