| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash404e3e4520c09fcce1358b1a21f6b171 040aa03460f3d7ec6f75cae0bf5a462a4bb9798d f6fc34acb6b2d60bb37dd5caf92b0988cdd52927d80d1f5e7bc23b7db9e8209a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F6FC34ACB6B2D60BB37DD5CAF92B0988CDD52927D80D1F5E7BC23B7DB9E8209A"
Last-Modified: Sat, 31 Aug 2024 00:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13136
Expires: Sat, 31 Aug 2024 06:19:41 GMT
Date: Sat, 31 Aug 2024 02:40:45 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashc3d1bfb12515d2f23214f980f7a18b8c 24cc3d9048888cc7e1f4ff42b8fdc1c16c9feb46 35a446cea345dbdb2c297726a3d6cc5f1088f4f9a3f65904c3b9655056efda06
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "35A446CEA345DBDB2C297726A3D6CC5F1088F4F9A3F65904C3B9655056EFDA06"
Last-Modified: Thu, 29 Aug 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17985
Expires: Sat, 31 Aug 2024 07:40:30 GMT
Date: Sat, 31 Aug 2024 02:40:45 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash394892113e0ffb33f2ffdbe727637967 6356e0f13c62b88d4f8a3a20336c86b21b9e7b43 7bfca20b125a7ca370d17340cd1425663c1c6e81f8a0c42aa9703e88e2fa5ebd
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7BFCA20B125A7CA370D17340CD1425663C1C6E81F8A0C42AA9703E88E2FA5EBD"
Last-Modified: Wed, 28 Aug 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14022
Expires: Sat, 31 Aug 2024 06:34:27 GMT
Date: Sat, 31 Aug 2024 02:40:45 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash41d99bdb0bce7036541a169e82b157fd 448d08018f9868e2a7ccda7a3bdc81242cfdb412 441e957bca9afb4a865df5362c94cc68df8071610ef8c8b49ec682bf57d81b4e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "441E957BCA9AFB4A865DF5362C94CC68DF8071610EF8C8B49EC682BF57D81B4E"
Last-Modified: Wed, 28 Aug 2024 14:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17932
Expires: Sat, 31 Aug 2024 07:39:37 GMT
Date: Sat, 31 Aug 2024 02:40:45 GMT
Connection: keep-alive
|
|
| GET ledder.us/OneForTheKids.html | 162.210.102.62 | 200 OK | 14 kB |
URL User Request GET HTTP/1.1ledder.us/OneForTheKids.html IP 162.210.102.62:80
File typeHTML document, Non-ISO extended-ASCII text, with CRLF, LF line terminators Hash3d4dd93904a08693282980c6446c76e9 bed44688e35edab8adddfe82d1ac92dc6c39ca98 dbfdaa6d4a2769e778599939515dfc081a662ec46e86582ba424225b613be441
GET /OneForTheKids.html HTTP/1.1
Host: ledder.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 31 Aug 2024 02:40:46 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2013 10:40:07 GMT
ETag: "9e31-4da63e0530fc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 14081
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
|
|
| GET ledder.us/favicon.ico | 162.210.102.62 | 404 Not Found | 1.1 kB |
IP 162.210.102.62:80
Requested byhttp://ledder.us/OneForTheKids.html
File typeXML 1.0 document, ASCII text Hash3512e6f2f685e6572bc8b9f062db083a 2f573dcd51d1a189380d4ab18fa6855d6c2df3bc c1c11654083b4a0dbc6236e000ce75f6790cd4ed600c3b9d00c2ee595cd09555
GET /favicon.ico HTTP/1.1
Host: ledder.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ledder.us/OneForTheKids.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 31 Aug 2024 02:40:46 GMT
Server: Apache
Vary: accept-language,accept-charset,User-Agent
Accept-Ranges: bytes
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Content-Language: en
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashbb5e9405671b53b4e83ea35107d596c2 0137160e22736d3b47d6d0a8e4c0c6745547e822 2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6757
Expires: Sat, 31 Aug 2024 04:33:24 GMT
Date: Sat, 31 Aug 2024 02:40:47 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashbb5e9405671b53b4e83ea35107d596c2 0137160e22736d3b47d6d0a8e4c0c6745547e822 2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6757
Expires: Sat, 31 Aug 2024 04:33:24 GMT
Date: Sat, 31 Aug 2024 02:40:47 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashbb5e9405671b53b4e83ea35107d596c2 0137160e22736d3b47d6d0a8e4c0c6745547e822 2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6757
Expires: Sat, 31 Aug 2024 04:33:24 GMT
Date: Sat, 31 Aug 2024 02:40:47 GMT
Connection: keep-alive
|
|
| | 104.21.48.236 | 302 Found | 40 kB |
URL User Request GET HTTP/2IP 104.21.48.236:443
CertificateIssuerGoogle Trust Services Subjectalturl.com Fingerprint3E:AB:8C:33:7B:44:CF:92:F4:B4:E7:BD:33:46:11:E7:9C:DE:7E:CC ValidityWed, 03 Jul 2024 10:16:56 GMT - Tue, 01 Oct 2024 10:16:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hcep4 HTTP/1.1
Host: alturl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 31 Aug 2024 02:40:46 GMT
content-type: text/html; charset=UTF-8
location: http://ledder.us/OneForTheKids.html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJw7AT7N7vUo7BcS%2Bq2Yc6FNwsenfJ4jq7G0%2BcZMWrPP7eeIVq64rD82%2BaRFOEQSqCCtjQt0lbc8Yp1oCBK4qBdXI1EIRl8MTvfC9J%2BFUDr7NIWqsyGyQyf3hMjt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bb9a85caec5b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET egmore.peguards.cc/71109/get.js | 0.0.0.0 | | 0 B |
URL GET egmore.peguards.cc/71109/get.js IP 0.0.0.0:0
Requested byhttp://ledder.us/OneForTheKids.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /71109/get.js HTTP/1.1
Host: egmore.peguards.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ledder.us/
Pragma: no-cache
Cache-Control: no-cache
|
|