Report - efense.com/v3/__https:/twitter.com/raytheontech_

Report Overview

Visitedpublic

2024-08-16 23:11:02

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Sent	Received	IP
efense.com	unknown	836 B	2.1 kB	50.87.144.115
explorefreeresults.com	unknown	640 B	2.2 kB	208.91.196.46
sedoparking.com	50712	338 B	844 B	64.190.63.136
r11.o.lencr.org	unknown	981 B	2.7 kB	23.33.119.57
r10.o.lencr.org	unknown	327 B	888 B	23.33.119.57

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K=	ScriptElement	0 B	0001-01-01	2025-08-02
URL efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= IP / ASN 50.87.144.115 #46606 UNIFIEDLAYER-AS-1 Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606738 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

	explorefreeresults.com/px.js?ch=1	ScriptElement	346 B	2023-03-07	2025-07-09
URL explorefreeresults.com/px.js?ch=1 IP / ASN 208.91.196.46 #40034 CONFLUENCE-NETWORK-INC Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-07-09 Times Seen 8511 Size 346 B (346 bytes) MD5 f84f931c0dd37448e03f0dabf4e4ca9f SHA1 9c2c50edcf576453ccc07bf65668bd23c76e8663 SHA256 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584 Format Code Loading...

	sedoparking.com/frmpark/efense.com/Skenzor1/park.js	ScriptElement	1.3 kB	2024-07-29	2024-12-13
URL sedoparking.com/frmpark/efense.com/Skenzor1/park.js IP / ASN 64.190.63.136 #47846 SEDO GmbH Introduced by ScriptElement Embedded false Resource Info First Seen 2024-07-29 Last Seen 2024-12-13 Times Seen 10 Size 1.3 kB (1277 bytes) MD5 1c6f7ab2dd0fbce1f50c6dbb21e1c17d SHA1 f3b0f7694106aaed2d58935d1995b44a49f87ba8 SHA256 8f3eb7f6a5b59020f5e0ccd0d40bd4292fa732a2e50232a382044d451aafa8f9 Format Code Loading...

	HASH	FROM	Size	First Seen	Last Seen
	154c9aec733c23fe6266d1790eb40250	DocumentWrite	121 B	2024-07-29	2024-12-13
Introduced by DocumentWrite First Seen 2024-07-29 Last Seen 2024-12-13 Times Seen 10 Size 121 B (121 bytes) MD5 154c9aec733c23fe6266d1790eb40250 SHA1 18347930241d3621d493480cab7ac84d35fac71c SHA256 1b8c62d4e979d1d4d9bc83a20ebe0d4916be7cb56387737c58b54c5ee3e02d85 Format Code Loading...

HTTP Transactions (9)

	URL	IP	Response	Size
	r11.o.lencr.org/	23.33.119.57		504 B
URL r11.o.lencr.org/ IP / ASN 23.33.119.57 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-08-14 Last Seen2024-08-19 Times Seen48873 Size504 B (504 bytes) MD5686480d25645ac2aca7a99974693a82f SHA155ca9d53bd758d2afc75e8a9b59c656ff26a3f70 SHA2568902058e383c2f43751417e1af1d582f7a16ce0b6fc180ab20cbc76c4b00f914 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "8902058E383C2F43751417E1AF1D582F7A16CE0B6FC180AB20CBC76C4B00F914" Last-Modified: Wed, 14 Aug 2024 12:55:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12895 Expires: Sat, 17 Aug 2024 02:45:30 GMT Date: Fri, 16 Aug 2024 23:10:35 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP / ASN 23.33.119.57 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-08-15 Last Seen2024-08-19 Times Seen49254 Size504 B (504 bytes) MD54d209e16679910b467c26590a0073236 SHA1ddd59fa6902b498e9c0cfb22e342757f954789d0 SHA2569ef3dab56215a67804db0e12d33772a1902f5914b788530717712902a294bcb5 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "9EF3DAB56215A67804DB0E12D33772A1902F5914B788530717712902A294BCB5" Last-Modified: Wed, 14 Aug 2024 21:59:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13864 Expires: Sat, 17 Aug 2024 03:01:39 GMT Date: Fri, 16 Aug 2024 23:10:35 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.33.119.57		504 B
URL r11.o.lencr.org/ IP / ASN 23.33.119.57 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-08-15 Last Seen2024-08-19 Times Seen45417 Size504 B (504 bytes) MD53c14cfb85dc9ceb923d7d3c3648719d2 SHA110ea83f83398870f50ca771216ad77bd95aa66cc SHA256bc868b2a34fe0c66d7a2dc1754676cc4031891c797fdd23e82d135559bd82c1b HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BC868B2A34FE0C66D7A2DC1754676CC4031891C797FDD23E82D135559BD82C1B" Last-Modified: Thu, 15 Aug 2024 09:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13414 Expires: Sat, 17 Aug 2024 02:54:11 GMT Date: Fri, 16 Aug 2024 23:10:37 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.33.119.57		504 B
URL r11.o.lencr.org/ IP / ASN 23.33.119.57 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-08-15 Last Seen2024-08-19 Times Seen45417 Size504 B (504 bytes) MD53c14cfb85dc9ceb923d7d3c3648719d2 SHA110ea83f83398870f50ca771216ad77bd95aa66cc SHA256bc868b2a34fe0c66d7a2dc1754676cc4031891c797fdd23e82d135559bd82c1b HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BC868B2A34FE0C66D7A2DC1754676CC4031891C797FDD23E82D135559BD82C1B" Last-Modified: Thu, 15 Aug 2024 09:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13414 Expires: Sat, 17 Aug 2024 02:54:11 GMT Date: Fri, 16 Aug 2024 23:10:37 GMT Connection: keep-alive`

	GET efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K=	50.87.144.115	200 OK	1.2 kB
URL efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= IP / ASN 50.87.144.115 #46606 UNIFIEDLAYER-AS-1 Requested byN/A Resource Info File typeHTML document, ASCII text, with very long lines (776), with CRLF, LF line terminators First Seen2024-08-19 Last Seen2024-08-19 Times Seen1 Size1.2 kB (1229 bytes) MD5350d1e045625b01f7baedcc969c8a052 SHA1f4d31cdcb71a0a1e26a9912cd20cc690c3523922 SHA25624ff49261fa96f9870f78418743d02455e64f93d40665f75a2dbc587573c3d57 HTTP Headers `GET /v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= HTTP/1.1 Host: efense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 16 Aug 2024 23:10:36 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 1229 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8`

	GET explorefreeresults.com/px.js?ch=1	208.91.196.46	200 OK	346 B
URL explorefreeresults.com/px.js?ch=1 IP / ASN 208.91.196.46 #40034 CONFLUENCE-NETWORK-INC Requested byhttp://efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= Resource Info File typeASCII text, with very long lines (346), with no line terminators First Seen2023-03-07 Last Seen2025-07-09 Times Seen8511 Size346 B (346 bytes) MD5f84f931c0dd37448e03f0dabf4e4ca9f SHA19c2c50edcf576453ccc07bf65668bd23c76e8663 SHA2565c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584 HTTP Headers `GET /px.js?ch=1 HTTP/1.1 Host: explorefreeresults.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://efense.com/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 16 Aug 2024 23:10:23 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript

	GET explorefreeresults.com/px.js?ch=2	208.91.196.46	200 OK	346 B
URL explorefreeresults.com/px.js?ch=2 IP / ASN 208.91.196.46 #40034 CONFLUENCE-NETWORK-INC Requested byhttp://efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= Resource Info File typeASCII text, with very long lines (346), with no line terminators First Seen2023-03-07 Last Seen2025-07-09 Times Seen8511 Size346 B (346 bytes) MD5f84f931c0dd37448e03f0dabf4e4ca9f SHA19c2c50edcf576453ccc07bf65668bd23c76e8663 SHA2565c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584 HTTP Headers `GET /px.js?ch=2 HTTP/1.1 Host: explorefreeresults.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://efense.com/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 16 Aug 2024 23:10:26 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript

	GET sedoparking.com/frmpark/efense.com/Skenzor1/park.js	64.190.63.136	200 OK	596 B
URL sedoparking.com/frmpark/efense.com/Skenzor1/park.js IP / ASN 64.190.63.136 #47846 SEDO GmbH Requested byhttp://efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= Resource Info File typeASCII text, with very long lines (987) First Seen2024-07-29 Last Seen2024-12-13 Times Seen10 Size596 B (596 bytes) MD51c6f7ab2dd0fbce1f50c6dbb21e1c17d SHA1f3b0f7694106aaed2d58935d1995b44a49f87ba8 SHA2568f3eb7f6a5b59020f5e0ccd0d40bd4292fa732a2e50232a382044d451aafa8f9 HTTP Headers `GET /frmpark/efense.com/Skenzor1/park.js HTTP/1.1 Host: sedoparking.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://efense.com/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK date: Fri, 16 Aug 2024 23:10:46 GMT content-type: application/javascript; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-cache-miss-from: parking-68fdcdc496-rgl2t server: Parking/1.0 content-encoding: gzip`

	GET efense.com/favicon.ico	50.87.144.115	200 OK	221 B
URL efense.com/favicon.ico IP / ASN 50.87.144.115 #46606 UNIFIEDLAYER-AS-1 Requested byhttp://efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= Resource Info File typeHTML document, ASCII text, with CRLF line terminators First Seen2024-07-25 Last Seen2024-08-21 Times Seen4 Size221 B (221 bytes) MD500a631da6617acf5a217cb226b3f31b2 SHA1b5435cba1842b7e22c4a047a21ca6b464857c2be SHA256dc5e9a872f4118d4dd0c7f2fb1f85026e4da5234f3b60a21e3d431889088a9f3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: efense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://efense.com/v3/__https:/twitter.com/raytheontech__;=21=21MvWE=21FHOHwQE6K= Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 16 Aug 2024 23:10:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 221 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8`

Detections

Host Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

HTTP Transactions (9)

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers