Report - s7.athenacdn03.site/cdn/down/5b5faf109bc2bc1bff0ab31dbb071c40/Video/720p/720p

Report Overview

Visitedpublic

2024-07-17 05:49:36

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-16 18:12:11	2.3 kB	6.2 kB	23.36.76.226
aus5.mozilla.org	2548	1998-01-24	2015-10-27 08:06:24	2024-07-16 18:17:11	512 B	1.2 kB	35.244.181.201
s7.athenacdn03.site	unknown	unknown	No data	No data	542 B	1.0 MB	172.67.75.17

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-07-17	medium	athenacdn03.site	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-15

Last Seen2024-08-19

Times Seen24082

Size504 B (504 bytes)

MD59fc6673328a72199efee32208e052486

SHA1e3cd507761b95ae04da178d9b0da347fcaa5fce6

SHA256133266844822ea13f6d0ffc2eda97a79e99cea9ec4defec2812cf4a86751283a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "133266844822EA13F6D0FFC2EDA97A79E99CEA9EC4DEFEC2812CF4A86751283A"
Last-Modified: Mon, 15 Jul 2024 20:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3312
Expires: Wed, 17 Jul 2024 06:44:23 GMT
Date: Wed, 17 Jul 2024 05:49:11 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-15

Last Seen2024-08-19

Times Seen14325

Size504 B (504 bytes)

MD5f5d61e015345f1d6e8a4ab6805f26f50

SHA15e3929d1cfa9cf61ddcf3df75f9ae5902fa3c6ee

SHA2563a781ef35e2f1386215f140f851199c98fc01c4f137cc1f38192faa4a4e9106c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3A781EF35E2F1386215F140F851199C98FC01C4F137CC1F38192FAA4A4E9106C"
Last-Modified: Mon, 15 Jul 2024 19:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2798
Expires: Wed, 17 Jul 2024 06:35:49 GMT
Date: Wed, 17 Jul 2024 05:49:11 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-15

Last Seen2024-08-19

Times Seen23445

Size504 B (504 bytes)

MD5515a47172f3cc8fbca49fb1ef5f72e11

SHA15b474a25a17288e58ea017f17fa456cf13893af3

SHA25613578d886dc74ebf01cfa31617c3417b42b8c8395e4bacc10a1b6f1d19bc55f2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "13578D886DC74EBF01CFA31617C3417B42B8C8395E4BACC10A1B6F1D19BC55F2"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2936
Expires: Wed, 17 Jul 2024 06:38:07 GMT
Date: Wed, 17 Jul 2024 05:49:11 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-16

Last Seen2024-08-19

Times Seen982

Size504 B (504 bytes)

MD5aaea61f25ae478356ba17d6a880cf7e9

SHA1f98dbbbe8056956136db3881f5cf0b5f82bcc79f

SHA25687d137fcf3642e83d7d80b92c3071a241550f6e6e1f1981653373ae4367a723d

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "87D137FCF3642E83D7D80B92C3071A241550F6E6E1F1981653373AE4367A723D"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4067
Expires: Wed, 17 Jul 2024 06:56:59 GMT
Date: Wed, 17 Jul 2024 05:49:12 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-16

Last Seen2024-08-19

Times Seen18625

Size504 B (504 bytes)

MD5d6a8982e5c8cce4f958455f8ea1e5814

SHA1d88c9d262e8282645ee77a1a3f29199b0422166a

SHA256c18d568bc2c4d8544c593d76c943798ffd2de9596cb115879d51d403f080abea

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C18D568BC2C4D8544C593D76C943798FFD2DE9596CB115879D51D403F080ABEA"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7390
Expires: Wed, 17 Jul 2024 07:52:22 GMT
Date: Wed, 17 Jul 2024 05:49:12 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL

r10.o.lencr.org/

IP / ASN

23.33.119.27

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-16

Last Seen2024-08-19

Times Seen20812

Size504 B (504 bytes)

MD524c83d2f348779cbefbb6c6bd4b8c2a8

SHA14373c3ca7bee06c8456f6997929b0af5e349283d

SHA256f957efbbe90dee51487d910c6039fa2ac841192fd9f67efb69358b536f87b7d3

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F957EFBBE90DEE51487D910C6039FA2AC841192FD9F67EFB69358B536F87B7D3"
Last-Modified: Mon, 15 Jul 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20339
Expires: Wed, 17 Jul 2024 11:28:16 GMT
Date: Wed, 17 Jul 2024 05:49:17 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL

r10.o.lencr.org/

IP / ASN

23.33.119.27

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-07-16

Last Seen2024-08-19

Times Seen20812

Size504 B (504 bytes)

MD524c83d2f348779cbefbb6c6bd4b8c2a8

SHA14373c3ca7bee06c8456f6997929b0af5e349283d

SHA256f957efbbe90dee51487d910c6039fa2ac841192fd9f67efb69358b536f87b7d3

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F957EFBBE90DEE51487D910C6039FA2AC841192FD9F67EFB69358B536F87B7D3"
Last-Modified: Mon, 15 Jul 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20339
Expires: Wed, 17 Jul 2024 11:28:16 GMT
Date: Wed, 17 Jul 2024 05:49:17 GMT
Connection: keep-alive

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

IP / ASN

35.244.181.201

#396982 GOOGLE-CLOUD-PLATFORM

Requested byN/A

Resource Info

File typeXML 1.0 document, ASCII text, with very long lines (332)

First Seen2023-10-13

Last Seen2025-06-20

Times Seen185315

Size444 B (444 bytes)

MD53b324dec137a87ef7e24a30a65b13dd0

SHA1c0faa95b2f1018e264b3a14aaf50d1003e6c27b3

SHA2566cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-09-02-22-40-36.chain; p384ecdsa=niYx4NsRIZnESjwlNCuUKkTn_WhW1G9GvevuWpCP5yUU7OmM0lInvf2pVkR2VhGAhuFb-hkh22QhXKsAWoQ3XScUGBoyiiapKikkRAdAuUn-KEgAsRoti7gAUr9uqJG3
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
date: Wed, 17 Jul 2024 05:49:21 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 9
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

GET s7.athenacdn03.site/cdn/down/5b5faf109bc2bc1bff0ab31dbb071c40/Video/720p/720p_272.html

172.67.75.17

200 OK

1.0 MB

URL

s7.athenacdn03.site/cdn/down/5b5faf109bc2bc1bff0ab31dbb071c40/Video/720p/720p_272.html

IP / ASN

172.67.75.17

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typedata

First Seen2024-07-15

Last Seen2024-08-19

Times Seen2

Size1.0 MB (1025916 bytes)

MD50118710617cd28658bf8dcad37e507d2

SHA18ee87ae34dd5dc06eadb6b45d1e0c442b46ce9b1

SHA256ee672628d5b6f98dc0fb973be818704e239df7394a2db8f43a691e1ca67f2416

Certificate Info

IssuerGoogle Trust Services

Subjectathenacdn03.site

Fingerprint0D:51:D0:BB:55:A3:57:C3:B7:4C:93:A9:15:BD:7A:9A:AC:37:AF:D4

ValidityMon, 08 Jul 2024 22:08:29 GMT - Sun, 06 Oct 2024 22:08:28 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn/down/5b5faf109bc2bc1bff0ab31dbb071c40/Video/720p/720p_272.html HTTP/1.1
Host: s7.athenacdn03.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Jul 2024 05:49:11 GMT
content-type: text/html
last-modified: Tue, 23 May 2023 06:35:43 GMT
access-control-allow-origin: https://jeniusplay.com
cache-control: public, max-age=31536000, s-maxage=31536000
cf-cache-status: HIT
age: 127356
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=76NU2hx9sgD1LvajaMbKZ6k0VoBBnknb2HmujPnNC561fOg2XXWOXlvO4v0NuzKz01jXM5UEF0rkNbJ9O4ocQvlyakrbDousxNDX7jjuu3KCH4rphXS2cfrOZBNKYq6cbvyCXtg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a47f28558760b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2