Report - taunatouz.com/

Report Overview

Visitedpublic

2024-09-24 01:43:25

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-23 07:24:14	327 B	888 B	23.33.119.27
taunatouz.com	unknown	2024-09-06	2024-09-06 11:25:47	2024-09-24 03:43:01	891 B	2.6 kB	104.21.80.213

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-09-24	medium	taunatouz.com	Sinkholed
2024-09-24	medium	taunatouz.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

r10.o.lencr.org/

23.33.119.27

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.33.119.27

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-09-22

Last Seen2024-09-28

Times Seen20173

Size504 B (504 bytes)

MD5c6c7d535128f9eb2ec6dcd3d7d62919a

SHA15aaa50926b462ccfc32d84db180a9af68e4d6b46

SHA256d498f9efc3307515c07f69fe4e630319e60c13d37700b7f35297c9b8d442b690

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D498F9EFC3307515C07F69FE4E630319E60C13D37700B7F35297C9B8D442B690"
Last-Modified: Sun, 22 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15796
Expires: Tue, 24 Sep 2024 06:06:16 GMT
Date: Tue, 24 Sep 2024 01:43:00 GMT
Connection: keep-alive

GET taunatouz.com/

104.21.80.213

200 OK

54 B

URL User Request GET HTTPS

taunatouz.com/

IP / ASN

104.21.80.213

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with no line terminators

First Seen2023-03-07

Last Seen2025-08-04

Times Seen11156

Size54 B (54 bytes)

MD5f315f5f2c187a05af1ace62d5f6aa477

SHA147d77a2a1665cb6202028ecd89b50920287d9148

SHA256166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

Certificate Info

IssuerGoogle Trust Services

Subjecttaunatouz.com

Fingerprint4F:8D:14:10:70:EB:AB:4E:81:46:23:24:60:F6:87:91:E5:2C:15:FF

ValidityFri, 06 Sep 2024 04:39:02 GMT - Thu, 05 Dec 2024 04:39:01 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: taunatouz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 24 Sep 2024 01:43:01 GMT
content-type: text/html
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bLKYZovjlCkDy7pQlGU4MezCnbOdg207fpLsB7yksYjq42EbqLHyQ2XNFizZ2reU5ouV5uEIbePKqZC0X2RfK0nm1WrpjzyfZSsj7Zh85IcVmzJtWk95I0LPQhnOn6Yj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c7f14c6db76b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2

GET taunatouz.com/favicon.ico

104.21.80.213

200 OK

1.2 kB

URL GET HTTPS

taunatouz.com/favicon.ico

IP / ASN

104.21.80.213

#13335 CLOUDFLARENET

Requested byhttps://taunatouz.com/

Resource Info

File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel

First Seen2023-04-14

Last Seen2025-08-02

Times Seen33246

Size1.2 kB (1150 bytes)

MD5668ba1a9fa1890ba16cb8adc28d3dad8

SHA15e35223b2541265114eaf61b9da2556c812fea17

SHA2567746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2

Certificate Info

IssuerGoogle Trust Services

Subjecttaunatouz.com

Fingerprint4F:8D:14:10:70:EB:AB:4E:81:46:23:24:60:F6:87:91:E5:2C:15:FF

ValidityFri, 06 Sep 2024 04:39:02 GMT - Thu, 05 Dec 2024 04:39:01 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: taunatouz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://taunatouz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 24 Sep 2024 01:43:01 GMT
content-type: image/x-icon
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
etag: W/"66f18a28-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=07fO2JAPcmq%2B7omemx5pNMQpgAaJqvQ35DA0hx%2Fe1Sz1Pt9hlyQf3qQL936djP8h1PJTlwz2GoYaUBgrak6y2n6UBLgbMd6lxNVID1YLtMrOVikKDL4nWAn1TLh5LWtv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c7f14ca3f84b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2