Report - amfloettea.com/

Report Overview

Visited public
2024-10-03 18:12:19
Tags
URL
amfloettea.com/
Finishing URL
amfloettea.com/
IP / ASN
104.21.96.135
#13335 CLOUDFLARENET
Title
Push Notifications / Opt-Out

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-02 18:12:28	1.3 kB	3.5 kB	23.36.76.225
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-10-02 18:13:51	1.3 kB	2.8 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-10-02 18:20:41	887 B	12 kB	142.250.74.42
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2024-10-02 18:13:36	1.0 kB	39 kB	216.58.207.227
amfloettea.com	unknown	unknown	No data	No data	906 B	21 kB	104.21.96.135
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-02 18:12:27	1.3 kB	3.6 kB	23.36.76.243

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-10-03	medium	amfloettea.com	Sinkholed
2024-10-03	medium	amfloettea.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (18)

URL IP Response Size

r10.o.lencr.org/

23.36.76.225

504 B

URL
r10.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
291c0bfaa25266d48c16fa38a4a62b7b
483633beedec01aafe0b11575cc814705cf2c6f5
9a67108d7b1a75f9e4962d77ecc98677cab1105adb347c1d4c17239027b12af5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9A67108D7B1A75F9E4962D77ECC98677CAB1105ADB347C1D4C17239027B12AF5"
Last-Modified: Thu, 03 Oct 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6221
Expires: Thu, 03 Oct 2024 19:55:34 GMT
Date: Thu, 03 Oct 2024 18:11:53 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.225

504 B

URL
r10.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
7e42d0c56f2e451fbee2b5c048d7a6bb
d138b4e9092246dc927c2351961ed5239296cecf
d7bf3064f89ead27d2eef68a1b0ec9a37454ae8fe6324151aeb4e2aa96ce1204

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D7BF3064F89EAD27D2EEF68A1B0EC9A37454AE8FE6324151AEB4E2AA96CE1204"
Last-Modified: Thu, 03 Oct 2024 06:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7404
Expires: Thu, 03 Oct 2024 20:15:17 GMT
Date: Thu, 03 Oct 2024 18:11:53 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.225

504 B

URL
r10.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
4f3dbe6310b151e9eb972e35a080baac
bfecb2a7c10c88685c1980b9fb3710275a8b42a0
7853dd9bf1126d60a12a93182bcef7af3d9c415b7d8dee915d01997508be431f

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7853DD9BF1126D60A12A93182BCEF7AF3D9C415B7D8DEE915D01997508BE431F"
Last-Modified: Wed, 02 Oct 2024 08:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11656
Expires: Thu, 03 Oct 2024 21:26:09 GMT
Date: Thu, 03 Oct 2024 18:11:53 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.225

504 B

URL
r10.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
c40c26f74d66131f39620f479e7ddfcb
3f6ce522add0d5cf85545724aa8ae049922fcb89
3f0cd84ebc91ad653204a792c94b712a901afee0f9d71828e25a2bd8f919ddff

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3F0CD84EBC91AD653204A792C94B712A901AFEE0F9D71828E25A2BD8F919DDFF"
Last-Modified: Thu, 03 Oct 2024 04:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3915
Expires: Thu, 03 Oct 2024 19:17:08 GMT
Date: Thu, 03 Oct 2024 18:11:53 GMT
Connection: keep-alive

o.pki.goog/wr2

142.250.74.131

471 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
c271b084d2a5dbac8f822de7127ec623
069c6a8032b0651aca22cf98635a711deaed1f86
70056786d4632c3ac3d0eadc473c8d7e6be1628f35afa6d692b5fdcf2f15bd59

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Oct 2024 18:11:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

471 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b52b2a35d2317cc2fbabfc2a10d4b0ff
8bd80582ff86252c57adec56072ea61aeafed8b9
d655303d881049f8da2792e73cf938086ae42e766111c7ccb1346f8273e10eee

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Oct 2024 18:11:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/css?family=Open+Sans:300,400,500,700

142.250.74.42

200 OK

2.2 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:300,400,500,700
IP
142.250.74.42:443
ASN
#15169 GOOGLE

Requested by
https://amfloettea.com/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC6:E8:36:27:AB:3A:34:33:0B:85:2C:D8:6C:0A:74:34:71:6A:F5:62
ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT

File type
gzip compressed data, max compression
Size
2.2 kB (2213 bytes)
Hash
bbf47f20a2d4e5cfff9a960bc3876c20
e0d5387b58977ec0adbdb871469028ef9d95e2c1
77ee63722e7d34009e2da45f44184c8a9b82f8caa487729e3cea32370399485d

HTTP Headers

GET /css?family=Open+Sans:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amfloettea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 03 Oct 2024 18:11:54 GMT
date: Thu, 03 Oct 2024 18:11:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8890ec490332570578a7fdf70052f4f1
c7b2f326b74dd9f30b61252f313be3a479f275ea
321055d5110152580ff671f7f6299e665c8d7f464a5a2437ba7329fd4f5263ef

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Oct 2024 18:11:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://amfloettea.com/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEA:6A:C6:A3:F6:90:16:40:23:03:8F:A5:6F:71:11:F6:FA:B7:5F:C3
ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Size
18 kB (18536 bytes)
Hash
8eff0b8045fd1959e117f85654ae7770
227fee13ceb7c410b5c0bb8000258b6643cb6255
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

HTTP Headers

GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amfloettea.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Oct 2024 11:29:57 GMT
expires: Fri, 03 Oct 2025 11:29:57 GMT
cache-control: public, max-age=31536000
age: 24117
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://amfloettea.com/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEA:6A:C6:A3:F6:90:16:40:23:03:8F:A5:6F:71:11:F6:FA:B7:5F:C3
ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Size
19 kB (18596 bytes)
Hash
c83e4437a53d7f849f9d32df3d6b68f3
fabea5ad92ed3e2431659b02e7624df30d0c6bbc
d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb

HTTP Headers

GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amfloettea.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Oct 2024 15:12:44 GMT
expires: Fri, 03 Oct 2025 15:12:44 GMT
cache-control: public, max-age=31536000
age: 10750
last-modified: Thu, 01 Aug 2024 20:41:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

amfloettea.com/favicon.ico

104.21.96.135

204 No Content

0 B

URL GET HTTP/3
amfloettea.com/favicon.ico
IP
104.21.96.135:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amfloettea.com/
Certificate
IssuerGoogle Trust Services
Subjectamfloettea.com
FingerprintCF:4D:CB:35:A5:28:B7:3E:A1:CD:29:3D:26:1F:49:28:F7:30:4C:D0
ValiditySat, 28 Sep 2024 16:58:12 GMT - Fri, 27 Dec 2024 16:58:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: amfloettea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amfloettea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Thu, 03 Oct 2024 18:11:54 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OScQBEHpqY1sLCtcWC2EmR%2Fyu%2BmC0rDZAMjZj0ZpE2wtA%2FVkZvKH0BqTmjAFy9abKjPcRD69BYI%2F7T2ptWykqKpyCTWCDhAUsRchrGRXNXSuafkS%2FK%2Bu%2FOlDCqKI31h1Gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ccee5b98fcfb500-OSL

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8890ec490332570578a7fdf70052f4f1
c7b2f326b74dd9f30b61252f313be3a479f275ea
321055d5110152580ff671f7f6299e665c8d7f464a5a2437ba7329fd4f5263ef

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Oct 2024 18:11:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r11.o.lencr.org/

23.36.76.243

504 B

URL
r11.o.lencr.org/
IP
23.36.76.243:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
bf6b5db01d2cb24de8836f0d0b2817f4
4a6dc688b8e0626bb964bc151c2782751fcfda25
b83e5cf00ac1661eab79ea5bd438cbba0766acd52e906ada258dc603bc20a5d8

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B83E5CF00AC1661EAB79EA5BD438CBBA0766ACD52E906ADA258DC603BC20A5D8"
Last-Modified: Wed, 02 Oct 2024 06:07:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12529
Expires: Thu, 03 Oct 2024 21:40:44 GMT
Date: Thu, 03 Oct 2024 18:11:55 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.243

504 B

URL
r11.o.lencr.org/
IP
23.36.76.243:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
bf6b5db01d2cb24de8836f0d0b2817f4
4a6dc688b8e0626bb964bc151c2782751fcfda25
b83e5cf00ac1661eab79ea5bd438cbba0766acd52e906ada258dc603bc20a5d8

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B83E5CF00AC1661EAB79EA5BD438CBBA0766ACD52E906ADA258DC603BC20A5D8"
Last-Modified: Wed, 02 Oct 2024 06:07:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12529
Expires: Thu, 03 Oct 2024 21:40:44 GMT
Date: Thu, 03 Oct 2024 18:11:55 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.243

504 B

URL
r11.o.lencr.org/
IP
23.36.76.243:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
bf6b5db01d2cb24de8836f0d0b2817f4
4a6dc688b8e0626bb964bc151c2782751fcfda25
b83e5cf00ac1661eab79ea5bd438cbba0766acd52e906ada258dc603bc20a5d8

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B83E5CF00AC1661EAB79EA5BD438CBBA0766ACD52E906ADA258DC603BC20A5D8"
Last-Modified: Wed, 02 Oct 2024 06:07:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12529
Expires: Thu, 03 Oct 2024 21:40:44 GMT
Date: Thu, 03 Oct 2024 18:11:55 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.243

504 B

URL
r11.o.lencr.org/
IP
23.36.76.243:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
bf6b5db01d2cb24de8836f0d0b2817f4
4a6dc688b8e0626bb964bc151c2782751fcfda25
b83e5cf00ac1661eab79ea5bd438cbba0766acd52e906ada258dc603bc20a5d8

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B83E5CF00AC1661EAB79EA5BD438CBBA0766ACD52E906ADA258DC603BC20A5D8"
Last-Modified: Wed, 02 Oct 2024 06:07:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12529
Expires: Thu, 03 Oct 2024 21:40:44 GMT
Date: Thu, 03 Oct 2024 18:11:55 GMT
Connection: keep-alive

amfloettea.com/

104.21.96.135

200 OK

19 kB

URL User Request GET HTTP/2
amfloettea.com/
IP
104.21.96.135:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectamfloettea.com
FingerprintCF:4D:CB:35:A5:28:B7:3E:A1:CD:29:3D:26:1F:49:28:F7:30:4C:D0
ValiditySat, 28 Sep 2024 16:58:12 GMT - Fri, 27 Dec 2024 16:58:11 GMT

File type
HTML document, ASCII text, with very long lines (851)
Size
19 kB (19381 bytes)
Hash
aaf634ef96e34b76b92890542442f867
7df2fd03db88c309558537ee2d52ae3226c77922
b5ce679294661781fbcfe1cfebb3b9252e62201cf4b6eccd9b1958f0b46f6ccc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: amfloettea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 03 Oct 2024 18:11:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LUvF%2FysoLxg4Q%2Bp0UwhlGkmolIoXJpR7vnzc8r7rlmqbls7QK3BzptyTmp46T9RvpoMNCRCxIuj3T21aEk5wUI0VXKOTOxIz8iZjUA65CwyCN5mr81jDLZwk3G7AzpMPpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8ccee5b60b9db512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:300,400,500,700

142.250.74.42

200 OK

8.7 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,500,700
IP
142.250.74.42:443
ASN
#15169 GOOGLE

Requested by
https://amfloettea.com/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC6:E8:36:27:AB:3A:34:33:0B:85:2C:D8:6C:0A:74:34:71:6A:F5:62
ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT

File type
ASCII text, with very long lines (8956), with no line terminators
Size
8.7 kB (8732 bytes)
Hash
ac2fd150c2d6fe402eabb0caa0d0dbcc
b915fca6955f1ac610826758ed58b0ef75887031
35d48177621a90a92018bf660cae0ec3e932412a12447b84cc608d65a282edf8

HTTP Headers

GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amfloettea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 03 Oct 2024 18:11:54 GMT
date: Thu, 03 Oct 2024 18:11:54 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (18)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash