IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc6c7d535128f9eb2ec6dcd3d7d62919a 5aaa50926b462ccfc32d84db180a9af68e4d6b46 d498f9efc3307515c07f69fe4e630319e60c13d37700b7f35297c9b8d442b690
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D498F9EFC3307515C07F69FE4E630319E60C13D37700B7F35297C9B8D442B690"
Last-Modified: Sun, 22 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3637
Expires: Mon, 23 Sep 2024 19:38:01 GMT
Date: Mon, 23 Sep 2024 18:37:24 GMT
Connection: keep-alive
|
| GET slothingpressing.com/static/apps/437.zip |  23.73.139.48 | 200 OK | 0 B |
URL User Request GET HTTP/1.1slothingpressing.com/static/apps/437.zip IP23.73.139.48:80 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/apps/437.zip HTTP/1.1
Host: slothingpressing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Date: Mon, 23 Sep 2024 18:37:24 GMT
Connection: keep-alive
|
| GET slothingpressing.com/favicon.ico | 23.73.139.48 | 404 Not Found | 3 B |
URL GET HTTP/1.1slothingpressing.com/favicon.ico IP23.73.139.48:80 ASN#20940 Akamai International B.V.
Requested byhttp://slothingpressing.com/static/apps/437.zip
File typeASCII text, with no line terminators Hash4f4adcbf8c6f66dcfc8a3282ac2bf10a c35a9fc52bb556c79f8fa540df587a2bf465b940 6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: slothingpressing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://slothingpressing.com/static/apps/437.zip
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: Apache/2.4.18 (Ubuntu)
Content-Length: 3
Content-Type: text/html; charset=UTF-8
Date: Mon, 23 Sep 2024 18:37:25 GMT
Connection: keep-alive
|