Report - paychex.com

Report Overview

Visitedpublic

2024-10-10 21:58:04

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-10 13:37:19	1.3 kB	3.5 kB	23.33.119.10
paychex.com	12276	unknown	No data	No data	466 B	126 B	141.123.222.0
www.paychex.com	56259	1991-06-10	2015-03-08 06:19:09	2024-06-20 15:31:34	2.0 kB	16 kB	104.18.20.140
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-10 13:37:10	327 B	888 B	23.33.119.10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	www.paychex.com/	ScriptElement	0 B	0001-01-01	2025-08-02
URL www.paychex.com/ IP / ASN 104.18.20.140 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606696 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

	www.paychex.com/	ScriptElement	393 B	2023-04-05	2025-03-02
URL www.paychex.com/ IP / ASN 104.18.20.140 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-04-05 Last Seen 2025-03-02 Times Seen 143291 Size 393 B (393 bytes) MD5 34ad0a116707d3b794129a6720af92d7 SHA1 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 SHA256 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Format Code Loading...

	www.paychex.com/	ScriptElement	0 B	0001-01-01	2025-08-02
URL www.paychex.com/ IP / ASN 104.18.20.140 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606696 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

HTTP Transactions (11)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP / ASN 23.33.119.10 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-10-10 Last Seen2024-10-11 Times Seen4673 Size504 B (504 bytes) MD5442631866673ae2d28d91ba8974af0d0 SHA10652b83de436f9d5dcf83cda71dca0f521451781 SHA2568d1508641f36efe2aca84559d04b39ca35a451c3a5521934134a03b8993da6d7 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "8D1508641F36EFE2ACA84559D04B39CA35A451C3A5521934134A03B8993DA6D7" Last-Modified: Thu, 10 Oct 2024 11:05:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13032 Expires: Fri, 11 Oct 2024 01:34:50 GMT Date: Thu, 10 Oct 2024 21:57:38 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP / ASN 23.33.119.10 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-10-10 Last Seen2024-10-11 Times Seen2135 Size504 B (504 bytes) MD5b6b021a60b3b4c71dc299e6c1b725ff4 SHA17063be3f6da5bc4ceb4853246e8938547b9e33a0 SHA256af5e019165ff7c9375a0f462fa05a08413388a63759117a81378b65bf7ad8d9f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "AF5E019165FF7C9375A0F462FA05A08413388A63759117A81378B65BF7AD8D9F" Last-Modified: Thu, 10 Oct 2024 11:05:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9335 Expires: Fri, 11 Oct 2024 00:33:13 GMT Date: Thu, 10 Oct 2024 21:57:38 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP / ASN 23.33.119.10 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-10-10 Last Seen2024-10-12 Times Seen6906 Size504 B (504 bytes) MD54fc341baf18d0af4cd0a80be702333a3 SHA1fb736dc59047ff1913f784fa875cb7802046b133 SHA256b6312d866ed45266b465f79c3825413745fd03f86a0075406b439586d5ac2353 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "B6312D866ED45266B465F79C3825413745FD03F86A0075406B439586D5AC2353" Last-Modified: Thu, 10 Oct 2024 16:15:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6557 Expires: Thu, 10 Oct 2024 23:46:55 GMT Date: Thu, 10 Oct 2024 21:57:38 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP / ASN 23.33.119.10 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-10-10 Last Seen2024-10-11 Times Seen2645 Size504 B (504 bytes) MD5932c7ffd20ce7a56b1a16e43f1dc4175 SHA1ae9aaac68ee687b04f72c535f19680918c92cff0 SHA256f9ae6d4db8b589eb65f8f5103032db22c4e8c1e7a27db3469ab338c6ee9074a3 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "F9AE6D4DB8B589EB65F8F5103032DB22C4E8C1E7A27DB3469AB338C6EE9074A3" Last-Modified: Thu, 10 Oct 2024 15:11:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7675 Expires: Fri, 11 Oct 2024 00:05:33 GMT Date: Thu, 10 Oct 2024 21:57:38 GMT Connection: keep-alive`

	GET paychex.com/	141.123.222.0	301 Moved Permanently	0 B
URL paychex.com/ IP / ASN 141.123.222.0 #13588 PAYCHEX Requested byN/A Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-02 Times Seen5606696 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerSectigo Limited Subjectpaychex.com Fingerprint23:73:9A:62:1F:AE:DB:C5:8A:19:8F:18:A5:9A:27:1C:1C:B2:38:99 ValiditySun, 28 Jul 2024 00:00:00 GMT - Mon, 28 Jul 2025 23:59:59 GMT HTTP Headers `GET / HTTP/1.1 Host: paychex.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.0 301 Moved Permanently Location: https://www.paychex.com/ Server: BigIP Connection: Keep-Alive Content-Length: 0`

	GET www.paychex.com/	104.18.20.140	403 Forbidden	3.3 kB
URL www.paychex.com/ IP / ASN 104.18.20.140 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeHTML document, ASCII text, with very long lines (394) First Seen2024-10-11 Last Seen2024-10-11 Times Seen1 Size3.3 kB (3307 bytes) MD5c76a43317bde29fa68ca206018fe649d SHA16f758b5aa0bbead205fdc0a7bc92d5327e718336 SHA2569df417a57be3083fc423e001adc1ec80a549502c70ae436c966e95b7cdbd20a1 Certificate Info IssuerSectigo Limited Subjectwww.paychex.com Fingerprint35:37:71:05:D0:67:C0:11:4C:EC:51:28:44:D1:AD:09:AD:EE:1B:F1 ValidityTue, 30 Jul 2024 00:00:00 GMT - Wed, 30 Jul 2025 23:59:59 GMT HTTP Headers `GET / HTTP/1.1 Host: www.paychex.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden date: Thu, 10 Oct 2024 21:57:39 GMT content-type: text/html; charset=UTF-8 cache-control: max-age=15 expires: Thu, 10 Oct 2024 21:57:54 GMT vary: Accept-Encoding access-control-allow-methods: GET,POST,OPTIONS access-control-allow-origin: * access-control-expose-headers: content-length referrer-policy: same-origin, strict-origin-when-cross-origin x-frame-options: SAMEORIGIN, SAMEORIGIN server: cloudflare cf-ray: 8d09de099b9356a5-OSL content-encoding: br X-Firefox-Spdy: h2`

	GET www.paychex.com/cdn-cgi/styles/cf.errors.css	104.18.21.140	200 OK	4.5 kB
URL www.paychex.com/cdn-cgi/styles/cf.errors.css IP / ASN 104.18.21.140 #13335 CLOUDFLARENET Requested byhttp://www.paychex.com/ Resource Info File typeASCII text, with very long lines (24050) First Seen0001-01-01 Last Seen2025-08-02 Times Seen229572 Size4.5 kB (4515 bytes) MD55e8c69a459a691b5d1b9be442332c87d SHA1f24dd1ad7c9080575d92a9a9a2c42620725ef836 SHA25684e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091 HTTP Headers `GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: www.paychex.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://www.paychex.com/ DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 21:57:39 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 08 Oct 2024 16:37:09 GMT ETag: W/"67055fb5-5df3" Server: cloudflare CF-RAY: 8d09de0c8c075687-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 10 Oct 2024 23:57:39 GMT Cache-Control: max-age=7200, public Content-Encoding: gzip`

	GET www.paychex.com/cdn-cgi/images/browser-bar.png?1376755637	104.18.21.140	200 OK	715 B
URL www.paychex.com/cdn-cgi/images/browser-bar.png?1376755637 IP / ASN 104.18.21.140 #13335 CLOUDFLARENET Requested byhttp://www.paychex.com/ Resource Info File typePNG image data, 960 x 53, 8-bit colormap, non-interlaced First Seen0001-01-01 Last Seen2025-08-02 Times Seen70207 Size715 B (715 bytes) MD5226dcb8f6144bdaafdfbd8f2f354be64 SHA13785cc5b3bf52f8e398177b0ff1020b24aa86b8c SHA2568c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db HTTP Headers `GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1 Host: www.paychex.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.paychex.com/cdn-cgi/styles/cf.errors.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 21:57:39 GMT Content-Type: image/png Content-Length: 715 Connection: keep-alive Last-Modified: Tue, 08 Oct 2024 16:37:09 GMT ETag: "67055fb5-2cb" Server: cloudflare CF-RAY: 8d09de0cbc575687-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 10 Oct 2024 23:57:39 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	GET www.paychex.com/cdn-cgi/images/cf-no-screenshot-error.png	104.18.20.140	200 OK	3.2 kB
URL www.paychex.com/cdn-cgi/images/cf-no-screenshot-error.png IP / ASN 104.18.20.140 #13335 CLOUDFLARENET Requested byhttp://www.paychex.com/ Resource Info File typePNG image data, 178 x 175, 8-bit colormap, non-interlaced First Seen0001-01-01 Last Seen2025-08-02 Times Seen70214 Size3.2 kB (3213 bytes) MD50d768cbc261841d3affc933b9ac3130e SHA1aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7 SHA2561c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0 HTTP Headers `GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1 Host: www.paychex.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.paychex.com/cdn-cgi/styles/cf.errors.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 21:57:39 GMT Content-Type: image/png Content-Length: 3213 Connection: keep-alive Last-Modified: Tue, 08 Oct 2024 16:37:09 GMT ETag: "67055fb5-c8d" Server: cloudflare CF-RAY: 8d09de0cce1db500-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 10 Oct 2024 23:57:39 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	GET www.paychex.com/favicon.ico	104.18.20.140	403 Forbidden	1.7 kB
URL www.paychex.com/favicon.ico IP / ASN 104.18.20.140 #13335 CLOUDFLARENET Requested byhttp://www.paychex.com/ Resource Info File typeHTML document, ASCII text, with very long lines (394) First Seen2024-10-11 Last Seen2024-10-11 Times Seen1 Size1.7 kB (1734 bytes) MD5e086d9c592ce1bb9d172a0773c2fb66d SHA14a0f057637647d71445d2bdf803899e513d5e305 SHA256717bb95810b209c57ca8d59f2bb6fe1a264a9f81fffd4a812f42ae7aa1dff009 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: www.paychex.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://www.paychex.com/ DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Date: Thu, 10 Oct 2024 21:57:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=15 Expires: Thu, 10 Oct 2024 21:57:54 GMT Vary: Accept-Encoding Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: content-length Referrer-Policy: same-origin, strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN, SAMEORIGIN Server: cloudflare CF-RAY: 8d09de0cee87b500-OSL Content-Encoding: gzip

	r11.o.lencr.org/	23.33.119.10		504 B
URL r11.o.lencr.org/ IP / ASN 23.33.119.10 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-10-10 Last Seen2024-10-12 Times Seen25658 Size504 B (504 bytes) MD5ccb7c0a230775ffeed6f8a2d5495f2f4 SHA1b64d41f2ff0740b511f8043dd7f00db3d937bdc8 SHA256c1086024116cc032f78be5a4521af542f33df4c8534249eaf15c5eeccf4ec5f7 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C1086024116CC032F78BE5A4521AF542F33DF4C8534249EAF15C5EECCF4EC5F7" Last-Modified: Wed, 09 Oct 2024 23:02:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16851 Expires: Fri, 11 Oct 2024 02:38:31 GMT Date: Thu, 10 Oct 2024 21:57:40 GMT Connection: keep-alive`

Detections

Host Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

HTTP Transactions (11)

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers