Report - ofk.fewdfcewfcdewfcd.xyz

Report Overview

Visited public
2024-09-07 18:34:28
Tags
URL
ofk.fewdfcewfcdewfcd.xyz
Finishing URL
ofk.fewdfcewfcdewfcd.xyz/
IP / ASN
195.154.179.200
#12876 Scaleway S.a.s.
Title
Serveur Dedibox en maintenance

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-06 18:12:06	1.3 kB	3.5 kB	23.36.76.226
ofk.fewdfcewfcdewfcd.xyz	unknown	unknown	No data	No data	1.1 kB	212 kB	195.154.179.200
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-09-06 18:12:12	1.3 kB	3.6 kB	23.36.76.249

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-09-07	medium	fewdfcewfcdewfcd.xyz	Sinkholed
2024-09-07	medium	fewdfcewfcdewfcd.xyz	Sinkholed
2024-09-07	medium	fewdfcewfcdewfcd.xyz	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (11)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
80f3aada09a34a0d6e43e77f160ac485
8feee259be181420c2c17ccb3d81ce9bc980b577
cccc9314ca2d07fb6a2a5d91a8d7b37f16fd78a5d14b0e6a27de0df82e47f1f3

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CCCC9314CA2D07FB6A2A5D91A8D7B37F16FD78A5D14B0E6A27DE0DF82E47F1F3"
Last-Modified: Sat, 07 Sep 2024 12:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5668
Expires: Sat, 07 Sep 2024 20:08:30 GMT
Date: Sat, 07 Sep 2024 18:34:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dedd67c0946c5577f4afe8ce915d496e
13c7575ca041681cc467ada3cbcc8ac16d02a005
52d626e12edd115d218ff4e43f4fb3e9690effc7caaa9cfb673cd52a8c33728c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "52D626E12EDD115D218FF4E43F4FB3E9690EFFC7CAAA9CFB673CD52A8C33728C"
Last-Modified: Thu, 05 Sep 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17163
Expires: Sat, 07 Sep 2024 23:20:05 GMT
Date: Sat, 07 Sep 2024 18:34:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
12568f27d5a44a225ac0a166b4204675
bf4709d2e68c17dcb226bbfc215394c512e25ee0
cd7f51adecb731d788a61392da99a9e8c228fbf490599b7e415adb501ce42745

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CD7F51ADECB731D788A61392DA99A9E8C228FBF490599B7E415ADB501CE42745"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4007
Expires: Sat, 07 Sep 2024 19:40:49 GMT
Date: Sat, 07 Sep 2024 18:34:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
12ebe14d7f8dbb712eca26d0d794b7ac
ec6540f9ba81fd6d7ef07275f3ccf11255703d91
ea0ce6747c07afac781fc50b52f7e3e38e06e330cc4612e33ee93813c7130942

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EA0CE6747C07AFAC781FC50B52F7E3E38E06E330CC4612E33EE93813C7130942"
Last-Modified: Thu, 05 Sep 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3788
Expires: Sat, 07 Sep 2024 19:37:11 GMT
Date: Sat, 07 Sep 2024 18:34:03 GMT
Connection: keep-alive

ofk.fewdfcewfcdewfcd.xyz/

195.154.179.200

503 Service Temporarily Unavailable

933 B

URL User Request GET HTTP/1.1
ofk.fewdfcewfcdewfcd.xyz/
IP
195.154.179.200:80
ASN
#12876 Scaleway S.a.s.

File type
HTML document, ASCII text
Size
933 B (933 bytes)
Hash
4e9c6bdbab1a4aa3220cb6ef35ae32be
38e30ab504dca6e117b1e36fdf7da737a33015df
843ddc244d2a715b38ae0b915246c3c83b2c91c32d8592be08218a333e9164bd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ofk.fewdfcewfcdewfcd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 503 Service Temporarily Unavailable
Server: nginx/1.4.6 (Ubuntu)
Date: Sat, 07 Sep 2024 18:33:47 GMT
Content-Type: text/html
Content-Length: 933
Connection: close
ETag: "4cefac17-3a5"

ofk.fewdfcewfcdewfcd.xyz/dedibg.png

195.154.179.200

200 OK

210 kB

URL GET HTTP/1.1
ofk.fewdfcewfcdewfcd.xyz/dedibg.png
IP
195.154.179.200:80
ASN
#12876 Scaleway S.a.s.

Requested by
http://ofk.fewdfcewfcdewfcd.xyz/

File type
PNG image data, 961 x 399, 8-bit gray+alpha, non-interlaced
Size
210 kB (209634 bytes)
Hash
e74e5b745ce60dcc10af3eff5eac2e57
7a956abc4d0ad08c9d0ac42be376adf5c72c94af
2c4f12d2d32e7d8033188e44224380dbd3c82c444bb6a895f2dd5d7bad548d99

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dedibg.png HTTP/1.1
Host: ofk.fewdfcewfcdewfcd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ofk.fewdfcewfcdewfcd.xyz/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.4.6 (Ubuntu)
Date: Sat, 07 Sep 2024 18:33:48 GMT
Content-Type: image/png
Content-Length: 209634
Last-Modified: Tue, 03 Aug 2010 17:19:57 GMT
Connection: close
ETag: "4c584fbd-332e2"
Cache-Control: no-cache
Accept-Ranges: bytes

ofk.fewdfcewfcdewfcd.xyz/favicon.ico

195.154.179.200

503 Service Temporarily Unavailable

933 B

URL GET HTTP/1.1
ofk.fewdfcewfcdewfcd.xyz/favicon.ico
IP
195.154.179.200:80
ASN
#12876 Scaleway S.a.s.

Requested by
http://ofk.fewdfcewfcdewfcd.xyz/

File type
HTML document, ASCII text
Size
933 B (933 bytes)
Hash
4e9c6bdbab1a4aa3220cb6ef35ae32be
38e30ab504dca6e117b1e36fdf7da737a33015df
843ddc244d2a715b38ae0b915246c3c83b2c91c32d8592be08218a333e9164bd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ofk.fewdfcewfcdewfcd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ofk.fewdfcewfcdewfcd.xyz/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 503 Service Temporarily Unavailable
Server: nginx/1.4.6 (Ubuntu)
Date: Sat, 07 Sep 2024 18:33:48 GMT
Content-Type: text/html
Content-Length: 933
Connection: close
ETag: "4cefac17-3a5"

r11.o.lencr.org/

23.36.76.249

504 B

URL
r11.o.lencr.org/
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
5c3fba1109521084ef7ba1930038c708
da167832736b19cff2200b7ee2c62f0e2cd4ceeb
170cddf1a28716b552d327083819d646261191483dec007a25da4d86ffa36bc9

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "170CDDF1A28716B552D327083819D646261191483DEC007A25DA4D86FFA36BC9"
Last-Modified: Sat, 07 Sep 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15962
Expires: Sat, 07 Sep 2024 23:00:07 GMT
Date: Sat, 07 Sep 2024 18:34:05 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.249

504 B

URL
r11.o.lencr.org/
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
5c3fba1109521084ef7ba1930038c708
da167832736b19cff2200b7ee2c62f0e2cd4ceeb
170cddf1a28716b552d327083819d646261191483dec007a25da4d86ffa36bc9

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "170CDDF1A28716B552D327083819D646261191483DEC007A25DA4D86FFA36BC9"
Last-Modified: Sat, 07 Sep 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15962
Expires: Sat, 07 Sep 2024 23:00:07 GMT
Date: Sat, 07 Sep 2024 18:34:05 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.249

504 B

URL
r11.o.lencr.org/
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
5c3fba1109521084ef7ba1930038c708
da167832736b19cff2200b7ee2c62f0e2cd4ceeb
170cddf1a28716b552d327083819d646261191483dec007a25da4d86ffa36bc9

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "170CDDF1A28716B552D327083819D646261191483DEC007A25DA4D86FFA36BC9"
Last-Modified: Sat, 07 Sep 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15962
Expires: Sat, 07 Sep 2024 23:00:07 GMT
Date: Sat, 07 Sep 2024 18:34:05 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.249

504 B

URL
r11.o.lencr.org/
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
5c3fba1109521084ef7ba1930038c708
da167832736b19cff2200b7ee2c62f0e2cd4ceeb
170cddf1a28716b552d327083819d646261191483dec007a25da4d86ffa36bc9

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "170CDDF1A28716B552D327083819D646261191483DEC007A25DA4D86FFA36BC9"
Last-Modified: Sat, 07 Sep 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15962
Expires: Sat, 07 Sep 2024 23:00:07 GMT
Date: Sat, 07 Sep 2024 18:34:05 GMT
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (11)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size