Report - lc.cx/0LGDHv

Report Overview

Visited public
2023-12-08 15:56:35
Tags
URL
lc.cx/0LGDHv
Finishing URL
i.giphy.com/media/lp3GUtG2waC88/giphy.gif
IP / ASN
13.38.239.73
#16509 AMAZON-02
Title
giphy.gif (GIF Image, 480 × 272 pixels)

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lc.cx	unknown	2010-09-27	2012-10-07 07:56:37	2023-11-28 15:22:05	1.5 kB	14 kB	15.188.112.202
grabify.link	181878	2015-07-05	2015-07-08 11:57:23	2023-12-07 05:48:37	2.3 kB	1.1 kB	104.26.8.202
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24 16:34:56	2023-12-08 05:10:03	468 B	12 kB	104.16.56.101
i.giphy.com	86107	2012-11-27	2014-10-07 21:36:56	2023-11-24 13:13:36	977 B	8.8 kB	199.232.198.2

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-08 15:56:25	medium	Client IP	104.26.8.202	ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

	URL	IP	Response	Size
	lc.cx/0LGDHv	15.188.112.202		110 B
URL lc.cx/0LGDHv IP 15.188.112.202:0 ASN #16509 AMAZON-02 File type HTML document, ASCII text, with no line terminators Size 110 B (110 bytes) Hash bb89d7f05a02939a5142b45674f8528f 56bcc915c731b1898c646eb32b0f0fc24ca0e878 2c3c2a41bd2f5b529e76935198f1fe33216a54a9c59d6e75512c3aab47c64472 HTTP Headers `GET /0LGDHv HTTP/1.1 Host: lc.cx User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently date: Fri, 08 Dec 2023 15:56:18 GMT content-type: text/html; charset=utf-8 content-length: 110 location: https://grabify.link/L0HGXI server: nginx/1.24.0 x-powered-by: Express surrogate-control: no-store cache-control: no-store, no-cache, must-revalidate, proxy-revalidate pragma: no-cache expires: 0 vary: Accept X-Firefox-Spdy: h2`

	lc.cx/	15.188.112.202		134 B
URL lc.cx/ IP 15.188.112.202:0 ASN #16509 AMAZON-02 File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 134 B (134 bytes) Hash 4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a HTTP Headers `GET / HTTP/1.1 Host: lc.cx User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Fri, 08 Dec 2023 15:56:21 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://lc.cx:443/`

	lc.cx/	15.188.112.202		0 B
URL lc.cx/ IP 15.188.112.202:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: lc.cx User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently date: Fri, 08 Dec 2023 15:56:21 GMT content-type: text/html; charset=UTF-8 content-length: 0 location: https://lc.cx/fr server: Apache/2.4.38 x-drupal-cache: MISS expires: Sun, 19 Nov 1978 05:00:00 GMT cache-control: no-cache, must-revalidate x-content-type-options: nosniff X-Firefox-Spdy: h2`

	lc.cx/fr	15.188.112.202		12 kB
URL lc.cx/fr IP 15.188.112.202:0 ASN #16509 AMAZON-02 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2884), with CRLF, LF line terminators Size 12 kB (11483 bytes) Hash c4e238e9f60c4356bbffe89428f54d02 67655388e9fcf07f7babf012afd9e24bf04d9225 b365ed194ca87fdfebf429249a647bfadcf2a4d52f8f485b6850bd8dff466abb HTTP Headers `GET /fr HTTP/1.1 Host: lc.cx User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK date: Fri, 08 Dec 2023 15:56:21 GMT content-type: text/html; charset=utf-8 content-length: 11483 server: Apache/2.4.38 x-drupal-cache: HIT content-language: fr x-frame-options: SAMEORIGIN x-content-type-options: nosniff link: <https://lc.cx/fr>; rel="canonical",<https://lc.cx/en>; rel="hreflang_en-gb",<https://lc.cx/fr>; rel="hreflang_fr",<https://lc.cx/de>; rel="hreflang_de",<https://lc.cx/gr>; rel="hreflang_el",<https://lc.cx/it>; rel="hreflang_it",<https://lc.cx/pt>; rel="hreflang_pt",<https://lc.cx/es>; rel="hreflang_es" cache-control: public, max-age=0 expires: Sun, 19 Nov 1978 05:00:00 GMT vary: Cookie,Accept-Encoding set-cookie: language=fr; expires=Sat, 07-Dec-2024 15:56:21 GMT; Max-Age=31536000; path=/ etag: "1702048121-0-gzip" last-modified: Fri, 08 Dec 2023 15:08:41 GMT content-encoding: gzip X-Firefox-Spdy: h2

	grabify.link/js/ads.js	104.26.8.202		19 B
URL grabify.link/js/ads.js IP 104.26.8.202:0 ASN #13335 CLOUDFLARENET File type ASCII text, with no line terminators Size 19 B (19 bytes) Hash 14380b81da6c1f82d54ddad07bdca87c a72b216e23ce2fd0c275f0c66381255e2b34c1be 6a0f6cf6b4648c192d81b5fc7b70cb2f6819ef4a799e421e8626cae9697aa85a HTTP Headers GET /js/ads.js HTTP/1.1 Host: grabify.link User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: XSRF-TOKEN=eyJpdiI6Ind4K2orVjh1WnFMWm1WaDl0VzVJTHc9PSIsInZhbHVlIjoiY3ozcWJJRnN6WnNJeFYzWCtBNjVTSjZydVdqSXBiay9SckN1K2Y2SFFaTGVvUlhnLzNELy9RN210THg5U3ArNW84ZVVSU1llL3dKRXptd3h5UkUyczFsOVBXcEtKdGVBdDF2cVFkYVZCeU51cFpZSmJidVZoeC80QkxqVHR2RXUiLCJtYWMiOiI0MjJmOWFiZDI0YWJkNDk5ODE5NmYzZmRkMjAzM2E0YTgwMGE0ZjRhZGZjZDlkM2YwZDVhMTYyYzkyMjQyMWI2IiwidGFnIjoiIn0%3D; g_session=eyJpdiI6IktyR1Y2NG1KbkxqWTZBaFVYT3FFdVE9PSIsInZhbHVlIjoiWXFnS3Z5LzJVM29pN0s5b09GTWVzK2lIWnBrU1J2YWZ2QlBsQUVQZWtNSlhpaFRCb3o5YWNlemFLV1d0cjFFMGZhSkhOTzZXbFZ1SGVqdlk2N3ZSdTh6MlpFZVg1Z2dvTDRVSHh3WUtGM3p5cnYycitQb0tFS0Q3K0pIT3Z2RkYiLCJtYWMiOiJkZDg5NWY5ZDVmNDIyYmVmNjZmMGJlODQ3Y2RjMjM4YzZmMDBhOWQ0ZGQ4NzAyYWY2OWYwMjUyYWZkZjBiZjU5IiwidGFnIjoiIn0%3D Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 08 Dec 2023 15:56:22 GMT content-type: application/javascript content-length: 19 cf-bgj: minify cf-polished: origSize=21 etag: "15-5f5e6e55d59b7" last-modified: Thu, 02 Mar 2023 08:48:42 GMT cf-cache-status: HIT age: 3548 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VrNsDCwn%2BG0yT%2BQUAIElsdDwA3ztNbJT3XkSW6MSLNRnVuEEiQQzrMtt7D7fkSVMcZ8qL7kqXvkWnSqoS4%2FZapSE3LR2XyEiZq3EzQ0y3GGR1zKZ%2B%2FQsEnuun%2BKnfw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 832632b13d8e568b-OSL alt-svc: h3=":443"; ma=86400

	static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317	104.16.56.101		12 kB
URL static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 IP 104.16.56.101:0 ASN #13335 CLOUDFLARENET File type gzip compressed data, from Unix\012- data Size 12 kB (11794 bytes) Hash 8cdcfd8c0d776abad139053617aca9a1 19691fac67906f18bb3c3c4bc8b30d30ef5e3382 8d8eac89d03ae65c5b34968f29aac5acae06731da5f534a4b518e3ba386ac655 HTTP Headers `GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1 Host: static.cloudflareinsights.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://grabify.link DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Fri, 08 Dec 2023 15:56:22 GMT content-type: text/javascript;charset=UTF-8 access-control-allow-origin: * cache-control: public, max-age=86400 etag: W/"2023.10.0" last-modified: Tue, 10 Oct 2023 21:38:13 GMT cross-origin-resource-policy: cross-origin vary: Accept-Encoding server: cloudflare cf-ray: 832632b15b90b51b-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	i.giphy.com/media/lp3GUtG2waC88/giphy.gif	199.232.198.2	200 OK	6.5 kB
URL User Request GET HTTP/2 i.giphy.com/media/lp3GUtG2waC88/giphy.gif IP 199.232.198.2:443 ASN #54113 FASTLY Certificate IssuerGlobalSign nv-sa Subject.giphy.com Fingerprint64:92:D5:2F:03:A9:BC:37:41:83:6D:CA:E7:2B:00:14:2C:60:A8:96 ValiditySat, 02 Sep 2023 22:48:06 GMT - Thu, 03 Oct 2024 22:48:05 GMT File type GIF image data, version 89a, 480 x 272\012- data Size 6.5 kB (6476 bytes) Hash 0789bef5fdabd00fc0bacaa635565fe1 01c5b48f8dc2223f3c7ef8836e84bbd11d434afa 87739cf6140d0bbabfdfbcbb3656e7af1d0218d1b3cceca61160aab23b4c349b HTTP Headers `GET /media/lp3GUtG2waC88/giphy.gif HTTP/1.1 Host: i.giphy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Tue, 03 Dec 2019 11:11:42 GMT etag: "0789bef5fdabd00fc0bacaa635565fe1" content-type: image/gif access-control-allow-origin: cross-origin-resource-policy: cross-origin accept-ranges: bytes date: Fri, 08 Dec 2023 15:56:25 GMT age: 6916 x-served-by: cache-iad-kiad7000074-IAD, cache-bma1622-BMA x-cache: HIT, HIT x-cache-hits: 2645, 1 x-timer: S1702050985.219948,VS0,VE2 strict-transport-security: max-age=15465600 cache-control: max-age=86400 x-robots-tag: noai, noimageai content-length: 6476 X-Firefox-Spdy: h2

	grabify.link/cdn-cgi/rum?	104.26.8.202	204 No Content	0 B
URL POST HTTP/3 grabify.link/cdn-cgi/rum? IP 104.26.8.202:443 ASN #13335 CLOUDFLARENET Requested by https://grabify.link/L0HGXI Certificate IssuerGoogle Trust Services LLC Subjectgrabify.link FingerprintA2:CB:A2:12:31:AA:02:EC:B6:4C:26:F0:CB:D4:E5:20:E8:1A:05:79 ValidityFri, 13 Oct 2023 16:15:15 GMT - Thu, 11 Jan 2024 16:15:14 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /cdn-cgi/rum? HTTP/1.1 Host: grabify.link User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 463 Origin: https://grabify.link DNT: 1 Connection: keep-alive Cookie: XSRF-TOKEN=eyJpdiI6InoyTmt6RWxNTUxtcXJSNHZydFkxbVE9PSIsInZhbHVlIjoiYmJDWit2aHU2aDQ3Yy92TDgzQWpkMEpHb0FWVFQ3ZjhPNkwxWWdIWVJVNGMydWthTGNnY1p3RlJYSWdKZ0JaeE9BNjE5WU4zQ2pjYUF2VXMwNzZjcGJsTVUxcGx5ZmgzOHZHTnRhR0ZKY0xsbVQrdi9KUzBWQkJ4Q2dLMENRdEIiLCJtYWMiOiI5OGJlNjdmNmY4ZWFhZjQ0NDY5YTY1MmM1MTM0NzdhOTAxODc3ODAzMjQ0NTRjZTEyZjQ4MTAxMTM2YmY4YTc0IiwidGFnIjoiIn0%3D; g_session=eyJpdiI6Ik0vSTkyOStPZ0g1S0pOazdob1JPOWc9PSIsInZhbHVlIjoiL0wzQlNRMVJ5cnRnYnlESEFLZCt6K2xqYXJXWDJVazBPTGVLZEw2eWZhVTBveUh5alY3T2RXSmtieVBmOE5hcVl2dm5LRG9HRDN1V1hUOGN6M3pnZ3BvTS8wOUEyQklWa0pCT0tNMXFTdjZjNklKYU5KdWEzOG9EWEtSL2N5ZWciLCJtYWMiOiJjNTBlNzA2MTM1NDQ2NDRhYzUxOTA3MTcxODVkODI1MWExMTg4YTBjYjBjZjdhZDZhMGQyNWJmNjBkMzZkZTI3IiwidGFnIjoiIn0%3D Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/3 204 No Content date: Fri, 08 Dec 2023 15:56:25 GMT access-control-allow-origin: https://grabify.link access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true server: cloudflare cf-ray: 832632c1ff7b568b-OSL x-frame-options: DENY x-content-type-options: nosniff`

	i.giphy.com/favicon.ico	199.232.198.2	200 OK	1.2 kB
URL GET HTTP/2 i.giphy.com/favicon.ico IP 199.232.198.2:443 ASN #54113 FASTLY Requested by https://i.giphy.com/media/lp3GUtG2waC88/giphy.gif Certificate IssuerGlobalSign nv-sa Subject.giphy.com Fingerprint64:92:D5:2F:03:A9:BC:37:41:83:6D:CA:E7:2B:00:14:2C:60:A8:96 ValiditySat, 02 Sep 2023 22:48:06 GMT - Thu, 03 Oct 2024 22:48:05 GMT File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data Size 1.2 kB (1197 bytes) Hash 22918c3c9ee5a9845590e3d909ab493c 60644bc49eb83a7830947dab956f6286ba43b487 f65e466c81c81c1b944f3235ab4604e8607c9caa82b6ec77837d5c0247b53291 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: i.giphy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://i.giphy.com/media/lp3GUtG2waC88/giphy.gif Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK last-modified: Mon, 17 Dec 2018 17:17:13 GMT etag: "22918c3c9ee5a9845590e3d909ab493c" content-type: image/vnd.microsoft.icon access-control-allow-origin: * cross-origin-resource-policy: cross-origin accept-ranges: bytes date: Fri, 08 Dec 2023 15:56:25 GMT age: 138783 x-served-by: cache-iad-kiad7000023-IAD, cache-bma1622-BMA x-cache: HIT, HIT x-cache-hits: 100885, 1 x-timer: S1702050986.941562,VS0,VE11 strict-transport-security: max-age=15465600 cache-control: max-age=86400 x-robots-tag: noai, noimageai content-length: 1197 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL POST HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size