Report - lodhran-update.cf

Report Overview

Visited public
2023-10-26 19:54:15
Tags
URL
lodhran-update.cf
Finishing URL
lodhran-update.cf/
IP / ASN
66.45.227.171
#19318 IS-AS-1
Title
My Blog - My WordPress Blog

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.comodoca.com	1696	2002-11-13	2012-05-21 09:01:17	2023-10-26 20:03:05	331 B	1.0 kB	104.18.15.101
lodhran-update.cf	unknown	unknown	2022-09-12 17:17:45	2023-10-05 13:20:25	1.8 kB	6.1 kB	66.45.227.171

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-26 19:53:59	low	Client IP	Internal IP	ET INFO DNS Query for Suspicious .cf Domain
2023-10-26 19:53:59	low	Client IP	66.45.227.171	ET INFO Suspicious Domain (*.cf) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	ocsp.comodoca.com/	104.18.15.101		471 B
URL ocsp.comodoca.com/ IP 104.18.15.101:0 ASN #13335 CLOUDFLARENET File type data Size 471 B (471 bytes) Hash c6d442be7ad04264f349cabacde13048 0144c4085dbda34bbfad7d267884cc94b397bb4e 412b53d4fae7fdf30b73b85bf85ea22c1398024fc482f74abd6f2f81d1fe23b0 HTTP Headers `POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Thu, 26 Oct 2023 19:53:58 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Last-Modified: Thu, 26 Oct 2023 06:16:04 GMT Expires: Thu, 02 Nov 2023 06:16:03 GMT Etag: "0144c4085dbda34bbfad7d267884cc94b397bb4e" Cache-Control: max-age=555124,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb5 X-Frame-Options: SAMEORIGIN CF-Cache-Status: MISS Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 81c53f9d49afb503-OSL

	lodhran-update.cf/	66.45.227.171	200 OK	1.2 kB
URL User Request GET HTTP/2 lodhran-update.cf/ IP 66.45.227.171:443 ASN #19318 IS-AS-1 Certificate IssuercPanel, Inc. Subjectlodhran-update.cf FingerprintD3:0B:C2:93:FD:F5:95:69:73:6E:B8:91:95:88:BF:3F:E0:95:9A:07 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 1.2 kB (1224 bytes) Hash 42939955f1a1cad29cde269dc3640540 8e7774feee1ff62b4efc03557ac18febaa85d0d1 1a9bfcef555402c04f33d19ed7b35d4acf5d878b737c87b18c3c47a233681b07 HTTP Headers `GET / HTTP/1.1 Host: lodhran-update.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: text/html last-modified: Sat, 29 Jul 2023 07:34:17 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 1224 date: Thu, 26 Oct 2023 19:53:58 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

	lodhran-update.cf/style.css	66.45.227.171	404 Not Found	1.2 kB
URL GET HTTP/2 lodhran-update.cf/style.css IP 66.45.227.171:443 ASN #19318 IS-AS-1 Requested by https://lodhran-update.cf/ Certificate IssuercPanel, Inc. Subjectlodhran-update.cf FingerprintD3:0B:C2:93:FD:F5:95:69:73:6E:B8:91:95:88:BF:3F:E0:95:9A:07 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size 1.2 kB (1238 bytes) Hash 0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 HTTP Headers `GET /style.css HTTP/1.1 Host: lodhran-update.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://lodhran-update.cf/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 26 Oct 2023 19:53:59 GMT server: LiteSpeed X-Firefox-Spdy: h2`

	lodhran-update.cf/favicon.ico	66.45.227.171	404 Not Found	1.2 kB
URL GET HTTP/2 lodhran-update.cf/favicon.ico IP 66.45.227.171:443 ASN #19318 IS-AS-1 Requested by https://lodhran-update.cf/ Certificate IssuercPanel, Inc. Subjectlodhran-update.cf FingerprintD3:0B:C2:93:FD:F5:95:69:73:6E:B8:91:95:88:BF:3F:E0:95:9A:07 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size 1.2 kB (1238 bytes) Hash 0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: lodhran-update.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://lodhran-update.cf/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 26 Oct 2023 19:53:59 GMT server: LiteSpeed X-Firefox-Spdy: h2`

	lodhran-update.cf/Quicksand-Regular.ttf	66.45.227.171	404 Not Found	1.2 kB
URL GET HTTP/2 lodhran-update.cf/Quicksand-Regular.ttf IP 66.45.227.171:443 ASN #19318 IS-AS-1 Requested by https://lodhran-update.cf/ Certificate IssuercPanel, Inc. Subjectlodhran-update.cf FingerprintD3:0B:C2:93:FD:F5:95:69:73:6E:B8:91:95:88:BF:3F:E0:95:9A:07 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size 1.2 kB (1238 bytes) Hash 0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 HTTP Headers `GET /Quicksand-Regular.ttf HTTP/1.1 Host: lodhran-update.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://lodhran-update.cf/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 26 Oct 2023 19:53:59 GMT server: LiteSpeed X-Firefox-Spdy: h2`