Report - pay.followinglike.com/SoftwareUpdate/Components/Software/304/default/FollowingLike4-Installer.exe?v=f1576f37521243a9a1b5d687ced9bd9c

Report Overview

Visited public
2024-07-18 00:39:38
Tags
Submit Tags
URL
pay.followinglike.com/SoftwareUpdate/Components/Software/304/default/FollowingLike4-Installer.exe?v=f1576f37521243a9a1b5d687ced9bd9c
Finishing URL
about:privatebrowsing
IP / ASN
172.67.163.28
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-17 18:12:37	2.0 kB	5.3 kB	23.36.76.226
pay.followinglike.com	unknown	2016-03-20	2022-09-05 23:55:06	2024-02-10 01:34:31	586 B	1.3 MB	172.67.163.28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
df85487917ffcb9ff9393daa9c628bc8
73e600fa168021b1cfd00f6a00dff1678e018aaa
c694b95afc4423cf3e039cea969256e7957ff30ee11fa6cd2c5432bd7b72686b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C694B95AFC4423CF3E039CEA969256E7957FF30EE11FA6CD2C5432BD7B72686B"
Last-Modified: Mon, 15 Jul 2024 19:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13373
Expires: Thu, 18 Jul 2024 04:22:05 GMT
Date: Thu, 18 Jul 2024 00:39:12 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
0ba28ae3ca920c46edf9c7a1f79db3ca
b96f7bd71a6b1f9e08b5a0179c66553bf42875d2
e4acaf4113d4cda75edbbae5d28e17dffb959489cd6912b854c9e87a3ab50fd2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E4ACAF4113D4CDA75EDBBAE5D28E17DFFB959489CD6912B854C9E87A3AB50FD2"
Last-Modified: Mon, 15 Jul 2024 20:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14177
Expires: Thu, 18 Jul 2024 04:35:29 GMT
Date: Thu, 18 Jul 2024 00:39:12 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
515a47172f3cc8fbca49fb1ef5f72e11
5b474a25a17288e58ea017f17fa456cf13893af3
13578d886dc74ebf01cfa31617c3417b42b8c8395e4bacc10a1b6f1d19bc55f2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "13578D886DC74EBF01CFA31617C3417B42B8C8395E4BACC10A1B6F1D19BC55F2"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3866
Expires: Thu, 18 Jul 2024 01:43:39 GMT
Date: Thu, 18 Jul 2024 00:39:13 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d6a8982e5c8cce4f958455f8ea1e5814
d88c9d262e8282645ee77a1a3f29199b0422166a
c18d568bc2c4d8544c593d76c943798ffd2de9596cb115879d51d403f080abea

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C18D568BC2C4D8544C593D76C943798FFD2DE9596CB115879D51D403F080ABEA"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11880
Expires: Thu, 18 Jul 2024 03:57:13 GMT
Date: Thu, 18 Jul 2024 00:39:13 GMT
Connection: keep-alive

GET pay.followinglike.com/SoftwareUpdate/Components/Software/304/default/FollowingLike4-Installer.exe?v=f1576f37521243a9a1b5d687ced9bd9c

172.67.163.28

200 OK

1.3 MB

URL User Request GET HTTP/2
pay.followinglike.com/SoftwareUpdate/Components/Software/304/default/FollowingLike4-Installer.exe?v=f1576f37521243a9a1b5d687ced9bd9c
IP
172.67.163.28:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectfollowinglike.com
FingerprintB6:86:35:38:6C:B7:30:64:E4:3C:72:FF:94:48:94:77:7F:E8:76:C7
ValidityWed, 29 May 2024 03:19:48 GMT - Tue, 27 Aug 2024 03:19:47 GMT

File type
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
Size
1.3 MB (1293824 bytes)
Hash
251300a23e62c145d7606ba5cd659dbe
89f048eabc16177bcbe3192c87c88c72c059f740
c5a77ab3b80ab569938abbf1535f6ce89e342bfbf672cc5e6c84d4ce27d77154

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 5/74

HTTP Headers

GET /SoftwareUpdate/Components/Software/304/default/FollowingLike4-Installer.exe?v=f1576f37521243a9a1b5d687ced9bd9c HTTP/1.1
Host: pay.followinglike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Jul 2024 00:39:13 GMT
content-type: application/octet-stream
content-length: 1293824
last-modified: Wed, 07 Dec 2022 11:41:54 GMT
etag: "6f9d61e730ad91:0"
access-control-allow-origin: *
x-powered-by: ASP.NET
access-control-allow-headers: *
access-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-credentials: true
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H16UdPHgo8mUqEKWW077tj1ydDrnvwwpRdXlAdWVjAlb%2FQCBSA5DlCWppEBh8xbLJaS7OVMOyXyshZtM1dP12PDknvalCGGuKMqHcvxTTjXHRADPdx3Bnht%2B0%2BqPBSP09UdfOn1KTyg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4e69d50c391c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
c5fe3e5860e9afb843ae32b8f349f4c7
78e8faf3194e82bcb4fed0d89bd1989501dd8d2a
806921e95846539e7849756068c5afcd2fb93d1ccbb7604b5d8d18805538faf5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "806921E95846539E7849756068C5AFCD2FB93D1CCBB7604B5D8D18805538FAF5"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17491
Expires: Thu, 18 Jul 2024 05:30:46 GMT
Date: Thu, 18 Jul 2024 00:39:15 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
c5fe3e5860e9afb843ae32b8f349f4c7
78e8faf3194e82bcb4fed0d89bd1989501dd8d2a
806921e95846539e7849756068c5afcd2fb93d1ccbb7604b5d8d18805538faf5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "806921E95846539E7849756068C5AFCD2FB93D1CCBB7604B5D8D18805538FAF5"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17491
Expires: Thu, 18 Jul 2024 05:30:46 GMT
Date: Thu, 18 Jul 2024 00:39:15 GMT
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers