r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f63e8d9e64abf0e5b2784ca051160e84
d15d17504ed5c584ba42145060cf745fdb41c1d0
652ee033c72bc8eadcf29c25a5387bc303bf86e6c57f262c576117f659f15eab
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "652EE033C72BC8EADCF29C25A5387BC303BF86E6C57F262C576117F659F15EAB"
Last-Modified: Fri, 05 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19692
Expires: Mon, 08 Jul 2024 02:43:11 GMT
Date: Sun, 07 Jul 2024 21:14:59 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash abec3934929082bd707108b7042796da
4f200b04ad1c6fcac9833107c492a59ebf36dc6e
8e27309b919c0dcb3b0736dd99dad8c7d3bc16b4816dd982e6af6b79d7ead9ed
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E27309B919C0DCB3B0736DD99DAD8C7D3BC16B4816DD982E6AF6B79D7EAD9ED"
Last-Modified: Sun, 07 Jul 2024 03:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13648
Expires: Mon, 08 Jul 2024 01:02:27 GMT
Date: Sun, 07 Jul 2024 21:14:59 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 41036a4c62e61466443bce27a927e029
39a2a8a258c5feaf020246696135700b0c30740d
e38b3080a1752122f5a174604bd307c54be31c02e0cdb8e2d9354e2a04e1b50f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E38B3080A1752122F5A174604BD307C54BE31C02E0CDB8E2D9354E2A04E1B50F"
Last-Modified: Sun, 07 Jul 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5242
Expires: Sun, 07 Jul 2024 22:42:21 GMT
Date: Sun, 07 Jul 2024 21:14:59 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e430ff7defba95ef2e40c2a2623032a3
4df33994f03cf02626fdfe9c6a51a71f5fea6058
ea2bc04f18953a2d203b059f541bf8bfcd32c63d67b8e1113d927453d8cc9a58
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EA2BC04F18953A2D203B059F541BF8BFCD32C63D67B8E1113D927453D8CC9A58"
Last-Modified: Sun, 07 Jul 2024 04:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6474
Expires: Sun, 07 Jul 2024 23:02:53 GMT
Date: Sun, 07 Jul 2024 21:14:59 GMT
Connection: keep-alive
github.com/DIDIRUS4/AstralRinth/releases/download/ARF-v0.7.2/AstralRinth.App_0.7.210_x64_en-US.msi
140.82.121.4302 Found 0 B URL User Request GET HTTP/2 github.com/DIDIRUS4/AstralRinth/releases/download/ARF-v0.7.2/AstralRinth.App_0.7.210_x64_en-US.msi
IP 140.82.121.4:443
Certificate IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /DIDIRUS4/AstralRinth/releases/download/ARF-v0.7.2/AstralRinth.App_0.7.210_x64_en-US.msi HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Sun, 07 Jul 2024 21:15:00 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/714029615/4755d17b-a165-40e0-9e5c-d30574630594?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240707T211500Z&X-Amz-Expires=300&X-Amz-Signature=a7f24b9a2938713a618cc082a1dff746134f7934cea1fb068eb138255e4a86a5&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=714029615&response-content-disposition=attachment%3B%20filename%3DAstralRinth.App_0.7.210_x64_en-US.msi&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: 0E41:384414:5E07AEC:6036AFE:668B0553
X-Firefox-Spdy: h2
objects.githubusercontent.com/github-production-release-asset-2e65be/714029615/4755d17b-a165-40e0-9e5c-d30574630594?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240707T211500Z&X-Amz-Expires=300&X-Amz-Signature=a7f24b9a2938713a618cc082a1dff746134f7934cea1fb068eb138255e4a86a5&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=714029615&response-content-disposition=attachment%3B%20filename%3DAstralRinth.App_0.7.210_x64_en-US.msi&response-content-type=application%2Foctet-stream
185.199.109.133200 OK 5.6 MB URL User Request GET HTTP/2 objects.githubusercontent.com/github-production-release-asset-2e65be/714029615/4755d17b-a165-40e0-9e5c-d30574630594?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240707T211500Z&X-Amz-Expires=300&X-Amz-Signature=a7f24b9a2938713a618cc082a1dff746134f7934cea1fb068eb138255e4a86a5&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=714029615&response-content-disposition=attachment%3B%20filename%3DAstralRinth.App_0.7.210_x64_en-US.msi&response-content-type=application%2Foctet-stream
IP 185.199.109.133:443
Certificate IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File type Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: AstralRinth App, Author: modrinth, Keywords: Installer, Comments: This installer database contains the logic and data required to install AstralRinth App., Template: x64;0, Revision Number: {DCA45372-BE22-4BD7-8DBF-94B4572A5E8F}, Create Time/Date: Tue Jul 2 20:06:22 2024, Last Saved Time/Date: Tue Jul 2 20:06:22 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
Size 5.6 MB (5566464 bytes)
Hash d83d14d3e5a14520d58978f6beec6643
0393f9b2ed2c324a36623ffab7cd04f9fef9a0a7
24888f0be56522ae58af081ca58437befdfef6190c5f06cccc70455eb1a11ac2
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
VirusTotal suspicious
GET /github-production-release-asset-2e65be/714029615/4755d17b-a165-40e0-9e5c-d30574630594?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240707T211500Z&X-Amz-Expires=300&X-Amz-Signature=a7f24b9a2938713a618cc082a1dff746134f7934cea1fb068eb138255e4a86a5&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=714029615&response-content-disposition=attachment%3B%20filename%3DAstralRinth.App_0.7.210_x64_en-US.msi&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 02 Jul 2024 20:25:20 GMT
etag: "0x8DC9AD5186E3607"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ecf249b8-f01e-002e-40bf-ccb342000000
x-ms-version: 2020-10-02
x-ms-creation-time: Tue, 02 Jul 2024 20:25:20 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=AstralRinth.App_0.7.210_x64_en-US.msi
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 07 Jul 2024 21:15:00 GMT
age: 0
x-served-by: cache-iad-kcgs7200111-IAD, cache-hel1410027-HEL
x-cache: HIT, MISS
x-cache-hits: 114, 0
x-timer: S1720386900.315144,VS0,VE501
content-length: 5566464
X-Firefox-Spdy: h2
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 861cce1bf441610f1dfbb14264d55122
1596b2c44fcdb5f7a49c73da766e4ab48b6bd064
f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12993
Expires: Mon, 08 Jul 2024 00:51:34 GMT
Date: Sun, 07 Jul 2024 21:15:01 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 861cce1bf441610f1dfbb14264d55122
1596b2c44fcdb5f7a49c73da766e4ab48b6bd064
f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12993
Expires: Mon, 08 Jul 2024 00:51:34 GMT
Date: Sun, 07 Jul 2024 21:15:01 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 861cce1bf441610f1dfbb14264d55122
1596b2c44fcdb5f7a49c73da766e4ab48b6bd064
f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12993
Expires: Mon, 08 Jul 2024 00:51:34 GMT
Date: Sun, 07 Jul 2024 21:15:01 GMT
Connection: keep-alive