| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash19cd88f88651f2e9f42740350df4b4d1 c6c7026e15281db4f24b3bc4ee2cfc2ecc26362c b41a248824843236c8691934a5dfd24daa01f05cdc8cff81afdb9588dee24946
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B41A248824843236C8691934A5DFD24DAA01F05CDC8CFF81AFDB9588DEE24946"
Last-Modified: Thu, 08 Aug 2024 18:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12082
Expires: Fri, 09 Aug 2024 04:40:21 GMT
Date: Fri, 09 Aug 2024 01:18:59 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 2.23.172.203 | | 504 B |
IP 2.23.172.203:0
ASN#20940 Akamai International B.V.
Hash0f5f64b1b9666b5d0d54ad5ffdf6a377 5ce6215ad0e161f888d7385bcf9038a28337399f adc31eed47c5fcaa540ba69d30b9fb9a27e7e692925621f8cea9a271b4f7c5bc
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "ADC31EED47C5FCAA540BA69D30B9FB9A27E7E692925621F8CEA9A271B4F7C5BC"
Last-Modified: Tue, 06 Aug 2024 12:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19189
Expires: Fri, 09 Aug 2024 06:38:48 GMT
Date: Fri, 09 Aug 2024 01:18:59 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashb278ebaf27c527785e85180da86b54f9 ee87bf3d735648b0734efe705977f9b86155fcbd f53b9b17675ce2f387b3fcff02c39ecc355e1fd81756731257c59ea22115c519
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F53B9B17675CE2F387B3FCFF02C39ECC355E1FD81756731257C59EA22115C519"
Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14966
Expires: Fri, 09 Aug 2024 05:28:25 GMT
Date: Fri, 09 Aug 2024 01:18:59 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash5f8acb1f8a25eb19fc33302dc7bf3c26 93ad5ef9e7119c1064e966ea3ab2cade2438d5aa 277c320d7ff9556a6375e996308ba8d893601e14430af41b82904952d477f836
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "277C320D7FF9556A6375E996308BA8D893601E14430AF41B82904952D477F836"
Last-Modified: Thu, 08 Aug 2024 18:26:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10450
Expires: Fri, 09 Aug 2024 04:13:09 GMT
Date: Fri, 09 Aug 2024 01:18:59 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash41f3021c1502428798a392f3c2ef0fc8 c7a61247c753e72345e5c4504056a09889a3916e cb2873c69274d15b03f8aaa26260d7a2341f2e276f876f444f1fee5679266653
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CB2873C69274D15B03F8AAA26260D7A2341F2E276F876F444F1FEE5679266653"
Last-Modified: Thu, 08 Aug 2024 18:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10767
Expires: Fri, 09 Aug 2024 04:18:26 GMT
Date: Fri, 09 Aug 2024 01:18:59 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 2.23.172.203 | | 504 B |
IP 2.23.172.203:0
ASN#20940 Akamai International B.V.
Hashe2a03ad8f769ad1d5105ae949c20c49d ebbd6f2938513608d09535584ce1a5d7a23174bc c1f230503f1b960e3f2d33c909d84a1eca1b80d369f216dc58ef9818370f570f
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C1F230503F1B960E3F2D33C909D84A1ECA1B80D369F216DC58EF9818370F570F"
Last-Modified: Wed, 07 Aug 2024 11:50:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2036
Expires: Fri, 09 Aug 2024 01:52:56 GMT
Date: Fri, 09 Aug 2024 01:19:00 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash3c9eed2fec24829a27e34778ffb2a08d 3c419b3947c7acd38fa1f8ba03fdd0bc5edb8241 1f3082fe17b3928cd059cf5c6f7f9f0901d0b02edc522adb594611df615657c0
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1F3082FE17B3928CD059CF5C6F7F9F0901D0B02EDC522ADB594611DF615657C0"
Last-Modified: Thu, 08 Aug 2024 18:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11886
Expires: Fri, 09 Aug 2024 04:37:06 GMT
Date: Fri, 09 Aug 2024 01:19:00 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashcb72b4c8c0043447fb191d29a2987907 b21349d4cefa64181af49f91f868ffffb136a54a eb81057e97fc772c3b55ff2d175797a88db6035f09ed472dcf8604e3c9434d1b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EB81057E97FC772C3B55FF2D175797A88DB6035F09ED472DCF8604E3C9434D1B"
Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11179
Expires: Fri, 09 Aug 2024 04:25:20 GMT
Date: Fri, 09 Aug 2024 01:19:01 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashcb72b4c8c0043447fb191d29a2987907 b21349d4cefa64181af49f91f868ffffb136a54a eb81057e97fc772c3b55ff2d175797a88db6035f09ed472dcf8604e3c9434d1b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EB81057E97FC772C3B55FF2D175797A88DB6035F09ED472DCF8604E3C9434D1B"
Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11179
Expires: Fri, 09 Aug 2024 04:25:20 GMT
Date: Fri, 09 Aug 2024 01:19:01 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashcb72b4c8c0043447fb191d29a2987907 b21349d4cefa64181af49f91f868ffffb136a54a eb81057e97fc772c3b55ff2d175797a88db6035f09ed472dcf8604e3c9434d1b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EB81057E97FC772C3B55FF2D175797A88DB6035F09ED472DCF8604E3C9434D1B"
Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11181
Expires: Fri, 09 Aug 2024 04:25:22 GMT
Date: Fri, 09 Aug 2024 01:19:01 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashcb72b4c8c0043447fb191d29a2987907 b21349d4cefa64181af49f91f868ffffb136a54a eb81057e97fc772c3b55ff2d175797a88db6035f09ed472dcf8604e3c9434d1b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EB81057E97FC772C3B55FF2D175797A88DB6035F09ED472DCF8604E3C9434D1B"
Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11179
Expires: Fri, 09 Aug 2024 04:25:20 GMT
Date: Fri, 09 Aug 2024 01:19:01 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashcb72b4c8c0043447fb191d29a2987907 b21349d4cefa64181af49f91f868ffffb136a54a eb81057e97fc772c3b55ff2d175797a88db6035f09ed472dcf8604e3c9434d1b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EB81057E97FC772C3B55FF2D175797A88DB6035F09ED472DCF8604E3C9434D1B"
Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11181
Expires: Fri, 09 Aug 2024 04:25:22 GMT
Date: Fri, 09 Aug 2024 01:19:01 GMT
Connection: keep-alive
|
|
| downloads.auslogics.com/en/duplicate-file-finder/duplicate-file-finder-setup.exe?clientId=2111315758.1620792668 | 51.79.116.215 | 200 OK | 18 MB |
URL User Request GET HTTP/1.1downloads.auslogics.com/en/duplicate-file-finder/duplicate-file-finder-setup.exe?clientId=2111315758.1620792668 IP 51.79.116.215:443
CertificateIssuerLet's Encrypt Subjectdownloads.auslogics.com FingerprintA5:73:57:94:C8:3C:C8:76:4C:A8:CA:89:38:A1:5F:0D:F8:EE:2A:79 ValiditySun, 28 Jul 2024 10:32:07 GMT - Sat, 26 Oct 2024 10:32:06 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size18 MB (17832096 bytes) Hasha4a9a726093bcdc7c7b4223632e30363 a2c50654f3aa640c7b97fcfba969fc2341f53d84 4f8fc16384f41371c23b22aaf735440b839aa10a3c29220424871928554758e8
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /en/duplicate-file-finder/duplicate-file-finder-setup.exe?clientId=2111315758.1620792668 HTTP/1.1
Host: downloads.auslogics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Fri, 09 Aug 2024 01:19:00 GMT
Content-Type: application/octet-stream
Content-Length: 17832096
Last-Modified: Wed, 03 Jul 2024 16:15:45 GMT
Connection: keep-alive
ETag: "66857931-11018a0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Disposition: attachment; filename="auslogics-duplicate-file-finder-setup.exe"
Accept-Ranges: bytes
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0
ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-09-23-08-12-55.chain; p384ecdsa=zN9Z4U88MpN5YbSuzkDFjYH1JKiYP9xKHHKqf4GIw6Lo5hdWZgfRCWaSZIqLkGzPl7hiL9pEw6Er5AgTyFmKzxkffWeFm5Y16cldF57i27rbp20JopuH-xAl7uVCEjcE
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Fri, 09 Aug 2024 01:17:34 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 104
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|