| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash50a89b39234eb6cc4eda70d7e27be17f 306340eb26b6817fd8851a085563a88eed7e2b6b eaabd011ed0722deeee97e566b8318b17d8e993d31db4c2cc31cf0e3cd8191f5
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EAABD011ED0722DEEEE97E566B8318B17D8E993D31DB4C2CC31CF0E3CD8191F5"
Last-Modified: Mon, 19 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5742
Expires: Thu, 22 Aug 2024 01:48:56 GMT
Date: Thu, 22 Aug 2024 00:13:14 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hasha850d656201a0e91c62caa7de6187e53 be9391d4bdbc1080c21e344278cd69c7b09ac69d c9a84483590ffeaeef979884b51aa6c60c100e0f9b4d7dfc7e0c1ec3592a97e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C9A84483590FFEAEEF979884B51AA6C60C100E0F9B4D7DFC7E0C1EC3592A97E0"
Last-Modified: Wed, 21 Aug 2024 12:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16203
Expires: Thu, 22 Aug 2024 04:43:17 GMT
Date: Thu, 22 Aug 2024 00:13:14 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash189517abaffd3ad15fac051239960c9d 99019d46813ecf2b1215757ca1f05ac850b9f692 31daadeeb8828e5e01008ca5a4e7c5fba0acf5517903eafce413a10dcfe66fdb
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "31DAADEEB8828E5E01008CA5A4E7C5FBA0ACF5517903EAFCE413A10DCFE66FDB"
Last-Modified: Wed, 21 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13170
Expires: Thu, 22 Aug 2024 03:52:44 GMT
Date: Thu, 22 Aug 2024 00:13:14 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash5d0dd93e6a07253100201a9c8a3e15a5 30adbd52887825ae2779d7fb12276bed8b1d8178 07bb496669af2e33765f0ad730934dad6f8ad79a628c6b21cd545505335471c6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "07BB496669AF2E33765F0AD730934DAD6F8AD79A628C6B21CD545505335471C6"
Last-Modified: Mon, 19 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11489
Expires: Thu, 22 Aug 2024 03:24:44 GMT
Date: Thu, 22 Aug 2024 00:13:15 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash0efa5759a951afcb5bb5bc92a1c0cdf0 b1d22c53525bf4ceefd1a01fb59f581b79c98805 6d4c194726ba651a15593ab8754051d90db0dfcbeff5150ff099a7799ee06af9
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6D4C194726BA651A15593AB8754051D90DB0DFCBEFF5150FF099A7799EE06AF9"
Last-Modified: Tue, 20 Aug 2024 00:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13312
Expires: Thu, 22 Aug 2024 03:55:07 GMT
Date: Thu, 22 Aug 2024 00:13:15 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash81b56df910046ad5b2d5952670b9ba8f 423c1bb459776e77b32a64828659bb95b56d2c3b a88a55341378c7cdb004334ab0a0376ed9dfebc429087200e0265e8035ab7948
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A88A55341378C7CDB004334AB0A0376ED9DFEBC429087200E0265E8035AB7948"
Last-Modified: Wed, 21 Aug 2024 06:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16139
Expires: Thu, 22 Aug 2024 04:42:14 GMT
Date: Thu, 22 Aug 2024 00:13:15 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashfa24406b28144f03c66e0892b293241b 64ec25a3e583dcd2ea13558272ac7badebbfc3d6 8d1b5de3eaf9d4ae520c30cb01548286eeb9853665444c34be6caac091af5638
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D1B5DE3EAF9D4AE520C30CB01548286EEB9853665444C34BE6CAAC091AF5638"
Last-Modified: Wed, 21 Aug 2024 03:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2973
Expires: Thu, 22 Aug 2024 01:02:49 GMT
Date: Thu, 22 Aug 2024 00:13:16 GMT
Connection: keep-alive
|
|
| downloads.auslogics.com/en/disk-defrag/disk-defrag-setup.exe | 51.79.116.215 | 200 OK | 21 MB |
URL User Request GET HTTP/1.1downloads.auslogics.com/en/disk-defrag/disk-defrag-setup.exe IP 51.79.116.215:443
CertificateIssuerLet's Encrypt Subjectdownloads.auslogics.com FingerprintA5:73:57:94:C8:3C:C8:76:4C:A8:CA:89:38:A1:5F:0D:F8:EE:2A:79 ValiditySun, 28 Jul 2024 10:32:07 GMT - Sat, 26 Oct 2024 10:32:06 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections Size21 MB (21091224 bytes) Hash67bcc208605f7ecbb797af220b96c4f7 535da36a38545409945b1fef1662219d8c412db0 c286f2ae2981d2c287fb4fc4f8339f3d8d988ff0f0d8c6d12e8993ef955bf996
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /en/disk-defrag/disk-defrag-setup.exe HTTP/1.1
Host: downloads.auslogics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Thu, 22 Aug 2024 00:13:15 GMT
Content-Type: application/octet-stream
Content-Length: 21091224
Last-Modified: Wed, 03 Jul 2024 16:14:43 GMT
Connection: keep-alive
ETag: "668578f3-141d398"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Disposition: attachment; filename="auslogics-disk-defrag-setup.exe"
Accept-Ranges: bytes
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12459
Expires: Thu, 22 Aug 2024 03:40:57 GMT
Date: Thu, 22 Aug 2024 00:13:18 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12459
Expires: Thu, 22 Aug 2024 03:40:57 GMT
Date: Thu, 22 Aug 2024 00:13:18 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12459
Expires: Thu, 22 Aug 2024 03:40:57 GMT
Date: Thu, 22 Aug 2024 00:13:18 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12459
Expires: Thu, 22 Aug 2024 03:40:57 GMT
Date: Thu, 22 Aug 2024 00:13:18 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12459
Expires: Thu, 22 Aug 2024 03:40:57 GMT
Date: Thu, 22 Aug 2024 00:13:18 GMT
Connection: keep-alive
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0
ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-09-23-08-12-55.chain; p384ecdsa=hYJZcgSZrwHa6oIwlJpR_Yl4BpPls_q6xholBOG0BxM73vcHbIuNehGMFYtiU7x-VIc46xPrS_QYJT3QA7e9Z2fkTV_qsEiWL18ULKM2X6Ktd_whbpLvuvzIcA_s6GQb
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Thu, 22 Aug 2024 00:13:27 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 7
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|