| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-08-14 Last Seen2024-08-19 Times Seen24170 Size504 B (504 bytes) MD590149b127cd563315012f026a9e0544f SHA11e148905fa524fb8fec15249f30f33085978dc2e SHA2567098a3b23aece2b00e86fd3a23c5e532001a5002b061170d3ed53ddd36bf8f5b POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7098A3B23AECE2B00E86FD3A23C5E532001A5002B061170D3ED53DDD36BF8F5B"
Last-Modified: Tue, 13 Aug 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5409
Expires: Wed, 14 Aug 2024 06:13:11 GMT
Date: Wed, 14 Aug 2024 04:43:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-08-14 Last Seen2024-08-19 Times Seen3193 Size504 B (504 bytes) MD5389a542ebc397ae476ffc158a86d2e95 SHA1a1c15d8b6ebcf7a620f9f890daf14ca19a09fe5a SHA2563cd724bb377d35df975f03b768a4b11b944d196bb62b49cb5b8e3e27c7d9f562 POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3CD724BB377D35DF975F03B768A4B11B944D196BB62B49CB5B8E3E27C7D9F562"
Last-Modified: Tue, 13 Aug 2024 18:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5123
Expires: Wed, 14 Aug 2024 06:08:25 GMT
Date: Wed, 14 Aug 2024 04:43:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-08-14 Last Seen2024-08-19 Times Seen14092 Size504 B (504 bytes) MD5024341a123220bb7f476663e0c2f941d SHA120e2ab3bdab6d6f5241eb3c45d44a9b191f6cb44 SHA25694e9518d845bb5293c2f009a196b74a3859a5ae3b3a1438234f867017c167e1b POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "94E9518D845BB5293C2F009A196B74A3859A5AE3B3A1438234F867017C167E1B"
Last-Modified: Tue, 13 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9628
Expires: Wed, 14 Aug 2024 07:23:30 GMT
Date: Wed, 14 Aug 2024 04:43:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-08-14 Last Seen2024-08-19 Times Seen16024 Size504 B (504 bytes) MD5e4a9f1133ab7ff8fdfec972dc9d80181 SHA12a253964c7b022d903b90b57585333f32f730527 SHA25662acc6047405e1e5e89c898325a6f5ba2d9f993214648dc9e50cf0d4f5aa9baa POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "62ACC6047405E1E5E89C898325A6F5BA2D9F993214648DC9E50CF0D4F5AA9BAA"
Last-Modified: Tue, 13 Aug 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2894
Expires: Wed, 14 Aug 2024 05:31:17 GMT
Date: Wed, 14 Aug 2024 04:43:03 GMT
Connection: keep-alive
|
|
| GET github.com/ixjb94/ForceBindIP-Gui/raw/main/dist/ForceBindIP%20-%20Gui.exe |  140.82.121.3 | 302 Found | 0 B |
URL github.com/ixjb94/ForceBindIP-Gui/raw/main/dist/ForceBindIP%20-%20Gui.exe IP / ASN 140.82.121.3 #36459 GITHUB Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-02 Times Seen5607161 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT GET /ixjb94/ForceBindIP-Gui/raw/main/dist/ForceBindIP%20-%20Gui.exe HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Wed, 14 Aug 2024 04:43:03 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin:
location: https://raw.githubusercontent.com/ixjb94/ForceBindIP-Gui/main/dist/ForceBindIP%20-%20Gui.exe
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: A7F2:35B25A:1E1A86:1EEECA:66BC35D7
X-Firefox-Spdy: h2
|
|
| GET raw.githubusercontent.com/ixjb94/ForceBindIP-Gui/main/dist/ForceBindIP%20-%20Gui.exe |  185.199.108.133 | 200 OK | 1.0 MB |
URL raw.githubusercontent.com/ixjb94/ForceBindIP-Gui/main/dist/ForceBindIP%20-%20Gui.exe IP / ASN 185.199.108.133 #54113 FASTLY Resource Info File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections First Seen2024-08-14 Last Seen2025-05-06 Times Seen7 Size1.0 MB (1031680 bytes) MD54d592b23a367abb7e16341e666bafff9 SHA1e94b9afb61a3f52f78e9b04abb5a901f93637091 SHA256141a9dceb16d42d57ee5ee3fd9c5137a7d1d7767c20294e8e60da58dffd2c55a Certificate Info IssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT | Analyzer | Verdict | Alert |
|---|
| Public InfoSec YARA rules | malware | Identifies compiled AutoIT script (as EXE). | | VirusTotal | malicious | |
GET /ixjb94/ForceBindIP-Gui/main/dist/ForceBindIP%20-%20Gui.exe HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/octet-stream
etag: W/"cae7f71118b91bfbc774927ea23b11f6f2c15e40edbdca74784967db51cb5ed8"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: FB93:382541:1393A19:147BD12:66BC35D7
accept-ranges: bytes
date: Wed, 14 Aug 2024 04:43:03 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1723610584.540315,VS0,VE175
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 3b3d21e547056853a71ec093109039827646249d
expires: Wed, 14 Aug 2024 04:48:03 GMT
source-age: 0
content-length: 1031680
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP / ASN 23.36.77.32 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-08-12 Last Seen2024-08-19 Times Seen47316 Size504 B (504 bytes) MD577619f0113a62e8c4c44f195901b385c SHA11e1a5e3768ca683e66667aa14efa7042df57ee2f SHA256520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942 POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5609
Expires: Wed, 14 Aug 2024 06:16:34 GMT
Date: Wed, 14 Aug 2024 04:43:05 GMT
Connection: keep-alive
|
|