Report - github.com/wakatime/wakatime-cli/releases/download/v1.98.3/wakatime-cli-windows-amd64.zip

Report Overview

Visited public
2024-07-30 01:42:39
Tags
URL
github.com/wakatime/wakatime-cli/releases/download/v1.98.3/wakatime-cli-windows-amd64.zip
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.4
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-29 18:12:12	2.0 kB	5.3 kB	23.36.76.226
github.com	1423	2007-10-09	2016-07-13 12:28:22	2024-07-29 19:00:04	543 B	4.1 kB	140.82.121.4
objects.githubusercontent.com	134060	2014-02-06	2021-11-01 22:34:29	2024-07-29 20:33:27	1.0 kB	5.6 MB	185.199.108.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/244958571/ac028605-5ff2-4ea6-a019-0326e36c8c9b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240730%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240730T014211Z&X-Amz-Expires=300&X-Amz-Signature=ad9bd813d42939d88f5c0b37a1bb59abc9d6ea1492c04597e0d1b88631533fb6&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=244958571&response-content-disposition=attachment%3B%20filename%3Dwakatime-cli-windows-amd64.zip&response-content-type=application%2Foctet-stream
IP
185.199.108.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.6 MB (5648295 bytes)
Hash
6ee7ff7657d2a5025997e64189db03f1
a7394e27fc123e0ed4abe279eb9a7c875c18cd0a
4d812267705aacf11979500a85dcff245faae988f70b26e7ab59e874df5c5be3

Archive (1)

Filename

Md5

File type

wakatime-cli-windows-amd64.exe

8a723a214321516b34028c3ca86a3d61

PE32+ executable (console) x86-64, for MS Windows, 8 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (8)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash eb8b5a3f62f8ead7f86e028723019196 8941f16c283439f44a148ba7668a67a55aba16de f76a44ac993c568fcdac2165655a7886f3207e980286b7605a48dc897e4fd68b HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "F76A44AC993C568FCDAC2165655A7886F3207E980286B7605A48DC897E4FD68B" Last-Modified: Mon, 29 Jul 2024 18:28:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7236 Expires: Tue, 30 Jul 2024 03:42:46 GMT Date: Tue, 30 Jul 2024 01:42:10 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 0a7ed9f549f2b3f25d9e54500bcb15b9 93b4f0fb8a1be59fa68f9a72a2196c84be6ad61a 8855ef94f553a3d130a13bdf45ba112b3a3282a8110a98dae49144e0b70cff7b HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "8855EF94F553A3D130A13BDF45BA112B3A3282A8110A98DAE49144E0B70CFF7B" Last-Modified: Mon, 29 Jul 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2745 Expires: Tue, 30 Jul 2024 02:27:55 GMT Date: Tue, 30 Jul 2024 01:42:10 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 12b3b90abdd8ddc5edfc58288f11925f 8093a9a5520def1c87fd60aab5c3636f305224d2 e9e51da5ed2854a5ead2219e70b950ccac93efd228bdd965f3a116ee600f390b HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "E9E51DA5ED2854A5EAD2219E70B950CCAC93EFD228BDD965F3A116EE600F390B" Last-Modified: Mon, 29 Jul 2024 18:26:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7187 Expires: Tue, 30 Jul 2024 03:41:58 GMT Date: Tue, 30 Jul 2024 01:42:11 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 00599d2586dd7bc94597291537a481ae 13c2d4ddb37b39106e478de2de141a7063468dd7 7eb46bd061b6fbb7c5bf83417fd63fa53f987178c15fb5e57ae7ab0240feebc7 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "7EB46BD061B6FBB7C5BF83417FD63FA53F987178C15FB5E57AE7AB0240FEEBC7" Last-Modified: Mon, 29 Jul 2024 18:57:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7343 Expires: Tue, 30 Jul 2024 03:44:34 GMT Date: Tue, 30 Jul 2024 01:42:11 GMT Connection: keep-alive`

	github.com/wakatime/wakatime-cli/releases/download/v1.98.3/wakatime-cli-windows-amd64.zip	140.82.121.4	302 Found	0 B
URL User Request GET HTTP/2 github.com/wakatime/wakatime-cli/releases/download/v1.98.3/wakatime-cli-windows-amd64.zip IP 140.82.121.4:443 ASN #36459 GITHUB Certificate IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /wakatime/wakatime-cli/releases/download/v1.98.3/wakatime-cli-windows-amd64.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: GitHub.com date: Tue, 30 Jul 2024 01:42:11 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/244958571/ac028605-5ff2-4ea6-a019-0326e36c8c9b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240730%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240730T014211Z&X-Amz-Expires=300&X-Amz-Signature=ad9bd813d42939d88f5c0b37a1bb59abc9d6ea1492c04597e0d1b88631533fb6&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=244958571&response-content-disposition=attachment%3B%20filename%3Dwakatime-cli-windows-amd64.zip&response-content-type=application%2Foctet-stream cache-control: no-cache strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: F193:D2D75:1CC602B:1D66943:66A844F3 X-Firefox-Spdy: h2

	objects.githubusercontent.com/github-production-release-asset-2e65be/244958571/ac028605-5ff2-4ea6-a019-0326e36c8c9b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240730%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240730T014211Z&X-Amz-Expires=300&X-Amz-Signature=ad9bd813d42939d88f5c0b37a1bb59abc9d6ea1492c04597e0d1b88631533fb6&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=244958571&response-content-disposition=attachment%3B%20filename%3Dwakatime-cli-windows-amd64.zip&response-content-type=application%2Foctet-stream	185.199.108.133	200 OK	5.6 MB
URL User Request GET HTTP/2 objects.githubusercontent.com/github-production-release-asset-2e65be/244958571/ac028605-5ff2-4ea6-a019-0326e36c8c9b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240730%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240730T014211Z&X-Amz-Expires=300&X-Amz-Signature=ad9bd813d42939d88f5c0b37a1bb59abc9d6ea1492c04597e0d1b88631533fb6&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=244958571&response-content-disposition=attachment%3B%20filename%3Dwakatime-cli-windows-amd64.zip&response-content-type=application%2Foctet-stream IP 185.199.108.133:443 ASN #54113 FASTLY Certificate IssuerDigiCert Inc Subject.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 5.6 MB (5648295 bytes) Hash 6ee7ff7657d2a5025997e64189db03f1 a7394e27fc123e0ed4abe279eb9a7c875c18cd0a 4d812267705aacf11979500a85dcff245faae988f70b26e7ab59e874df5c5be3 HTTP Headers GET /github-production-release-asset-2e65be/244958571/ac028605-5ff2-4ea6-a019-0326e36c8c9b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240730%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240730T014211Z&X-Amz-Expires=300&X-Amz-Signature=ad9bd813d42939d88f5c0b37a1bb59abc9d6ea1492c04597e0d1b88631533fb6&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=244958571&response-content-disposition=attachment%3B%20filename%3Dwakatime-cli-windows-amd64.zip&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: application/octet-stream last-modified: Mon, 29 Jul 2024 11:13:48 GMT etag: "0x8DCAFBF84E482D9" server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: b10ff542-001e-0067-64a8-e1f1a9000000 x-ms-version: 2020-10-02 x-ms-creation-time: Mon, 29 Jul 2024 11:13:48 GMT x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob content-disposition: attachment; filename=wakatime-cli-windows-amd64.zip x-ms-server-encrypted: true via: 1.1 varnish, 1.1 varnish fastly-restarts: 1 accept-ranges: bytes age: 3535 date: Tue, 30 Jul 2024 01:42:12 GMT x-served-by: cache-iad-kiad7000148-IAD, cache-hel1410027-HEL x-cache: HIT, HIT x-cache-hits: 16, 0 x-timer: S1722303732.708134,VS0,VE1 content-length: 5648295 X-Firefox-Spdy: h2

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 4e65f865b00bcb08c52dfe77a48c1c03 26cbc733e53341bd2aab8c860546de10e9839e84 00250d516d26ead1f376d80fef0c83c59df998d20c72ed5b96262e40ae3b96a8 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "00250D516D26EAD1F376D80FEF0C83C59DF998D20C72ED5B96262E40AE3B96A8" Last-Modified: Mon, 29 Jul 2024 18:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8845 Expires: Tue, 30 Jul 2024 04:09:37 GMT Date: Tue, 30 Jul 2024 01:42:12 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 4e65f865b00bcb08c52dfe77a48c1c03 26cbc733e53341bd2aab8c860546de10e9839e84 00250d516d26ead1f376d80fef0c83c59df998d20c72ed5b96262e40ae3b96a8 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "00250D516D26EAD1F376D80FEF0C83C59DF998D20C72ED5B96262E40AE3B96A8" Last-Modified: Mon, 29 Jul 2024 18:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8845 Expires: Tue, 30 Jul 2024 04:09:37 GMT Date: Tue, 30 Jul 2024 01:42:12 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

Detections

JavaScript (0)

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash