Report - www.tacofrota.pt/TacofrotaQS.exe?v=20240715155549

Report Overview

Visited public
2024-07-19 03:37:07
Tags
URL
www.tacofrota.pt/TacofrotaQS.exe?v=20240715155549
Finishing URL
about:privatebrowsing
IP / ASN
94.46.130.99
#24768 Almouroltec Servicos De Informatica E Internet Lda
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-18 18:12:17	2.9 kB	8.0 kB	2.23.172.201
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-07-18 18:12:20	327 B	888 B	2.23.172.203
www.tacofrota.pt	unknown	2004-09-03	2019-06-28 04:19:59	2023-10-29 06:09:18	503 B	20 MB	94.46.130.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-07-19 03:36:56	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.tacofrota.pt/TacofrotaQS.exe?v=20240715155549
IP
94.46.130.99
ASN
#24768 Almouroltec Servicos De Informatica E Internet Lda

File type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size
20 MB (20051376 bytes)
Hash
4bfc645cc341e081138e852997fb40d9
fd06b6444205314f07bb2272001f80251eb0ceff
efc393ff91e8bca54fc1418afc221fc8289d94955d32bbc053d5cd9d1f946851

JavaScript (0)

HTTP Transactions (11)

	URL	IP	Response	Size
	r10.o.lencr.org/	2.23.172.201		504 B
URL r10.o.lencr.org/ IP 2.23.172.201:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash df89293c476ae09fa6ea5ee32b70224e e684c88f3ffd36b50489c5391a3637218329e080 1a09f23c5518140b3792a6c0729e19f7cd9c728016840567f7068b7df5bccb81 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "1A09F23C5518140B3792A6C0729E19F7CD9C728016840567F7068B7DF5BCCB81" Last-Modified: Thu, 18 Jul 2024 08:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2448 Expires: Fri, 19 Jul 2024 04:17:27 GMT Date: Fri, 19 Jul 2024 03:36:39 GMT Connection: keep-alive`

	r10.o.lencr.org/	2.23.172.201		504 B
URL r10.o.lencr.org/ IP 2.23.172.201:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 2c174cd9de141b9f3330d869df450834 251c8d7aa8126bfb9fa4c164ebb067b8929486f8 e79c4bb4566914535b10c91563e36d1768f5fc8e1933392cf130e2f4d776e296 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "E79C4BB4566914535B10C91563E36D1768F5FC8E1933392CF130E2F4D776E296" Last-Modified: Thu, 18 Jul 2024 08:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13095 Expires: Fri, 19 Jul 2024 07:14:54 GMT Date: Fri, 19 Jul 2024 03:36:39 GMT Connection: keep-alive`

	r10.o.lencr.org/	2.23.172.201		504 B
URL r10.o.lencr.org/ IP 2.23.172.201:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash ba83fc82f22d464fbc0a613d3224fdef b8d2b3e057c0d01c05e3891f5b5cdaf09e001d3b 17205f996d5ce1462adb970516597f51763582906181b875e45b5b7535f38b8f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "17205F996D5CE1462ADB970516597F51763582906181B875E45B5B7535F38B8F" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5815 Expires: Fri, 19 Jul 2024 05:13:34 GMT Date: Fri, 19 Jul 2024 03:36:39 GMT Connection: keep-alive`

	r10.o.lencr.org/	2.23.172.201		504 B
URL r10.o.lencr.org/ IP 2.23.172.201:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 42e531d59be85c09ecc215208470d19e 75ec72c8c8e1de19407837d46d2ad7119770cdb0 38125115e22a9a58bf2df205bb09ae6c6fef4948b9de15b2f15f37d19aedf6a9 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "38125115E22A9A58BF2DF205BB09AE6C6FEF4948B9DE15B2F15F37D19AEDF6A9" Last-Modified: Thu, 18 Jul 2024 07:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4227 Expires: Fri, 19 Jul 2024 04:47:06 GMT Date: Fri, 19 Jul 2024 03:36:39 GMT Connection: keep-alive`

	r11.o.lencr.org/	2.23.172.203		504 B
URL r11.o.lencr.org/ IP 2.23.172.203:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 71dc82f4c849c017d8fab9c708e1930f b28131d9308d279d8b5becbf0798360a0bbddf3f ab9d96d0e5b1a9eef987ea367902d4c5ac46ef249770cddbd631b8ad08197ebe HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "AB9D96D0E5B1A9EEF987EA367902D4C5AC46EF249770CDDBD631B8AD08197EBE" Last-Modified: Thu, 18 Jul 2024 12:22:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10380 Expires: Fri, 19 Jul 2024 06:29:40 GMT Date: Fri, 19 Jul 2024 03:36:40 GMT Connection: keep-alive`

	www.tacofrota.pt/TacofrotaQS.exe?v=20240715155549	94.46.130.99	200 OK	20 MB
URL User Request GET HTTP/2 www.tacofrota.pt/TacofrotaQS.exe?v=20240715155549 IP 94.46.130.99:443 ASN #24768 Almouroltec Servicos De Informatica E Internet Lda Certificate IssuerLet's Encrypt Subjecttacofrota.pt Fingerprint75:DB:31:59:DA:0F:8C:5F:D1:59:19:9B:8C:FA:15:53:89:44:19:A2 ValiditySun, 30 Jun 2024 08:52:35 GMT - Sat, 28 Sep 2024 08:52:34 GMT File type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size 20 MB (20051376 bytes) Hash 4bfc645cc341e081138e852997fb40d9 fd06b6444205314f07bb2272001f80251eb0ceff efc393ff91e8bca54fc1418afc221fc8289d94955d32bbc053d5cd9d1f946851 HTTP Headers `GET /TacofrotaQS.exe?v=20240715155549 HTTP/1.1 Host: www.tacofrota.pt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: application/octet-stream last-modified: Mon, 19 Jul 2021 08:46:31 GMT accept-ranges: bytes etag: "37cf3f927a7cd71:0" server: Microsoft-IIS/10.0 date: Fri, 19 Jul 2024 03:38:27 GMT content-length: 20051376 X-Firefox-Spdy: h2`

	r10.o.lencr.org/	2.23.172.203		504 B
URL r10.o.lencr.org/ IP 2.23.172.203:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16257 Expires: Fri, 19 Jul 2024 08:07:39 GMT Date: Fri, 19 Jul 2024 03:36:42 GMT Connection: keep-alive`

	r10.o.lencr.org/	2.23.172.203		504 B
URL r10.o.lencr.org/ IP 2.23.172.203:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16257 Expires: Fri, 19 Jul 2024 08:07:39 GMT Date: Fri, 19 Jul 2024 03:36:42 GMT Connection: keep-alive`

	r10.o.lencr.org/	2.23.172.203		504 B
URL r10.o.lencr.org/ IP 2.23.172.203:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16257 Expires: Fri, 19 Jul 2024 08:07:39 GMT Date: Fri, 19 Jul 2024 03:36:42 GMT Connection: keep-alive`

	r10.o.lencr.org/	2.23.172.203		504 B
URL r10.o.lencr.org/ IP 2.23.172.203:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16257 Expires: Fri, 19 Jul 2024 08:07:39 GMT Date: Fri, 19 Jul 2024 03:36:42 GMT Connection: keep-alive`

	r10.o.lencr.org/	2.23.172.203		504 B
URL r10.o.lencr.org/ IP 2.23.172.203:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9041c7b14ed56a170760ee187e59cb3d 4334c89d4af87a7d10b7cfd712cf6494bcbf2f04 da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148" Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16257 Expires: Fri, 19 Jul 2024 08:07:39 GMT Date: Fri, 19 Jul 2024 03:36:42 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (11)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP