| electrumltc.org/electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe | 172.67.166.142 | 301 Moved Permanently | 1.4 kB |
URL User Request GET HTTP/1.1electrumltc.org/electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe IP172.67.166.142:80
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash8150f458ed6fb9b1db4e5cfa57a1a281 6e5726854d28687b560d7fdcb5c782c425c7dfb9 4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe HTTP/1.1
Host: electrumltc.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Tue, 07 May 2024 08:04:15 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odF9pCWT4a0d%2Fhts3lx1pr5%2FWArZ8ME5WrDhnnhLBnPHzTa6N0JPrVCuUgRgsQtOfubrC%2BaWrhUXVS0do36EZgzj1xtXUNe5nZT3G2LnqsT5%2F0dL%2FDtIXl3N2pCc9Stgkro%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ffb2b79a90b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| electrumltc.org/favicon.ico | 172.67.166.142 | 404 Not Found | 1.3 kB |
URL GET HTTP/3electrumltc.org/favicon.ico IP172.67.166.142:443
Requested byhttps://electrumltc.org/electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe CertificateIssuerLet's Encrypt Subjectelectrumltc.org Fingerprint3E:3E:FC:E3:4B:24:4B:9C:CA:D8:D6:00:D9:E0:BC:C5:37:7A:DC:4C ValidityThu, 21 Mar 2024 05:59:17 GMT - Wed, 19 Jun 2024 05:59:16 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: electrumltc.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://electrumltc.org/electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 07 May 2024 08:04:16 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eu7eA0i3hVgmlImVOU0pXjlxzDGoh7B5ImCbwr7m4p%2BhedKkjZlv%2FRUNJdIQvnBhpWXGB9cwdO6iHPrJ2t9U9NeKtgL9c1uwRU4s6QmHX%2Byy50kj%2BrBlTU%2F0GIxgPZ%2Bxl54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ffb2c1394156bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
| electrumltc.org/download.php?Down=electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe | 172.67.166.142 | 302 Found | 1.3 kB |
URL User Request GET HTTP/2electrumltc.org/download.php?Down=electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe IP172.67.166.142:443
CertificateIssuerLet's Encrypt Subjectelectrumltc.org Fingerprint3E:3E:FC:E3:4B:24:4B:9C:CA:D8:D6:00:D9:E0:BC:C5:37:7A:DC:4C ValidityThu, 21 Mar 2024 05:59:17 GMT - Wed, 19 Jun 2024 05:59:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /download.php?Down=electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe HTTP/1.1
Host: electrumltc.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 08:04:14 GMT
content-type: text/html
location: electrum-ltc-3.3.8.1.exeelectrum-ltc-3.3.8.1.exe
x-powered-by: PHP/5.4.45
cache-control: no-cache, no-store, must-revalidate, max-age=0
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U48J657Whh0XiasshWg4qqjxgGTErbH7sqTJt2sb4sUm24PN6tAJZDqLTHbIendxWNxAft7Y8kLCAmFx1iH1RHC5PPZGqH0JylmjJwGy4yBHoBuL5%2FulwQOALmTaYemEK%2FQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ffb2b41ba1b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|