IP 150.139.142.18:0
ASN#136195 Qingdao, Shandong Province, P.R.China.
Hash510f60b0c0a2166f3ecb983bd001b0cf 2597f88e99edd9b00d553843f2e2e406acc58955 4e0e14d7f03782d0f0d933ac2a5b90330012ee8f0df318e1abe236b26c1902e8
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
date: Tue, 07 May 2024 15:54:28 GMT
expires: Sat, 11 May 2024 06:53:38 GMT
request-id: 663a4eb426aa3d56828b441bcd522699
age: 0
last-modified: Sat, 04 May 2024 06:53:39 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: EXPIRED
x-ccacdn-proxy-id: scdpinlb5
accept-ranges: bytes
cf-ray: 87e6e96038ae0516-HKG
cache-control: max-age=3600
ctl-cache-status: HIT from hk-xianggang4-ca01, HIT from fj-quanzhou7-ca32, HIT from he-handan1-ca14
etag: "2597f88e99edd9b00d553843f2e2e406acc58955"
via: n63-135-153.bdcdn-qdct.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 171509726887b2977c43b100bc0618cd1e59486f2f
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=59, edge;dur=0
|
IP150.139.142.18:0 ASN#136195 Qingdao, Shandong Province, P.R.China.
Hash510f60b0c0a2166f3ecb983bd001b0cf 2597f88e99edd9b00d553843f2e2e406acc58955 4e0e14d7f03782d0f0d933ac2a5b90330012ee8f0df318e1abe236b26c1902e8
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
ctl-cache-status: HIT from hk-xianggang4-ca01, HIT from fj-quanzhou7-ca32, HIT from he-baoding2-ca04
request-id: 663a4eb420c4c89f2ae853b0044e4245
age: 2
etag: "2597f88e99edd9b00d553843f2e2e406acc58955"
last-modified: Sat, 04 May 2024 06:53:39 GMT
x-ccacdn-proxy-id: scdpinlb5
x-frame-options: SAMEORIGIN
cf-cache-status: EXPIRED
cache-control: max-age=3600
expires: Sat, 11 May 2024 06:53:38 GMT
cf-ray: 87e6e96038ae0516-HKG
accept-ranges: bytes
date: Tue, 07 May 2024 15:54:29 GMT
via: n63-135-153.bdcdn-qdct.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 171509726812809f08267a41ad49968eea55aa57cd
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=104, edge;dur=0
|
| dl.caihongoffice.com/chbgpackagetest/install/chbg.zip | 14.205.73.66 | 200 OK | 30 MB |
URL User Request GET HTTP/1.1dl.caihongoffice.com/chbgpackagetest/install/chbg.zip IP14.205.73.66:443 ASN#4837 CHINA UNICOM China169 Backbone
CertificateIssuerTrustAsia Technologies, Inc. Subjectdl.caihongoffice.com Fingerprint95:42:46:E3:35:C8:37:F9:38:BE:99:93:E0:38:C5:DD:6D:B2:6F:87 ValidityThu, 27 Jul 2023 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT
File typeZip archive data, at least v2.0 to extract, compression method=deflate Size30 MB (30334530 bytes) Hashe9936d55f82d786fa2cd8bd198960c87 caff3832dad9ce31298d0fc338a81cce7419f0f3 ef999635434cf23567a870397a85beb2654ccc0f665029ed5254b2b1a5e4cda1
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /chbgpackagetest/install/chbg.zip HTTP/1.1
Host: dl.caihongoffice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Mon, 03 Jul 2023 07:41:16 GMT
Etag: "64a27b9c-1cede42"
Server: nginx
Date: Sun, 05 May 2024 01:28:27 GMT
Content-Type: application/zip
Expires: Tue, 04 Jun 2024 01:28:27 GMT
Cache-Control: max-age=2592000
Content-Length: 30334530
Accept-Ranges: bytes
X-NWS-LOG-UUID: 6429755815561104557
Connection: keep-alive
X-Cache-Lookup: Cache Hit
|