| fmt1.dl.dbolical.com/dl/2023/06/20/FramerateVigilante_14.08.22.zip?st=YpTgIvCBfTrdLD8olxXREA==&e=1715376708 |  103.24.123.147 | 200 OK | 794 kB |
URL User Request GET HTTP/2fmt1.dl.dbolical.com/dl/2023/06/20/FramerateVigilante_14.08.22.zip?st=YpTgIvCBfTrdLD8olxXREA==&e=1715376708 IP103.24.123.147:443 ASN#55651 DBOLICAL PTY LTD
CertificateIssuerLet's Encrypt Subjectfmt1.dl.dbolical.com FingerprintF1:8B:C5:C6:57:BB:E6:E2:E8:A2:AF:C2:C0:16:E1:44:10:D6:F9:4E ValidityMon, 18 Mar 2024 16:33:32 GMT - Sun, 16 Jun 2024 16:33:31 GMT
File typeZip archive data, at least v1.0 to extract, compression method=store Size794 kB (793605 bytes) Hashb3c2260cb49dfd69782dec51617f0005 6a49b8a620a9de2512ae06c36a4e000e20a554e2 600d55417addc202a77b2cece86e5c1b33a56af1cc114835f483e4ea883536a9
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /dl/2023/06/20/FramerateVigilante_14.08.22.zip?st=YpTgIvCBfTrdLD8olxXREA==&e=1715376708 HTTP/1.1
Host: fmt1.dl.dbolical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 20:31:48 GMT
content-type: application/zip
content-length: 793605
last-modified: Tue, 20 Jun 2023 22:20:08 GMT
etag: "64922618-c1c05"
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
| normandy.cdn.mozilla.net/api/v1/ |  35.201.103.21 | | 598 B |
URL normandy.cdn.mozilla.net/api/v1/ IP35.201.103.21:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hash3076f9a5cb273105528b893ff7111e41 b8990c145fe71b9a2410eea41a60a712b43b82bf 69c578fb0c03a28141a975833f660f4571e7991dc28ae7f9cead37672ee2c9b3
GET /api/v1/ HTTP/1.1
Host: normandy.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 598
allow: GET, HEAD, OPTIONS
content-security-policy: base-uri 'none'; form-action 'self'; block-all-mixed-content; worker-src 'none'; frame-src 'none'; default-src 'self' https://normandy.cdn.mozilla.net/; object-src 'none'; report-uri /__cspreport__
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
via: 1.1 google
date: Thu, 09 May 2024 23:46:24 GMT
cache-control: public, max-age=86400
content-type: application/json
vary: Accept, Origin
age: 74730
alt-svc: clear
X-Firefox-Spdy: h2
|
| classify-client.services.mozilla.com/api/v1/classify_client/ | 34.98.75.36 | | 64 B |
URL classify-client.services.mozilla.com/api/v1/classify_client/ IP34.98.75.36:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hash9753d62c4eaade7d54eb434b51c952cc 3870e09df9ba2522031e040d625f3531a4d28b0c 701a909f75ab50c6e8986aee545e87b74e726a07beed32eb5a9adf57b3c9e7a9
GET /api/v1/classify_client/ HTTP/1.1
Host: classify-client.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 20:31:54 GMT
content-type: application/json
content-length: 64
cache-control: max-age=0, no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 5.8 kB |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typegzip compressed data, max speed, from Unix Hashaa33725c2d0a3d1c2f9c878d64914807 6e83d13ec860384a977738b04ff0891a01ab519a fe412eadb3dc9820ec6cab7cb62349be057c509e34f7e2de6d23b28eacc98bfd
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 20:32:06 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=gy-fzcMTJQoINgrv1TB7sXw4DlKH1cvJmCDFEwZGoWZIw6wXsxhmZ3DKPSbySa-AYZdETKHQ42ROHTfdm4oDgVFLLFKrIK5ngM7zYwvO7JHEq6uwiNtdg80ezS6V3ok1
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
| www.moddb.com/downloads/mirror/252055/130/15785c6463ae21592acb30dad396edef/?referer=https://www.google.com/ | 172.67.70.78 | 302 Found | 794 kB |
URL User Request GET HTTP/2www.moddb.com/downloads/mirror/252055/130/15785c6463ae21592acb30dad396edef/?referer=https://www.google.com/ IP172.67.70.78:443
CertificateIssuerLet's Encrypt Subjectmoddb.com Fingerprint6A:AC:00:D1:B8:D4:A5:84:C6:33:EF:80:47:E2:37:A3:32:B8:30:C8 ValidityFri, 05 Apr 2024 23:49:55 GMT - Thu, 04 Jul 2024 23:49:54 GMT
Size794 kB (793605 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /downloads/mirror/252055/130/15785c6463ae21592acb30dad396edef/?referer=https://www.google.com/ HTTP/1.1
Host: www.moddb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 20:31:48 GMT
content-type: text/html; charset=UTF-8
location: https://fmt1.dl.dbolical.com/dl/2023/06/20/FramerateVigilante_14.08.22.zip?st=YpTgIvCBfTrdLD8olxXREA==&e=1715376708
set-cookie: masterchief=99acf02d167cb9f927aa4b3f87f9f285; expires=Fri, 10-May-2024 20:41:48 GMT; Max-Age=600; path=/; secure; HttpOnly; SameSite=Lax
dukenukem=018a4f4fafe1d327e01e44a8e2dc0eac; expires=Mon, 10-Jun-2024 20:31:48 GMT; Max-Age=2678400; path=/; secure; HttpOnly; SameSite=Lax
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QHLVZbfnL%2FUZPLe8%2FqOiPzTaSnsDNV8SLhJ951GBFBEir%2BvfPTkzY6kiFUvpfgZTvl%2B4X%2F9w91pP3Up6KOOutv3VsZdPMankTdN4vxqL3LeEr3KfwW2kCSWCjFOQDgU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cb1e3d97856c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
104.26.12.171