| zerossl.ocsp.sectigo.com/ |  104.18.15.101 | | 727 B |
URL zerossl.ocsp.sectigo.com/ IP104.18.15.101:0
Hash1261b15286b4e5bb12d16049efbad444 832d2c268e22deb868fd092eca56be69bac09113 cb2711e2f6e314b5ae21243a2274a53ee25c5e24556106d1d33b8eb57b5cbac8
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 19 Sep 2023 05:22:12 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Sat, 16 Sep 2023 16:46:57 GMT
Expires: Sat, 23 Sep 2023 16:46:56 GMT
Etag: "832d2c268e22deb868fd092eca56be69bac09113"
Cache-Control: max-age=386083,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 808f63b6e98fb517-OSL
|
| GET www.tutkuyazilim.com/surum_takip/stokgun.zip |  91.151.82.102 | 200 OK | 13 kB |
URL User Request GET HTTP/1.1www.tutkuyazilim.com/surum_takip/stokgun.zip IP91.151.82.102:443
CertificateIssuerZeroSSL Subjecttutkuyazilim.com Fingerprint0C:94:8D:32:E0:47:17:44:C5:3D:89:2A:5F:23:28:80:F1:CA:BD:3E ValidityMon, 17 Jul 2023 00:00:00 GMT - Sun, 15 Oct 2023 23:59:59 GMT
File typeZip archive data, at least v2.0 to extract, compression method=deflate\012- data Hash638fd72405c9da55baa7c2be073dcdbf 9a51f8ebb01a02ab4ae8e1b785a0c5678a6c932c 0fa573cf4ffe7f66f448f18f1988de07abc543c2dce1b9c2578c3ac0c2bdbbbd
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | malicious | |
GET /surum_takip/stokgun.zip HTTP/1.1
Host: www.tutkuyazilim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/x-zip-compressed
Last-Modified: Tue, 10 Oct 2017 10:43:39 GMT
Accept-Ranges: bytes
ETag: "454423a2b441d31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 19 Sep 2023 05:20:55 GMT
Content-Length: 12930
|