| apk12-auth.bazhang.com/202309261000/836349e7509bdeb9955360b857ba2240/bigfiles/apk/116/20210820/37bf844e1e97b98a088981491566e896153219.apk |  106.112.195.195 | 200 OK | 20 MB |
URL User Request GET HTTP/2apk12-auth.bazhang.com/202309261000/836349e7509bdeb9955360b857ba2240/bigfiles/apk/116/20210820/37bf844e1e97b98a088981491566e896153219.apk IP106.112.195.195:443
CertificateIssuerDigiCert Inc Subjectapk12-auth.bazhang.com Fingerprint4C:BB:DB:B2:0D:21:4A:61:4B:A5:66:7E:66:6C:B7:F9:EC:24:CE:46 ValidityWed, 11 Jan 2023 00:00:00 GMT - Wed, 10 Jan 2024 23:59:59 GMT
File typeZip archive data, at least v2.0 to extract, compression method=deflate\012- data Size20 MB (20163130 bytes) Hashfb07bbddf70d01fb02e53352271d4692 e9bca722ae3f56225f931a0ed5e2f63c42fd8f9b 0b5eae6806a3152f5cb866f7a5e476d374f39ce6a3832328f31a3b714c84410a
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /202309261000/836349e7509bdeb9955360b857ba2240/bigfiles/apk/116/20210820/37bf844e1e97b98a088981491566e896153219.apk HTTP/1.1
Host: apk12-auth.bazhang.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: application/vnd.android.package-archive
content-length: 20163130
accept-ranges: bytes
age: 9762240
cache-control: max-age=31536000
etag: "fb07bbddf70d01fb02e53352271d4692"
last-modified: Fri, 20 Aug 2021 07:32:55 GMT
x-amz-meta-md5: fb07bbddf70d01fb02e53352271d4692
x-amz-meta-s2-size: 20163130
x-amz-meta-sha1: e9bca722ae3f56225f931a0ed5e2f63c42fd8f9b
x-amz-request-id: 5659eab7-2305-2317-3444-e8611f1b28ab
x-amz-s2-requester: GRPS000000ANONYMOUSE
x-bdcdn-cache-status: TCP_HIT
x-request-id: 8a19e82ef552a77cb90a5c18c4e88b82
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-ser: BC25_dx-lt-yd-neimenggu-huhehaote-21-cache-5, BC25_dx-zhejiang-jiaxing-11-cache-5
x-tt-trace-tag: id=5
date: Mon, 25 Sep 2023 02:01:00 GMT
via: cache03.hbczct03
X-Firefox-Spdy: h2
|
| 3g.7723.cn/apps/download/202309130353/e24f8418e29ec362266881a3a6916532/78886.apk | 61.170.80.238 | 302 Found | 20 MB |
URL User Request GET HTTP/23g.7723.cn/apps/download/202309130353/e24f8418e29ec362266881a3a6916532/78886.apk IP61.170.80.238:443 ASN#4812 China Telecom Group
CertificateIssuerDigiCert, Inc. Subject*.7723.cn Fingerprint66:8A:43:D6:1B:75:DE:65:FE:E3:4A:FF:60:DD:A9:D8:D6:03:C2:9C ValiditySat, 19 Nov 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT
Size20 MB (20163130 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /apps/download/202309130353/e24f8418e29ec362266881a3a6916532/78886.apk HTTP/1.1
Host: 3g.7723.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: Tengine
content-type: text/html; charset=utf-8
location: https://apk12-auth.bazhang.com/202309261000/836349e7509bdeb9955360b857ba2240/bigfiles/apk/116/20210820/37bf844e1e97b98a088981491566e896153219.apk
date: Mon, 25 Sep 2023 02:00:59 GMT
set-cookie: HWWAFSESID=363c673bed8214d21c; path=/
HWWAFSESTIME=1695607259694; path=/
cache-control: no-cache,must-revalidate
ali-swift-global-savetime: 1695607259
via: cache3.l2cn1807[171,171,302-0,M], cache18.l2cn1807[172,0], vcache6.cn6012[183,183,302-0,M], vcache14.cn6012[185,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 25 Sep 2023 02:00:59 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 3daa502216956072596706667e
X-Firefox-Spdy: h2
|