Report - go.dev/dl/go1.21.5.windows-amd64.msi

Report Overview

Visited public
2023-12-07 00:07:25
Tags
URL
go.dev/dl/go1.21.5.windows-amd64.msi
Finishing URL
about:privatebrowsing
IP / ASN
216.239.38.21
#15169 GOOGLE
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dl.google.com	1741	1997-09-15	2013-04-23 08:16:28	2023-12-06 03:02:10	578 B	61 MB	142.250.74.46
go.dev	61179	2019-02-13	2019-11-18 09:46:35	2023-12-05 07:19:48	502 B	1.4 kB	216.239.38.21

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dl.google.com/go/go1.21.5.windows-amd64.msi
IP
142.250.74.46
ASN
#15169 GOOGLE

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: The Go Programming Language Installer, Author: https://go.dev, Keywords: Installer, Comments: The Go programming language is an open source project to make programmers more productive., Template: x64;1033, Revision Number: {B4B7D771-2B43-4293-8024-40A628C82529}, Create Time/Date: Wed Nov 29 21:39:04 2023, Last Saved Time/Date: Wed Nov 29 21:39:04 2023, Number of Pages: 300, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2\012- OLE 2 Compound Document, v4.62, SecID 0x1, 15 FAT sectors, Mini FAT start sector 0x2, blocksize 4096 : Microsoft Windows Installer Package\012- data
Size
61 MB (61276160 bytes)
Hash
8572b5e609a29456bafd3b0666620212
67d96d54042000f7d9a17ed18ab3b37f892e5235
1fb7e4c1ac1bdd49f17c334e1b84a14ad3c833e0afc0fd83a3172399aa56328b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/40

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

go.dev/dl/go1.21.5.windows-amd64.msi

216.239.38.21

302 Found

74 B

URL User Request GET HTTP/2
go.dev/dl/go1.21.5.windows-amd64.msi
IP
216.239.38.21:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectgo.dev
Fingerprint65:16:B9:61:44:6A:74:18:37:5B:8A:BA:CC:2F:04:D6:43:06:62:D3
ValidityMon, 13 Nov 2023 06:52:48 GMT - Sun, 11 Feb 2024 07:40:39 GMT

File type
HTML document, ASCII text
Size
74 B (74 bytes)
Hash
8f40a0a4393da19f1382e74a1fcf47d8
442124b7637a61127079ab593293f86cf649bcc4
e7b062d19ee79c43f1041868c3da12fa1a769f0dc2414edd762ff668452fa34c

HTTP Headers

GET /dl/go1.21.5.windows-amd64.msi HTTP/1.1
Host: go.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-security-policy: connect-src 'self' www.google-analytics.com stats.g.doubleclick.net ; default-src 'self' ; font-src 'self' fonts.googleapis.com fonts.gstatic.com data: ; frame-ancestors 'self' ; frame-src 'self' www.google.com feedback.googleusercontent.com www.googletagmanager.com scone-pa.clients6.google.com www.youtube.com player.vimeo.com ; img-src 'self' www.google.com www.google-analytics.com ssl.gstatic.com www.gstatic.com gstatic.com data: * ; object-src 'none' ; script-src 'self' 'sha256-n6OdwTrm52KqKm6aHYgD0TFUdMgww4a0GQlIAVrMzck=' 'sha256-4ryYrf7Y5daLOBv0CpYtyBIcJPZkRD2eBPdfqsN3r1M=' 'sha256-sVKX08+SqOmnWhiySYk3xC7RDUgKyAkmbXV2GWts4fo=' www.google.com apis.google.com www.gstatic.com gstatic.com support.google.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com tagmanager.google.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com feedback.googleusercontent.com www.gstatic.com gstatic.com tagmanager.google.com ;
location: https://dl.google.com/go/go1.21.5.windows-amd64.msi
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cloud-trace-context: 9069c7fcd991a1dde9c27d7f65ed5638
date: Thu, 07 Dec 2023 00:07:08 GMT
server: Google Frontend
content-length: 74
X-Firefox-Spdy: h2

dl.google.com/go/go1.21.5.windows-amd64.msi

142.250.74.46

200 OK

61 MB

URL User Request GET HTTP/2
dl.google.com/go/go1.21.5.windows-amd64.msi
IP
142.250.74.46:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: The Go Programming Language Installer, Author: https://go.dev, Keywords: Installer, Comments: The Go programming language is an open source project to make programmers more productive., Template: x64;1033, Revision Number: {B4B7D771-2B43-4293-8024-40A628C82529}, Create Time/Date: Wed Nov 29 21:39:04 2023, Last Saved Time/Date: Wed Nov 29 21:39:04 2023, Number of Pages: 300, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2\012- OLE 2 Compound Document, v4.62, SecID 0x1, 15 FAT sectors, Mini FAT start sector 0x2, blocksize 4096 : Microsoft Windows Installer Package\012- data
Size
61 MB (61276160 bytes)
Hash
8572b5e609a29456bafd3b0666620212
67d96d54042000f7d9a17ed18ab3b37f892e5235
1fb7e4c1ac1bdd49f17c334e1b84a14ad3c833e0afc0fd83a3172399aa56328b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/40

HTTP Headers

GET /go/go1.21.5.windows-amd64.msi HTTP/1.1
Host: dl.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: downloads
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Thu, 07 Dec 2023 00:07:09 GMT
cache-control: public,max-age=86400
last-modified: Tue, 05 Dec 2023 18:13:42 GMT
etag: "2089531"
content-type: application/octet-stream
content-length: 61276160
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers