| GET picteon.dev/files/WinRAR.zip |  188.114.97.1 | 200 OK | 4.4 MB |
URL User Request GET HTTP/2picteon.dev/files/WinRAR.zip IP188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectpicteon.dev Fingerprint69:8F:D4:1A:A4:95:1C:4B:6D:1D:33:26:E6:AB:7A:DB:58:41:6C:E3 ValidityMon, 23 Sep 2024 20:06:52 GMT - Sun, 22 Dec 2024 20:06:51 GMT
File typeZip archive data, at least v1.0 to extract, compression method=store Size4.4 MB (4379297 bytes) Hash7dd0bffb4e6f3d3678e23ddc19316baf 6b93549e0eecf55895cef87d53aa59c633d07c7b c32d395a93489665e8668da0e5adc5a2dfca5b57a984add498ed54f1f79285e3
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | | | ClamAV | malicious | Win.Virus.Expiro-10023193-0 |
GET /files/WinRAR.zip HTTP/1.1
Host: picteon.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Nov 2024 19:43:10 GMT
content-type: application/zip
content-length: 4379297
etag: "5d935b78-42d2a1"
last-modified: Tue, 01 Oct 2019 13:58:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9LyVccsBF2XxON2jDKyj%2FQncL79o3doa8U8Hpbb1kDAMlYYkdJxZERUqSgUu6sIro3MJFNWJ5W6tLLNj62CVocqDGI5tI62RO1xTUwdxg78geUfMrTaw3Q%2FDWkYkag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8dc69cad08a0e4d9-RIX
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=17978&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3193&recv_bytes=1126&delivery_rate=243347&cwnd=80&unsent_bytes=0&cid=3c968ec62ae4f774&ts=90&x=0"
X-Firefox-Spdy: h2
|
104.21.18.108