IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash1c3c41e281d3e8bb44af37305931c141 edce6dc7a98423c1590cb07c2e97c61d0e6f396a 31a5b430ff645a4e9dbc799159c6f2154bab3cfcabed690d1074b3b1726db99f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "31A5B430FF645A4E9DBC799159C6F2154BAB3CFCABED690D1074B3B1726DB99F"
Last-Modified: Tue, 10 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3817
Expires: Thu, 12 Sep 2024 07:40:56 GMT
Date: Thu, 12 Sep 2024 06:37:19 GMT
Connection: keep-alive
|
| dl3.soft98.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 |  193.151.157.28 | 302 Found | 138 B |
URL User Request GET HTTP/2dl3.soft98.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 IP193.151.157.28:443 ASN#60077 Asre Dadeha Asiatech
CertificateIssuerUnizeto Technologies S.A. Subject*.soft98.ir Fingerprint6F:2B:96:27:E1:9F:67:5D:CD:2E:27:FC:25:DD:57:CA:CF:8F:05:0C ValidityWed, 13 Dec 2023 14:19:38 GMT - Thu, 12 Dec 2024 14:19:37 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 HTTP/1.1
Host: dl3.soft98.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 12 Sep 2024 06:37:19 GMT
content-type: text/html
content-length: 138
location: https://dl3soft98.83.ir.cdn.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
|
| dl3soft98.83.ir.cdn.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 | 193.151.157.190 | 302 | 0 B |
URL User Request GET HTTP/1.1dl3soft98.83.ir.cdn.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 IP193.151.157.190:443 ASN#60077 Asre Dadeha Asiatech
CertificateIssuerLet's Encrypt Subject*.83.ir.cdn.ir Fingerprint89:10:49:43:97:72:64:EF:2F:80:CC:FA:46:75:1D:7A:99:E7:48:4F ValidityFri, 26 Jul 2024 18:41:07 GMT - Thu, 24 Oct 2024 18:41:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 HTTP/1.1
Host: dl3soft98.83.ir.cdn.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302
Location: https://edge08.83.ir.cdn.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023
Content-Length: 0
Date: Thu, 12 Sep 2024 06:37:19 GMT
Keep-Alive: timeout=10
Connection: keep-alive
|
| edge08.83.ir.cdn.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 | 193.151.159.51 | 200 OK | 9.4 MB |
URL User Request GET HTTP/1.1edge08.83.ir.cdn.ir/win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 IP193.151.159.51:443 ASN#60077 Asre Dadeha Asiatech
CertificateIssuerLet's Encrypt Subject*.83.ir.cdn.ir Fingerprint89:10:49:43:97:72:64:EF:2F:80:CC:FA:46:75:1D:7A:99:E7:48:4F ValidityFri, 26 Jul 2024 18:41:07 GMT - Thu, 24 Oct 2024 18:41:06 GMT
Size9.4 MB (9418954 bytes) Hash46ec15d52e90051abb7fda8b8f83af26 fea4b8ec353046e4a030ca7fa5566d12b72bd665 5ac1f073ff6dc8fc0a08a4aed3224cc74ad6e015d1ec360d032d2f1023bb703f
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /win/KMSAuto.Lite.1.8.8.Portable.rar?1726123023 HTTP/1.1
Host: edge08.83.ir.cdn.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 12 Sep 2024 06:37:15 GMT
Content-Type: application/x-rar-compressed
Content-Length: 9418954
Last-Modified: Fri, 01 Mar 2024 11:47:21 GMT
Server: AsiatechCloudCDN/3.1
Accept-Ranges: bytes
Via: http/1.1 mid06.cdn.ir (AsiatechCloudEdge/3.1), http/1.1 edge08.cdn.ir (AsiatechCloudEdge/3.1)
Etag: "65e1c049-8fb8ca"
Age: 5
Connection: keep-alive
|