| hetmanrecovery.com/download/hetman_raid_recovery.zip | 172.67.68.3 | 200 OK | 58 MB |
URL User Request GET HTTP/2hetmanrecovery.com/download/hetman_raid_recovery.zip IP 172.67.68.3:443
CertificateIssuerGoogle Trust Services LLC Subjecthetmanrecovery.com Fingerprint7F:08:1B:5B:F3:57:3A:B8:DB:DD:72:47:F6:79:82:1D:77:64:28:AD ValiditySat, 02 Dec 2023 10:43:34 GMT - Fri, 01 Mar 2024 10:43:33 GMT
File typeZip archive data, at least v1.0 to extract, compression method=store Size58 MB (57823435 bytes) Hashb641b8fd989da0704f7c435a369de582 57f841fced254fc88990e7140df7c5de5ffb5c9c ae9bc6617b5f99ffc675f04510f7d1fc795fd58518ec3afb7d6d3499ec226cc7
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /download/hetman_raid_recovery.zip HTTP/1.1
Host: hetmanrecovery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 31 Dec 2023 03:09:37 GMT
content-type: application/zip
content-length: 57823435
last-modified: Tue, 10 Oct 2023 06:35:22 GMT
etag: "6524f0aa-37250cb"
expires: Sun, 29 Dec 2024 05:44:08 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: X-PINGOTHER, Content-Type
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HyLi7lx6Js7TIgK6%2BKPdz5%2BJSCHUMbAySN09kz0DYsGiT%2BpUpJ2ZLIfaT1Nect%2Bpx7Vy2iqQ8mHBLOo9pl0yuHZqIHyBERfKRCnDVHbtFLlPCCZPAK9XMEEkKSty4W55ZYTDrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 83df532208cbb503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|