Report - dl.maxthon.com/mx6/BrightVPN.7z

Report Overview

Visitedpublic

2025-04-12 23:23:39

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
dl.maxthon.com	547452	2004-05-01	2012-05-22	2025-04-08	499 B	2.8 MB	172.67.25.236

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

dl.maxthon.com/mx6/BrightVPN.7z

IP / ASN

172.67.25.236

#13335 CLOUDFLARENET

File Overview

File Type7-zip archive data, version 0.4

Size2.8 MB (2829670 bytes)

MD55190c946a18b7a9ca10a5a5f1d1b1a47

SHA1f006e3ce4f88b2aab2c18fee21c39c678273fad4

SHA256f2dfc6e2909491465aaf920d674137f3dcde0de9d7f608e80f8ecb0fa1449b9f

Archive (3)

Modified	Filename	Size	MD5	File type
2022-08-11 09:21	BrightVPN-Setup-1.318.500-maxthon	1.7 MB	0301bad12f48e2a02f07e387c1f96d45	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
2022-07-19 07:22	bright_306_871_0.crx	1.7 MB	835b7d7959676e2ef50b75f000c79a8d	Google Chrome extension, version 3
2022-09-20 05:42	manifest.json	308 B	156adaa71d786db6713da6dcdab9b14f	JSON text data

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/64

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET dl.maxthon.com/mx6/BrightVPN.7z

172.67.25.236

200 OK

2.8 MB

URL

dl.maxthon.com/mx6/BrightVPN.7z

IP / ASN

172.67.25.236

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File type7-zip archive data, version 0.4

First Seen2025-03-09

Last Seen2025-07-07

Times Seen24

Size2.8 MB (2829670 bytes)

MD55190c946a18b7a9ca10a5a5f1d1b1a47

SHA1f006e3ce4f88b2aab2c18fee21c39c678273fad4

SHA256f2dfc6e2909491465aaf920d674137f3dcde0de9d7f608e80f8ecb0fa1449b9f

Certificate Info

IssuerGoogle Trust Services

Subjectmaxthon.com

Fingerprint26:76:BD:08:07:C1:E3:D4:41:9A:0A:EC:CB:7D:EA:C0:C9:09:1E:2C

ValidityFri, 28 Mar 2025 14:37:38 GMT - Thu, 26 Jun 2025 15:37:28 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/64

HTTP Headers

GET /mx6/BrightVPN.7z HTTP/1.1
Host: dl.maxthon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 12 Apr 2025 23:23:16 GMT
content-type: application/x-7z-compressed
content-length: 2829670
last-modified: Wed, 21 Sep 2022 07:16:52 GMT
etag: "632aba64-2b2d66"
cache-control: max-age=28800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G1W2c2aNtW121M0QAY93uEP%2FHAzH6W2lC6fFj1a1OA1EVBhbsk2lUfQ5fpvu8qP15Hesqy5VSHgKjEDqq%2FxYyokj17r96ECEjdIDAzIgiy5vavXWyZBihu3toFHTZ0jYvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92f67872fa3156b4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfCacheStatus;desc="REVALIDATED", cfL4;desc="?proto=TCP&rtt=474&min_rtt=393&rtt_var=137&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3198&recv_bytes=1137&delivery_rate=7074918&cwnd=248&unsent_bytes=0&cid=97f6d83ded385faf&ts=178&x=0"
X-Firefox-Spdy: h2