URL User Request GET HTTP/2IP 18.209.251.152:443
CertificateIssuerAmazon Subjectrb.gy FingerprintDB:A6:0C:96:5D:05:26:D6:95:BF:CD:A8:79:39:3C:DA:CC:7E:93:A5 ValiditySat, 19 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /je8i7n HTTP/1.1
Host: rb.gy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 10:39:44 GMT
content-length: 0
location: https://xxx.livegore.com//rb-include/videos/5573312286.mp4
cache-control: no-cache, no-store
expires: -1
engine: Rebrandly.redirect, version 2.1
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
|
| xxx.livegore.com//rb-include/videos/5573312286.mp4 |  45.14.225.17 | 200 OK | 3.0 MB |
URL User Request GET HTTP/1.1xxx.livegore.com//rb-include/videos/5573312286.mp4 IP45.14.225.17:443
CertificateIssuerSectigo Limited Subjectxxx.livegore.com Fingerprint55:B7:2C:7F:C5:E0:25:DE:07:F2:7C:B2:3A:DB:47:4D:64:B8:4F:0E ValiditySun, 08 Oct 2023 00:00:00 GMT - Mon, 07 Oct 2024 23:59:59 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Size3.0 MB (3004135 bytes) Hash1972e8860b29b31d8821d8bfc12bcf06 f8caa7ebf3af2273622f2267758fcc127bcee963 a225c2f8488a888d526189b2ef032e7576567c8521b7c9ae1ee3b1d4088b7296
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | meth_get_eip |
GET //rb-include/videos/5573312286.mp4 HTTP/1.1
Host: xxx.livegore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 10:39:45 GMT
Server: Apache
Last-Modified: Thu, 18 Apr 2024 09:41:50 GMT
ETag: "2dd6e7-6165bc7d20308"
Accept-Ranges: bytes
Content-Length: 3004135
Content-Type: video/mp4
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
|
| xxx.livegore.com/favicon.ico | 45.14.225.17 | 404 Not Found | 6.3 kB |
URL GET HTTP/1.1xxx.livegore.com/favicon.ico IP45.14.225.17:443
Requested byhttps://xxx.livegore.com//rb-include/videos/5573312286.mp4 CertificateIssuerSectigo Limited Subjectxxx.livegore.com Fingerprint55:B7:2C:7F:C5:E0:25:DE:07:F2:7C:B2:3A:DB:47:4D:64:B8:4F:0E ValiditySun, 08 Oct 2023 00:00:00 GMT - Mon, 07 Oct 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (919), with CRLF, LF line terminators Hash3c81c3e2cbe4f75a8a167571df4bd499 e0802f88b103e2b54b07f0cdfe54aeadfb4d0ffb a9334ad48438b927957ddb5074f30d4227293841cbd4a764e5b65a551a42fe1c
GET /favicon.ico HTTP/1.1
Host: xxx.livegore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxx.livegore.com//rb-include/videos/5573312286.mp4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 10:39:46 GMT
Server: Apache
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Set-Cookie: PHPSESSID=bnuh8i37n4ni50k6p259qc5pm5; path=/
qa_key=7ujfqnq66n8gyclj4dgqrv8yj5l1v5vl; expires=Sat, 20-Apr-2024 10:39:46 GMT; Max-Age=172800; path=/
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
|