URL User Request GET HTTP/2IP 104.21.55.209:443
CertificateIssuerGoogle Trust Services Subjectmagistv.top Fingerprint95:DC:62:AD:03:45:42:04:2D:C3:AD:96:32:80:52:3C:07:0A:F2:19 ValidityThu, 02 Jan 2025 05:06:37 GMT - Wed, 02 Apr 2025 06:04:57 GMT
File typeAndroid package (APK), with gradle app-metadata.properties Zip archive data, at least v0.0 to extract, compression method=deflate Size32 MB (32042333 bytes) Hash91b3ec4c18d3e04eb1e1d964ea7ee913 bbda223f9fa07ff56490e9567176883c2c12ca98 44d697db49f486a5ab4ae8d5ce109c731ed318aa133c0b8f7266e52cdd2f9ea4
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /share HTTP/1.1
Host: links.magistv.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 01 Feb 2025 21:17:43 GMT
content-type: text/html; charset=UTF-8
location: https://app.magistvcl.com/app/magismobile_SHARE.apk
vary: Accept-Encoding, Cookie
set-cookie: kc_us_click_1297=share; expires=Mon, 03-Mar-2025 21:17:42 GMT; Max-Age=2592000; path=/
kc_us_visitor=679e8f76dab8e; expires=Sun, 01-Feb-2026 21:17:42 GMT; Max-Age=31536000; path=/
x-robots-tag: noindex, nofollow
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 10 Oct 1975 08:09:15 GMT
x-redirect-powered-by: url-shortify 1.9.1 https://kaizencoders.com
x-redirect-by: WordPress
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i5BL%2Ff4ZkOYwYbbiRgTtrBqUpl6U1zIg8qx2rcFZfUrMfLbKSuakr41mdd1I8uy%2F6xuSP164LmyCQpKtVCwt%2F7oD8iLqh%2FNejhwmCfRpobv2yBpVL8fIuFZwadNBR4pY9krd0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 90b4f840ad89b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5636&min_rtt=503&rtt_var=10288&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1130&delivery_rate=7898181&cwnd=254&unsent_bytes=0&cid=3a54ad92dad3e504&ts=1175&x=0"
X-Firefox-Spdy: h2
|
| app.magistvcl.com/app/magismobile_SHARE.apk | 104.21.5.210 | 200 OK | 32 MB |
URL User Request GET HTTP/2app.magistvcl.com/app/magismobile_SHARE.apk IP104.21.5.210:443
CertificateIssuerGoogle Trust Services Subjectmagistvcl.com FingerprintEC:52:0D:93:F5:ED:8B:32:C1:96:E0:2D:F0:7E:43:29:C8:35:61:65 ValiditySun, 05 Jan 2025 12:09:27 GMT - Sat, 05 Apr 2025 13:06:48 GMT
Size32 MB (32042333 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/magismobile_SHARE.apk HTTP/1.1
Host: app.magistvcl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 01 Feb 2025 21:17:43 GMT
content-type: application/octet-stream
content-length: 32042333
last-modified: Thu, 12 Sep 2024 08:18:51 GMT
etag: "66e2a3eb-1e8ed5d"
cache-control: max-age=10800
cf-cache-status: HIT
age: 20413
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bOcTjhBpAfOqnFp5JG3B0PmueuMG0IURl2PVUix06wK7UWOmp4zaQzd9pQlnRHdEzcnwYriUBrdLxeTD8HJtUUnlyFvIg%2BkKCMHA4JA%2BbjlAy73bQenqxIWwksKKSqhXRud0yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 90b4f848486e7127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=538&min_rtt=506&rtt_var=134&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3280&recv_bytes=1275&delivery_rate=7688495&cwnd=253&unsent_bytes=0&cid=767d7b00adbdac5d&ts=40&x=0"
X-Firefox-Spdy: h2
|