| GET stereopsis.com/flux/flux-setup.exe?update=2 | 216.176.200.22 | 302 Moved Temporarily | 138 B |
URL User Request GET HTTP/1.1stereopsis.com/flux/flux-setup.exe?update=2 IP 216.176.200.22:80
ASN#4213 EVOCATIVE-GLOBAL
File typeHTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /flux/flux-setup.exe?update=2 HTTP/1.1
Host: stereopsis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 01 Feb 2024 06:26:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=35
Location: https://justgetflux.com/fluxupdate.exe?update=2
Set-Cookie: uid=2LDIFmW7OZA/Xn3NBfDGAg==; expires=Fri, 31-Jan-25 06:26:24 GMT; path=/
|
| GET justgetflux.com/fluxupdate.exe?update=2 | 216.176.200.22 | 200 OK | 219 kB |
URL User Request GET HTTP/1.1justgetflux.com/fluxupdate.exe?update=2 IP 216.176.200.22:443
ASN#4213 EVOCATIVE-GLOBAL
CertificateIssuerSectigo Limited Subjectjustgetflux.com Fingerprint92:19:04:E9:24:34:1E:62:00:78:97:E4:42:AE:68:BE:F7:CC:00:01 ValiditySat, 27 Jan 2024 00:00:00 GMT - Wed, 26 Feb 2025 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections Size219 kB (219344 bytes) Hashed9530feecc4df4b1244a393c8b5ac52 15122fb42d55c6fde2e64ce605f0b975b31431d8 8bc9e06188de276e181bda60d797938f513ef9c19467e9a4b8c7d67cd660cc20
Analyzer | Verdict | Alert | VirusTotal | suspicious | |
GET /fluxupdate.exe?update=2 HTTP/1.1
Host: justgetflux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Feb 2024 06:26:24 GMT
Content-Type: application/octet-stream
Content-Length: 219344
Last-Modified: Thu, 24 Aug 2017 13:08:28 GMT
Connection: keep-alive
Keep-Alive: timeout=35
ETag: "599ecfcc-358d0"
Expires: Thu, 01 Feb 2024 06:27:24 GMT
Cache-Control: max-age=60
Set-Cookie: uid=2LDIFmW7OZA/On3MBfYhAg==; expires=Fri, 31-Jan-25 06:26:24 GMT; path=/
Accept-Ranges: bytes
|