{"report_id":"ca838e92-d69c-4942-a93b-7ce63d448ce6","version":6,"status":"done","tags":[],"date":"2024-11-22T03:29:51Z","url":{"schema":"http","addr":"downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip","fqdn":"downloads.3dex.ru","domain":"3dex.ru","tld":"ru"},"ip":{"addr":"31.31.198.187","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"about","addr":"about:certerror?e=nssBadCert\u0026u=https%3A//downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip\u0026c=UTF-8\u0026d=%20","fqdn":"","domain":"","tld":""},"title":"Warning: Potential Security Risk Ahead"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-01-31T03:29:51Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"downloads.3dex.ru","ip":{"addr":"31.31.198.187","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2006-12-11","domain_rank":0,"first_seen":"2014-12-20T04:31:34Z","last_seen":"2023-12-03T11:54:56Z","alert_count":0,"request_count":2,"received_data":238199,"sent_data":926,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"0aac2734ee63bb15acef7913d887aada","sha1":"a4f78beeb1418875a715e88af5f3d1f86f885fd8","sha256":"eaa1b4223463d4a112afbf58970e570d73b2c2fe85108e4bda5bc34685dee7d6","sha512":"74efd671a40e48d140800249be1e91f974afe2189398e7f3edb01e0ee1f2001f6d01a295c10471e29d2ad08e6a9c8c8a514769212f672866fca3e33bf98934a5","magic":"Zip archive data, at least v1.0 to extract, compression method=store","size":237477,"url":{"schema":"https","addr":"downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip","fqdn":"downloads.3dex.ru","domain":"3dex.ru","tld":"ru"},"ip":{"addr":"31.31.198.187","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"archive":[{"path":"res/css/pano11.css","filename":"pano11.css","modified":"","Modified":"2010-09-11T17:16:52Z","magic":"ASCII text, with CRLF line terminators","size":7608,"md5":"673d696669cf2e02ea1d8a7910f4a8ce","sha1":"302875938789d006fbb814e6b2a964ae20a2afdf","sha256":"2293043e9b556be84d7e47d1ea57f080fde95bccdda5b272807291192227e48a","sha512":"879e6f1ed34920305b915cc8f537a379759b762efd4d62fffe8fa1f483883b84729f68c2c87d3b2d81e26a273e8dc70abd9829dc45b468dcc45ce57724eed986","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/css/pano11print.css","filename":"pano11print.css","modified":"","Modified":"2010-09-08T03:29:10Z","magic":"ASCII text, with CRLF line terminators","size":8334,"md5":"91b32825b3b7bfe79926e53fa3ea2b7b","sha1":"ca7c1d2f121d1137c18ca2f8a2a91b2ba45ecad1","sha256":"97484b3a4e2844af3b7174d35de64c45d8af15bd15bf36878df8c25ceb5ede9b","sha512":"0beeb18d81d6f19acc3a19a4ac588e9ca39033b0ab1a4dfccad11c305b18bf81fae72079427af9208eef98b1f047275f6d740ee9bf3c18af56ada9747a477b79","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/fdp_2_2_5_b.swf","filename":"fdp_2_2_5_b.swf","modified":"","Modified":"2010-12-08T14:15:50Z","magic":"Macromedia Flash data (compressed), version 10","size":51424,"md5":"624cf773fe4aac4ee9a52f25a43708f9","sha1":"a74b0b7108cc55233f82b20aedc13382bd5e3596","sha256":"0fccd8c836ee8b2d7f34703445039db3bd5fb075011fecd9e8fba1aec0b753d3","sha512":"cbbbe86094d3c5c2a0a75844d83661e3e015424b3821b0f8ef8ca694c4d0aa4b6545b7d7fdc92a34413cfdf5ba5e0fccbb7c3550664b2822cd993104750f8e1f","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/fdp_2_2_5_s.swf","filename":"fdp_2_2_5_s.swf","modified":"","Modified":"2010-12-08T14:16:00Z","magic":"Macromedia Flash data (compressed), version 10","size":65891,"md5":"474e973ced4a8132cd558f42d3158c86","sha1":"b5264af404258a2508b75e82248b4266bbf6521c","sha256":"b8a8e366d58037078b54c6b062d507318bfd1f874790997a9ebbd372d8e01609","sha512":"60fc924535ba83827b12a0a49f5675eb4d1f5f3249831ff154501482b8a87a1851769051841fcf6b64984fd792aa582cfac2d0e0055de47569a8bf86123db062","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/images/header01cut.gif","filename":"header01cut.gif","modified":"","Modified":"2009-07-20T03:24:30Z","magic":"GIF image data, version 89a, 160 x 50","size":3028,"md5":"c3b939bb4ad407f6d0a424f3512d168e","sha1":"7c21e9e1ae0b17638bd4abca43795df1471b71d3","sha256":"217f2f76f368079c0727a19e2d5fc574d6e5aee850f96c365cfc0ea47e3cb8b0","sha512":"955c8423739e876caf50a1e5b5da0fc8022d5c8769e912165277dbb960b70d67612cdb9b3617d6fb77444d4f4b39e1450a1d1f2d4df1fb81912a62b6d910d5bc","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/index.html","filename":"index.html","modified":"","Modified":"2010-10-21T07:52:46Z","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators","size":10071,"md5":"7fde022df0852a2faac08979bcf771f0","sha1":"d606709ac49b80581e7723c5f1e0139d4aa182d7","sha256":"311da6350ee8e0c8c801904694e40295b69dae02c0171357387ed2089321ac91","sha512":"4d87c9f5d900cc8eed1aaadec2cecd6081e942578d024e4e70839edded3ff136127f07eb9222647c2fe420c24a84cbd6b0e406eedd1b0c605d30eb8aec8e4c8c","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/js/swfobject.js","filename":"swfobject.js","modified":"","Modified":"2010-06-09T12:00:54Z","magic":"JavaScript source, ASCII text","size":25574,"md5":"34f352f573084aa648f2d2330b32ec4b","sha1":"2f29da0ca9173f6581e6d7d45c4f0d9c227d6ceb","sha256":"de375ce355e9e926b96d7532ba4287aba7a4fd4267b9e17c84ea8f990a1c7ab9","sha512":"9b8b9a034173f55c33e291ac4ab8f84a67b20ad98ee77cbb9d9e77f4c8e0946ce29dc091c0b32bb859617688c58bfcd74a8e5569ddd296707451c89e644d3b6e","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/lang.xml","filename":"lang.xml","modified":"","Modified":"2010-12-09T21:36:42Z","magic":"XML 1.0 document, Unicode text, UTF-8 text, with very long lines (365), with CRLF line terminators","size":12896,"md5":"3ab025216e4cb86598b996cd1a34ac91","sha1":"d730a31b4cf0e1a94bfe08730c54f4ff38911246","sha256":"4204a75b4a1b99144002687c477ad5b112144a2f6c766c6082d99e4067cc4961","sha512":"38ec6496d0b9260091cb3f287e6ae8c0cf8e3c5f21660a770cd4ddb8e54580b2eed5c2699c91720fc7d4b3b408236ba1b61fcd90c6564044b138bbe60ea66638","alerts":{"urlquery":null,"analyzer":null}},{"path":"freedexpano_gui_2_2_2.exe","filename":"freedexpano_gui_2_2_2.exe","modified":"","Modified":"2010-12-09T19:49:22Z","magic":"PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":270848,"md5":"0a219e09bd6a591e687f02db65cf9634","sha1":"c429693da74c813d7facb96e92aac49fad044932","sha256":"4e85ee21e222630ace23ae3a5dcd8f7fdcd361b19e3b81024b5092fc59bef7b7","sha512":"e435466ec35cf14cd47f610d6974867fb29144120cdf73e87bcebbef0adf05d895c2c78d5d4e2efd04ec43cfa7d91bcf79ed093a4747353205128f89a5e33225","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-06-22","alert":"Scan result 1/74","trigger":"4e85ee21e222630ace23ae3a5dcd8f7fdcd361b19e3b81024b5092fc59bef7b7","verdict":"suspicious","severity":"","comment":"suspicious - 1/74","link":"https://www.virustotal.com/gui/file/4e85ee21e222630ace23ae3a5dcd8f7fdcd361b19e3b81024b5092fc59bef7b7","meta":null}]}}],"alerts":{"urlquery":null,"analyzer":null}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"0aac2734ee63bb15acef7913d887aada","sha1":"a4f78beeb1418875a715e88af5f3d1f86f885fd8","sha256":"eaa1b4223463d4a112afbf58970e570d73b2c2fe85108e4bda5bc34685dee7d6","sha512":"74efd671a40e48d140800249be1e91f974afe2189398e7f3edb01e0ee1f2001f6d01a295c10471e29d2ad08e6a9c8c8a514769212f672866fca3e33bf98934a5","magic":"Zip archive data, at least v1.0 to extract, compression method=store","size":237477,"url":{"schema":"https","addr":"downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip","fqdn":"downloads.3dex.ru","domain":"3dex.ru","tld":"ru"},"ip":{"addr":"31.31.198.187","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"archive":[{"path":"res/css/pano11.css","filename":"pano11.css","modified":"","Modified":"2010-09-11T17:16:52Z","magic":"ASCII text, with CRLF line terminators","size":7608,"md5":"673d696669cf2e02ea1d8a7910f4a8ce","sha1":"302875938789d006fbb814e6b2a964ae20a2afdf","sha256":"2293043e9b556be84d7e47d1ea57f080fde95bccdda5b272807291192227e48a","sha512":"879e6f1ed34920305b915cc8f537a379759b762efd4d62fffe8fa1f483883b84729f68c2c87d3b2d81e26a273e8dc70abd9829dc45b468dcc45ce57724eed986","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/css/pano11print.css","filename":"pano11print.css","modified":"","Modified":"2010-09-08T03:29:10Z","magic":"ASCII text, with CRLF line terminators","size":8334,"md5":"91b32825b3b7bfe79926e53fa3ea2b7b","sha1":"ca7c1d2f121d1137c18ca2f8a2a91b2ba45ecad1","sha256":"97484b3a4e2844af3b7174d35de64c45d8af15bd15bf36878df8c25ceb5ede9b","sha512":"0beeb18d81d6f19acc3a19a4ac588e9ca39033b0ab1a4dfccad11c305b18bf81fae72079427af9208eef98b1f047275f6d740ee9bf3c18af56ada9747a477b79","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/fdp_2_2_5_b.swf","filename":"fdp_2_2_5_b.swf","modified":"","Modified":"2010-12-08T14:15:50Z","magic":"Macromedia Flash data (compressed), version 10","size":51424,"md5":"624cf773fe4aac4ee9a52f25a43708f9","sha1":"a74b0b7108cc55233f82b20aedc13382bd5e3596","sha256":"0fccd8c836ee8b2d7f34703445039db3bd5fb075011fecd9e8fba1aec0b753d3","sha512":"cbbbe86094d3c5c2a0a75844d83661e3e015424b3821b0f8ef8ca694c4d0aa4b6545b7d7fdc92a34413cfdf5ba5e0fccbb7c3550664b2822cd993104750f8e1f","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/fdp_2_2_5_s.swf","filename":"fdp_2_2_5_s.swf","modified":"","Modified":"2010-12-08T14:16:00Z","magic":"Macromedia Flash data (compressed), version 10","size":65891,"md5":"474e973ced4a8132cd558f42d3158c86","sha1":"b5264af404258a2508b75e82248b4266bbf6521c","sha256":"b8a8e366d58037078b54c6b062d507318bfd1f874790997a9ebbd372d8e01609","sha512":"60fc924535ba83827b12a0a49f5675eb4d1f5f3249831ff154501482b8a87a1851769051841fcf6b64984fd792aa582cfac2d0e0055de47569a8bf86123db062","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/images/header01cut.gif","filename":"header01cut.gif","modified":"","Modified":"2009-07-20T03:24:30Z","magic":"GIF image data, version 89a, 160 x 50","size":3028,"md5":"c3b939bb4ad407f6d0a424f3512d168e","sha1":"7c21e9e1ae0b17638bd4abca43795df1471b71d3","sha256":"217f2f76f368079c0727a19e2d5fc574d6e5aee850f96c365cfc0ea47e3cb8b0","sha512":"955c8423739e876caf50a1e5b5da0fc8022d5c8769e912165277dbb960b70d67612cdb9b3617d6fb77444d4f4b39e1450a1d1f2d4df1fb81912a62b6d910d5bc","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/index.html","filename":"index.html","modified":"","Modified":"2010-10-21T07:52:46Z","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators","size":10071,"md5":"7fde022df0852a2faac08979bcf771f0","sha1":"d606709ac49b80581e7723c5f1e0139d4aa182d7","sha256":"311da6350ee8e0c8c801904694e40295b69dae02c0171357387ed2089321ac91","sha512":"4d87c9f5d900cc8eed1aaadec2cecd6081e942578d024e4e70839edded3ff136127f07eb9222647c2fe420c24a84cbd6b0e406eedd1b0c605d30eb8aec8e4c8c","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/js/swfobject.js","filename":"swfobject.js","modified":"","Modified":"2010-06-09T12:00:54Z","magic":"JavaScript source, ASCII text","size":25574,"md5":"34f352f573084aa648f2d2330b32ec4b","sha1":"2f29da0ca9173f6581e6d7d45c4f0d9c227d6ceb","sha256":"de375ce355e9e926b96d7532ba4287aba7a4fd4267b9e17c84ea8f990a1c7ab9","sha512":"9b8b9a034173f55c33e291ac4ab8f84a67b20ad98ee77cbb9d9e77f4c8e0946ce29dc091c0b32bb859617688c58bfcd74a8e5569ddd296707451c89e644d3b6e","alerts":{"urlquery":null,"analyzer":null}},{"path":"res/lang.xml","filename":"lang.xml","modified":"","Modified":"2010-12-09T21:36:42Z","magic":"XML 1.0 document, Unicode text, UTF-8 text, with very long lines (365), with CRLF line terminators","size":12896,"md5":"3ab025216e4cb86598b996cd1a34ac91","sha1":"d730a31b4cf0e1a94bfe08730c54f4ff38911246","sha256":"4204a75b4a1b99144002687c477ad5b112144a2f6c766c6082d99e4067cc4961","sha512":"38ec6496d0b9260091cb3f287e6ae8c0cf8e3c5f21660a770cd4ddb8e54580b2eed5c2699c91720fc7d4b3b408236ba1b61fcd90c6564044b138bbe60ea66638","alerts":{"urlquery":null,"analyzer":null}},{"path":"freedexpano_gui_2_2_2.exe","filename":"freedexpano_gui_2_2_2.exe","modified":"","Modified":"2010-12-09T19:49:22Z","magic":"PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":270848,"md5":"0a219e09bd6a591e687f02db65cf9634","sha1":"c429693da74c813d7facb96e92aac49fad044932","sha256":"4e85ee21e222630ace23ae3a5dcd8f7fdcd361b19e3b81024b5092fc59bef7b7","sha512":"e435466ec35cf14cd47f610d6974867fb29144120cdf73e87bcebbef0adf05d895c2c78d5d4e2efd04ec43cfa7d91bcf79ed093a4747353205128f89a5e33225","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-06-22","alert":"Scan result 1/74","trigger":"4e85ee21e222630ace23ae3a5dcd8f7fdcd361b19e3b81024b5092fc59bef7b7","verdict":"suspicious","severity":"","comment":"suspicious - 1/74","link":"https://www.virustotal.com/gui/file/4e85ee21e222630ace23ae3a5dcd8f7fdcd361b19e3b81024b5092fc59bef7b7","meta":null}]}}],"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"Mnemonic Secure DNS","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:certerror?e=nssBadCert\u0026u=https%3A//downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip\u0026c=UTF-8\u0026d=%20","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"f7b0125f7255c47107d7feba12b382046877322a2561668e3c9d0c82cf98ac456d37d9","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T12:55:53.541408Z","times_seen":13578602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip","fqdn":"downloads.3dex.ru","domain":"3dex.ru","tld":"ru"},"ip":{"addr":"31.31.198.187","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-11-22T03:29:27.782Z","timestamp":1732246167782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hosting.reg.ru","organization":""},"issuer":{"commonName":"AlphaSSL CA - SHA256 - G4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Jan 2024 14:29:50 GMT","end":"Sun, 23 Feb 2025 14:29:49 GMT"},"fingerprint":{"sha1":"7C:12:D2:1B:8F:6B:1C:14:B4:76:08:A4:E2:79:0B:5B:76:BC:A2:7D","sha256":"D2:04:4F:5C:B9:1A:C0:C8:E7:D3:31:64:DF:52:F0:ED:15:EF:35:59:7D:7D:14:B9:75:2A:AA:8C:35:89:6C:DC"}}},"request":{"raw":"GET /fdp_gui/freedexpano_gui_2_2_2.zip HTTP/1.1\r\nHost: downloads.3dex.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Fri, 22 Nov 2024 03:29:26 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 267\r\nConnection: keep-alive\r\nLocation: https://downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":267,"size_decoded":267,"mime_type":"application/zip","magic":"HTML document, ASCII text","md5":"0a73d0b2fe7db699d9662a4ab39591d9","sha1":"2263d5e7df12cb1642d4f7edb22252b3091053c1","sha256":"40fb4ae5af40f7fcea5af5f98187ee51c36f0bf2d6109491b229297ef7e35a3d","sha512":"16977f0b48a1e3145abfdd113dd79dcd618dd114920d98b3b95a2f2f2b968a47a1b83dc1584040da9f3ba0f0639d9ca551e061e6c8498226196085c62a90adcb","ssdeep":"","tlshash":"bcd02bfd975270c060673b4469c120e0255e00e5a98d44e919b618d9d41d47658da0da","first_seen":"2024-11-22T03:29:52.782338Z","last_seen":"2024-11-22T03:29:52.782338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":117,"dns":1,"connect":50,"send":0,"wait":99,"receive":154,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"downloads.3dex.ru/fdp_gui/freedexpano_gui_2_2_2.zip","fqdn":"downloads.3dex.ru","domain":"3dex.ru","tld":"ru"},"ip":{"addr":"31.31.198.187","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-11-22T03:29:27.782Z","timestamp":1732246167782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hosting.reg.ru","organization":""},"issuer":{"commonName":"AlphaSSL CA - SHA256 - G4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Jan 2024 14:29:50 GMT","end":"Sun, 23 Feb 2025 14:29:49 GMT"},"fingerprint":{"sha1":"7C:12:D2:1B:8F:6B:1C:14:B4:76:08:A4:E2:79:0B:5B:76:BC:A2:7D","sha256":"D2:04:4F:5C:B9:1A:C0:C8:E7:D3:31:64:DF:52:F0:ED:15:EF:35:59:7D:7D:14:B9:75:2A:AA:8C:35:89:6C:DC"}}},"request":{"raw":"GET /fdp_gui/freedexpano_gui_2_2_2.zip HTTP/1.1\r\nHost: downloads.3dex.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 22 Nov 2024 03:29:27 GMT\r\ncontent-type: application/zip\r\ncontent-length: 237477\r\nlast-modified: Thu, 09 Dec 2010 18:38:29 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":237477,"size_decoded":237477,"mime_type":"application/zip","magic":"Zip archive data, at least v1.0 to extract, compression method=store","md5":"0aac2734ee63bb15acef7913d887aada","sha1":"a4f78beeb1418875a715e88af5f3d1f86f885fd8","sha256":"eaa1b4223463d4a112afbf58970e570d73b2c2fe85108e4bda5bc34685dee7d6","sha512":"74efd671a40e48d140800249be1e91f974afe2189398e7f3edb01e0ee1f2001f6d01a295c10471e29d2ad08e6a9c8c8a514769212f672866fca3e33bf98934a5","ssdeep":"6144:J2W9sVX44+0Tc6G9YKHV6SPYSgFQQctLP:J5sVX4r9X6liXP","tlshash":"44342384ced2d950fc426f3c7e91398e0c1aba062c43a59a29d1862cadef345e7f4d17","first_seen":"2024-11-22T03:29:52.785989Z","last_seen":"2024-11-22T03:29:52.785989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":117,"dns":1,"connect":50,"send":0,"wait":99,"receive":154,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}