Report - pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar

Report Overview

Visited public
2024-08-23 07:19:03
Tags
Submit Tags
URL
pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Finishing URL
pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
IP / ASN
77.221.134.10
#0
Title
Ошибка 403

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pcprogs.net	84851	2020-09-10	2020-10-07 01:45:30	2024-01-02 18:11:42	443 B	12 kB	172.67.164.115
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-08-22 22:21:34	470 B	20 kB	216.58.207.234
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2024-08-22 18:12:24	3.1 kB	90 kB	142.250.74.67
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-22 18:12:04	981 B	2.7 kB	23.36.76.226
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-08-22 18:12:25	1.6 kB	4.4 kB	23.36.76.226
pcprogsdl.ru	unknown	unknown	No data	No data	1.4 kB	14 kB	77.221.134.10
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-08-22 18:12:38	1.3 kB	2.8 kB	216.58.211.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-08-23	medium	pcprogsdl.ru	Sinkholed
2024-08-23	medium	pcprogsdl.ru	Sinkholed
2024-08-23	medium	pcprogsdl.ru	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (23)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
133a8ab4e8c45f320352685e01db9625
a24555e329796c47c106c0f55d1d8807f652b257
9e748e8be620ce31ed3909b9574b05b4f49bd396482d89699218408c95294d97

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9E748E8BE620CE31ED3909B9574B05B4F49BD396482D89699218408C95294D97"
Last-Modified: Wed, 21 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6356
Expires: Fri, 23 Aug 2024 09:04:34 GMT
Date: Fri, 23 Aug 2024 07:18:38 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
13ea5888d3245867e3b2271529ae3a07
2ac08d083a3db9818f13427caf2afd6ffe844e19
5c2f7da36674ccad93a922282c4cc5dc25ffe3e17206be2fc0e1dfa98181fd46

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5C2F7DA36674CCAD93A922282C4CC5DC25FFE3E17206BE2FC0E1DFA98181FD46"
Last-Modified: Thu, 22 Aug 2024 00:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6462
Expires: Fri, 23 Aug 2024 09:06:20 GMT
Date: Fri, 23 Aug 2024 07:18:38 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
8541cd70139dfda2d95ed0b4e252f586
38437f949815bd7b58655cc9dba515e53a6abee6
21b5b0e771d125bc1d1cd5b12f7bb8567f86c7ab1fe44c531bb98e84a62bfdf0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "21B5B0E771D125BC1D1CD5B12F7BB8567F86C7AB1FE44C531BB98E84A62BFDF0"
Last-Modified: Thu, 22 Aug 2024 09:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6462
Expires: Fri, 23 Aug 2024 09:06:20 GMT
Date: Fri, 23 Aug 2024 07:18:38 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
394bbf58d8b5c9531869cb231fd34bdf
042cea1b7f9e9235f87ce57e8c108c964895aa04
b1e716d7b19643c789215b47c9e58723ecbc7627e5f9db3409d8a6a1dafe45cb

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B1E716D7B19643C789215B47C9E58723ECBC7627E5F9DB3409D8A6A1DAFE45CB"
Last-Modified: Wed, 21 Aug 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9791
Expires: Fri, 23 Aug 2024 10:01:49 GMT
Date: Fri, 23 Aug 2024 07:18:38 GMT
Connection: keep-alive

GET pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar

77.221.134.10

403 Forbidden

4.6 kB

URL User Request GET HTTP/1.1
pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
IP
77.221.134.10:80
ASN
#0

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
4.6 kB (4598 bytes)
Hash
4a10ebd1ce3c2c80cb80333fb54b97fa
3f44e362676dda2437774aa068e68b4dc33e88e8
110592d3cb61ed0df8b89118020b395f588e18aef89aeaef8c1c830265cd7e8a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar HTTP/1.1
Host: pcprogsdl.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Server: nginx
Date: Fri, 23 Aug 2024 07:18:38 GMT
Content-Type: text/html
Content-Length: 4598
Connection: keep-alive
ETag: "65e26e2f-11f6"

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d86255626de4d98bd7a37241e1223167
810e8516f6e4ec1a24416d7ca63809fac6a3950d
601d37b0928c1ebbbfc009560b6a1db95020626b9b68ff565983841231890985

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "601D37B0928C1EBBBFC009560B6A1DB95020626B9B68FF565983841231890985"
Last-Modified: Thu, 22 Aug 2024 16:45:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7285
Expires: Fri, 23 Aug 2024 09:20:04 GMT
Date: Fri, 23 Aug 2024 07:18:39 GMT
Connection: keep-alive

GET pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar

77.221.134.10

403 Forbidden

4.6 kB

URL User Request GET HTTP/1.1
pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
IP
77.221.134.10:80
ASN
#0

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
4.6 kB (4598 bytes)
Hash
4a10ebd1ce3c2c80cb80333fb54b97fa
3f44e362676dda2437774aa068e68b4dc33e88e8
110592d3cb61ed0df8b89118020b395f588e18aef89aeaef8c1c830265cd7e8a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar HTTP/1.1
Host: pcprogsdl.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Server: nginx
Date: Fri, 23 Aug 2024 07:18:39 GMT
Content-Type: text/html
Content-Length: 4598
Connection: keep-alive
ETag: "65e26e2f-11f6"

o.pki.goog/wr2

216.58.211.3

472 B

URL
o.pki.goog/wr2
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ca089ae4cb5c9c06f3de930f9163eb94
92ef4800f0103b7fc1744be58bb8259c76d90f4f
2d09c25b7d254e7e41f86fb76e16b788e9af16dc5b35f86c60ad0a5bfaf8dbd5

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 07:18:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET pcprogsdl.ru/favicon.ico

77.221.134.10

403 Forbidden

4.6 kB

URL GET HTTP/1.1
pcprogsdl.ru/favicon.ico
IP
77.221.134.10:80
ASN
#0

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
4.6 kB (4598 bytes)
Hash
4a10ebd1ce3c2c80cb80333fb54b97fa
3f44e362676dda2437774aa068e68b4dc33e88e8
110592d3cb61ed0df8b89118020b395f588e18aef89aeaef8c1c830265cd7e8a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: pcprogsdl.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Server: nginx
Date: Fri, 23 Aug 2024 07:18:39 GMT
Content-Type: text/html
Content-Length: 4598
Connection: keep-alive
ETag: "65e26e2f-11f6"

GET pcprogs.net/templates/new/img/logo.svg

172.67.164.115

200 OK

11 kB

URL GET HTTP/2
pcprogs.net/templates/new/img/logo.svg
IP
172.67.164.115:443
ASN
#13335 CLOUDFLARENET

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subjectpcprogs.net
Fingerprint93:78:1D:EC:5C:7D:EF:BA:48:AA:35:1C:6E:AE:25:19:C3:35:A2:FD
ValidityThu, 11 Jul 2024 07:15:43 GMT - Wed, 09 Oct 2024 07:15:42 GMT

File type
gzip compressed data, from Unix
Size
11 kB (11248 bytes)
Hash
f4626a146e0d787b94e6c768cd7321dc
c0a9581de6ac5bc2a93428cc5de41214035187e0
862db43419e2ca233a75de213439c006200bf6887c2ff667fde6799ef11d2203

HTTP Headers

GET /templates/new/img/logo.svg HTTP/1.1
Host: pcprogs.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://pcprogsdl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Aug 2024 07:18:39 GMT
content-type: image/svg+xml
last-modified: Thu, 18 Jan 2024 02:00:46 GMT
etag: W/"65a8864e-7111"
strict-transport-security: max-age=0
content-encoding: gzip
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3648
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6axAcpnZQ3d4XP3pPny3Zvevfcz77GZbAxMf4W27fk4cry9Edn2n1lYTa1LbFuWV9rN0T3CSThgBGuLVx5Tezq89RYOgMTgZjGluv0VzTzV2mUbbL94p5R03hmHdrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7954707ac4b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

o.pki.goog/wr2

216.58.211.3

472 B

URL
o.pki.goog/wr2
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cf2494f3acbc540611cc1db5ff399bd8
9c8d0d49436be710e0408f15cc4641c515301bcf
b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 07:18:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

216.58.211.3

472 B

URL
o.pki.goog/wr2
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cf2494f3acbc540611cc1db5ff399bd8
9c8d0d49436be710e0408f15cc4641c515301bcf
b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 07:18:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET fonts.googleapis.com/css2?family=Roboto:ital,wght@0,400;0,500;0,700;1,400&display=swap

216.58.207.234

200 OK

19 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,400;0,500;0,700;1,400&display=swap
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT

File type
gzip compressed data, max compression
Size
19 kB (19387 bytes)
Hash
6c0b98a64396c6dd3432addae377fa6a
131a35d498e1fa228fa61f37b31da66ee0ac52da
28dd60b49d676154af8271ea594d82179d2e919f63cabe42230437f0bf7a3cb2

HTTP Headers

GET /css2?family=Roboto:ital,wght@0,400;0,500;0,700;1,400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://pcprogsdl.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Aug 2024 07:18:39 GMT
date: Fri, 23 Aug 2024 07:18:39 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.67

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Size
18 kB (18536 bytes)
Hash
8eff0b8045fd1959e117f85654ae7770
227fee13ceb7c410b5c0bb8000258b6643cb6255
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

HTTP Headers

GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pcprogsdl.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 17:36:19 GMT
expires: Wed, 20 Aug 2025 17:36:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
age: 222140
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

142.250.74.67

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Size
19 kB (18588 bytes)
Hash
115c2d84727b41da5e9b4394887a8c40
44f495a7f32620e51acca2e78f7e0615cb305781
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

HTTP Headers

GET /s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pcprogsdl.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 06:40:46 GMT
expires: Thu, 21 Aug 2025 06:40:46 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
age: 175073
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2

142.250.74.67

200 OK

9.8 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 9780, version 1.0
Size
9.8 kB (9780 bytes)
Hash
df38e253b41522217f4b0f1fde319032
e1b2cee439f3f364c80340c852f0d7bbb79bbf42
9f226239b7cb86705238ec5a036a05bdb8fa187630f9c686db7c52ad53b64482

HTTP Headers

GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pcprogsdl.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Aug 2024 20:57:31 GMT
expires: Fri, 22 Aug 2025 20:57:31 GMT
cache-control: public, max-age=31536000
age: 37268
last-modified: Thu, 01 Aug 2024 20:41:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2

142.250.74.67

200 OK

9.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 9852, version 1.0
Size
9.9 kB (9852 bytes)
Hash
3bc33669e3bedda403e81398b92d9040
7b7fa6c2199234d8905445eba6a8da92676ba8ce
4d539033909dd344ae868f1c72bd0fc3d5ee082c9a76882448849481fd8ed857

HTTP Headers

GET /s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pcprogsdl.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 03:48:35 GMT
expires: Thu, 21 Aug 2025 03:48:35 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:21 GMT
content-type: font/woff2
age: 185404
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2

142.250.74.67

200 OK

10 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 9964, version 1.0
Size
10 kB (9964 bytes)
Hash
48d67106bd6c2a4bb828b08d7a404256
4a4a4323ff7978e45aecdcbffe8a64191492c1ca
ec999ab71cbb6beb7e10406b0d6910c32b5079b7def5722662d2915cf3a54677

HTTP Headers

GET /s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pcprogsdl.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9964
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 21:42:07 GMT
expires: Wed, 20 Aug 2025 21:42:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:23 GMT
content-type: font/woff2
age: 207392
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

216.58.211.3

472 B

URL
o.pki.goog/wr2
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cf2494f3acbc540611cc1db5ff399bd8
9c8d0d49436be710e0408f15cc4641c515301bcf
b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 07:18:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
cf4beded5cc66b936a54a6514b3d9bc8
a53a94acfc4c8ee1478737c46b73ffc45644b63e
80698e8fd5496078caf28a66f56b4d83c215ab7ce22eba2948be2e7e505957c2

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "80698E8FD5496078CAF28A66F56B4D83C215AB7CE22EBA2948BE2E7E505957C2"
Last-Modified: Thu, 22 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20809
Expires: Fri, 23 Aug 2024 13:05:30 GMT
Date: Fri, 23 Aug 2024 07:18:41 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
cf4beded5cc66b936a54a6514b3d9bc8
a53a94acfc4c8ee1478737c46b73ffc45644b63e
80698e8fd5496078caf28a66f56b4d83c215ab7ce22eba2948be2e7e505957c2

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "80698E8FD5496078CAF28A66F56B4D83C215AB7CE22EBA2948BE2E7E505957C2"
Last-Modified: Thu, 22 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20809
Expires: Fri, 23 Aug 2024 13:05:30 GMT
Date: Fri, 23 Aug 2024 07:18:41 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
cf4beded5cc66b936a54a6514b3d9bc8
a53a94acfc4c8ee1478737c46b73ffc45644b63e
80698e8fd5496078caf28a66f56b4d83c215ab7ce22eba2948be2e7e505957c2

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "80698E8FD5496078CAF28A66F56B4D83C215AB7CE22EBA2948BE2E7E505957C2"
Last-Modified: Thu, 22 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20809
Expires: Fri, 23 Aug 2024 13:05:30 GMT
Date: Fri, 23 Aug 2024 07:18:41 GMT
Connection: keep-alive

GET fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.67

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
http://pcprogsdl.ru/25.07.24/Adobe%20Photoshop%202024%2025.11.0.706%20Repack.rar
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Size
19 kB (18596 bytes)
Hash
c83e4437a53d7f849f9d32df3d6b68f3
fabea5ad92ed3e2431659b02e7624df30d0c6bbc
d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb

HTTP Headers

GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pcprogsdl.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 06:50:54 GMT
expires: Thu, 21 Aug 2025 06:50:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:21 GMT
content-type: font/woff2
age: 174465
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (23)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections