Report - devfly.net/installable.zip

Report Overview

Submitted URL
devfly.net/installable.zip
IP
162.0.235.180
ASN
#22612 NAMECHEAP-NET
Submitted
2023-03-25 23:17:13
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333 B	391 B	34.117.237.239
ocsp.sectigo.com	487	2019-11-29T12:50:24Z	2023-03-29T08:59:28Z	340 B	963 B	104.18.32.68
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606 B	127 B	44.232.81.124
fonts.googleapis.com	8877	2013-06-10T22:14:26Z	2023-03-29T10:13:53Z	452 B	1.9 kB	172.217.21.170
fonts.gstatic.com	unknown	2014-09-09T02:40:21Z	2023-03-29T11:19:48Z	953 B	43 kB	142.250.74.3
devfly.net	unknown	2023-03-21T21:53:54Z	2023-03-21T21:53:54Z	23 kB	758 kB	162.0.235.180
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782 B	2.4 kB	35.241.9.150
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-29T05:09:04Z	1.0 kB	2.1 kB	142.250.74.131
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-29T05:09:12Z	3.2 kB	49 kB	34.120.237.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	2.4 kB	6.2 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-03-25	medium	devfly.net/installable.zip	Malware
2023-03-25	medium	devfly.net/installable.zip	Malware
2023-03-25	medium	devfly.net/assets/front/js/vendor/modernizr-3.6.0.min.js	Malware
2023-03-25	medium	devfly.net/assets/front/css/style-base-color.php?color=FEA950	Malware
2023-03-25	medium	devfly.net/assets/front/js/main.js	Malware
2023-03-25	medium	devfly.net/assets/front/js/plugin.min.js	Malware
2023-03-25	medium	devfly.net/assets/front/js/vendor/jquery-3.4.1.min.js	Malware
2023-03-25	medium	devfly.net/assets/front/fonts/fa-solid-900.woff2	Malware
2023-03-25	medium	devfly.net/assets/front/fonts/fa-light-300.woff2	Malware
2023-03-25	medium	devfly.net/assets/front/fonts/fa-brands-400.woff2	Malware
2023-03-25	medium	devfly.net/assets/front/img/whatsapp.svg	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	devfly.net/installable.zip	1.7 kB	2023-03-29	2023-03-29
Pretty URL devfly.net/installable.zip IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 22:39:26 Last Seen2023-03-29 22:39:26 Times Seen1 Hash ce84e697e4dc7288dc78a9293df5a561 a3b17892842afa327113532f0d50da91278490cb 153a057b48975eed8b940182843259f77caff0676a1017571f52fd21252eac93 Loading...

	unknown	0 B	2023-03-07	2024-04-16
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-16 12:06:51 Times Seen36896262 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	devfly.net/installable.zip	673 B	2023-03-29	2023-03-29
Pretty URL devfly.net/installable.zip IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 22:39:26 Last Seen2023-03-29 22:39:26 Times Seen1 Hash 1c2f2432d94ce3fbcbef3fa870be4884 6557bf2a8eb28bcdc2357224735a11bbfbce6491 57d43ebfc1369720dde445992673a609b5f02b2a16e205df2c8561547988c6d6 Loading...

	devfly.net/assets/front/js/vendor/modernizr-3.6.0.min.js	8.6 kB	2023-03-07	2024-04-10
Pretty URL devfly.net/assets/front/js/vendor/modernizr-3.6.0.min.js IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:37 Last Seen2024-04-10 17:44:19 Times Seen229 Hash 8b9e755b33e4961ac40ab6a7f3ddc3f9 fe34b722985671feb767ba559df2615ac0cad320 fd42b584b46c508b2384e92a513fee1056471c94dc744e9dba669feaf80cb1c5 Loading...

	devfly.net/assets/front/js/main.js	10 kB	2023-03-12	2023-09-05
Pretty URL devfly.net/assets/front/js/main.js IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 09:54:45 Last Seen2023-09-05 02:58:15 Times Seen6 Hash 3a0087ed3492d0a2e1b9c313fd7820bb 0c15757ea75527b15807189e151b41ab81f4e8bc 5ca003a98099d8eb2baf6ac9387d4587a46c9b05f281b58f82c978259d07fbf9 Loading...

	devfly.net/assets/front/js/plugin.min.js	247 kB	2023-03-12	2023-11-30
Pretty URL devfly.net/assets/front/js/plugin.min.js IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 09:54:45 Last Seen2023-11-30 19:25:32 Times Seen7 Hash 49213b90c440a640c0a4393c5888f614 783fa8a7c843101d0beb8f59fd6bd53337f1dc66 70845acaa317fe82c240971bacd0037f568140c1edf7310c7b965d054e8488d3 Loading...

	devfly.net/installable.zip	36 B	2023-03-12	2023-09-05
Pretty URL devfly.net/installable.zip IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 09:54:45 Last Seen2023-09-05 02:58:15 Times Seen4 Hash c1f84636aff1b6da1caab24fd654f328 1af14779791dbbbecff8329001228027fe452aa1 69aab7e8af7fab282c2b808d881c673f243a9bb3292258fde1138d26928660fe Loading...

	devfly.net/installable.zip	6 B	2023-03-07	2024-04-15
Pretty URL devfly.net/installable.zip IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:52 Last Seen2024-04-15 21:00:22 Times Seen3007 Hash e40805fa510c6622658de2086eb361d2 41d8e131233dceea1d0c9aed70774914965304ef da6bcc93436f9fde95a92d5412601949548490ad0290f355eb4a019eeac1e3f7 Loading...

	devfly.net/installable.zip	164 B	2023-03-29	2023-03-29
Pretty URL devfly.net/installable.zip IP 162.0.235.180 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 22:39:26 Last Seen2023-03-29 22:39:26 Times Seen1 Hash aca84aef164064db0438291f29ae3075 8bfa7cd2b726fe2c6254c8fd3440f0b318cc161e 30ac4ad77d985a95477158f8278dd549c6e14ab57b33957a4821986a2c6c37d5 Loading...

HTTP Transactions (46)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12060
Expires: Sun, 26 Mar 2023 02:38:02 GMT
Date: Sat, 25 Mar 2023 23:17:02 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14099
Expires: Sun, 26 Mar 2023 03:12:01 GMT
Date: Sat, 25 Mar 2023 23:17:02 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 22:27:45 GMT
content-type: application/json
age: 2957
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5777
Expires: Sun, 26 Mar 2023 00:53:19 GMT
Date: Sat, 25 Mar 2023 23:17:02 GMT
Connection: keep-alive

devfly.net/installable.zip

162.0.235.180

301 Moved Permanently

707 B

URL HTTP/1.1
devfly.net/installable.zip
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
707 B (707 bytes)
Hash
1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /installable.zip HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sat, 25 Mar 2023 23:17:02 GMT
server: LiteSpeed
location: https://devfly.net/installable.zip
x-turbo-charged-by: LiteSpeed

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 5CI5hCv7iLrjRp1joWTkWd716vn5NKDh/CMtSEIlIMds9IIH99c2haNYE831C6HEO9/sHraNSz4=
x-amz-request-id: 5ST9447P26RBG7R9
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 23:00:58 GMT
age: 964
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:17:02 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
904a5f50bbf45f2c5b606d8bde06c84b
a56f1efcd711ad10dd7be6d91b698a49bbe563f8
8a5f319b173d243d8c414e10e69dc71a21c4b1fe8d021da7e504e157030968c7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:17:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 09:56:21 GMT
Expires: Sat, 01 Apr 2023 09:56:20 GMT
Etag: "a56f1efcd711ad10dd7be6d91b698a49bbe563f8"
Cache-Control: max-age=556157,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adadd731d160b55-OSL

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 22:17:24 GMT
age: 3578
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
717ebcc65cb1390c2509851bac7b5878
1e04e3058329f3809bc01022d441172dcacc1aaa
3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5489
Expires: Sun, 26 Mar 2023 00:48:31 GMT
Date: Sat, 25 Mar 2023 23:17:02 GMT
Connection: keep-alive

devfly.net/installable.zip

162.0.235.180

404 Not Found

3.4 kB

URL HTTP/2
devfly.net/installable.zip
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
3.4 kB (3385 bytes)
Hash
1061a6b76145e908ee3a4926bc20690c
3bcc69d2362fb9fe5e9c8b45b4d8eb778284a7ba
2e32e63de216190d5894a444d20801f0ad2f5b50b268b16da93c3bad801d7f5d

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /installable.zip HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 404 Not Found
x-powered-by: PHP/8.1.16
cache-control: no-cache, private
content-type: text/html; charset=UTF-8
set-cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; expires=Sun, 26-Mar-2023 01:17:02 GMT; Max-Age=7200; path=/; secure
devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D; expires=Sun, 26-Mar-2023 01:17:02 GMT; Max-Age=7200; path=/; httponly; secure
content-length: 3385
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Mar 2023 23:17:02 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

push.services.mozilla.com/

44.232.81.124

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.232.81.124:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: z2DFuqy/CN3S9JNBEX2TcQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eUBXFuJvL/pObuOJaigl3j73xLU=

devfly.net/assets/front/css/default.css

162.0.235.180

200 OK

1.2 kB

URL HTTP/2
devfly.net/assets/front/css/default.css
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text
Size
1.2 kB (1189 bytes)
Hash
7c16a2c308fa31e3b55eb2c661e9c43d
7d6eb2eee2b9d0afdc45f7db45281076497866b3
00a1202e48b62eb370a46df6f796ac3d2a42c8fcf7767f85743fe24232587d0b

HTTP Headers

GET /assets/front/css/default.css HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: text/css
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1189
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/css/cookie-alert.css

162.0.235.180

200 OK

320 B

URL HTTP/2
devfly.net/assets/front/css/cookie-alert.css
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text
Size
320 B (320 bytes)
Hash
46f35e55b5cb182cf2e2075212eacdb6
82570369cd511592502fe1cf4b6ae028ab03a1c4
7205c5b2021119d5592daa4603e416e76c882918f91780f7c383154b01e906c3

HTTP Headers

GET /assets/front/css/cookie-alert.css HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: text/css
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 320
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/css/style.css

162.0.235.180

200 OK

8.8 kB

URL HTTP/2
devfly.net/assets/front/css/style.css
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text
Size
8.8 kB (8752 bytes)
Hash
de670db10435f5b6636b9e9a0f7fcc52
526408708a623a4676f8e0a4588b46c7048484ea
7380f934484fcede3cb98f4a5fac639fa8b0b5936cff57a3cdd404283f2c14d3

HTTP Headers

GET /assets/front/css/style.css HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: text/css
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8752
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
63ca8c4e17e0b692d1829cd62b9af3af
d0bbecbe0b93ea21026898dbd13edee5fc071cb2
1208545ecf01edb7bcef0b3c288d9edd34d2034c7404ba68a64c2ef251cb42f1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:17:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&family=Rubik:wght@400;500;600;700&display=swap

172.217.21.170

200 OK

1.2 kB

URL HTTP/2
fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&family=Rubik:wght@400;500;600;700&display=swap
IP
172.217.21.170:0
ASN
#15169 GOOGLE

File type
data
Size
1.2 kB (1225 bytes)
Hash
776017a6ecafd6aae5c983f693ba2b34
0713ab5d9e7cb32ee02a3eafb3a39f0301df3a11
bdc9c3c15794f5aa8e455ffd4f510d43aa6b1b40c09560860758ffdca32b82fa

HTTP Headers

GET /css2?family=Poppins:wght@400;500;600;700&family=Rubik:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 23:17:03 GMT
date: Sat, 25 Mar 2023 23:17:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

devfly.net/assets/front/js/vendor/modernizr-3.6.0.min.js

162.0.235.180

200 OK

3.4 kB

URL HTTP/2
devfly.net/assets/front/js/vendor/modernizr-3.6.0.min.js
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (8320)
Size
3.4 kB (3395 bytes)
Hash
b303d6c148a012e33f00b35208ee3298
258a5040ba671ee20d24887f259c4f9141abfc40
09fe28053d160c8fb6a25254e27f4b6c94d3a36bd216203c3c1e28a302d68582

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/js/vendor/modernizr-3.6.0.min.js HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: application/javascript
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3395
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/css/style-base-color.php?color=FEA950

162.0.235.180

200 OK

935 B

URL HTTP/2
devfly.net/assets/front/css/style-base-color.php?color=FEA950
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
exported SGML document, ASCII text
Size
935 B (935 bytes)
Hash
67f333c79cfb00a2a5c7890b75d26766
e90434c7f10864513b7a8d6cf0270dd4b4578de9
5d2595cb5e4c46e7fd1ef1bf30b520a5e7c627e9ef18813ecf7063a420eb2d6b

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/css/style-base-color.php?color=FEA950 HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-powered-by: PHP/8.1.16
content-type: text/css;charset=UTF-8
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-length: 935
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/img/641cd386c929b.png

162.0.235.180

200 OK

3.4 kB

URL HTTP/2
devfly.net/assets/front/img/641cd386c929b.png
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
3.4 kB (3385 bytes)
Hash
1061a6b76145e908ee3a4926bc20690c
3bcc69d2362fb9fe5e9c8b45b4d8eb778284a7ba
2e32e63de216190d5894a444d20801f0ad2f5b50b268b16da93c3bad801d7f5d

HTTP Headers

GET /assets/front/img/641cd386c929b.png HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-powered-by: PHP/8.1.16
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6Im1LN0RTdFZIU04yZlUyc1lqOW5UTFE9PSIsInZhbHVlIjoiL3ZUZkpNTk1TbGVBMmY0Zmppc0pubzlLUnlabU9sWW15cGdOS2FxUUhya001cnIyV1ZYV0JDaFg0WU54bVNITmtzaVY0bG0xRVpEMCt6L1ZUNGVJYzNwZlMrNllMbTBnK2Zua0NTUEhlUlIzUFlOVlROWGMwQWRZZ21EQjhtUGoiLCJtYWMiOiI0ZjRiNjYzZDA1YjVkMmI0YTE5MzE3MDI5NjQ0OGRjZDhjM2ZhMGM5ZjZiODlkOGQ1ZGFmNDkxYjhjY2I1NjJjIiwidGFnIjoiIn0%3D; expires=Sun, 26-Mar-2023 01:17:03 GMT; Max-Age=7200; path=/; secure
devfly_session=eyJpdiI6IjJnL1d6MHpvQTVBNzZ5OEZ6TjZOdHc9PSIsInZhbHVlIjoiaGw3c3gxd28reHU4Q3VxYnRxc2FWbFJWcGFKb2xOczJVeUVjZmFQMDVpcEJmb0NoZTQyNXVUQU8vQ2lmVkJ4N01QOW5neE1jRkxid2wrK0NlbitsRzRHYnJzRVIxWS85dkpEVlJ0a3RrMzQ3b3dZWUZxMTN0dE1zN1dJM2U2TXEiLCJtYWMiOiI1ZTQzODAxNjYyODJiYzIxMDBmMjFkY2U1MGJkZjZiYzdlZWI4N2EwZjZhODMyYmI1NzgzMjIyZDMyNjE3YzU3IiwidGFnIjoiIn0%3D; expires=Sun, 26-Mar-2023 01:17:03 GMT; Max-Age=7200; path=/; httponly; secure
content-length: 3385
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/css/plugin.min.css

162.0.235.180

200 OK

48 kB

URL HTTP/2
devfly.net/assets/front/css/plugin.min.css
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (65324)
Size
48 kB (47833 bytes)
Hash
f1c3805a615b9470735010d8d3f3c32c
9a2c80ac7c099ed7b5af219d19f72b598325102c
35312631cf7429244c53f587c557c46395c6d251e70aef353b351ab75b8082f9

HTTP Headers

GET /assets/front/css/plugin.min.css HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: text/css
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 47833
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/img/oops.png

162.0.235.180

200 OK

43 kB

URL HTTP/2
devfly.net/assets/front/img/oops.png
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced\012- data
Size
43 kB (43113 bytes)
Hash
5c1ac0217a093fef0ea1611031dda412
598efd5dc7ce511f54ce8bce1925bb566e4792bb
69e11df3bbcb2397990b892a0ec7d3db99479a015a9a9a1611c202bebe779650

HTTP Headers

GET /assets/front/img/oops.png HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: image/png
last-modified: Wed, 20 Apr 2022 12:44:14 GMT
accept-ranges: bytes
content-length: 43113
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/img/641cd3be93e5e.png

162.0.235.180

200 OK

17 kB

URL HTTP/2
devfly.net/assets/front/img/641cd3be93e5e.png
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 400 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (17401 bytes)
Hash
34b7a98aa79f6b0588632758c7a0c0a5
280699be7ca2064345c2d8925795b5441d0a7f98
01739e992a9f1ea3aaa59f9db84025e10db967bf4ac615efe0d8f0dacebb5598

HTTP Headers

GET /assets/front/img/641cd3be93e5e.png HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: image/png
last-modified: Thu, 23 Mar 2023 22:33:34 GMT
accept-ranges: bytes
content-length: 17401
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/js/main.js

162.0.235.180

200 OK

2.2 kB

URL HTTP/2
devfly.net/assets/front/js/main.js
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text
Size
2.2 kB (2187 bytes)
Hash
4abeb7b947bb27d4f0cb37b50fe11f54
b061d7bab1ac041bff3fc73c739596e291b187bb
9e08b982a9fc439d9f21a57215ce4b60436862a274f9c2ad111aab6f70467f46

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/js/main.js HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: application/javascript
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2187
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/img/404.png

162.0.235.180

200 OK

55 kB

URL HTTP/2
devfly.net/assets/front/img/404.png
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 953 x 720, 8-bit/color RGBA, non-interlaced\012- data
Size
55 kB (54788 bytes)
Hash
13e176f8cc52e05d03ab8c7af5a4c566
ed56ab8f9ce96231027562b8460d49346b86d067
94a5e616de13682f5de838dd336b118fabadb76e9d0dd3f2b17774c59ad65a77

HTTP Headers

GET /assets/front/img/404.png HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: image/png
last-modified: Wed, 20 Apr 2022 12:44:14 GMT
accept-ranges: bytes
content-length: 54788
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/rubik/v26/iJWKBXyIfDnIV7nBrXw.woff2

142.250.74.3

200 OK

34 kB

URL HTTP/2
fonts.gstatic.com/s/rubik/v26/iJWKBXyIfDnIV7nBrXw.woff2
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 33868, version 1.0\012- data
Size
34 kB (33868 bytes)
Hash
a55fefd02b25a2cb141efe2d17776d60
ba132269410be55bbd81032011d5904ceb33bc64
e5b4655e2fac9e5887dfc63e54a5ea312f8779ad2a4316765a690c5177ef1acc

HTTP Headers

GET /s/rubik/v26/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://devfly.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33868
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:46 GMT
expires: Sat, 23 Mar 2024 10:26:46 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Mar 2023 21:37:56 GMT
content-type: font/woff2
age: 132618
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2

142.250.74.3

200 OK

7.8 kB

URL HTTP/2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Size
7.8 kB (7816 bytes)
Hash
25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526

HTTP Headers

GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://devfly.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:51 GMT
expires: Sat, 23 Mar 2024 10:26:51 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
age: 132613
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

devfly.net/assets/front/js/plugin.min.js

162.0.235.180

200 OK

69 kB

URL HTTP/2
devfly.net/assets/front/js/plugin.min.js
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (59729)
Size
69 kB (69390 bytes)
Hash
393e8490bfa9498ecd53b6a190bbaa79
a542fbcb73edad0f6a0194f311e4d1a88aa52378
37d4337758d8b0aa59b6874f13b690f3284657ca7ae413c52dae0ad864c30cfa

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/js/plugin.min.js HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: application/javascript
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 69390
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/js/vendor/jquery-3.4.1.min.js

162.0.235.180

200 OK

33 kB

URL HTTP/2
devfly.net/assets/front/js/vendor/jquery-3.4.1.min.js
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (65451)
Size
33 kB (33235 bytes)
Hash
b5fd5300e57cbf82e5e8a0c339bdc702
6135d39d06698048ea77e8380ca1760ffff0a44f
782334e4bd299f973955b9fa7ba2cad14422c4beab5ace6a2651c7489bfc21d2

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/js/vendor/jquery-3.4.1.min.js HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Ikg0Y3ZRSGM2dXdKYUZ6NFoyMFBaSnc9PSIsInZhbHVlIjoiY3NiWFFVRHRDSCtlVGJheTY3bThKRHI1bmphbElGN1JlK2V0VlFMRmprWVBmemlycTltVDFPMURKcHVXY3o3YVlCN2VXZmo5N2d1NG9Ga0xYZ1ZhZDREakloMlRwY2RpL3k2cE5BN0RFOS9xL0dMTWw3eGdPaE5yUjdpYVkzTEUiLCJtYWMiOiJkN2EyYzBhY2UxNzMxYmViODQwYTBlN2E4MjRiMjhhZDM4ZjMwM2U5N2JiNTI5NDEwZGIzMGVjODEzOGNhMjFmIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjBrRzlQeU80OHBnR09TaTdlZnhLZlE9PSIsInZhbHVlIjoiQ2V6S3cyVVQ0bkJBMFZkbjhweUkwbDNESTZwOW1FN3hTS3pQN1lkN1dic3cvY3k0Yk9vTzhOTUd3c251NDFVZ0xLQVBOTk5uV2sxZkRESzJsY3Q5V1dYWDE3ZnNXUXdSNHlJZkFCczZ0RWE5REgyamRsTDFhUkxSb212M0dhSFkiLCJtYWMiOiJkYTA2MTI2YjZjZTg1NzhmZDc2YWExZDAwOGZkZTY3ZDEyNWUzNmFlMTkxZTVmNGI4YmYyZTBmNGQwYmNiZTE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:03 GMT
content-type: application/javascript
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 33235
date: Sat, 25 Mar 2023 23:17:03 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8024
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 23:17:04 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8024
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 23:17:04 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8024
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 23:17:04 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9290 bytes)
Hash
d54efd2b1b21530d0da6f7a622ea898e
656849322a4885c98f1f06600f3c4680522d78d0
88d941b88e10152a49bd5e07bb6d7f31a1e3b2841562985d1869f5eea6aacf7b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9290
x-amzn-requestid: ea6a8cc6-98ee-4d42-9cb7-73087027dde2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1soGZRIAMF0-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6983-32b521b073af557b282cb6b4;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: e9-yBXmWuJNMgLW5o94HfYQHa-zDPF7IlIv07Wct4ODIgtWaZmAW-w==
via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:08 GMT
etag: "656849322a4885c98f1f06600f3c4680522d78d0"
content-type: image/jpeg
age: 5996
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.4 kB (5424 bytes)
Hash
c8a2437b3c9ab01cd0e2327d4be5c61a
33573e5a6b6c1912702040c6d880c362baf0c3db
2556646c122f89bfce8467d13bf05e68f735373c8c18a33f7258f37f602673cf

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5424
x-amzn-requestid: b03169ca-0cc0-49f5-b785-5e29d70048cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWGCnIAMFf7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-679415d416cf3b666ec128be;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: cMFdcKw6RZYIg35YKKDuetMlSGtT-g4Kc2L-BHA5s0877l_Gg-PqUw==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
etag: "33573e5a6b6c1912702040c6d880c362baf0c3db"
content-type: image/jpeg
age: 5997
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.0 kB (4000 bytes)
Hash
85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 05:56:24 GMT
age: 62440
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7823 bytes)
Hash
9b21b2c60279839939b60afd83d047fa
544c243fe2d69156f50eec156a62de127128a028
091a59214cfc0af90b4cb820bb521577ae63e862ec10160b8f64c9a9e593630d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7823
x-amzn-requestid: c528eae7-69b4-4669-8c15-2b306586b84b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHx5IAMFlEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-340c77491ea4440b340e3822;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 2uV186j4t31jcyYDdXxsw5YgM6P5nCbzmgXWvG-pVSpvsjXz6Fsp0A==
via: 1.1 e39f48cc8f516dc1072afdb086c71f32.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:19 GMT
etag: "544c243fe2d69156f50eec156a62de127128a028"
content-type: image/jpeg
age: 5985
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9124 bytes)
Hash
8dc799aaa2f69ef1109501a605dbdcfd
58cefa986d580ee408fbca288e3e45ba86fb97ac
54fa967d6b96b456416c62140a4eb9b6cda29b80d5083b5d1321b1fb89b3455f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9124
x-amzn-requestid: 30a39bb7-d3cc-473a-a5f9-4921367832c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kUESiIAMFVEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-6c9bb97512fc3c8a3ecedc43;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: _4VxID1v_auG0Vuzp87FJoPbgJovhYYYa1fpzQZze51I6HwFKbja6w==
via: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:20 GMT
age: 5984
etag: "58cefa986d580ee408fbca288e3e45ba86fb97ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.0 kB (6976 bytes)
Hash
e924839a6364def37d8e9d20af3f5999
42e3c97cb72a824d50de5b49e92731a7678c4e73
64725edfecba86737c10dbbc9c70faec28405bb36c565e899889fdaa73979694

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6976
x-amzn-requestid: dd142563-f3de-4390-816b-192fc44c480d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHjMIAMF9xA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-5dee56692bbe2f35034c9178;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9XWn6M9cWWvXWTIjT3RRtZFQMCOTuqyRoNcDflwnaBp50j1QoCXfsA==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
age: 5997
etag: "42e3c97cb72a824d50de5b49e92731a7678c4e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

devfly.net/assets/front/fonts/fa-solid-900.woff2

162.0.235.180

200 OK

118 kB

URL HTTP/2
devfly.net/assets/front/fonts/fa-solid-900.woff2
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 117452, version 329.-17826\012- data
Size
118 kB (117452 bytes)
Hash
525bd4ae5b9eaa1e23b4a5c8b28c0d9f
0985532515d580890822bd544fab4a7aea46cb33
b5869f6bb9116c6dd0b6b691d57a17954f3c522cf9ae4497094e62146d8bac15

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/fonts/fa-solid-900.woff2 HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://devfly.net/assets/front/css/plugin.min.css
Cookie: XSRF-TOKEN=eyJpdiI6Im1LN0RTdFZIU04yZlUyc1lqOW5UTFE9PSIsInZhbHVlIjoiL3ZUZkpNTk1TbGVBMmY0Zmppc0pubzlLUnlabU9sWW15cGdOS2FxUUhya001cnIyV1ZYV0JDaFg0WU54bVNITmtzaVY0bG0xRVpEMCt6L1ZUNGVJYzNwZlMrNllMbTBnK2Zua0NTUEhlUlIzUFlOVlROWGMwQWRZZ21EQjhtUGoiLCJtYWMiOiI0ZjRiNjYzZDA1YjVkMmI0YTE5MzE3MDI5NjQ0OGRjZDhjM2ZhMGM5ZjZiODlkOGQ1ZGFmNDkxYjhjY2I1NjJjIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjJnL1d6MHpvQTVBNzZ5OEZ6TjZOdHc9PSIsInZhbHVlIjoiaGw3c3gxd28reHU4Q3VxYnRxc2FWbFJWcGFKb2xOczJVeUVjZmFQMDVpcEJmb0NoZTQyNXVUQU8vQ2lmVkJ4N01QOW5neE1jRkxid2wrK0NlbitsRzRHYnJzRVIxWS85dkpEVlJ0a3RrMzQ3b3dZWUZxMTN0dE1zN1dJM2U2TXEiLCJtYWMiOiI1ZTQzODAxNjYyODJiYzIxMDBmMjFkY2U1MGJkZjZiYzdlZWI4N2EwZjZhODMyYmI1NzgzMjIyZDMyNjE3YzU3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:04 GMT
content-type: font/woff2
last-modified: Thu, 23 Mar 2023 22:29:58 GMT
accept-ranges: bytes
content-length: 117452
date: Sat, 25 Mar 2023 23:17:04 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/fonts/fa-light-300.woff2

162.0.235.180

200 OK

157 kB

URL HTTP/2
devfly.net/assets/front/fonts/fa-light-300.woff2
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 156896, version 329.-17826\012- data
Size
157 kB (156896 bytes)
Hash
6b1c4bcb2a11d69fc64a61f889dfa1d3
313d7b371459d715ffc4c18d483f8541b9d5747a
b6eaf663bf99a31d581721a42668207bdc3d3db6ff33625790019f3682eea9fa

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/fonts/fa-light-300.woff2 HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://devfly.net/assets/front/css/plugin.min.css
Cookie: XSRF-TOKEN=eyJpdiI6Im1LN0RTdFZIU04yZlUyc1lqOW5UTFE9PSIsInZhbHVlIjoiL3ZUZkpNTk1TbGVBMmY0Zmppc0pubzlLUnlabU9sWW15cGdOS2FxUUhya001cnIyV1ZYV0JDaFg0WU54bVNITmtzaVY0bG0xRVpEMCt6L1ZUNGVJYzNwZlMrNllMbTBnK2Zua0NTUEhlUlIzUFlOVlROWGMwQWRZZ21EQjhtUGoiLCJtYWMiOiI0ZjRiNjYzZDA1YjVkMmI0YTE5MzE3MDI5NjQ0OGRjZDhjM2ZhMGM5ZjZiODlkOGQ1ZGFmNDkxYjhjY2I1NjJjIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjJnL1d6MHpvQTVBNzZ5OEZ6TjZOdHc9PSIsInZhbHVlIjoiaGw3c3gxd28reHU4Q3VxYnRxc2FWbFJWcGFKb2xOczJVeUVjZmFQMDVpcEJmb0NoZTQyNXVUQU8vQ2lmVkJ4N01QOW5neE1jRkxid2wrK0NlbitsRzRHYnJzRVIxWS85dkpEVlJ0a3RrMzQ3b3dZWUZxMTN0dE1zN1dJM2U2TXEiLCJtYWMiOiI1ZTQzODAxNjYyODJiYzIxMDBmMjFkY2U1MGJkZjZiYzdlZWI4N2EwZjZhODMyYmI1NzgzMjIyZDMyNjE3YzU3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:04 GMT
content-type: font/woff2
last-modified: Thu, 23 Mar 2023 22:29:57 GMT
accept-ranges: bytes
content-length: 156896
date: Sat, 25 Mar 2023 23:17:04 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/fonts/fa-brands-400.woff2

162.0.235.180

200 OK

75 kB

URL HTTP/2
devfly.net/assets/front/fonts/fa-brands-400.woff2
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 74700, version 329.-17826\012- data
Size
75 kB (74700 bytes)
Hash
dc83ddbbdd108b159117928063699c4e
36960c9095be11315ea5f9031b3d489629268511
30d34a03dcaa7bb6a46bb49960bd4d7648ca71068b0635da5784e3a1f9070ed6

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/fonts/fa-brands-400.woff2 HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://devfly.net/assets/front/css/plugin.min.css
Cookie: XSRF-TOKEN=eyJpdiI6Im1LN0RTdFZIU04yZlUyc1lqOW5UTFE9PSIsInZhbHVlIjoiL3ZUZkpNTk1TbGVBMmY0Zmppc0pubzlLUnlabU9sWW15cGdOS2FxUUhya001cnIyV1ZYV0JDaFg0WU54bVNITmtzaVY0bG0xRVpEMCt6L1ZUNGVJYzNwZlMrNllMbTBnK2Zua0NTUEhlUlIzUFlOVlROWGMwQWRZZ21EQjhtUGoiLCJtYWMiOiI0ZjRiNjYzZDA1YjVkMmI0YTE5MzE3MDI5NjQ0OGRjZDhjM2ZhMGM5ZjZiODlkOGQ1ZGFmNDkxYjhjY2I1NjJjIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjJnL1d6MHpvQTVBNzZ5OEZ6TjZOdHc9PSIsInZhbHVlIjoiaGw3c3gxd28reHU4Q3VxYnRxc2FWbFJWcGFKb2xOczJVeUVjZmFQMDVpcEJmb0NoZTQyNXVUQU8vQ2lmVkJ4N01QOW5neE1jRkxid2wrK0NlbitsRzRHYnJzRVIxWS85dkpEVlJ0a3RrMzQ3b3dZWUZxMTN0dE1zN1dJM2U2TXEiLCJtYWMiOiI1ZTQzODAxNjYyODJiYzIxMDBmMjFkY2U1MGJkZjZiYzdlZWI4N2EwZjZhODMyYmI1NzgzMjIyZDMyNjE3YzU3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:04 GMT
content-type: font/woff2
last-modified: Thu, 23 Mar 2023 22:29:58 GMT
accept-ranges: bytes
content-length: 74700
date: Sat, 25 Mar 2023 23:17:04 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/img/whatsapp.svg

162.0.235.180

200 OK

1.2 kB

URL HTTP/2
devfly.net/assets/front/img/whatsapp.svg
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (2587), with no line terminators
Size
1.2 kB (1221 bytes)
Hash
6c870e85c31b331ee2f865820b7d9bd1
691aef89235f8b6f6d20fc94ccd4ec148861fad7
a79b18ed3c1c971b4070d2103b57863d89b9be7822593f7287d93de0b24262e5

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/front/img/whatsapp.svg HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Im1LN0RTdFZIU04yZlUyc1lqOW5UTFE9PSIsInZhbHVlIjoiL3ZUZkpNTk1TbGVBMmY0Zmppc0pubzlLUnlabU9sWW15cGdOS2FxUUhya001cnIyV1ZYV0JDaFg0WU54bVNITmtzaVY0bG0xRVpEMCt6L1ZUNGVJYzNwZlMrNllMbTBnK2Zua0NTUEhlUlIzUFlOVlROWGMwQWRZZ21EQjhtUGoiLCJtYWMiOiI0ZjRiNjYzZDA1YjVkMmI0YTE5MzE3MDI5NjQ0OGRjZDhjM2ZhMGM5ZjZiODlkOGQ1ZGFmNDkxYjhjY2I1NjJjIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjJnL1d6MHpvQTVBNzZ5OEZ6TjZOdHc9PSIsInZhbHVlIjoiaGw3c3gxd28reHU4Q3VxYnRxc2FWbFJWcGFKb2xOczJVeUVjZmFQMDVpcEJmb0NoZTQyNXVUQU8vQ2lmVkJ4N01QOW5neE1jRkxid2wrK0NlbitsRzRHYnJzRVIxWS85dkpEVlJ0a3RrMzQ3b3dZWUZxMTN0dE1zN1dJM2U2TXEiLCJtYWMiOiI1ZTQzODAxNjYyODJiYzIxMDBmMjFkY2U1MGJkZjZiYzdlZWI4N2EwZjZhODMyYmI1NzgzMjIyZDMyNjE3YzU3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:04 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Apr 2022 12:44:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1221
date: Sat, 25 Mar 2023 23:17:04 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/img/641d6d9483de3.jpg

162.0.235.180

200 OK

105 kB

URL HTTP/2
devfly.net/assets/front/img/641d6d9483de3.jpg
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x500, components 3\012- data
Size
105 kB (104834 bytes)
Hash
c3c45c0b2b5afa947e152b458626b27c
4a469bd6c73c4841afbe79639b5c67ec981a349c
134288d3b48441da6fc73ad35fb628ead3d72ec74a443d3d9ad48f288554462f

HTTP Headers

GET /assets/front/img/641d6d9483de3.jpg HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Im1LN0RTdFZIU04yZlUyc1lqOW5UTFE9PSIsInZhbHVlIjoiL3ZUZkpNTk1TbGVBMmY0Zmppc0pubzlLUnlabU9sWW15cGdOS2FxUUhya001cnIyV1ZYV0JDaFg0WU54bVNITmtzaVY0bG0xRVpEMCt6L1ZUNGVJYzNwZlMrNllMbTBnK2Zua0NTUEhlUlIzUFlOVlROWGMwQWRZZ21EQjhtUGoiLCJtYWMiOiI0ZjRiNjYzZDA1YjVkMmI0YTE5MzE3MDI5NjQ0OGRjZDhjM2ZhMGM5ZjZiODlkOGQ1ZGFmNDkxYjhjY2I1NjJjIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjJnL1d6MHpvQTVBNzZ5OEZ6TjZOdHc9PSIsInZhbHVlIjoiaGw3c3gxd28reHU4Q3VxYnRxc2FWbFJWcGFKb2xOczJVeUVjZmFQMDVpcEJmb0NoZTQyNXVUQU8vQ2lmVkJ4N01QOW5neE1jRkxid2wrK0NlbitsRzRHYnJzRVIxWS85dkpEVlJ0a3RrMzQ3b3dZWUZxMTN0dE1zN1dJM2U2TXEiLCJtYWMiOiI1ZTQzODAxNjYyODJiYzIxMDBmMjFkY2U1MGJkZjZiYzdlZWI4N2EwZjZhODMyYmI1NzgzMjIyZDMyNjE3YzU3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 23:17:04 GMT
content-type: image/jpeg
last-modified: Fri, 24 Mar 2023 09:29:56 GMT
accept-ranges: bytes
content-length: 104834
date: Sat, 25 Mar 2023 23:17:04 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

devfly.net/assets/front/img/641cd37dabfd3.png

162.0.235.180

200 OK

3.4 kB

URL HTTP/2
devfly.net/assets/front/img/641cd37dabfd3.png
IP
162.0.235.180:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
3.4 kB (3385 bytes)
Hash
1061a6b76145e908ee3a4926bc20690c
3bcc69d2362fb9fe5e9c8b45b4d8eb778284a7ba
2e32e63de216190d5894a444d20801f0ad2f5b50b268b16da93c3bad801d7f5d

HTTP Headers

GET /assets/front/img/641cd37dabfd3.png HTTP/1.1
Host: devfly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devfly.net/installable.zip
Cookie: XSRF-TOKEN=eyJpdiI6Im1LN0RTdFZIU04yZlUyc1lqOW5UTFE9PSIsInZhbHVlIjoiL3ZUZkpNTk1TbGVBMmY0Zmppc0pubzlLUnlabU9sWW15cGdOS2FxUUhya001cnIyV1ZYV0JDaFg0WU54bVNITmtzaVY0bG0xRVpEMCt6L1ZUNGVJYzNwZlMrNllMbTBnK2Zua0NTUEhlUlIzUFlOVlROWGMwQWRZZ21EQjhtUGoiLCJtYWMiOiI0ZjRiNjYzZDA1YjVkMmI0YTE5MzE3MDI5NjQ0OGRjZDhjM2ZhMGM5ZjZiODlkOGQ1ZGFmNDkxYjhjY2I1NjJjIiwidGFnIjoiIn0%3D; devfly_session=eyJpdiI6IjJnL1d6MHpvQTVBNzZ5OEZ6TjZOdHc9PSIsInZhbHVlIjoiaGw3c3gxd28reHU4Q3VxYnRxc2FWbFJWcGFKb2xOczJVeUVjZmFQMDVpcEJmb0NoZTQyNXVUQU8vQ2lmVkJ4N01QOW5neE1jRkxid2wrK0NlbitsRzRHYnJzRVIxWS85dkpEVlJ0a3RrMzQ3b3dZWUZxMTN0dE1zN1dJM2U2TXEiLCJtYWMiOiI1ZTQzODAxNjYyODJiYzIxMDBmMjFkY2U1MGJkZjZiYzdlZWI4N2EwZjZhODMyYmI1NzgzMjIyZDMyNjE3YzU3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-powered-by: PHP/8.1.16
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6ImtXenNnRW5KNm9lZkJrWGJueWpzTXc9PSIsInZhbHVlIjoiTHV3bG4rZnJpMlFoU0J2dnZGaEVMUWZkdjJjZTQzQ0p1WWlxbWJzKzdLZ0xnMUNQNjJpTnE2UmZSTFJPVXg3UnNsbG50d3pvVEQ3REQ5OUFTa2lYS21zWHJ2RkJJUVZkdVh0c25venVodE5aTFNKUXdLVUdwY2pDbnEvNFhNcmMiLCJtYWMiOiIwMGNhNjZhNDFmMThmYzM3ODY5MDA4MzJjZWVmNDFmMWEyNDU5NTUxMzBkMjBkZmJkMjJkMTg1ZWFhMGQwOGFhIiwidGFnIjoiIn0%3D; expires=Sun, 26-Mar-2023 01:17:04 GMT; Max-Age=7200; path=/; secure
devfly_session=eyJpdiI6Ik5zMzJPc0MxOHI5OU1ucUdZUzU0U1E9PSIsInZhbHVlIjoiUVYvc1VhbHVNem5oSVhDKytEU01jcSs0WEw5aDJ3ejJzR0d4SFBxTDZlY2x0dTJyTVNqSzhPU3pQNWRQNXJjMlFpS1l4VG9sdS8xL2ZzVWErS3FpcUhPZHc3NlBaRk1rVWpJUHlieDNVcEl4bGRMMm5CcWxoeDREL25SUDBheEsiLCJtYWMiOiI5ODAxYjg1MDUwZmE3NDcxNjBjZGJhMWRhNDkxMTQ2NjI0MzM2NDRhOTZjYWQxMTkxMWE0YzVhOTNkMjVkMWQ0IiwidGFnIjoiIn0%3D; expires=Sun, 26-Mar-2023 01:17:04 GMT; Max-Age=7200; path=/; httponly; secure
content-length: 3385
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Mar 2023 23:17:04 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL