URL User Request GET HTTP/2IP 185.199.108.153:443
CertificateIssuerLet's Encrypt Subjectwww.gsocket.io FingerprintD9:5C:E4:8C:C6:1B:4D:FB:1F:05:D3:F5:ED:D3:E1:3B:12:FC:E1:A7 ValidityMon, 11 Mar 2024 23:05:58 GMT - Sun, 09 Jun 2024 23:05:57 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /install.sh HTTP/1.1
Host: gsocket.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
location: https://www.gsocket.io/install.sh
x-github-request-id: 3008:0E6C:373CA8:382DA0:6628F16B
accept-ranges: bytes
age: 0
date: Wed, 24 Apr 2024 11:47:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410031-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713959275.050896,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: d8b5ee1c6cfc4f31ca77c66e8c86918b18a96424
content-length: 162
X-Firefox-Spdy: h2
|
| www.gsocket.io/install.sh | 185.199.108.153 | 200 OK | 268 B |
URL User Request GET HTTP/2www.gsocket.io/install.sh IP185.199.108.153:443
CertificateIssuerLet's Encrypt Subjectwww.gsocket.io FingerprintD9:5C:E4:8C:C6:1B:4D:FB:1F:05:D3:F5:ED:D3:E1:3B:12:FC:E1:A7 ValidityMon, 11 Mar 2024 23:05:58 GMT - Sun, 09 Jun 2024 23:05:57 GMT
File typeBourne-Again shell script, ASCII text executable Hashf139fd89eba47de63e682eef5967b4c0 84aba35cfb0e1215b360a701abed5715183748f1 435b086cae8a9ddc703b4f62274394e43612c683c00aa49ccac2d0e11c539cc2
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /install.sh HTTP/1.1
Host: www.gsocket.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: GitHub.com
content-type: application/x-sh
last-modified: Mon, 22 Apr 2024 15:27:47 GMT
access-control-allow-origin: *
etag: W/"662681f3-179"
expires: Wed, 24 Apr 2024 11:57:55 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: BDEA:53762:16DD4A1:174E4B9:6628F16B
accept-ranges: bytes
age: 0
date: Wed, 24 Apr 2024 11:47:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410031-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713959275.235359,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: 3f729ec22a8b84cbef934dcb85739533db36d714
content-length: 268
X-Firefox-Spdy: h2
|