IP 66.96.147.102:443
CertificateIssuerLet's Encrypt Subject*.cogito.black FingerprintE9:52:06:F1:AA:E1:C3:59:BF:A3:15:58:AE:80:75:A0:9D:24:E6:B3 ValiditySat, 05 Jul 2025 00:11:54 GMT - Fri, 03 Oct 2025 00:11:53 GMT
File typeGIF image data, version 89a, 1074 x 550 Size28 MB (27658016 bytes) Hash3c8dfbeb40485c07feb1ba9841330fd1 a7069a11e7928ca1e1a39c34baa206a32684b897 4fa1b992bf5c08d3d1520d4b4f9cee993d303757658e7a7c8e23ce243b49e8a5
| Analyzer | Verdict | Alert |
|---|
| Public Nextron YARA rules | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
GET / HTTP/1.1
Host: cogito.black
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 15:33:20 GMT
content-type: image/gif
content-length: 27658016
set-cookie: request_id=4a260d99-3f37-4391-a98c-6dad4a2ce843; Max-Age=3600; Path=/; HttpOnly
last-modified: Sun, 02 Jan 2022 14:42:45 GMT
accept-ranges: bytes
cache-control: max-age=14400
etag: "1a60720-5d49a6ac89bc3"
expires: Sun, 20 Jul 2025 19:33:20 GMT
age: 0
x-request-id: 4a260d99-3f37-4391-a98c-6dad4a2ce843
X-Firefox-Spdy: h2
|
| GET cogito.black/favicon.ico | 66.96.147.102 | 200 OK | 0 B |
IP66.96.147.102:443
CertificateIssuerLet's Encrypt Subject*.cogito.black FingerprintE9:52:06:F1:AA:E1:C3:59:BF:A3:15:58:AE:80:75:A0:9D:24:E6:B3 ValiditySat, 05 Jul 2025 00:11:54 GMT - Fri, 03 Oct 2025 00:11:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: cogito.black
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cogito.black/
Cookie: request_id=4a260d99-3f37-4391-a98c-6dad4a2ce843
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 15:33:29 GMT
content-type: image/x-icon
content-length: 0
cache-control: max-age=86400
age: 2
x-request-id: 4a260d99-3f37-4391-a98c-6dad4a2ce843
X-Firefox-Spdy: h2
|