| cdn.findthatlead.com/signature/21e26703c0c93a66dbfd49da95a1b954/5b398a76ae2a9accc76b532bc6289b64_Esstudia-foto-100-x-100.png |  172.67.128.80 | 200 OK | 9.5 kB |
URL User Request GET HTTP/2cdn.findthatlead.com/signature/21e26703c0c93a66dbfd49da95a1b954/5b398a76ae2a9accc76b532bc6289b64_Esstudia-foto-100-x-100.png IP172.67.128.80:443
CertificateIssuerGoogle Trust Services Subjectfindthatlead.com FingerprintA6:27:79:72:0B:77:6B:1C:44:9A:AF:2A:80:9F:79:51:F2:6F:21:20 ValidityWed, 18 Dec 2024 10:43:52 GMT - Tue, 18 Mar 2025 11:40:51 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash064a1e41550a5613e6e69bba393fa0c1 13426596c217b1a3c22e91a269d219f3bc7af370 cd5df818f529cff808fd9e2652573df19845a813b57835a19989075f165ea1e3
GET /signature/21e26703c0c93a66dbfd49da95a1b954/5b398a76ae2a9accc76b532bc6289b64_Esstudia-foto-100-x-100.png HTTP/1.1
Host: cdn.findthatlead.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 06 Jan 2025 13:52:08 GMT
content-type: image/png
content-length: 9481
x-guploader-uploadid: AFiumC7uWn9RSCWziUpq6MPCkbLdokXNSBM1JpJMt-yEzNq-N7iNCoGUr4rLibFz8t1xM1NYA8fLL4k
x-goog-generation: 1733924023520222
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9481
x-goog-hash: crc32c=dDQJ9w==, md5=BkoeQVUKVhPm5pu6OT+gwQ==
x-goog-storage-class: MULTI_REGIONAL
expires: Mon, 06 Jan 2025 14:04:14 GMT
cache-control: public, max-age=14400
last-modified: Wed, 11 Dec 2024 13:33:43 GMT
etag: "064a1e41550a5613e6e69bba393fa0c1"
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pc9HfYUtlRyiaTYpGRcq8L8VKgQSMiVq9z6wp9372OvHFVb%2F5pTqDPcV%2BuW9OpffZCBF90kSXHpV%2BE7fUo4VZiMnrsF7HzDiWSeE%2BPtn7el05NDrsW%2BV%2B0zmOAWEbq%2FDhuDcMnJQlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fdc2fd4ce365689-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=544&min_rtt=451&rtt_var=189&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3210&recv_bytes=1192&delivery_rate=6084033&cwnd=237&unsent_bytes=0&cid=e4ba978e0f483f14&ts=66&x=0"
X-Firefox-Spdy: h2
|
| cdn.findthatlead.com/favicon.ico | 172.67.128.80 | 403 Forbidden | 111 B |
URL GET HTTP/3cdn.findthatlead.com/favicon.ico IP172.67.128.80:443
Requested byhttps://cdn.findthatlead.com/signature/21e26703c0c93a66dbfd49da95a1b954/5b398a76ae2a9accc76b532bc6289b64_Esstudia-foto-100-x-100.png CertificateIssuerGoogle Trust Services Subjectfindthatlead.com FingerprintA6:27:79:72:0B:77:6B:1C:44:9A:AF:2A:80:9F:79:51:F2:6F:21:20 ValidityWed, 18 Dec 2024 10:43:52 GMT - Tue, 18 Mar 2025 11:40:51 GMT
File typeXML 1.0 document, ASCII text, with no line terminators Hashe7a9350210b4dba641f6020447c96045 581accef4a8b7fbed97291fe7dd4e113f794ec80 08142330655deb1526dcc56795c92eb5c13012f75b599d5ac68db4027953ed80
| Analyzer | Verdict | Alert |
|---|
| ClamAV | malicious | Win.Malware.Agent3100026061/CRDF-1 |
GET /favicon.ico HTTP/1.1
Host: cdn.findthatlead.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.findthatlead.com/signature/21e26703c0c93a66dbfd49da95a1b954/5b398a76ae2a9accc76b532bc6289b64_Esstudia-foto-100-x-100.png
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 06 Jan 2025 13:52:09 GMT
content-type: application/xml; charset=UTF-8
x-guploader-uploadid: AFiumC6KgR37YHH5OrwusR0jVBgFhkjOqSepoj15y8Ky33ZAIeMxRnd5RU5f6cD5_J2jY1VT
expires: Mon, 06 Jan 2025 13:52:09 GMT
cache-control: private, max-age=0
alt-svc: h3=":443"; ma=86400
cf-cache-status: BYPASS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlqaR3wgwFL4HY3jm2%2FnEdkTMw7tuOGkP%2Fy9E2HIaikQcdfDOJjTehE9RMhlr23Ucbq%2BpdlMEOfKXTRK1QphkR8Bg38USYznzZNH03V18YKYrA%2FYLSJo%2F6UnXFpL%2BEG1F1LTaau4Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fdc2fdb6a1a56c3-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=QUIC&rtt=16726&min_rtt=4687&rtt_var=10357&sent=13&recv=9&lost=0&retrans=0&sent_bytes=4159&recv_bytes=1326&delivery_rate=126724&cwnd=12000&unsent_bytes=0&cid=53641becf9b9887c&ts=1172&x=1", cfExtPri, cfHdrFlush;dur=0
|
104.21.0.216