| ocsp.r2m02.amazontrust.com/ |  143.204.48.16 | | 471 B |
URL ocsp.r2m02.amazontrust.com/ IP143.204.48.16:0
Hash89ca5abe384500e578ce2ffcb15cb578 c6ef738b9e5494e301da5c473e6317d6e580db96 f0e50994a6f7bcca4a24be69540b0071944e48b23d6e65fa05212b256001cab7
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 22 Sep 2023 06:47:10 GMT
Last-Modified: Fri, 22 Sep 2023 06:28:42 GMT
Server: ECAcc (amb/6AB4)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fqugc-pH8G9nsil-AwM-AkGe713k2a500_s-Wf7OS4gLGcj6gIkmSQ==
Age: 1109
|
| GET www.compuclever.com/products/ultra-ebook-reader/download/ultraebookreader.exe | 34.195.30.73 | 302 Found | 0 B |
URL User Request GET HTTP/2www.compuclever.com/products/ultra-ebook-reader/download/ultraebookreader.exe IP34.195.30.73:443
CertificateIssuerAmazon Subjectwww.compuclever.com FingerprintC1:88:44:D0:D6:93:CD:1B:DB:48:9B:DF:FF:91:4B:E9:F4:BA:27:7F ValidityWed, 22 Feb 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /products/ultra-ebook-reader/download/ultraebookreader.exe HTTP/1.1
Host: www.compuclever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 22 Sep 2023 06:47:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://dl2.compuclever.com/ultraebookreader_setup.exe
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips PHP/7.4.33
x-powered-by: PHP/7.4.33
vary: User-Agent
X-Firefox-Spdy: h2
|
| GET dl2.compuclever.com/ultraebookreader_setup.exe | 54.230.111.67 | 200 OK | 6.4 MB |
URL User Request GET HTTP/2dl2.compuclever.com/ultraebookreader_setup.exe IP54.230.111.67:443
CertificateIssuerAmazon Subjectwww.compuclever.com FingerprintC1:88:44:D0:D6:93:CD:1B:DB:48:9B:DF:FF:91:4B:E9:F4:BA:27:7F ValidityWed, 22 Feb 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive\012- data Size6.4 MB (6379600 bytes) Hashdf6ea5e23a9446c57999d7d9b59432b7 7370724959c93f66fb8b7d9867b84d1ecb63c8c9 2515cbe7722e0b6a20569349ae717b40a73573f5ad22257073641e0c05eda6d7
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /ultraebookreader_setup.exe HTTP/1.1
Host: dl2.compuclever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 6379600
date: Fri, 22 Sep 2023 06:47:12 GMT
last-modified: Mon, 28 Oct 2019 18:29:10 GMT
etag: "df6ea5e23a9446c57999d7d9b59432b7"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E9YaFZ5Hpqea0DtF46XLgFR6P-D-NT75zF0LrRiS-evS5aRSNMZVNg==
X-Firefox-Spdy: h2
|