| pkgs.tailscale.com/stable/tailscale-setup-1.80.0-amd64.msi |  199.38.181.239 | 302 Found | 87 B |
URL User Request GET HTTP/2pkgs.tailscale.com/stable/tailscale-setup-1.80.0-amd64.msi IP199.38.181.239:443
CertificateIssuerLet's Encrypt Subjectpkgs.tailscale.com Fingerprint72:AB:8F:C1:30:2C:8F:75:8F:06:76:41:DE:32:F9:4F:D9:57:47:EB ValiditySun, 12 Jan 2025 05:31:27 GMT - Sat, 12 Apr 2025 05:31:26 GMT
File typeHTML document, ASCII text Hash5cecbd15e8860d579cfa6fa6b68a3ca0 13b473a4b34dac2b35df5f7e847e7b2c1d0368d5 0dc16ef6e59a64ad80f34beb04298974e5ffc5a119e0e7abe0e4f693ec0db68e
GET /stable/tailscale-setup-1.80.0-amd64.msi HTTP/1.1
Host: pkgs.tailscale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-security-policy: base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'none';
content-type: text/html; charset=utf-8
location: https://dl.tailscale.com/stable/tailscale-setup-1.80.0-amd64.msi
referer-policy: same-origin
set-cookie: _gorilla_csrf=MTc0MDc3MDE3OHxJa1JhVVdoVFdtRjFObGdyU1RkM2R6aGhXa05CYzAxRE5rNUpSVXBOV0hwaVZUUjBRa1UwUVhWblJXYzlJZ289fFLfjZC5Xsostszum8m8tBv0zfjoJ_emTPKGPRpXqyuj; Expires=Sat, 01 Mar 2025 07:16:18 GMT; Max-Age=43200; HttpOnly; Secure; SameSite=Strict
strict-transport-security: max-age=31536000
vary: Cookie
x-content-type-options: nosniff
content-length: 87
date: Fri, 28 Feb 2025 19:16:18 GMT
X-Firefox-Spdy: h2
|
| dl.tailscale.com/stable/tailscale-setup-1.80.0-amd64.msi | 109.105.218.17 | 200 OK | 786 kB |
URL User Request GET HTTP/2dl.tailscale.com/stable/tailscale-setup-1.80.0-amd64.msi IP109.105.218.17:443
CertificateIssuerLet's Encrypt Subjectdl.tailscale.com FingerprintF3:A6:8A:5F:27:56:BF:EE:74:7A:96:97:90:9F:4F:77:C8:35:B3:7C ValidityTue, 18 Feb 2025 23:25:25 GMT - Mon, 19 May 2025 23:25:24 GMT
File typeComposite Document File V2 Document, Can't read SAT Size786 kB (786432 bytes) Hashf0d395b5eca748197f1c01a531277d5e ccc1dfd9f1bd1462338f9b027c0d55d0b52a78c1 22b95f4bd3c56f219c112ec8683f624444a50010ced1633c109b66e90c8cb248
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
GET /stable/tailscale-setup-1.80.0-amd64.msi HTTP/1.1
Host: dl.tailscale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-length: 32412672
content-security-policy: base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'none';
content-type: application/x-msi
last-modified: Thu, 30 Jan 2025 21:51:43 GMT
referer-policy: same-origin
set-cookie: _gorilla_csrf=MTc0MDc3MDE3OHxJbmRrYjFWd1RsTnVjbUl6WjB0T01XRTNXVFUxVFdKbE1uaG5RV0pSVWxjMlFubDNTSEp6ZEhJcmNUZzlJZ289fCukAG6zgAc-EA6jPs0SoWhSVznl4bpWxS8m6DJzce_e; Expires=Sat, 01 Mar 2025 07:16:18 GMT; Max-Age=43200; HttpOnly; Secure; SameSite=Strict
strict-transport-security: max-age=31536000
vary: Cookie
x-content-type-options: nosniff
date: Fri, 28 Feb 2025 19:16:18 GMT
server: Fly/f1a3a3ab (2025-02-26)
via: 2 fly.io
fly-request-id: 01JN6ZSXCD22DSPAAJEDQ4Z4DP-lhr
X-Firefox-Spdy: h2
|