GET home.mnet-online.de/horst.muc/win/envarlist.zip
301 Moved Permanently 249 B URL User Request GET HTTP/1.1 home.mnet-online.de/horst.muc/win/envarlist.zip
IP
ASN #8767 M-net Telekommunikations GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bd8358f3dba0048b4989e03eaedc80d8
bdb4a8c509151e5caf4dec336864d793f9aa2827
f4a6c45a95591dc3662fbba7a61ede8b4f8d6a3e416776bb412c17f61067730c
GET /horst.muc/win/envarlist.zip HTTP/1.1
Host: home.mnet-online.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sat, 30 Sep 2023 11:03:49 GMT
Server: Apache
Location: https://www.horstmuc.de/win/envarlist.zip
Content-Length: 249
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET www.horstmuc.de/win/envarlist.zip
200 OK 27 kB URL User Request GET HTTP/2 www.horstmuc.de/win/envarlist.zip
IP
Certificate IssuerLet's Encrypt
Subjectwww.horstmuc.sp-kunde.de
FingerprintE1:21:F4:5E:16:61:95:FD:04:18:D3:05:10:37:4F:A0:1C:E6:E5:60
ValiditySat, 05 Aug 2023 06:07:59 GMT - Fri, 03 Nov 2023 06:07:58 GMT
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Hash d46ed060e5b3d2afb30b5841bdf12dbf
2a99e0fe0227a0525bd49f6431313de8b5320b5b
b53678227aee663b8de0697d5f52d7995743fc8c80599fea94da7253e20df066
Analyzer Verdict Alert VirusTotal suspicious
GET /win/envarlist.zip HTTP/1.1
Host: www.horstmuc.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/zip
last-modified: Thu, 16 Jul 2020 08:30:26 GMT
accept-ranges: bytes
content-length: 27153
date: Sat, 30 Sep 2023 11:03:49 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
212.18.0.4