Report - api.localxpose.io/api/v2/downloads/loclx-linux-386.zip

Report Overview

Visitedpublic

2025-05-10 15:11:15

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
api.localxpose.io	unknown	2018-03-22	2022-07-12	2025-05-09	522 B	8.5 MB	104.26.11.5
loclx-client.s3.amazonaws.com	unknown	2005-08-18	2023-11-07	2025-05-09	517 B	8.5 MB	16.15.217.186

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

loclx-client.s3.amazonaws.com/loclx-linux-386.zip

IP / ASN

16.15.217.186

#14618 AMAZON-AES

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size8.5 MB (8548773 bytes)

MD542e7c2e47ba5330f93134f971bc15430

SHA18d93770f38e30b91536d21e67cc769395138b648

SHA256e0c5d9317368a26aef93caad97846d9060d82e82f6e82d0f3a13ecb6d6835497

Archive (1)

Modified	Filename	Size	MD5	File type
2024-10-07 11:24	loclx	23 MB	dd12066f61ae5a564cf66be99e2f1233	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV)

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/66

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET api.localxpose.io/api/v2/downloads/loclx-linux-386.zip

104.26.11.5

302 Found

8.5 MB

URL

api.localxpose.io/api/v2/downloads/loclx-linux-386.zip

IP / ASN

104.26.11.5

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607188

Size8.5 MB (8548773 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectlocalxpose.io

Fingerprint77:2F:9A:D9:F7:0D:B2:B2:59:08:85:E7:83:F6:5C:81:81:07:18:24

ValidityThu, 10 Apr 2025 16:06:16 GMT - Wed, 09 Jul 2025 16:06:15 GMT

HTTP Headers

GET /api/v2/downloads/loclx-linux-386.zip HTTP/1.1
Host: api.localxpose.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 10 May 2025 15:10:38 GMT
content-length: 0
location: https://loclx-client.s3.amazonaws.com/loclx-linux-386.zip
content-security-policy: default-src 'self' 'unsafe-inline'
vary: Origin, Accept-Encoding
x-frame-options: Deny
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6azmyW2DKvWPHI1qHFX3P32X9w9%2BZkN66C6rDJEQZOYvQZgbKJHrHE%2FJm%2Ba%2FehrSXRna5sMQxJSEsB%2Fv0BMTTnbKSg1VpknvEZu2WCFzPt%2F3%2BuijCWzT%2FqTcaB%2BZFAx4VeVQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
x-content-type-options: nosniff
server: cloudflare
cf-ray: 93da5d4fff4b712e-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=538&min_rtt=475&rtt_var=163&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1152&delivery_rate=5208633&cwnd=253&unsent_bytes=0&cid=ec6f62ceff610e8c&ts=428&x=0"
X-Firefox-Spdy: h2

GET loclx-client.s3.amazonaws.com/loclx-linux-386.zip

16.15.217.186

200 OK

8.5 MB

URL

loclx-client.s3.amazonaws.com/loclx-linux-386.zip

IP / ASN

16.15.217.186

#14618 AMAZON-AES

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2024-10-15

Last Seen2025-05-28

Times Seen44

Size8.5 MB (8548773 bytes)

MD542e7c2e47ba5330f93134f971bc15430

SHA18d93770f38e30b91536d21e67cc769395138b648

SHA256e0c5d9317368a26aef93caad97846d9060d82e82f6e82d0f3a13ecb6d6835497

Certificate Info

IssuerAmazon

Subject*.s3.amazonaws.com

Fingerprint2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69

ValidityFri, 14 Feb 2025 00:00:00 GMT - Sat, 07 Feb 2026 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/66

HTTP Headers

GET /loclx-linux-386.zip HTTP/1.1
Host: loclx-client.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: /Hofl1rvomf3PNo7tNiOyiMmWLBY6UXyaqACWY9HpKOL3HxCTmkzScYvHOOxGXvskFcrAoafCxqqUoGm+caxWk/qpQbVnRPLI1Xd30wGuIA=
x-amz-request-id: K3PDQ386QJ5V0MZD
Date: Sat, 10 May 2025 15:10:39 GMT
Last-Modified: Mon, 07 Oct 2024 11:27:05 GMT
ETag: "3ad88878d92324f806389977995bf173-2"
x-amz-server-side-encryption: AES256
Content-Disposition: attachment; filename=loclx-linux-386.zip
x-amz-version-id: K__VO5avzUV8wNBTSZWFrLqRTX1sPAvs
Accept-Ranges: bytes
Content-Type: application/zip
Content-Length: 8548773
Server: AmazonS3