IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashca25de8e9a7789f6d7584ca806255ef6 f1fadb4d267b70a2edf8d68ff772bb902a57be30 638765bac89f64062e70ec561af0089209a6d1d2dee9a81e116b73e8d90a8258
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "638765BAC89F64062E70EC561AF0089209A6D1D2DEE9A81E116B73E8D90A8258"
Last-Modified: Sun, 05 Nov 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21557
Expires: Tue, 07 Nov 2023 07:25:38 GMT
Date: Tue, 07 Nov 2023 01:26:21 GMT
Connection: keep-alive
|
| GET chat-whatsapp1202.real2.biz.id/ditznesia-grup.zip |  172.67.145.105 | 200 OK | 16 kB |
URL User Request GET HTTP/2chat-whatsapp1202.real2.biz.id/ditznesia-grup.zip IP172.67.145.105:443
CertificateIssuerLet's Encrypt Subjectreal2.biz.id FingerprintB1:C7:96:71:A9:A1:0A:C9:03:0B:96:18:B6:72:83:34:80:79:C0:DC ValidityTue, 19 Sep 2023 13:50:55 GMT - Mon, 18 Dec 2023 13:50:54 GMT
File typeZip archive data, at least v1.0 to extract, compression method=deflate\012- data Hasheb25880aa08d32a68965578d02c25841 07ff2630f20219235cfb2090a008915c519686d4 937c03799cb1c28ae2bc5b8776295325c7c527b9f17776bece13c838088d7f40
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /ditznesia-grup.zip HTTP/1.1
Host: chat-whatsapp1202.real2.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 Nov 2023 01:26:22 GMT
content-type: application/zip
content-length: 16305
last-modified: Tue, 17 Oct 2023 05:50:34 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=unLjAtak0JjSjUY2hU5pe8nTGh49eYEaBPS6vk1xz9FaSoBG9gb6jp3jjH5KHdsD3w9oL4APokALG8j3eJ79ZO9vqqolfST5u8%2FFmytJ2Kv0g4WRym5geSFD8AZ%2BmAeket4G9JQM%2BkHXooS20oicWrk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8221c9a38a140b41-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashca25de8e9a7789f6d7584ca806255ef6 f1fadb4d267b70a2edf8d68ff772bb902a57be30 638765bac89f64062e70ec561af0089209a6d1d2dee9a81e116b73e8d90a8258
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "638765BAC89F64062E70EC561AF0089209A6D1D2DEE9A81E116B73E8D90A8258"
Last-Modified: Sun, 05 Nov 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21556
Expires: Tue, 07 Nov 2023 07:25:38 GMT
Date: Tue, 07 Nov 2023 01:26:22 GMT
Connection: keep-alive
|
104.21.65.120