| justgetflux.com/flux-setup4-130.exe?update=1 |  216.176.200.22 | 302 Moved Temporarily | 138 B |
URL User Request GET HTTP/1.1justgetflux.com/flux-setup4-130.exe?update=1 IP216.176.200.22:443
CertificateIssuerSectigo Limited Subjectjustgetflux.com Fingerprint97:8D:39:57:A2:6F:F3:DE:8F:E3:5D:49:4D:42:6D:77:ED:7B:55:60 ValiditySun, 15 Jan 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File typeHTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /flux-setup4-130.exe?update=1 HTTP/1.1
Host: justgetflux.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 13 Dec 2023 23:09:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=35
Location: https://justgetflux.b-cdn.net/flux-setup4-130.exe?update=1
Set-Cookie: uid=2LDIFmV6OawfwwB+YRD2Ag==; expires=Thu, 12-Dec-24 23:09:32 GMT; path=/
|
| justgetflux.b-cdn.net/flux-setup4-130.exe?update=1 | 169.150.247.34 | 200 OK | 686 kB |
URL User Request GET HTTP/2justgetflux.b-cdn.net/flux-setup4-130.exe?update=1 IP169.150.247.34:443
CertificateIssuerSectigo Limited Subject*.b-cdn.net FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4 ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
- data Size686 kB (686368 bytes) Hash055fd67ed939448985e5288633582352 793775057a74c496aed4509bf5551f32f3492534 5d8a0229336f8aa70462c5397c055a446dd396c319f7310e698a31f05903521a
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /flux-setup4-130.exe?update=1 HTTP/1.1
Host: justgetflux.b-cdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 13 Dec 2023 23:09:33 GMT
content-type: application/octet-stream
content-length: 686368
server: BunnyCDN-DE1-1077
cdn-pullzone: 40586
cdn-uid: a4dbc144-ce45-4f49-a651-2c2e7608da9c
cdn-requestcountrycode: NO
cache-control: public, max-age=180
last-modified: Wed, 06 Dec 2023 00:19:00 GMT
cdn-cachedat: 12/11/2023 14:25:39
cdn-proxyver: 1.04
cdn-requestpullcode: 206
cdn-requestpullsuccess: True
cdn-edgestorageid: 1055
cdn-status: 200
cdn-requestid: aecfff976d8493f78ae87ca993efe4d1
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|