Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| ldvamlwhdpetnyn.ml | 172.67.208.174 |
- UDP Requests
-
-
192.168.56.102:57660 164.124.101.2:53
-
192.168.56.102:137 192.168.56.255:137
-
192.168.56.102:138 192.168.56.255:138
-
192.168.56.102:49152 239.255.255.250:3702
-
192.168.56.102:56752 239.255.255.250:1900
-
192.168.56.102:56754 239.255.255.250:3702
-
192.168.56.102:57661 239.255.255.250:3702
-
192.168.56.102:57663 239.255.255.250:3702
-
GET
200
http://ldvamlwhdpetnyn.ml/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-7D77BFB8D680A99A3DEC3EF11B63CBC1.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-7D77BFB8D680A99A3DEC3EF11B63CBC1.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: ldvamlwhdpetnyn.ml
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 12 May 2021 03:09:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
cf-request-id: 0a00262e500000368535b6c000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=DaYupukMomw%2FDHKPT2e4C9vUV%2BYoYf88as9HdCjwrD7G%2FC1JTXzvHAFWUI%2BA9Wdc4WAdsPjTQ31g%2F85QncU%2F6dWTqPtsx0ROOCsDGNNtR1yzMC4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 64e072f6eaca3685-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
http://ldvamlwhdpetnyn.ml/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-00C6707A4C3680722D987A5BB7114B0B.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-00C6707A4C3680722D987A5BB7114B0B.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: ldvamlwhdpetnyn.ml
HTTP/1.1 200 OK
Date: Wed, 12 May 2021 03:09:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
cf-request-id: 0a00262f7d0000368520112000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=SllO67Mm2vQml9OoO6Bzy6c2d937v4ftJ%2Fc4L%2BscjQZCd6ERXrB5JNstv3GLu7ISfICcdx5dd5b4%2F8yJFmflD9VQf9js1MMXS%2FMH7uQaksjeLss%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 64e072f8cfe83685-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
http://ldvamlwhdpetnyn.ml/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-307E578725C4F3AA44F824BA2753FDB2.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-307E578725C4F3AA44F824BA2753FDB2.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: ldvamlwhdpetnyn.ml
HTTP/1.1 200 OK
Date: Wed, 12 May 2021 03:09:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
cf-request-id: 0a0026300a0000368535ba1000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=dpANjUGNsKP4DUukk536LPEQN8kKdRj%2FD9XPHhvjm2GoJK%2F20Fj4iVfFKsJaoY%2Bw67XU8l5ZEeUOGF%2BtcNn9ikVZCMZX7pOS5Ub98caAeQ%2B0Kzw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 64e072f9aa313685-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
http://ldvamlwhdpetnyn.ml/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-16116FCB016B7CAA5050F3DB0E637327.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-16116FCB016B7CAA5050F3DB0E637327.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: ldvamlwhdpetnyn.ml
HTTP/1.1 200 OK
Date: Wed, 12 May 2021 03:09:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
cf-request-id: 0a0026309a000036858303b000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=KGeh1Ht39JnGo1E4cbklgJEOCUXnmuFJbByRk99hoTLMLSHNQP%2FFNJBuU3690y9gpvBtBnjf4y5Klz7pLZVDDzuOxxOkRezT2QmsQiZ%2BUSyso%2B8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 64e072fa9ca23685-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
http://ldvamlwhdpetnyn.ml/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-E2304DCD5B5C3352E705442E9DABC84C.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-E2304DCD5B5C3352E705442E9DABC84C.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: ldvamlwhdpetnyn.ml
HTTP/1.1 200 OK
Date: Wed, 12 May 2021 03:09:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
cf-request-id: 0a0026312e000036855b086000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=64LGpQmNz0YjcarjwZwnYmb03CaHUxPJy96ZkOKhar0Q%2F46WoEkskECbTw%2FeMg6Ucp%2BfNu0WsatpTDD8mxRgaaeKq4PZ%2FQ3byMiN1fZygN93j6s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 64e072fb7f2f3685-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
http://ldvamlwhdpetnyn.ml/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-EEC279DBCBA0C0CE17E741F5C0B1F0BE.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-EEC279DBCBA0C0CE17E741F5C0B1F0BE.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: ldvamlwhdpetnyn.ml
HTTP/1.1 200 OK
Date: Wed, 12 May 2021 03:09:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
cf-request-id: 0a002631c5000036856fb01000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=QyTrCsBoioat%2BYQdgTHVsSuxTHNN1%2B7nb4TIQ9KA6CUCLpoMo6F3k%2F%2BItfFUwrjfN3p5WGjxhp7jAL9MuiZ1Lpd6FQR1M2UojXEABRhpSOw9Gm0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 64e072fc6a193685-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
200
http://ldvamlwhdpetnyn.ml/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-E81034F64EBA344DC31E3E3D72E849B5.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-E81034F64EBA344DC31E3E3D72E849B5.html HTTP/1.1
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: ldvamlwhdpetnyn.ml
HTTP/1.1 200 OK
Date: Wed, 12 May 2021 03:09:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
cf-request-id: 0a00263376000036850a938000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=5FrXSJ4NxN9OFSNemiC4z%2BI1iT6vVbchVDfNAQhtMnCccebHD7z%2FVa5tuZY3QumoDyVmpu23qqbyNdcUlBTV6CrvtvA4nUmA6koZS4EONm9kV98%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 64e072ff2a493685-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| UDP 192.168.56.102:57660 -> 164.124.101.2:53 | 2025106 | ET INFO DNS Query for Suspicious .ml Domain | Potentially Bad Traffic |
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts