Network Analysis

GET /geoip HTTP/1.1 Host: api.ip.sb Connection: Keep-Alive

HTTP/1.1 200 OK Date: Tue, 06 Jul 2021 00:14:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 347 Connection: keep-alive Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-cache Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=mfmYfghrzOBT79iVQRdM%2FBCPmW%2FQco0aPNU5SqqUdU14bwbznIDykwbWtMNkypPqd2zucKY5wm6iskUuXRh9Esa2tVti72GGJG3fKsYuhBe9sIeK3BQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 66a4a1a3bb23e4fa-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: kathonaror.xyz Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate Connection: Keep-Alive

HTTP/1.1 100 Continue

GET / HTTP/1.1 Host: checkip.amazonaws.com Connection: Keep-Alive

HTTP/1.1 200 OK Date: Tue, 06 Jul 2021 00:14:11 GMT Server: lighttpd/1.4.53 Content-Length: 16 Connection: keep-alive

POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/VerifyScanRequest" Host: kathonaror.xyz Content-Length: 11865111 Expect: 100-continue Accept-Encoding: gzip, deflate

HTTP/1.1 100 Continue

POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetUpdates" Host: kathonaror.xyz Content-Length: 11865097 Expect: 100-continue Accept-Encoding: gzip, deflate

HTTP/1.1 100 Continue