Network Analysis
Name | Response | Post-Analysis Lookup |
---|---|---|
www.white-hat.uk |
CNAME
white-hat.uk
|
94.176.104.86 |
www.gritslab.com |
CNAME
gritslab.com
|
78.141.192.145 |
www.energyservicestation.com | 213.145.228.111 | |
www.bitservicesltd.com | 161.97.163.8 | |
www.222ambking.org | 91.195.240.94 | |
www.sqlite.org | 45.33.6.223 |
- TCP Requests
-
-
192.168.56.101:49171 161.97.163.8:80www.bitservicesltd.com
-
192.168.56.101:49172 161.97.163.8:80www.bitservicesltd.com
-
192.168.56.101:49175 213.145.228.111:80www.energyservicestation.com
-
192.168.56.101:49168 45.33.6.223:80www.sqlite.org
-
192.168.56.101:49169 78.141.192.145:80www.gritslab.com
-
192.168.56.101:49170 78.141.192.145:80www.gritslab.com
-
192.168.56.101:49173 91.195.240.94:80www.222ambking.org
-
192.168.56.101:49174 91.195.240.94:80www.222ambking.org
-
192.168.56.101:49167 94.176.104.86:80www.white-hat.uk
-
- UDP Requests
-
-
192.168.56.101:52815 164.124.101.2:53
-
192.168.56.101:53004 164.124.101.2:53
-
192.168.56.101:53850 164.124.101.2:53
-
192.168.56.101:54148 164.124.101.2:53
-
192.168.56.101:54883 164.124.101.2:53
-
192.168.56.101:55146 164.124.101.2:53
-
192.168.56.101:59002 164.124.101.2:53
-
192.168.56.101:61950 164.124.101.2:53
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:55149 239.255.255.250:1900
-
52.231.114.183:123 192.168.56.101:123
-
8.8.8.8:53 192.168.56.101:61950
-
192.168.56.103:137 192.168.56.101:137
-
GET
301
http://www.white-hat.uk/u2kb/?rQD=PXfMycAZpTAipct8YN0l/5TWhYE4yPgF2k7967nf/qU1A0mUqq9Jlnm9rK8XSf3D04yKTuePtKPnTCgwye3M0h5ZtqacmtcmNe/sHow=&V4DcA-=d7DTsKri
REQUEST
RESPONSE
BODY
GET /u2kb/?rQD=PXfMycAZpTAipct8YN0l/5TWhYE4yPgF2k7967nf/qU1A0mUqq9Jlnm9rK8XSf3D04yKTuePtKPnTCgwye3M0h5ZtqacmtcmNe/sHow=&V4DcA-=d7DTsKri HTTP/1.1
Host: www.white-hat.uk
Connection: close
HTTP/1.1 301 Moved Permanently
Connection: close
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: http://white-hat.uk/u2kb/?rQD=PXfMycAZpTAipct8YN0l/5TWhYE4yPgF2k7967nf/qU1A0mUqq9Jlnm9rK8XSf3D04yKTuePtKPnTCgwye3M0h5ZtqacmtcmNe/sHow=&V4DcA-=d7DTsKri
x-litespeed-cache: miss
content-length: 0
date: Thu, 20 Apr 2023 08:32:22 GMT
server: LiteSpeed
GET
200
http://www.sqlite.org/2017/sqlite-dll-win32-x86-3200000.zip
REQUEST
RESPONSE
BODY
GET /2017/sqlite-dll-win32-x86-3200000.zip HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E)
Host: www.sqlite.org
Connection: Keep-Alive
HTTP/1.1 200 OK
Connection: keep-alive
Date: Thu, 20 Apr 2023 08:32:25 GMT
Last-Modified: Mon, 21 Aug 2017 00:19:00 GMT
Cache-Control: max-age=120
ETag: "m599a26f4s6ce10"
Content-type: application/zip; charset=utf-8
Content-length: 445968
POST
404
http://www.gritslab.com/u2kb/
REQUEST
RESPONSE
BODY
POST /u2kb/ HTTP/1.1
Host: www.gritslab.com
Connection: close
Content-Length: 185
Cache-Control: no-cache
Origin: http://www.gritslab.com
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.gritslab.com/u2kb/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 404 Not Found
Server: nginx/1.18.0
Date: Thu, 20 Apr 2023 08:32:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
GET
404
http://www.gritslab.com/u2kb/?rQD=ydCzFiH7iMWnz6xHMKiyYVGDKfWH5+fYQUsmgPEoYCSsyD6HgT3yOGCjssC2N8mKn+GjINYvhr7iKNezbHZCh47jo+mhlV2uXG5eH60=&V4DcA-=d7DTsKri
REQUEST
RESPONSE
BODY
GET /u2kb/?rQD=ydCzFiH7iMWnz6xHMKiyYVGDKfWH5+fYQUsmgPEoYCSsyD6HgT3yOGCjssC2N8mKn+GjINYvhr7iKNezbHZCh47jo+mhlV2uXG5eH60=&V4DcA-=d7DTsKri HTTP/1.1
Host: www.gritslab.com
Connection: close
HTTP/1.1 404 Not Found
Server: nginx/1.18.0
Date: Thu, 20 Apr 2023 08:32:39 GMT
Content-Type: text/html
Content-Length: 153
Connection: close
POST
404
http://www.bitservicesltd.com/u2kb/
REQUEST
RESPONSE
BODY
POST /u2kb/ HTTP/1.1
Host: www.bitservicesltd.com
Connection: close
Content-Length: 185
Cache-Control: no-cache
Origin: http://www.bitservicesltd.com
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.bitservicesltd.com/u2kb/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 20 Apr 2023 08:32:46 GMT
Content-Type: text/html
Content-Length: 199
Connection: close
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
GET
404
http://www.bitservicesltd.com/u2kb/?rQD=rr+sOBvEXsBdGevUk44F/k+BAr88zC1YNHmXivr92FQhRIIYsedR2a+6GoV1WAKeGdj+MTdX512lJXz4UaWEmNABCelIWOCZ3yhH4Z4=&V4DcA-=d7DTsKri
REQUEST
RESPONSE
BODY
GET /u2kb/?rQD=rr+sOBvEXsBdGevUk44F/k+BAr88zC1YNHmXivr92FQhRIIYsedR2a+6GoV1WAKeGdj+MTdX512lJXz4UaWEmNABCelIWOCZ3yhH4Z4=&V4DcA-=d7DTsKri HTTP/1.1
Host: www.bitservicesltd.com
Connection: close
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 20 Apr 2023 08:32:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
POST
403
http://www.222ambking.org/u2kb/
REQUEST
RESPONSE
BODY
POST /u2kb/ HTTP/1.1
Host: www.222ambking.org
Connection: close
Content-Length: 185
Cache-Control: no-cache
Origin: http://www.222ambking.org
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.222ambking.org/u2kb/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 403 Forbidden
date: Thu, 20 Apr 2023 08:32:54 GMT
content-type: text/html
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip
connection: close
GET
200
http://www.222ambking.org/u2kb/?rQD=IEUpLmGg2fqLmrhwD8IHX/zhiiNjbOQDFcodV2ACJcW4bHSQscR3Nc4uRx31p3m0gGv03uToPch8hDrce1eNAdUBSmpSNalx6DQXGQo=&V4DcA-=d7DTsKri
REQUEST
RESPONSE
BODY
GET /u2kb/?rQD=IEUpLmGg2fqLmrhwD8IHX/zhiiNjbOQDFcodV2ACJcW4bHSQscR3Nc4uRx31p3m0gGv03uToPch8hDrce1eNAdUBSmpSNalx6DQXGQo=&V4DcA-=d7DTsKri HTTP/1.1
Host: www.222ambking.org
Connection: close
HTTP/1.1 200 OK
date: Thu, 20 Apr 2023 08:32:57 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_xB9fGSxI2D6cLhJUZUrcIc6bRdSbG1b65ON0lZUlgGtfEUe0gMAsfcd7LwWLt1Ykf9zinw3tw9viFELB3A5zig==
last-modified: Thu, 20 Apr 2023 08:32:57 GMT
x-cache-miss-from: parking-7486c947f4-q9zmj
server: NginX
connection: close
POST
404
http://www.energyservicestation.com/u2kb/
REQUEST
RESPONSE
BODY
POST /u2kb/ HTTP/1.1
Host: www.energyservicestation.com
Connection: close
Content-Length: 185
Cache-Control: no-cache
Origin: http://www.energyservicestation.com
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.energyservicestation.com/u2kb/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 404 Not Found
Date: Thu, 20 Apr 2023 08:33:04 GMT
Server: Apache/2.4.56 (Debian)
X-Powered-By: PHP/7.4.33
Strict-Transport-Security: max-age=63072000; preload
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts