Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| xiiiolympus.zapto.org | 105.110.10.96 | |
| ipbase.com | 99.83.231.61 | |
| freegeoip.app | 172.67.160.84 |
GET
301
https://freegeoip.app/xml/
REQUEST
RESPONSE
BODY
GET /xml/ HTTP/1.1
Host: freegeoip.app
Connection: Keep-Alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Jun 2023 23:01:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 05 Jun 2023 00:01:35 GMT
Location: https://ipbase.com/xml/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q0B%2BSmsNhlpz0HnDBO5AkazeTI7jZJNoUlGgsoIqwvezBCIVdEH2FoP8vid%2F4oi4r%2FUC4C9LsAJEjCrBfxHAWI1a8zfi%2B6Yi8LWWSk9eHQqGiQa%2Bfv4iz47kpekJ%2Fep6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d23cc71ca9a1a25-KIX
alt-svc: h3=":443"; ma=86400
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLSv1 192.168.56.103:49164 104.21.73.97:443 |
C=US, O=Google Trust Services LLC, CN=GTS CA 1P5 | CN=freegeoip.app | 5d:7b:bc:f8:66:af:27:11:34:10:f6:76:43:ac:f4:3d:02:e4:40:f3 |
Snort Alerts
No Snort Alerts