Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| apps.identrust.com |
CNAME
a1952.dscq.akamai.net
CNAME
identrust.edgesuite.net
|
23.67.53.17 |
| icanhazip.com | 104.18.114.97 | |
| api.mylnikov.org | 172.67.196.114 | |
| api.telegram.org | 149.154.167.220 |
- UDP Requests
-
-
192.168.56.101:53004 164.124.101.2:53
-
192.168.56.101:54148 164.124.101.2:53
-
192.168.56.101:55146 164.124.101.2:53
-
192.168.56.101:59002 164.124.101.2:53
-
192.168.56.101:137 192.168.56.103:137
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:138 192.168.56.255:138
-
192.168.56.101:49154 239.255.255.250:1900
-
GET
200
http://icanhazip.com/
REQUEST
RESPONSE
BODY
GET / HTTP/1.1
Host: icanhazip.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 16 Aug 2023 22:35:52 GMT
Content-Type: text/plain
Content-Length: 16
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Set-Cookie: __cf_bm=mnQj9uLpQRl7kelgoFciFKHnytl2g17j.RaqgOlmnTM-1692225352-0-Aa7KaDymDJlJ0VlFFY14kNjdpjCCieOUSfbSb6ZsNaq3rd4wxPq8KrPJZJIXDwfov/OuJYp/nOzLeK3BLxlYcmE=; path=/; expires=Wed, 16-Aug-23 23:05:52 GMT; domain=.icanhazip.com; HttpOnly
Server: cloudflare
CF-RAY: 7f7d27241dfbed95-ICN
alt-svc: h3=":443"; ma=86400
GET
200
http://apps.identrust.com/roots/dstrootcax3.p7c
REQUEST
RESPONSE
BODY
GET /roots/dstrootcax3.p7c HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: apps.identrust.com
HTTP/1.1 200 OK
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
Last-Modified: Wed, 08 Feb 2023 16:52:56 GMT
ETag: "37d-5f433188daa00"
Accept-Ranges: bytes
Content-Length: 893
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Type: application/pkcs7-mime
Cache-Control: max-age=3600
Expires: Wed, 16 Aug 2023 23:35:53 GMT
Date: Wed, 16 Aug 2023 22:35:53 GMT
Connection: keep-alive
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts