Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| t.me | 149.154.167.99 | |
| steamcommunity.com | 104.76.78.101 |
GET
200
https://steamcommunity.com/profiles/76561199568528949
REQUEST
RESPONSE
BODY
GET /profiles/76561199568528949 HTTP/1.1
Host: steamcommunity.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache
Date: Mon, 13 Nov 2023 01:53:01 GMT
Content-Length: 34308
Connection: keep-alive
Set-Cookie: sessionid=a43c3cca9068e62f5a63fdfd; Path=/; Secure; SameSite=None
Set-Cookie: steamCountry=KR%7Cf412d3b2c2b6515b2cdce927ad7acf7b; Path=/; Secure; HttpOnly; SameSite=None
GET
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----AAEBAFBGIDHCBFHIECFC
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 279
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----AECFCAAECBGDGDHIEHJE
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 331
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----GCFBAKKJDBKJJJKFHDAE
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 331
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----HJECAAKKFHCFIECAAAKE
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 4533
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
GET
200
http://5.75.246.163/sqlite3.dll
REQUEST
RESPONSE
BODY
GET /sqlite3.dll HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:05 GMT
Content-Type: application/octet-stream
Content-Length: 1106998
Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT
Connection: keep-alive
ETag: "63160806-10e436"
Accept-Ranges: bytes
GET
200
http://5.75.246.163/freebl3.dll
REQUEST
RESPONSE
BODY
GET /freebl3.dll HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:08 GMT
Content-Type: application/octet-stream
Content-Length: 685392
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
Connection: keep-alive
ETag: "6315d424-a7550"
Accept-Ranges: bytes
GET
200
http://5.75.246.163/mozglue.dll
REQUEST
RESPONSE
BODY
GET /mozglue.dll HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:09 GMT
Content-Type: application/octet-stream
Content-Length: 608080
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
Connection: keep-alive
ETag: "6315d424-94750"
Accept-Ranges: bytes
GET
200
http://5.75.246.163/msvcp140.dll
REQUEST
RESPONSE
BODY
GET /msvcp140.dll HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:25 GMT
Content-Type: application/octet-stream
Content-Length: 450024
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
Connection: keep-alive
ETag: "6315d424-6dde8"
Accept-Ranges: bytes
GET
200
http://5.75.246.163/nss3.dll
REQUEST
RESPONSE
BODY
GET /nss3.dll HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:26 GMT
Content-Type: application/octet-stream
Content-Length: 2046288
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
Connection: keep-alive
ETag: "6315d424-1f3950"
Accept-Ranges: bytes
GET
200
http://5.75.246.163/softokn3.dll
REQUEST
RESPONSE
BODY
GET /softokn3.dll HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:30 GMT
Content-Type: application/octet-stream
Content-Length: 257872
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
Connection: keep-alive
ETag: "6315d424-3ef50"
Accept-Ranges: bytes
GET
200
http://5.75.246.163/vcruntime140.dll
REQUEST
RESPONSE
BODY
GET /vcruntime140.dll HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:30 GMT
Content-Type: application/octet-stream
Content-Length: 80880
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
Connection: keep-alive
ETag: "6315d424-13bf0"
Accept-Ranges: bytes
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----IIDHJKFBGIIJJKFIJDBG
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 1021
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----GCBGIIECGHCAKECAFBFH
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 957
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----EBAKEBAECGCBAAAAAEBA
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 741
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----FCAAEBFHJJDAAKFIECGD
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 437
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----GCBGIIECGHCAKECAFBFH
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 331
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----JEGHCBAFBFHIIECBKFCG
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 331
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----AAAAKJKJEBGHJKFHIDGC
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 640825
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----EBAKEBAECGCBAAAAAEBA
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 119489
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
POST
200
http://5.75.246.163/
REQUEST
RESPONSE
BODY
POST / HTTP/1.1
Content-Type: multipart/form-data; boundary=----FBAFIIJKJEGIDGDGIIDH
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Host: 5.75.246.163
Content-Length: 331
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Nov 2023 01:53:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLSv1 192.168.56.103:49166 104.76.78.101:443 |
C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Extended Validation Server CA | unknown=US, unknown=Washington, unknown=Private Organization, serialNumber=602 290 773, C=US, ST=Washington, L=Bellevue, O=Valve Corp, CN=store.steampowered.com | b1:30:5e:4c:ee:14:70:87:a7:d7:1c:77:07:b5:3c:2c:99:13:aa:c5 |
Snort Alerts
No Snort Alerts