Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| secure01-redirect.net | 52.26.80.133 |
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 186
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:52:23 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=e5af73c13faa9fa1624fe5d2805375a9|121.133.128.1|1745103143|1745103143|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 186
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:52:24 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=6aa37c8486b93fad2f81c958e426e47c|121.133.128.1|1745103144|1745103144|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 159
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:52:24 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=f3e0f41360d4fcec83dc9cb530747086|121.133.128.1|1745103144|1745103144|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 159
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:53:25 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=ef2a020d417ba61a4028017d02f309fa|121.133.128.1|1745103205|1745103205|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts