Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| secure01-redirect.net | 52.26.80.133 |
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 3718
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:52:31 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=85c8ec1780f0b5ef004de9d017198824|121.133.128.1|1745103151|1745103151|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 186
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:52:31 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=1f55b9574c64cc7990a532842992b4de|121.133.128.1|1745103151|1745103151|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 159
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:52:32 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=eb37a80ed98e188bfcbb89b4b4e93d95|121.133.128.1|1745103152|1745103152|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
POST
200
http://secure01-redirect.net/gc20/fre.php
REQUEST
RESPONSE
BODY
POST /gc20/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: secure01-redirect.net
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: 795CB190
Content-Length: 159
Connection: close
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Apr 2025 22:53:33 GMT
Content-Type: text/html
Connection: close
Set-Cookie: btst=60ab9b4bf35a4cd5a83ef827f12998dd|121.133.128.1|1745103213|1745103213|0|1|0; path=/; domain=.secure01-redirect.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax;
Set-Cookie: snkz=121.133.128.1; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts