I’ve done a packet capture and can see that it is successfully talking to some web servers but one is giving a 301 redirect to google.com which doesn’t help. I’m going to send it back.
13:10:13.696774 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 4464, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.34627 > 54.239.26.171.http: Flags [S], cksum 0x0d3b (correct), seq 4094893063, win 5840, options [mss 1350,sackOK,TS val 38473816 ecr 0,nop,wscale 2], length 0
13:10:23.859722 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 63595, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.38265 > del03s07-in-f4.1e100.net.http: Flags [S], cksum 0xbe39 (correct), seq 17162799, win 5840, options [mss 1350,sackOK,TS val 38476356 ecr 0,nop,wscale 2], length 0
13:10:24.237614 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 59, id 16965, offset 0, flags [none], proto TCP (6), length 60)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38265: Flags [S.], cksum 0x1563 (correct), seq 2594601719, ack 17162800, win 65535, options [mss 1430,sackOK,TS val 2914778085 ecr 38476356,nop,wscale 8], length 0
13:10:24.260413 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 63596, offset 0, flags [DF], proto TCP (6), length 52)
10.10.30.115.38265 > del03s07-in-f4.1e100.net.http: Flags [.], cksum 0x3dfe (correct), seq 1, ack 1, win 1460, options [nop,nop,TS val 38476452 ecr 2914778085], length 0
13:10:24.260486 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 134: (tos 0x0, ttl 63, id 63597, offset 0, flags [DF], proto TCP (6), length 120)
10.10.30.115.38265 > del03s07-in-f4.1e100.net.http: Flags [P.], cksum 0xd28d (correct), seq 1:69, ack 1, win 1460, options [nop,nop,TS val 38476452 ecr 2914778085], length 68: HTTP, length: 68
HEAD / HTTP/1.0
Host: 216.58.221.36
User-Agent: HTTPing v2.3.4
13:10:24.638326 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 59, id 17077, offset 0, flags [none], proto TCP (6), length 52)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38265: Flags [.], cksum 0x40de (correct), seq 1, ack 69, win 256, options [nop,nop,TS val 2914778485 ecr 38476452], length 0
13:10:25.266131 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 375: (tos 0x0, ttl 59, id 17238, offset 0, flags [none], proto TCP (6), length 361)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38265: Flags [P.], cksum 0xa931 (correct), seq 1:310, ack 69, win 256, options [nop,nop,TS val 2914779113 ecr 38476452], length 309: HTTP, length: 309
HTTP/1.0 301 Moved Permanently
Location: http://www.google.com/
Content-Type: text/html; charset=UTF-8
Date: Sat, 07 Aug 2021 12:10:25 GMT
Expires: Mon, 06 Sep 2021 12:10:25 GMT
Cache-Control: public, max-age=2592000
Server: gws
Content-Length: 219
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
13:10:25.266171 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 59, id 17239, offset 0, flags [none], proto TCP (6), length 52)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38265: Flags [F.], cksum 0x3d34 (correct), seq 310, ack 69, win 256, options [nop,nop,TS val 2914779113 ecr 38476452], length 0
13:10:25.268826 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 63598, offset 0, flags [DF], proto TCP (6), length 52)
10.10.30.115.38265 > del03s07-in-f4.1e100.net.http: Flags [.], cksum 0x3781 (correct), seq 69, ack 310, win 1460, options [nop,nop,TS val 38476708 ecr 2914779113], length 0
13:10:25.273353 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 63599, offset 0, flags [DF], proto TCP (6), length 52)
10.10.30.115.38265 > del03s07-in-f4.1e100.net.http: Flags [F.], cksum 0x377d (correct), seq 69, ack 311, win 1460, options [nop,nop,TS val 38476710 ecr 2914779113], length 0
13:10:25.651070 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 59, id 17427, offset 0, flags [none], proto TCP (6), length 52)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38265: Flags [.], cksum 0x3ab0 (correct), seq 311, ack 70, win 256, options [nop,nop,TS val 2914779498 ecr 38476710], length 0
13:10:27.306350 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 8537, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.55785 > ec2-52-9-254-50.us-west-1.compute.amazonaws.com.http: Flags [S], cksum 0x9b28 (correct), seq 77610235, win 5840, options [mss 1350,sackOK,TS val 38477218 ecr 0,nop,wscale 2], length 0
13:10:27.457494 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 54: (tos 0x28, ttl 39, id 39138, offset 0, flags [DF], proto TCP (6), length 40)
ec2-52-9-254-50.us-west-1.compute.amazonaws.com.http > 10.10.30.115.55785: Flags [R.], cksum 0x3942 (correct), seq 0, ack 77610236, win 0, length 0
13:10:29.491834 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 2875, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.57834 > 54.239.26.171.http: Flags [S], cksum 0x9774 (correct), seq 114234623, win 5840, options [mss 1350,sackOK,TS val 38477764 ecr 0,nop,wscale 2], length 0
13:10:32.496867 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 2876, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.57834 > 54.239.26.171.http: Flags [S], cksum 0x9484 (correct), seq 114234623, win 5840, options [mss 1350,sackOK,TS val 38478516 ecr 0,nop,wscale 2], length 0
13:10:36.530349 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 29691, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.57835 > 54.239.26.171.http: Flags [S], cksum 0x4a36 (correct), seq 214717791, win 5840, options [mss 1350,sackOK,TS val 38479524 ecr 0,nop,wscale 2], length 0
13:10:39.536960 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 29692, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.57835 > 54.239.26.171.http: Flags [S], cksum 0x4746 (correct), seq 214717791, win 5840, options [mss 1350,sackOK,TS val 38480276 ecr 0,nop,wscale 2], length 0
13:10:49.698859 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 30305, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.38269 > del03s07-in-f4.1e100.net.http: Flags [S], cksum 0x28a4 (correct), seq 430523873, win 5840, options [mss 1350,sackOK,TS val 38482816 ecr 0,nop,wscale 2], length 0
13:10:50.076732 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 59, id 30317, offset 0, flags [none], proto TCP (6), length 60)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38269: Flags [S.], cksum 0xaa08 (correct), seq 3730155549, ack 430523874, win 65535, options [mss 1430,sackOK,TS val 2914803924 ecr 38482816,nop,wscale 8], length 0
13:10:50.079959 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 30306, offset 0, flags [DF], proto TCP (6), length 52)
10.10.30.115.38269 > del03s07-in-f4.1e100.net.http: Flags [.], cksum 0xd2a4 (correct), seq 1, ack 1, win 1460, options [nop,nop,TS val 38482911 ecr 2914803924], length 0
13:10:50.080354 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 134: (tos 0x0, ttl 63, id 30307, offset 0, flags [DF], proto TCP (6), length 120)
10.10.30.115.38269 > del03s07-in-f4.1e100.net.http: Flags [P.], cksum 0x6734 (correct), seq 1:69, ack 1, win 1460, options [nop,nop,TS val 38482911 ecr 2914803924], length 68: HTTP, length: 68
HEAD / HTTP/1.0
Host: 216.58.221.36
User-Agent: HTTPing v2.3.4
13:10:50.458253 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 59, id 30480, offset 0, flags [none], proto TCP (6), length 52)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38269: Flags [.], cksum 0xd597 (correct), seq 1, ack 69, win 256, options [nop,nop,TS val 2914804305 ecr 38482911], length 0
13:10:50.624243 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 375: (tos 0x0, ttl 59, id 30593, offset 0, flags [none], proto TCP (6), length 361)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38269: Flags [P.], cksum 0x49b3 (correct), seq 1:310, ack 69, win 256, options [nop,nop,TS val 2914804471 ecr 38482911], length 309: HTTP, length: 309
HTTP/1.0 301 Moved Permanently
Location: http://www.google.com/
Content-Type: text/html; charset=UTF-8
Date: Sat, 07 Aug 2021 12:10:50 GMT
Expires: Mon, 06 Sep 2021 12:10:50 GMT
Cache-Control: public, max-age=2592000
Server: gws
Content-Length: 219
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
13:10:50.624285 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 59, id 30594, offset 0, flags [none], proto TCP (6), length 52)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38269: Flags [F.], cksum 0xd3bb (correct), seq 310, ack 69, win 256, options [nop,nop,TS val 2914804471 ecr 38482911], length 0
13:10:50.626593 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 30308, offset 0, flags [DF], proto TCP (6), length 52)
10.10.30.115.38269 > del03s07-in-f4.1e100.net.http: Flags [.], cksum 0xce7f (correct), seq 69, ack 310, win 1460, options [nop,nop,TS val 38483048 ecr 2914804471], length 0
13:10:50.627018 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 30309, offset 0, flags [DF], proto TCP (6), length 52)
10.10.30.115.38269 > del03s07-in-f4.1e100.net.http: Flags [F.], cksum 0xce7d (correct), seq 69, ack 311, win 1460, options [nop,nop,TS val 38483048 ecr 2914804471], length 0
13:10:51.004597 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 59, id 30688, offset 0, flags [none], proto TCP (6), length 52)
del03s07-in-f4.1e100.net.http > 10.10.30.115.38269: Flags [.], cksum 0xd1b4 (correct), seq 311, ack 70, win 256, options [nop,nop,TS val 2914804852 ecr 38483048], length 0
13:10:52.666396 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 41462, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.55789 > ec2-52-9-254-50.us-west-1.compute.amazonaws.com.http: Flags [S], cksum 0x0f9d (correct), seq 483301264, win 5840, options [mss 1350,sackOK,TS val 38483558 ecr 0,nop,wscale 2], length 0
13:10:52.816888 00:50:56:93:72:d7 (oui Unknown) > 50:1c:b0:40:90:77 (oui Unknown), ethertype IPv4 (0x0800), length 54: (tos 0x28, ttl 39, id 44909, offset 0, flags [DF], proto TCP (6), length 40)
ec2-52-9-254-50.us-west-1.compute.amazonaws.com.http > 10.10.30.115.55789: Flags [R.], cksum 0xc67a (correct), seq 0, ack 483301265, win 0, length 0
13:10:54.850460 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 3304, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.57838 > 54.239.26.171.http: Flags [S], cksum 0x47ee (correct), seq 506213472, win 5840, options [mss 1350,sackOK,TS val 38484104 ecr 0,nop,wscale 2], length 0
13:10:57.857035 50:1c:b0:40:90:77 (oui Unknown) > 00:50:56:93:72:d7 (oui Unknown), ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 63, id 3305, offset 0, flags [DF], proto TCP (6), length 60)
10.10.30.115.57838 > 54.239.26.171.http: Flags [S], cksum 0x44fe (correct), seq 506213472, win 5840, options [mss 1350,sackOK,TS val 38484856 ecr 0,nop,wscale 2], length 0