Fifth task

What is the name of the webserver of the malicious IP from which the zip file was downloaded?

Again, in the same window of the first HTTP packet, in the response from the malicious agent we can see the name of the server from which the zip file was downloaded - "LiteSpeed".

Previous step

Next step