| lcq1ezzyipmbpu2l.robotiatoys.com/dee/UGV0ZXIubWNrZW56aWVAYW50aWNpcGEuY29t |  104.219.248.46 | 200 OK | 4.1 kB |
URL User Request GET HTTP/1.1lcq1ezzyipmbpu2l.robotiatoys.com/dee/UGV0ZXIubWNrZW56aWVAYW50aWNpcGEuY29t IP104.219.248.46:80
File typeHTML document, ASCII text, with very long lines (7316) Hash8e01bca4e8f518b6ff3b1e6d81aa3d8d 5d2781398e017858d0e3cbcaa017a42103737697 e25b040bf5f8632d3b51fccd849bc50062ac047d7c6542e25b0b4ec9c90ea729
| NIDS | Severity | Alert |
|---|
| suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 | | suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2 | | suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3 |
GET /dee/UGV0ZXIubWNrZW56aWVAYW50aWNpcGEuY29t HTTP/1.1
Host: lcq1ezzyipmbpu2l.robotiatoys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
x-powered-by: PHP/8.0.30
content-type: text/html; charset=UTF-8
content-length: 4068
content-encoding: gzip
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:50:11 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
|
IP 151.101.236.193:443
Requested byhttp://lcq1ezzyipmbpu2l.robotiatoys.com/dee/UGV0ZXIubWNrZW56aWVAYW50aWNpcGEuY29t CertificateIssuerSectigo Limited Subject*.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
File typePNG image data, 2560 x 1440, 8-bit/color RGB, non-interlaced Hashb598beca98c83efd265c5ede9c0f5b6a 028c4f0cfbb9f56f442d1fc6ccc9c6853ef0efce 955d353e6d4f360e4fec51ee123d73c9aa23a7dbb0bacd6693a2e8a551046798
GET /xA8aaXN.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://lcq1ezzyipmbpu2l.robotiatoys.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 18 May 2023 17:08:54 GMT
etag: "b598beca98c83efd265c5ede9c0f5b6a"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: QDokoc4XfEev5M1k5M7ss-iCz0_sWEOr60lOR7Daip0cXMMbMV3o1w==
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 3085547
date: Thu, 18 Apr 2024 09:50:11 GMT
x-served-by: cache-iad-kjyo7100051-IAD, cache-osl6532-OSL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 29082, 0
x-timer: S1713433811.290524,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 39542
X-Firefox-Spdy: h2
|
| lcq1ezzyipmbpu2l.robotiatoys.com/favicon.ico | 104.219.248.46 | 200 OK | 4.1 kB |
URL GET HTTP/1.1lcq1ezzyipmbpu2l.robotiatoys.com/favicon.ico IP104.219.248.46:80
Requested byhttp://lcq1ezzyipmbpu2l.robotiatoys.com/dee/UGV0ZXIubWNrZW56aWVAYW50aWNpcGEuY29t
File typeJavaScript source, ASCII text, with very long lines (7316) Hashbd545428a12cff71dc04ab4764d8cdfd 2ffbf39a2259bd07aae5cb04278cf2502a30b7d8 9d194bd71b25ae0362d8050c9fc1e58e17d63ff7d98329128607dd991d90e30a
| NIDS | Severity | Alert |
|---|
| suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 | | suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2 | | suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3 |
GET /favicon.ico HTTP/1.1
Host: lcq1ezzyipmbpu2l.robotiatoys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://lcq1ezzyipmbpu2l.robotiatoys.com/dee/UGV0ZXIubWNrZW56aWVAYW50aWNpcGEuY29t
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
content-type: text/html
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4066
date: Thu, 18 Apr 2024 09:50:11 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
|