| 8yec5n5.corredoresyasociados.com/q3bCCwDV?sub1=male |  91.103.253.42 | 200 OK | 77 B |
URL User Request GET HTTP/1.18yec5n5.corredoresyasociados.com/q3bCCwDV?sub1=male IP91.103.253.42:80 ASN#210644 Aeza International Ltd
File typeHTML document, ASCII text, with no line terminators Hash42f9fb75efcb4c72166b378a81cc175b db565524c2d8b86da00b7b9e8760d17a0d1ed2c7 fac2801d8cbaf4bfab4ecb644e42bfe6b458d50c16cb4062216336ac2d2dcdae
| NIDS | Severity | Alert |
|---|
| suricata | high | ETPRO WEB_CLIENT Evil Keitaro Set-Cookie Inbound (b15e4) |
GET /q3bCCwDV?sub1=male HTTP/1.1
Host: 8yec5n5.corredoresyasociados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 18 Apr 2024 10:26:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=376l60j2m93k0; expires=Sun, 19 May 2024 10:26:49 GMT; path=/
b15e4=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjExMFwiOjE3MTM0MzYwMDl9LFwiY2FtcGFpZ25zXCI6e1wiMzJcIjoxNzEzNDM2MDA5fSxcInRpbWVcIjoxNzEzNDM2MDA5fSJ9.4A1tr0Xb4Z6jYvnlAJrrij9AK7SiyXtjCfK3AHNVYYQ; expires=Fri, 05 Aug 2078 20:53:38 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
| 8yec5n5.corredoresyasociados.com/favicon.ico | 91.103.253.42 | 404 Not Found | 107 B |
URL GET HTTP/1.18yec5n5.corredoresyasociados.com/favicon.ico IP91.103.253.42:80 ASN#210644 Aeza International Ltd
Requested byhttp://8yec5n5.corredoresyasociados.com/q3bCCwDV?sub1=male
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: 8yec5n5.corredoresyasociados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://8yec5n5.corredoresyasociados.com/q3bCCwDV?sub1=male
Cookie: _subid=376l60j2m93k0; b15e4=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjExMFwiOjE3MTM0MzYwMDl9LFwiY2FtcGFpZ25zXCI6e1wiMzJcIjoxNzEzNDM2MDA5fSxcInRpbWVcIjoxNzEzNDM2MDA5fSJ9.4A1tr0Xb4Z6jYvnlAJrrij9AK7SiyXtjCfK3AHNVYYQ
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 18 Apr 2024 10:26:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|