| zerossl.ocsp.sectigo.com/ |  104.18.38.233 | | 727 B |
URL zerossl.ocsp.sectigo.com/ IP104.18.38.233:0
Hash003a39b0c0439ff154e775b055d220ab 34e0a4ca5249771eef2700a668633b75106dfc32 117b12d196937713ed38ef59b87f5d2aa08b970e5003ee5dfbcfdf6ce78d3399
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:17:50 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 07 May 2024 04:56:14 GMT
Expires: Tue, 14 May 2024 04:56:13 GMT
Etag: "34e0a4ca5249771eef2700a668633b75106dfc32"
Cache-Control: max-age=314902,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 881a363429f10b3d-OSL
|
|
| |  154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:17:50 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: bf63bdcdbc7646855c24928bd0d4deed-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:17:50 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 2a0fd03d9468ec8947e55e2539a2a321-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge | 154.62.105.118 | 200 OK | 138 B |
URL GET HTTP/1.1www.totalit.world/hcdn-cgi/jschallenge IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
Hash18e0c78b0f54e9c0429773317c0c2430 c247d8c6caf941b204deba549e70ec6924a280ba d3d61bcbd5e897f2d1b191e6f06b695ffbf4329d0c9ef49ac8859169da987fe3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:17:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 7924a4f74f23a6933302542216788b85-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.totalit.world/favicon.ico | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL GET HTTP/1.1www.totalit.world/favicon.ico IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /favicon.ico HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:17:50 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: d7a92c30168c03b08f296e240d81ed9c-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge-validate | 154.62.105.118 | | 0 B |
URL www.totalit.world/hcdn-cgi/jschallenge-validate IP154.62.105.118:0 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.totalit.world
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:17:53 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEADHtAA3tw82rICqDvjAkrokJcfLlRwWj8LjkFW_bPxhqBHj5mAAAAAADOAAAM9q1JDAjnI5H8IvdLYvhUAAAA9_wB0a0Zxrk60ANOwFNVog; Path=/; SameSite=Lax; HttpOnly
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 7574c06fea68b7d37d8c26558999ba4a-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| | 154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.totalit.world/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: hcdn=AQEADHtAA3tw82rICqDvjAkrokJcfLlRwWj8LjkFW_bPxhqBHj5mAAAAAADOAAAM9q1JDAjnI5H8IvdLYvhUAAAA9_wB0a0Zxrk60ANOwFNVog
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:17:53 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: d4ff875bf47a4633ba64c88275f5a42d-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEADHtAA3tw82rICqDvjAkrokJcfLlRwWj8LjkFW_bPxhqBHj5mAAAAAADOAAAM9q1JDAjnI5H8IvdLYvhUAAAA9_wB0a0Zxrk60ANOwFNVog
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:17:53 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: a3c475a79ea135e95a670f9e79f52801-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge | 154.62.105.118 | 200 OK | 138 B |
URL GET HTTP/1.1www.totalit.world/hcdn-cgi/jschallenge IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
Hash18e0c78b0f54e9c0429773317c0c2430 c247d8c6caf941b204deba549e70ec6924a280ba d3d61bcbd5e897f2d1b191e6f06b695ffbf4329d0c9ef49ac8859169da987fe3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEADHtAA3tw82rICqDvjAkrokJcfLlRwWj8LjkFW_bPxhqBHj5mAAAAAADOAAAM9q1JDAjnI5H8IvdLYvhUAAAA9_wB0a0Zxrk60ANOwFNVog
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:17:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 4e00955ec859bf5e2ac484ac91c4f5e4-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.totalit.world/favicon.ico | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL GET HTTP/1.1www.totalit.world/favicon.ico IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /favicon.ico HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEADHtAA3tw82rICqDvjAkrokJcfLlRwWj8LjkFW_bPxhqBHj5mAAAAAADOAAAM9q1JDAjnI5H8IvdLYvhUAAAA9_wB0a0Zxrk60ANOwFNVog
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:17:53 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 2df012ad3fcc8d6d915a44a666d5dcc7-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge-validate | 154.62.105.118 | | 0 B |
URL www.totalit.world/hcdn-cgi/jschallenge-validate IP154.62.105.118:0 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.totalit.world
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEADHtAA3tw82rICqDvjAkrokJcfLlRwWj8LjkFW_bPxhqBHj5mAAAAAADOAAAM9q1JDAjnI5H8IvdLYvhUAAAA9_wB0a0Zxrk60ANOwFNVog
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:17:56 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAYZ1H4WGWYpdp6-jY-okBZoniqQTBVtMHBo_oOsRV9hSBHj5mAAMAAADnAACC7AioaqbaJ3mDwGr5lwlHAAAAFLQdZ3AIlbL07ojBVA8ygQ; Path=/; SameSite=Lax; HttpOnly
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: d5fc6f41e6f6efcee8b90e3a7fecb613-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| | 154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.totalit.world/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: hcdn=AQEAYZ1H4WGWYpdp6-jY-okBZoniqQTBVtMHBo_oOsRV9hSBHj5mAAMAAADnAACC7AioaqbaJ3mDwGr5lwlHAAAAFLQdZ3AIlbL07ojBVA8ygQ
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:17:56 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: b9f0a6c4d9894ae2779be57512f002ba-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAYZ1H4WGWYpdp6-jY-okBZoniqQTBVtMHBo_oOsRV9hSBHj5mAAMAAADnAACC7AioaqbaJ3mDwGr5lwlHAAAAFLQdZ3AIlbL07ojBVA8ygQ
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:17:56 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 888eca328eadd5144973cac6e16e285d-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge | 154.62.105.118 | 200 OK | 138 B |
URL GET HTTP/1.1www.totalit.world/hcdn-cgi/jschallenge IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
Hash18e0c78b0f54e9c0429773317c0c2430 c247d8c6caf941b204deba549e70ec6924a280ba d3d61bcbd5e897f2d1b191e6f06b695ffbf4329d0c9ef49ac8859169da987fe3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAYZ1H4WGWYpdp6-jY-okBZoniqQTBVtMHBo_oOsRV9hSBHj5mAAMAAADnAACC7AioaqbaJ3mDwGr5lwlHAAAAFLQdZ3AIlbL07ojBVA8ygQ
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:17:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: f540c5b3c4785ccedea3c25e253a5562-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.totalit.world/favicon.ico | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL GET HTTP/1.1www.totalit.world/favicon.ico IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /favicon.ico HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAYZ1H4WGWYpdp6-jY-okBZoniqQTBVtMHBo_oOsRV9hSBHj5mAAMAAADnAACC7AioaqbaJ3mDwGr5lwlHAAAAFLQdZ3AIlbL07ojBVA8ygQ
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:17:57 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 2fd77f3fe37d6c874cc1821cf92848a6-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge-validate | 154.62.105.118 | | 0 B |
URL www.totalit.world/hcdn-cgi/jschallenge-validate IP154.62.105.118:0 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.totalit.world
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAYZ1H4WGWYpdp6-jY-okBZoniqQTBVtMHBo_oOsRV9hSBHj5mAAMAAADnAACC7AioaqbaJ3mDwGr5lwlHAAAAFLQdZ3AIlbL07ojBVA8ygQ
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:00 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAllYhxGC8gFWXXmLA7lNnksacgtwjcUPCgVgUAx-5r8yBHj5mAAcAAADnAADH9T58issnZGKYfiphwNJVAAAAKLAtEoz5XJkhQXy_oHQDhA; Path=/; SameSite=Lax; HttpOnly
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 4c793e970b3429df137f9954ac098019-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| | 154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.totalit.world/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: hcdn=AQEAllYhxGC8gFWXXmLA7lNnksacgtwjcUPCgVgUAx-5r8yBHj5mAAcAAADnAADH9T58issnZGKYfiphwNJVAAAAKLAtEoz5XJkhQXy_oHQDhA
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:18:00 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 3fde3fec1426b94b487daad1ab407e3d-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAllYhxGC8gFWXXmLA7lNnksacgtwjcUPCgVgUAx-5r8yBHj5mAAcAAADnAADH9T58issnZGKYfiphwNJVAAAAKLAtEoz5XJkhQXy_oHQDhA
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:00 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 8f3873ba074391fc26588aff53049ff2-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge | 154.62.105.118 | 200 OK | 138 B |
URL GET HTTP/1.1www.totalit.world/hcdn-cgi/jschallenge IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
Hash18e0c78b0f54e9c0429773317c0c2430 c247d8c6caf941b204deba549e70ec6924a280ba d3d61bcbd5e897f2d1b191e6f06b695ffbf4329d0c9ef49ac8859169da987fe3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAllYhxGC8gFWXXmLA7lNnksacgtwjcUPCgVgUAx-5r8yBHj5mAAcAAADnAADH9T58issnZGKYfiphwNJVAAAAKLAtEoz5XJkhQXy_oHQDhA
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: d9190137bc65d8227c28badbbb194f81-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.totalit.world/favicon.ico | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL GET HTTP/1.1www.totalit.world/favicon.ico IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /favicon.ico HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAllYhxGC8gFWXXmLA7lNnksacgtwjcUPCgVgUAx-5r8yBHj5mAAcAAADnAADH9T58issnZGKYfiphwNJVAAAAKLAtEoz5XJkhQXy_oHQDhA
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:00 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 3f42d6f0ffaff0967466aaf9ba689702-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge-validate | 154.62.105.118 | | 0 B |
URL www.totalit.world/hcdn-cgi/jschallenge-validate IP154.62.105.118:0 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.totalit.world
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAllYhxGC8gFWXXmLA7lNnksacgtwjcUPCgVgUAx-5r8yBHj5mAAcAAADnAADH9T58issnZGKYfiphwNJVAAAAKLAtEoz5XJkhQXy_oHQDhA
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:03 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAS_N5XMw-F5vryL_I7Y_drS7JxRxsmChWkBDiWjJRPKqBHj5mAAoAAADnAADp2FHjz_HcAaACzI6wWXH0AAAAhcboekxQJXLs0PoIwyRXYg; Path=/; SameSite=Lax; HttpOnly
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 9e9fee872fc01bb8a19de3a5d77354e3-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| | 154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.totalit.world/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: hcdn=AQEAS_N5XMw-F5vryL_I7Y_drS7JxRxsmChWkBDiWjJRPKqBHj5mAAoAAADnAADp2FHjz_HcAaACzI6wWXH0AAAAhcboekxQJXLs0PoIwyRXYg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:18:03 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 166694354e39829a7cdfc551d895dfd5-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAS_N5XMw-F5vryL_I7Y_drS7JxRxsmChWkBDiWjJRPKqBHj5mAAoAAADnAADp2FHjz_HcAaACzI6wWXH0AAAAhcboekxQJXLs0PoIwyRXYg
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:03 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: e7b852e9150352be7563e70f6a146e39-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge | 154.62.105.118 | 200 OK | 138 B |
URL GET HTTP/1.1www.totalit.world/hcdn-cgi/jschallenge IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
Hash18e0c78b0f54e9c0429773317c0c2430 c247d8c6caf941b204deba549e70ec6924a280ba d3d61bcbd5e897f2d1b191e6f06b695ffbf4329d0c9ef49ac8859169da987fe3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAS_N5XMw-F5vryL_I7Y_drS7JxRxsmChWkBDiWjJRPKqBHj5mAAoAAADnAADp2FHjz_HcAaACzI6wWXH0AAAAhcboekxQJXLs0PoIwyRXYg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: bd60b4242f807f1f808142f376755f21-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.totalit.world/favicon.ico | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL GET HTTP/1.1www.totalit.world/favicon.ico IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /favicon.ico HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAS_N5XMw-F5vryL_I7Y_drS7JxRxsmChWkBDiWjJRPKqBHj5mAAoAAADnAADp2FHjz_HcAaACzI6wWXH0AAAAhcboekxQJXLs0PoIwyRXYg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:03 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: ee66297ed5df3ff378818b0f22af0513-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge-validate | 154.62.105.118 | | 0 B |
URL www.totalit.world/hcdn-cgi/jschallenge-validate IP154.62.105.118:0 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.totalit.world
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAS_N5XMw-F5vryL_I7Y_drS7JxRxsmChWkBDiWjJRPKqBHj5mAAoAAADnAADp2FHjz_HcAaACzI6wWXH0AAAAhcboekxQJXLs0PoIwyRXYg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:06 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAcexLx7O23vnjL4Uh2uyfc_lOUQtq-SLpbqS-l1N_oj-BHj5mAA0AAADnAACuvWPGTbZTq72xg2nzVLheAAAAH_KWLeUqDomn8VOt7jbAVg; Path=/; SameSite=Lax; HttpOnly
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 25e1bb6398cb7cb06a831020a633722c-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| | 154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.totalit.world/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: hcdn=AQEAcexLx7O23vnjL4Uh2uyfc_lOUQtq-SLpbqS-l1N_oj-BHj5mAA0AAADnAACuvWPGTbZTq72xg2nzVLheAAAAH_KWLeUqDomn8VOt7jbAVg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:18:06 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 8281fb0b6e2be77740ef45d317362908-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAcexLx7O23vnjL4Uh2uyfc_lOUQtq-SLpbqS-l1N_oj-BHj5mAA0AAADnAACuvWPGTbZTq72xg2nzVLheAAAAH_KWLeUqDomn8VOt7jbAVg
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:06 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 900b2464c11ee5816b8e276a9325fde9-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge | 154.62.105.118 | 200 OK | 138 B |
URL GET HTTP/1.1www.totalit.world/hcdn-cgi/jschallenge IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
Hash18e0c78b0f54e9c0429773317c0c2430 c247d8c6caf941b204deba549e70ec6924a280ba d3d61bcbd5e897f2d1b191e6f06b695ffbf4329d0c9ef49ac8859169da987fe3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAcexLx7O23vnjL4Uh2uyfc_lOUQtq-SLpbqS-l1N_oj-BHj5mAA0AAADnAACuvWPGTbZTq72xg2nzVLheAAAAH_KWLeUqDomn8VOt7jbAVg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: b8bd083a55d351bc064473d2cebb445a-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.totalit.world/favicon.ico | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL GET HTTP/1.1www.totalit.world/favicon.ico IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /favicon.ico HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAcexLx7O23vnjL4Uh2uyfc_lOUQtq-SLpbqS-l1N_oj-BHj5mAA0AAADnAACuvWPGTbZTq72xg2nzVLheAAAAH_KWLeUqDomn8VOt7jbAVg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:06 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: d8385fe7380a2bc9c2619acbcb40dd6a-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge-validate | 154.62.105.118 | | 0 B |
URL www.totalit.world/hcdn-cgi/jschallenge-validate IP154.62.105.118:0 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.totalit.world
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAcexLx7O23vnjL4Uh2uyfc_lOUQtq-SLpbqS-l1N_oj-BHj5mAA0AAADnAACuvWPGTbZTq72xg2nzVLheAAAAH_KWLeUqDomn8VOt7jbAVg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:09 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAT7e1azWzo1SpLbCp1Vi3ziQnjS-DBxlKJYMuIFNMJ46BHj5mABAAAADnAADPhtFFEQ5X5B2wGTXgD6VxAAAA2YMboXZo8Q5sXg_bTEK0Vw; Path=/; SameSite=Lax; HttpOnly
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 4817842851705b1b4dd8ef908ab99dc8-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| | 154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.totalit.world/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: hcdn=AQEAT7e1azWzo1SpLbCp1Vi3ziQnjS-DBxlKJYMuIFNMJ46BHj5mABAAAADnAADPhtFFEQ5X5B2wGTXgD6VxAAAA2YMboXZo8Q5sXg_bTEK0Vw
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:18:09 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: f1949a94983624b978e1f42eaaed4430-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAT7e1azWzo1SpLbCp1Vi3ziQnjS-DBxlKJYMuIFNMJ46BHj5mABAAAADnAADPhtFFEQ5X5B2wGTXgD6VxAAAA2YMboXZo8Q5sXg_bTEK0Vw
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:09 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: aa4cb919fa7275bb375fa20dd6cf50ce-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge | 154.62.105.118 | 200 OK | 138 B |
URL GET HTTP/1.1www.totalit.world/hcdn-cgi/jschallenge IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
Hash18e0c78b0f54e9c0429773317c0c2430 c247d8c6caf941b204deba549e70ec6924a280ba d3d61bcbd5e897f2d1b191e6f06b695ffbf4329d0c9ef49ac8859169da987fe3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAT7e1azWzo1SpLbCp1Vi3ziQnjS-DBxlKJYMuIFNMJ46BHj5mABAAAADnAADPhtFFEQ5X5B2wGTXgD6VxAAAA2YMboXZo8Q5sXg_bTEK0Vw
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: e2c0a1d8048672228bd75ad0b459f464-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.totalit.world/favicon.ico | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL GET HTTP/1.1www.totalit.world/favicon.ico IP154.62.105.118:80 ASN#47583 Hostinger International Limited
Requested byhttp://www.totalit.world/
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET /favicon.ico HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAT7e1azWzo1SpLbCp1Vi3ziQnjS-DBxlKJYMuIFNMJ46BHj5mABAAAADnAADPhtFFEQ5X5B2wGTXgD6VxAAAA2YMboXZo8Q5sXg_bTEK0Vw
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:09 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 994c05ca09a55930f26a9923c60a70fd-srv-edge3
|
|
| www.totalit.world/hcdn-cgi/jschallenge-validate | 154.62.105.118 | | 0 B |
URL www.totalit.world/hcdn-cgi/jschallenge-validate IP154.62.105.118:0 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.totalit.world
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAT7e1azWzo1SpLbCp1Vi3ziQnjS-DBxlKJYMuIFNMJ46BHj5mABAAAADnAADPhtFFEQ5X5B2wGTXgD6VxAAAA2YMboXZo8Q5sXg_bTEK0Vw
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: hcdn
Date: Fri, 10 May 2024 13:18:12 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAnexkH9ATkCvcTopL54V4VHenhC7SjQNcJo96pwjg_0WBHj5mABMAAADnAAAI3gZrkSBefV3AgF8x2L2jAAAAUBxmONjzO-7u4xWt_c7vdg; Path=/; SameSite=Lax; HttpOnly
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: a9a03e7c6b3a424b565b52c62f5430a5-srv-edge3
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| | 154.62.105.118 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.totalit.world/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: hcdn=AQEAnexkH9ATkCvcTopL54V4VHenhC7SjQNcJo96pwjg_0WBHj5mABMAAADnAAAI3gZrkSBefV3AgF8x2L2jAAAAUBxmONjzO-7u4xWt_c7vdg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
server: hcdn
date: Fri, 10 May 2024 13:18:13 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 7078b2f1b63b2fd6914e62b72424008e-srv-edge3
X-Firefox-Spdy: h2
|
|
| | 154.62.105.118 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2IP154.62.105.118:443 ASN#47583 Hostinger International Limited
CertificateIssuerZeroSSL Subjecttotalit.world FingerprintE3:4D:F4:87:61:3D:EB:27:82:0C:C4:B7:25:3D:19:49:50:1A:79:37 ValiditySun, 05 May 2024 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain | | suricata | medium | ET INFO HTTP Request to Suspicious *.world Domain |
GET / HTTP/1.1
Host: www.totalit.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.totalit.world/
DNT: 1
Connection: keep-alive
Cookie: hcdn=AQEAnexkH9ATkCvcTopL54V4VHenhC7SjQNcJo96pwjg_0WBHj5mABMAAADnAAAI3gZrkSBefV3AgF8x2L2jAAAAUBxmONjzO-7u4xWt_c7vdg
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: hcdn
Date: Fri, 10 May 2024 13:18:13 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 448289c6b921975a2eaa6499e05b1af1-srv-edge3
|
|