URL User Request GET HTTP/3IP 104.21.79.240:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint8B:26:3C:46:E9:69:78:18:E2:0C:3B:70:64:A2:49:BE:0C:C7:9D:7C ValidityMon, 13 Feb 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File typeHTML document, ASCII text, with no line terminators Hash25ae06b33586d6bb97ec601649dec8a5 e611cb2fae8faf7cbf9ca8c98ea04e082a5c2b07 5cd27fae578eafc7e882ce2b0f342496285d4366a55d6b9ed000c7183220de54
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: killior.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Wed, 06 Dec 2023 13:03:58 GMT
content-type: text/html
location: https://killior.top/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4TcHKyVJwXd5MvbJ28aR0ytbae7RHk7oMREvL8fu1ZRHzQvOI6CG6MkjdPxtHK5BBCs4MTKE3FChOgq7U7y43qbdk5r57J0w7ILlc6zWbZJpkXSsJ8N9HlPidV2tPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8314bb66f98156cc-OSL
alt-svc: h3=":443"; ma=86400
|
URL User Request GET HTTP/3IP104.21.79.240:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint8B:26:3C:46:E9:69:78:18:E2:0C:3B:70:64:A2:49:BE:0C:C7:9D:7C ValidityMon, 13 Feb 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File typeHTML document, ASCII text, with no line terminators Hash25ae06b33586d6bb97ec601649dec8a5 e611cb2fae8faf7cbf9ca8c98ea04e082a5c2b07 5cd27fae578eafc7e882ce2b0f342496285d4366a55d6b9ed000c7183220de54
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: killior.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 06 Dec 2023 13:03:58 GMT
content-type: text/html
location: https://killior.top/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K%2FZvMwgPwdj2mgaXyNIiUfPmK2tgbaQ4NBf24hfvBOcrBrTCs7zCNwQx3Y6S3%2BgofLE3DmK%2BXKiglO6tAoD28%2F9Cyjn0%2Bx8bJfXgFoy9JxOD98YHsknGaaaQ9ui7MA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8314bb61efc256af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
172.67.172.4