| github.moeyy.xyz/https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe |  104.21.14.168 | 403 Forbidden | 14 B |
URL User Request GET HTTP/1.1github.moeyy.xyz/https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe IP104.21.14.168:80
File typeASCII text, with no line terminators Hashd3d11a221d183ce06a75950631e42cb1 a4da734e673f93d84bc52c955729495efa4b5ca8 a7596aa3beb103b542384e4c191806e0c5f2c0dffd6094c7a9e2e1185cd81e7c
| NIDS | Severity | Alert |
|---|
| suricata | high | ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016 |
GET /https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe HTTP/1.1
Host: github.moeyy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 24 Dec 2024 12:53:43 GMT
content-type: text/plain; charset=utf-8
content-length: 14
cf-cache-status: EXPIRED
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f70bc5f5b99712a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5808&min_rtt=432&rtt_var=10743&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3193&recv_bytes=1181&delivery_rate=7313131&cwnd=254&unsent_bytes=0&cid=a2bd016e1ebe6268&ts=383&x=0"
X-Firefox-Spdy: h2
|
| github.moeyy.xyz/https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe | 104.21.14.168 | 403 Forbidden | 14 B |
URL User Request GET HTTP/1.1github.moeyy.xyz/https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe IP104.21.14.168:80
File typeASCII text, with no line terminators Hashd3d11a221d183ce06a75950631e42cb1 a4da734e673f93d84bc52c955729495efa4b5ca8 a7596aa3beb103b542384e4c191806e0c5f2c0dffd6094c7a9e2e1185cd81e7c
| NIDS | Severity | Alert |
|---|
| suricata | high | ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016 |
GET /https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe HTTP/1.1
Host: github.moeyy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Tue, 24 Dec 2024 12:53:43 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 14
Connection: keep-alive
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8f70bc625b60b523-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=644&min_rtt=644&rtt_var=322&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=476&delivery_rate=0&cwnd=248&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| github.moeyy.xyz/favicon.ico | 104.21.14.168 | 200 OK | 3.1 kB |
URL GET HTTP/1.1github.moeyy.xyz/favicon.ico IP104.21.14.168:80
Requested byhttp://github.moeyy.xyz/https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe
File typeMS Windows icon resource - 1 icon, 64x64, 32 bits/pixel Hash65f4d52847037d57170193ee74daf643 dd43ded0437694aa2994f8dc7e76ce4d51f1af54 136da2b428063efcdddfba8836d9285bdd61457ea6d0ee4ff2435604d1385e4e
GET /favicon.ico HTTP/1.1
Host: github.moeyy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://github.moeyy.xyz/https:/github.com/Project-InitVerse/chain/releases/download/v1.0.0/geth-windows-x64.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 24 Dec 2024 12:53:44 GMT
Content-Type: image/vnd.microsoft.icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 07 Oct 2024 20:20:01 GMT
CF-Cache-Status: REVALIDATED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8f70bc656fb1b523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=627&min_rtt=511&rtt_var=274&sent=3&recv=5&lost=0&retrans=0&sent_bytes=488&recv_bytes=908&delivery_rate=2833659&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|