| vikingfile.com/f/dj3MCk8bEn" |  104.21.32.1 | 302 Found | 1.2 kB |
URL User Request GET HTTP/3vikingfile.com/f/dj3MCk8bEn" IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectvikingfile.com Fingerprint10:39:12:F3:48:2D:5F:59:D7:B3:3A:BE:54:E5:84:3B:CC:B6:B9:F3 ValiditySun, 16 Feb 2025 11:28:46 GMT - Sat, 17 May 2025 12:27:32 GMT
File typeHTML document, ASCII text, with very long lines (471), with CRLF, LF line terminators Hashfa9ba62a0b7caf174d39f6897ab22dad 428dc97262f924ac1377e222555aa997de336113 bdf21b71b2c2de38b2d2ac7ea6eb3196790559ec629b4357767a95beea1674a6
GET /f/dj3MCk8bEn" HTTP/1.1
Host: vikingfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 22 Feb 2025 15:48:40 GMT
content-type: text/html; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SmOexX9WzUCtXG%2FMLeNqqrFHROStKhGqGlrQVS0vqMPqt4X6nM8q9XN832sRjRZfUWz2Anv%2FAplWNQg%2BoFDO68gPJXKrUOorUF%2BxBAoQ1jSW9YlpkSupmQ%2FXZ%2BGyomF8jQ%3D%3D"}],"group":"cf-nel","max_age":604800}
location: https://vikingf1le.us.to/f/dj3MCk8bEn"
cache-control: max-age=0, must-revalidate, private
expires: Sat, 22 Feb 2025 15:48:40 GMT
cf-cache-status: DYNAMIC
cf-ray: 91601f2b5c8fb505-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
| vikingf1le.us.to/f/dj3MCk8bEn" | 104.21.16.1 | 301 Moved Permanently | 10 kB |
URL User Request GET HTTP/3vikingf1le.us.to/f/dj3MCk8bEn" IP104.21.16.1:443
CertificateIssuerGoogle Trust Services Subjectvikingf1le.us.to Fingerprint26:BD:EF:E8:7E:81:6A:FF:F0:A2:2A:F3:04:BF:61:74:A1:F6:45:DD ValiditySat, 01 Feb 2025 19:47:49 GMT - Fri, 02 May 2025 20:46:36 GMT
Hash154aaaa9454596ea013701de55512077 496c077564cc1b74a77267fc3dd620a02b9190d5 db2a79e45901c43f7926a854b1c4bc1d3592383b8dafbc7c089576f58c440794
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.us .to Domain |
GET /f/dj3MCk8bEn" HTTP/1.1
Host: vikingf1le.us.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Sat, 22 Feb 2025 15:48:41 GMT
content-type: text/html
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2B2%2FQuI3FhbCWnojNyDeVddQ3w5amfi1T4Nz0XtXwS8Lqda61UJmPRuDuG2BDB1%2By1jUFpbxsMFR6cioGwxsf36L9bb8c1rdz2bYERQxs4IiQFzxEVW0TkhkBk1L2hXzL%2Buj"}],"group":"cf-nel","max_age":604800}
server-timing: cfCacheStatus;desc="DYNAMIC"
location: https://vikingfile.com/f/dj3MCk8bEn"
cf-cache-status: DYNAMIC
cf-ray: 91601f2e09f65690-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
0.0.0.0