| GET shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile | 172.67.69.104 | 400 Bad Request | 2.1 kB |
URL User Request GET shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile IP 172.67.69.104:443
CertificateIssuerGoogle Trust Services Subjectshorturl.asia Fingerprint63:D0:65:0D:0B:6B:E9:DE:1D:4F:78:F4:2D:04:73:1D:8B:20:7B:CB ValiditySat, 29 Mar 2025 15:23:51 GMT - Fri, 27 Jun 2025 16:23:47 GMT
File typeHTML document, ASCII text, with very long lines (945) Hashe17005234955c37e53c9658813480095 6da84dd3a9f9a934dc249113bda70bcd3bda96b5 bcf0bf466b49cff609e01e6231bd4a434e132b3ba8fabd38d38db68136ca416d
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.asia domain |
GET /wb1MP)[ttps://www.roblox.com/users/123777594427/profile HTTP/1.1
Host: shorturl.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
date: Tue, 13 May 2025 13:59:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,User-Agent
access-control-allow-origin: https://www.shorturl.asia
cache-control: no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PpK1zRBCGNTolQfFkM%2BY2c7Kkn8GdJrhhfyIIbNUP%2FYiI3s9OBgIW45OVy6jZu9dyV3L4I5MJrpBT8at9u%2ByxPG0kBDvhOCbjCzt9TlKbTWexU43wG1bvZ%2BukGdij%2BU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93f2adb5d9867130-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6754&min_rtt=421&rtt_var=12683&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3203&recv_bytes=1157&delivery_rate=8274285&cwnd=254&unsent_bytes=0&cid=20cde941ee83082c&ts=704&x=0"
X-Firefox-Spdy: h2
|
|
| GET shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile | 172.67.69.104 | 301 Moved Permanently | 2.1 kB |
URL User Request GET shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile IP 172.67.69.104:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.asia domain |
GET /wb1MP)[ttps://www.roblox.com/users/123777594427/profile HTTP/1.1
Host: shorturl.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 13 May 2025 13:59:50 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 13 May 2025 14:59:50 GMT
Location: https://shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SeN3hFML8hbN58Z%2Fdk%2BqTw8bIETFgGSRS6uguZQ4Ket72W8%2BqNFpMHSPdIUOQiIng6hvocdgGBHZyOOfq0jqadISckrtg4X0BYqmIocHTMMKU5S3y1rCVh8W3N086xA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93f2adbaed1eb4f4-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=599&min_rtt=599&rtt_var=299&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=441&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| GET shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile | 172.67.69.104 | 400 Bad Request | 2.1 kB |
URL User Request GET shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile IP 172.67.69.104:443
CertificateIssuerGoogle Trust Services Subjectshorturl.asia Fingerprint63:D0:65:0D:0B:6B:E9:DE:1D:4F:78:F4:2D:04:73:1D:8B:20:7B:CB ValiditySat, 29 Mar 2025 15:23:51 GMT - Fri, 27 Jun 2025 16:23:47 GMT
File typeHTML document, ASCII text, with very long lines (945) Hash8ae35c5651f90e3a4faf26d4e152c300 84d4f7572543b81f8e130e0741acdb1be4f4b1c6 5b75e98bc9836d62eb29166fce64e999b33276229ff3925b8235dd0419f5ba00
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.asia domain |
GET /wb1MP)[ttps://www.roblox.com/users/123777594427/profile HTTP/1.1
Host: shorturl.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
date: Tue, 13 May 2025 13:59:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,User-Agent
access-control-allow-origin: https://www.shorturl.asia
cache-control: no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jcpuygmky089PkTvGXpntW4gwa6qwXQMqbuNUNsg9nNkuqEprzbMAF0iBDGvsfZ3roX%2BgXV33CDHL8Xr%2FL2I%2BBpLLXLz%2Fl83qUinIElUZyCHiv9TWAZIZ%2Fi7XhmuGYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93f2adbb1b4b7130-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4678&min_rtt=421&rtt_var=8474&sent=11&recv=15&lost=0&retrans=0&sent_bytes=5992&recv_bytes=1266&delivery_rate=8274285&cwnd=257&unsent_bytes=0&cid=20cde941ee83082c&ts=1109&x=0"
X-Firefox-Spdy: h2
|
|
| GET shorturl.asia/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.69.104 | 302 Found | 8.5 kB |
URL GET shorturl.asia/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 172.67.69.104:443
Requested byhttps://shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile CertificateIssuerGoogle Trust Services Subjectshorturl.asia Fingerprint63:D0:65:0D:0B:6B:E9:DE:1D:4F:78:F4:2D:04:73:1D:8B:20:7B:CB ValiditySat, 29 Mar 2025 15:23:51 GMT - Fri, 27 Jun 2025 16:23:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: shorturl.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 13 May 2025 13:59:50 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4rKsNhzcN72krsJajULsdiBi7QmKzT7HdC6TEPsOT0tQkW1YVhhvnShRp5oKoUxq6m9h0mzSMKOqkkGxKjD6INa1RaAEkJN1w5E7eV%2FqV%2FofruhZzdsOzkJ4FU8%2FkVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93f2adbde8917130-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=3328&min_rtt=421&rtt_var=5605&sent=16&recv=20&lost=0&retrans=0&sent_bytes=8570&recv_bytes=1553&delivery_rate=8274285&cwnd=257&unsent_bytes=0&cid=20cde941ee83082c&ts=1326&x=0"
X-Firefox-Spdy: h2
|
|
| GET shorturl.asia/favicon.ico | 172.67.69.104 | 200 OK | 1.2 kB |
URL GET shorturl.asia/favicon.ico IP 172.67.69.104:443
Requested byhttps://shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile CertificateIssuerGoogle Trust Services Subjectshorturl.asia Fingerprint63:D0:65:0D:0B:6B:E9:DE:1D:4F:78:F4:2D:04:73:1D:8B:20:7B:CB ValiditySat, 29 Mar 2025 15:23:51 GMT - Fri, 27 Jun 2025 16:23:47 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash5815a3bc99a6cf4442784a4732e67ff3 94fa5ec096b3c6cf87f0097d1f3dd0c662426ce6 fa68551714c769f5aeb63fc7346b03e3e11e3a1d80b85bf29d270eaba7863b91
GET /favicon.ico HTTP/1.1
Host: shorturl.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 May 2025 13:59:50 GMT
content-type: image/x-icon
last-modified: Sun, 05 Dec 2021 08:29:11 GMT
etag: W/"61ac7857-47e"
expires: Tue, 10 Jun 2025 06:37:49 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: HIT
age: 199321
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZWjSIhVOYovwbvwe6Qa6DrXuwyh6P%2F35rqF5ou5mPIVjeqHLViMB0v9ouvV2f32QsiS7k7VMdV2Jj%2F0mDeyIcFkQLYUWWXIfPDhEbT8Qh8zAGYW%2FAl3rfLCllHfQGmw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93f2adbdd8807130-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=2984&min_rtt=421&rtt_var=4891&sent=17&recv=21&lost=0&retrans=0&sent_bytes=9106&recv_bytes=1553&delivery_rate=8274285&cwnd=257&unsent_bytes=0&cid=20cde941ee83082c&ts=1349&x=0"
X-Firefox-Spdy: h2
|
|
| GET shorturl.asia/cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js? | 172.67.69.104 | 200 OK | 8.5 kB |
URL GET shorturl.asia/cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js? IP 172.67.69.104:443
Requested byhttps://shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile CertificateIssuerGoogle Trust Services Subjectshorturl.asia Fingerprint63:D0:65:0D:0B:6B:E9:DE:1D:4F:78:F4:2D:04:73:1D:8B:20:7B:CB ValiditySat, 29 Mar 2025 15:23:51 GMT - Fri, 27 Jun 2025 16:23:47 GMT
File typeJavaScript source, ASCII text, with very long lines (8456), with no line terminators Hash82c4641f82ced88d94c798bb9b17fb75 96279d0f97653bdeb0d1696548bb1912cc13b5d6 61913d25ba754b7d8ef8d213c727f225a6a053225a277fb86058ebf214ba7f1a
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js? HTTP/1.1
Host: shorturl.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 May 2025 13:59:50 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QhIEstm20zBO3Wl7sRryfq9r%2F0NauS86Iiar27Qp3%2FnF5IXMTTvjDnCfIYw5yvnRS%2FekgoBOlPXSMWvwZ0rF%2FCqGdwmqAfLFIgP6riAdiroxwG51oM83CaaeOsjMZus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93f2adbe391e7130-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2206&min_rtt=421&rtt_var=3230&sent=20&recv=25&lost=0&retrans=0&sent_bytes=10231&recv_bytes=1665&delivery_rate=8274285&cwnd=257&unsent_bytes=0&cid=20cde941ee83082c&ts=1377&x=0"
X-Firefox-Spdy: h2
|
|
| POST shorturl.asia/cdn-cgi/challenge-platform/h/b/jsd/r/0.2557731258931577:1747142746:Myu9YZqOQGSui05jCNX0ou34CSyKehMdwdU63nrHMe8/93f2adbb1b4b7130 | 172.67.69.104 | 200 OK | 0 B |
URL POST shorturl.asia/cdn-cgi/challenge-platform/h/b/jsd/r/0.2557731258931577:1747142746:Myu9YZqOQGSui05jCNX0ou34CSyKehMdwdU63nrHMe8/93f2adbb1b4b7130 IP 172.67.69.104:443
Requested byhttps://shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile CertificateIssuerGoogle Trust Services Subjectshorturl.asia Fingerprint63:D0:65:0D:0B:6B:E9:DE:1D:4F:78:F4:2D:04:73:1D:8B:20:7B:CB ValiditySat, 29 Mar 2025 15:23:51 GMT - Fri, 27 Jun 2025 16:23:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.2557731258931577:1747142746:Myu9YZqOQGSui05jCNX0ou34CSyKehMdwdU63nrHMe8/93f2adbb1b4b7130 HTTP/1.1
Host: shorturl.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12126
Origin: https://shorturl.asia
DNT: 1
Connection: keep-alive
Referer: https://shorturl.asia/wb1MP)[ttps://www.roblox.com/users/123777594427/profile
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 May 2025 13:59:50 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=L9OPGN7xjEV9HyYwXM3wHKgnsVXQ6otQOcWQbxzis6Q-1747144790-1.2.1.1-RZ2ZYoSWwnc6QphdNeAFtdJe.UEIVjTVksuv0cx3mnXH6CCdXka9MNGTYbUSJxP4QMYiKIhqbljHpnrANTDM9d_NO9Nkw1FyRUSBrfdJuTWhQK55WnhdXUZnIL1e.qlyQ1laSpzJ1_mkmcMih36pKamWGdIhRVBuVTFhosBz4Ly0AXtLfKKhfe5HpVjoq.YoX7BwvOy9is7FnqLpptRqT0Mdw_KON3V_iQLEwT6EkAkvdaSRkjYOdnoH2BxN6To0s9mJt4kyS9maxpN_e3XU165RWqjF3NUu42jssXTZyh9Blo.yjJ7IxhVNjxSKGyTt4abSWxLtChkpU_VHxPgtIO4NhOo7gQX_aaD9VUzdJlU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=shorturl.asia; Expires=Wed, 13 May 2026 13:59:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AboSECU5S4qjKwfRrtsYFm85ln0OEj40LcBtyd1hAWHXOj07dFTRDiMuKTnHpbGiK8RLCgXJaX38OcwMC1JrDxCTxm4o2QYlQMEpyxhMv0Skv4dXWa31Jt61UEnMrdM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93f2adbf4b297130-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1838&min_rtt=421&rtt_var=2446&sent=26&recv=38&lost=0&retrans=0&sent_bytes=14896&recv_bytes=14075&delivery_rate=8274285&cwnd=257&unsent_bytes=0&cid=20cde941ee83082c&ts=1559&x=0"
X-Firefox-Spdy: h2
|
|