| cysaw.top/uploads/2513280.zip | 172.67.202.14 | 301 Moved Permanently | 167 B |
URL User Request GET HTTP/3cysaw.top/uploads/2513280.zip IP 172.67.202.14:443
CertificateIssuerGoogle Trust Services Subjectcysaw.top Fingerprint2A:84:9D:9E:3F:C2:FD:67:E0:B7:1D:BF:9B:18:F1:FA:E5:56:E0:85 ValidityTue, 03 Dec 2024 14:36:09 GMT - Mon, 03 Mar 2025 14:36:08 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET /uploads/2513280.zip HTTP/1.1
Host: cysaw.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Mon, 06 Jan 2025 10:24:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 06 Jan 2025 11:24:59 GMT
Location: https://cysaw.top/uploads/2513280.zip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b3o9oGlwGpupGsOYC7BwQFt2asD0brAF8HC47duatMDp7DaiGElI7dWdnS4eXDNMvPIyLqjo1VHtsqVJZQUrXYIucyKhu33o3Fd6ZzGeAxBhSwKdVFDewK4MSXc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8fdb006248570b49-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=555&min_rtt=555&rtt_var=277&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=401&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| cysaw.top/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.202.14 | 302 Found | 0 B |
URL GET HTTP/3cysaw.top/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 172.67.202.14:443
Requested byhttps://cysaw.top/uploads/2513280.zip CertificateIssuerGoogle Trust Services Subjectcysaw.top Fingerprint2A:84:9D:9E:3F:C2:FD:67:E0:B7:1D:BF:9B:18:F1:FA:E5:56:E0:85 ValidityTue, 03 Dec 2024 14:36:09 GMT - Mon, 03 Mar 2025 14:36:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: cysaw.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Mon, 06 Jan 2025 10:24:59 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/849bfe45bf45/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F8V%2Bv8lBOlCCHi4DaJ%2BHR2783ZskZODBXTcjzoEqpiaghutqBaZDW5QxxZcRWs76TuKO54DV4kqVwjcsTSovh3Y%2B6Q22qauZCnaMvE1v7PDtbVBwuLXmEftghAE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fdb00649d795696-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3979&min_rtt=1599&rtt_var=2552&sent=17&recv=13&lost=0&retrans=0&sent_bytes=6388&recv_bytes=3474&delivery_rate=8818&cwnd=12000&unsent_bytes=0&cid=51c13ddea3aad88c&ts=479&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cysaw.top/cdn-cgi/rum? | 172.67.202.14 | 204 No Content | 0 B |
IP 172.67.202.14:443
Requested byhttps://cysaw.top/uploads/2513280.zip CertificateIssuerGoogle Trust Services Subjectcysaw.top Fingerprint2A:84:9D:9E:3F:C2:FD:67:E0:B7:1D:BF:9B:18:F1:FA:E5:56:E0:85 ValidityTue, 03 Dec 2024 14:36:09 GMT - Mon, 03 Mar 2025 14:36:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: cysaw.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1369
Origin: https://cysaw.top
DNT: 1
Connection: keep-alive
Referer: https://cysaw.top/uploads/2513280.zip
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Mon, 06 Jan 2025 10:24:59 GMT
access-control-allow-origin: https://cysaw.top
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8fdb00649d845696-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| cysaw.top/cdn-cgi/challenge-platform/h/g/jsd/r/8fdb00626b565696 | 172.67.202.14 | 200 OK | 0 B |
URL POST HTTP/3cysaw.top/cdn-cgi/challenge-platform/h/g/jsd/r/8fdb00626b565696 IP 172.67.202.14:443
Requested byhttps://cysaw.top/uploads/2513280.zip CertificateIssuerGoogle Trust Services Subjectcysaw.top Fingerprint2A:84:9D:9E:3F:C2:FD:67:E0:B7:1D:BF:9B:18:F1:FA:E5:56:E0:85 ValidityTue, 03 Dec 2024 14:36:09 GMT - Mon, 03 Mar 2025 14:36:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/8fdb00626b565696 HTTP/1.1
Host: cysaw.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12148
Origin: https://cysaw.top
DNT: 1
Connection: keep-alive
Referer: https://cysaw.top/uploads/2513280.zip
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 06 Jan 2025 10:24:59 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.cysaw.top; Priority=High; HttpOnly; Secure; SameSite=None
cf_clearance=qjHV0OX2HYS4bS9bj92ifvZJ1y62tUMF1ksFM.Nc9dk-1736159099-1.2.1.1-Nfo6Wvsu4XAUKoSNMZIQ7RmAUEkE.Gp0tvoDTlAIKKQ885MhVsz9Kvc_81EHNh0kFGudhDvZCsGj1UDEBZs8p1yGntPrm.x80x9FXAv9xyOUXR2n8h_sFWkxb.0oZ.uAsEViNJKMzA.pwuEbSH_opJQK0jecVm_6A.DT4yasPD5CRaxedjP5ZxpFTgnt4dB7GyRFZj3Omu0WrLM9Le_Pbs9VSKp9hxf_aCkopaNDgZVRm1W1go04eFdpIX23obayyG4ro.TSVW7f8QVUKQdWFgAZAKQI3qZS6plamgyAKVlXHcFlQJU89ejGf_FGGKLvoXYZ.CMZasA7HmubvXIxyw; Path=/; Expires=Tue, 06-Jan-26 10:24:59 GMT; Domain=.cysaw.top; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NShTtqt4kyI3564e6ZcVS%2FpuVjtVBYpowD%2FEw7XJythdbcOq%2BPG0HGEBTrSlmARq4hKSam5gpzgwdWTwcq8xaJWC8ij5GapTq8X8%2FCmMynghwBjEII5Wpd%2FYZ%2F8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fdb00662f6d5696-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3338&min_rtt=1174&rtt_var=2542&sent=26&recv=26&lost=0&retrans=0&sent_bytes=12173&recv_bytes=16640&delivery_rate=391424&cwnd=12000&unsent_bytes=0&cid=51c13ddea3aad88c&ts=739&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cysaw.top/cdn-cgi/challenge-platform/h/g/scripts/jsd/849bfe45bf45/main.js? | 172.67.202.14 | 200 OK | 13 kB |
URL GET HTTP/3cysaw.top/cdn-cgi/challenge-platform/h/g/scripts/jsd/849bfe45bf45/main.js? IP 172.67.202.14:443
Requested byhttps://cysaw.top/uploads/2513280.zip CertificateIssuerGoogle Trust Services Subjectcysaw.top Fingerprint2A:84:9D:9E:3F:C2:FD:67:E0:B7:1D:BF:9B:18:F1:FA:E5:56:E0:85 ValidityTue, 03 Dec 2024 14:36:09 GMT - Mon, 03 Mar 2025 14:36:08 GMT
File typeJavaScript source, ASCII text, with very long lines (8781), with no line terminators Hash7fb5b14af54f0ac182974ab646a350e8 2a03e033aad883680f351a113fcf4332aca36774 48a4de7e707f28e5b82b1a8c7f7010ff5bfb7fa3748ed749e5783fb61e1772fe
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/849bfe45bf45/main.js? HTTP/1.1
Host: cysaw.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 06 Jan 2025 10:24:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bo4SmRZ74UALYptqyRYtWJfNChq7wo4zxEq1YRM2LjBX2RyOAb1aeOL6DTTqc6Ciupm7CCLsx%2FZlr7fl%2BmgCeRMl3vl3sNggLklLFk5h72g5wcaAi7MEnIBjDX4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fdb0064cda95696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3628&min_rtt=1174&rtt_var=2615&sent=20&recv=15&lost=0&retrans=0&sent_bytes=7297&recv_bytes=3771&delivery_rate=46654&cwnd=12000&unsent_bytes=0&cid=51c13ddea3aad88c&ts=512&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cysaw.top/cdn-cgi/rum? | 172.67.202.14 | 204 No Content | 0 B |
IP 172.67.202.14:443
Requested byhttps://cysaw.top/uploads/2513280.zip CertificateIssuerGoogle Trust Services Subjectcysaw.top Fingerprint2A:84:9D:9E:3F:C2:FD:67:E0:B7:1D:BF:9B:18:F1:FA:E5:56:E0:85 ValidityTue, 03 Dec 2024 14:36:09 GMT - Mon, 03 Mar 2025 14:36:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: cysaw.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 896
Origin: https://cysaw.top
DNT: 1
Connection: keep-alive
Referer: https://cysaw.top/uploads/2513280.zip
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Mon, 06 Jan 2025 10:25:21 GMT
access-control-allow-origin: https://cysaw.top
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8fdb00ed4a865696-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| cysaw.top/favicon.ico | 172.67.202.14 | 404 Not Found | 1.3 kB |
IP 172.67.202.14:443
Requested byhttps://cysaw.top/uploads/2513280.zip CertificateIssuerGoogle Trust Services Subjectcysaw.top Fingerprint2A:84:9D:9E:3F:C2:FD:67:E0:B7:1D:BF:9B:18:F1:FA:E5:56:E0:85 ValidityTue, 03 Dec 2024 14:36:09 GMT - Mon, 03 Mar 2025 14:36:08 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
GET /favicon.ico HTTP/1.1
Host: cysaw.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cysaw.top/uploads/2513280.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 06 Jan 2025 10:25:00 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P7K8etUCuV3qLUX8k1HkjwrD3ohw0Ro2y9tgAsqwJh%2FOyTMO4cBjiANhY1QHHL0nO5GZHTlyDysghu76%2B62lmEyvYPUG8jmyzyxM54kCH5HBU5zHrPoeGY5GXwQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fdb00648d715696-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=QUIC&rtt=3370&min_rtt=1174&rtt_var=1971&sent=27&recv=27&lost=0&retrans=0&sent_bytes=13322&recv_bytes=16684&delivery_rate=32905&cwnd=12000&unsent_bytes=0&cid=51c13ddea3aad88c&ts=873&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 | 104.16.79.73 | 200 OK | 20 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 IP 104.16.79.73:443
Requested byhttps://cysaw.top/uploads/2513280.zip CertificateIssuerGoogle Trust Services Subjectcloudflareinsights.com Fingerprint68:D3:62:56:06:F9:32:39:3B:2D:19:7E:B1:45:4B:2C:76:5F:73:C6 ValidityMon, 30 Dec 2024 10:58:15 GMT - Sun, 30 Mar 2025 11:58:10 GMT
File typeJavaScript source, ASCII text, with very long lines (19948), with no line terminators Hashec18af6d41f6f278b6aed3bdabffa7bc 62c9e2cab76b888829f3c5335e91c320b22329ae 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cysaw.top
DNT: 1
Connection: keep-alive
Referer: https://cysaw.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 06 Jan 2025 10:24:59 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fdb00641aeb0b55-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|