ocsp.sectigo.com/
104.18.15.101 472 B IP 104.18.15.101:0
Hash 8bb8184583dba057e06ec23facd23516
cf9b5e537665db670f84de5b1ccad20c06f86165
f9190cff9df1359af2e77e8106b4eb573e3c4bd0d4c0ff386fe555815d6175c0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 07:11:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Jun 2023 13:26:06 GMT
Expires: Mon, 12 Jun 2023 13:26:05 GMT
Etag: "cf9b5e537665db670f84de5b1ccad20c06f86165"
Cache-Control: max-age=540813,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d2ed723cfdfb503-OSL
monarch-uniforms.com/~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php
192.185.4.177200 OK 1.2 kB URL User Request GET HTTP/1.1 monarch-uniforms.com/~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php
IP 192.185.4.177:80
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (776), with CRLF, LF line terminators
Hash caeb8e8ffb321ff6fbfb96876438cf00
46f603ab575df7d2b5c185ad8ead21f69229693f
b54498ed53767272dd69294acf63b00093d34c82267fa6db89c7d6964317a3e9
NIDS Severity Alert suricata medium ET PHISHING Possible Websc Phishing Page 2016-02-05
GET /~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php HTTP/1.1
Host: monarch-uniforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 07:11:17 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 1227
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
explorefreeresults.com/px.js?ch=1
208.91.196.46200 OK 346 B URL GET HTTP/1.1 explorefreeresults.com/px.js?ch=1
IP 208.91.196.46:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://monarch-uniforms.com/~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=1 HTTP/1.1
Host: explorefreeresults.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://monarch-uniforms.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 07:11:18 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=123
Connection: Keep-Alive
Content-Type: application/javascript
explorefreeresults.com/px.js?ch=2
208.91.196.46200 OK 346 B URL GET HTTP/1.1 explorefreeresults.com/px.js?ch=2
IP 208.91.196.46:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://monarch-uniforms.com/~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=2 HTTP/1.1
Host: explorefreeresults.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://monarch-uniforms.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 07:11:18 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=115
Connection: Keep-Alive
Content-Type: application/javascript
sedoparking.com/frmpark/monarch-uniforms.com/Skenzor1/park.js
64.190.63.136200 OK 614 B URL GET HTTP/1.1 sedoparking.com/frmpark/monarch-uniforms.com/Skenzor1/park.js
IP 64.190.63.136:80
Requested by http://monarch-uniforms.com/~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php
File type ASCII text, with very long lines (987)
Hash 2eb3d692a20f0ba48fb6b8dcd9c2e084
26332153fbbd66f0d05e51f479602a890a8b245d
0d1601d31d6fcfa3ba58084e3db56e6a0bd79579000dc24dba1bfc69e6ebf53c
GET /frmpark/monarch-uniforms.com/Skenzor1/park.js HTTP/1.1
Host: sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://monarch-uniforms.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 06 Jun 2023 07:11:18 GMT
content-type: application/javascript; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
x-cache-miss-from: parking-8b8f7865d-p94bq
server: NginX
content-encoding: gzip
monarch-uniforms.com/favicon.ico
192.185.4.177200 OK 0 B URL GET HTTP/1.1 monarch-uniforms.com/favicon.ico
IP 192.185.4.177:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://monarch-uniforms.com/~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: monarch-uniforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://monarch-uniforms.com/~sylhet/css/-/xnowxoffnowxnowoffhd/Log/home/websc-login.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 07:11:18 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 0
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8