URL User Request GET HTTP/1.1 IP 185.53.177.31:80
ASN #61969 Team Internet AG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash eed955fd1cb98b1ad1e5086a3ace6d96
a71f74cdfe84d12b096f419a1b8b111e76f00566
d3d15421555c252970f2750767f6d7fadde27518a18aadeb5001708a6199fb71
NIDS Severity Alert suricata medium ET POLICY HTTP Request to a *.tk domain
suricata medium ET POLICY HTTP Request to a *.tk domain
GET / HTTP/1.1
Host: autoplaytogether.tk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 May 2023 15:41:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Redirect: skenzo
X-Buckets: bucket011
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_mGMHJVglazhYyN4mUmd9TRHIzymN+Ro4It1i6xbP8T2SIHUKYczsBzoGC5mX1jkFjcLLK7/ciuDYhZ2YNUTpOQ==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: autoplaytogether.tk
X-Subdomain:
Content-Encoding: gzip
URL User Request GET HTTP/1.1 IP 185.53.177.31:80
ASN #61969 Team Internet AG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash eed955fd1cb98b1ad1e5086a3ace6d96
a71f74cdfe84d12b096f419a1b8b111e76f00566
d3d15421555c252970f2750767f6d7fadde27518a18aadeb5001708a6199fb71
NIDS Severity Alert suricata medium ET POLICY HTTP Request to a *.tk domain
suricata medium ET POLICY HTTP Request to a *.tk domain
GET / HTTP/1.1
Host: autoplaytogether.tk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 May 2023 15:41:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Redirect: skenzo
X-Buckets: bucket011
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_mGMHJVglazhYyN4mUmd9TRHIzymN+Ro4It1i6xbP8T2SIHUKYczsBzoGC5mX1jkFjcLLK7/ciuDYhZ2YNUTpOQ==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: autoplaytogether.tk
X-Subdomain:
Content-Encoding: gzip
autoplaytogether.tk/favicon.ico
185.53.177.31200 OK 0 B URL GET HTTP/1.1 autoplaytogether.tk/favicon.ico
IP 185.53.177.31:80
ASN #61969 Team Internet AG
Requested by http://autoplaytogether.tk/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET POLICY HTTP Request to a *.tk domain
GET /favicon.ico HTTP/1.1
Host: autoplaytogether.tk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://autoplaytogether.tk/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 May 2023 15:41:31 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
ifdnzact.com/?dn=autoplaytogether.tk&pid=9PO755G95
208.91.196.46403 Forbidden 272 B URL GET HTTP/1.1 ifdnzact.com/?dn=autoplaytogether.tk&pid=9PO755G95
IP 208.91.196.46:80
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://autoplaytogether.tk/
File type HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd0cc2cf2e099248592c5ba5489025e0
72c99fc933a165d3f9dd050efec8ec370eb967e0
4ad465b840cf7a5b5098806a97dd31846b1459fc592bb8021096b7392550389f
GET /?dn=autoplaytogether.tk&pid=9PO755G95 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://autoplaytogether.tk/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Mon, 29 May 2023 15:41:31 GMT
Server: Apache
Content-Length: 272
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8