| GET infast.canadatest.top/ | 104.21.81.254 | 403 Forbidden | 1.8 kB |
IP 104.21.81.254:443
CertificateIssuerGoogle Trust Services Subjectcanadatest.top Fingerprint91:5E:6D:43:6A:FF:C9:8B:DF:FE:5D:EF:F5:0C:DC:AF:CD:8A:9D:D9 ValidityWed, 12 Feb 2025 08:36:43 GMT - Tue, 13 May 2025 09:35:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1797), with no line terminators Hasha1e26eefa724e76e4dab679291a6bfe2 1d0064b36cb4789491a5355e61138053f4be85d1 2fa941a8b999946c98a2e66a3e4683dc6e7f8ffdfbc1e52d30ec8a0873044056
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: infast.canadatest.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Mon, 10 Mar 2025 23:59:26 GMT
content-type: text/html; charset=utf-8
vary: Cookie,Accept-Encoding
set-cookie: session_id=46bf3c8f-db60-4803-8379-1f4b8883cb7d; max-age=259200; path=/; HttpOnly; secure; SameSite=Lax
csrf=b8e06f54-02b8-4f77-b22e-57780e6aca35; expires=Tue, 11 Mar 2025 00:29:26 GMT; path=/; HttpOnly; secure; SameSite=Lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2BBibZp9dF22Plt%2BiETYKQyzTYEExYgpCdcJh%2BCI2YY79CjshXT%2FcmOozm%2BJ9viPvv%2BGAYu%2FLrbcpSergYzKcIzxeOfAQhdyIxUmuxERVluOPSX6SJFoguY2FjWxUV3opbAKDmPNhcc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e6c40afed556ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6435&min_rtt=765&rtt_var=10868&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3208&recv_bytes=1128&delivery_rate=5430000&cwnd=248&unsent_bytes=0&cid=6c57acfe555be927&ts=282&x=0"
X-Firefox-Spdy: h2
|
| GET infast.canadatest.top/ | 104.21.81.254 | 301 Moved Permanently | 1.8 kB |
IP 104.21.81.254:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: infast.canadatest.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Mon, 10 Mar 2025 23:59:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 11 Mar 2025 00:59:26 GMT
Location: https://infast.canadatest.top/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FRg2iqJGNhxm3%2FQJbCrFo18bsHgk0Vt4AuwNLnSXcrQd4LAIKxGD4tVlbH0jv40dqbZwgrnQspi5bFmk3K7h7dgsGli%2BL3ZKN1rdJUKqulKe4u0Qx%2FiPZ7lqeBL2QIJFQ6vyO%2BEKEVU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 91e6c40d5cc4b4eb-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=455&min_rtt=455&rtt_var=227&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=406&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| GET infast.canadatest.top/ | 104.21.81.254 | 403 Forbidden | 1.8 kB |
IP 104.21.81.254:443
CertificateIssuerGoogle Trust Services Subjectcanadatest.top Fingerprint91:5E:6D:43:6A:FF:C9:8B:DF:FE:5D:EF:F5:0C:DC:AF:CD:8A:9D:D9 ValidityWed, 12 Feb 2025 08:36:43 GMT - Tue, 13 May 2025 09:35:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1797), with no line terminators Hasha1e26eefa724e76e4dab679291a6bfe2 1d0064b36cb4789491a5355e61138053f4be85d1 2fa941a8b999946c98a2e66a3e4683dc6e7f8ffdfbc1e52d30ec8a0873044056
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: infast.canadatest.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: session_id=46bf3c8f-db60-4803-8379-1f4b8883cb7d; csrf=b8e06f54-02b8-4f77-b22e-57780e6aca35
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 10 Mar 2025 23:59:26 GMT
content-type: text/html; charset=utf-8
vary: Cookie,Accept-Encoding
set-cookie: session_id=46bf3c8f-db60-4803-8379-1f4b8883cb7d; max-age=259200; path=/; HttpOnly; secure; SameSite=Lax
csrf=b8e06f54-02b8-4f77-b22e-57780e6aca35; expires=Tue, 11 Mar 2025 00:29:26 GMT; path=/; HttpOnly; secure; SameSite=Lax
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CtNjUuVKpzyMq%2Fs%2BOSHnfjnSUst4fHLqo58n4XJd2FmiU5SNsOb%2Fj52Lgm38LqX0xcgN8nVSQ9UWLYxE11SDfUNN%2FuW2i%2FzGHMy7KkjpjiSZ5sTvHF8rj4pwqyFUphuo%2BSIFt0TAaxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e6c40d8db00b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3425&min_rtt=1997&rtt_var=1769&sent=14&recv=10&lost=0&retrans=0&sent_bytes=4212&recv_bytes=1394&delivery_rate=297384&cwnd=12000&unsent_bytes=0&cid=89735a1a2892dc70&ts=279&x=1", cfExtPri, cfHdrFlush;dur=0
|
| GET infast.canadatest.top/favicon.ico | 104.21.81.254 | 404 Not Found | 138 B |
URL GET infast.canadatest.top/favicon.ico IP 104.21.81.254:443
Requested byhttps://infast.canadatest.top/ CertificateIssuerGoogle Trust Services Subjectcanadatest.top Fingerprint91:5E:6D:43:6A:FF:C9:8B:DF:FE:5D:EF:F5:0C:DC:AF:CD:8A:9D:D9 ValidityWed, 12 Feb 2025 08:36:43 GMT - Tue, 13 May 2025 09:35:15 GMT
File typeHTML document, ASCII text, with no line terminators Hash3b46d87e0e86d52ea0d2f8fab44c53d6 667cfb6b3452b96310c6a9d791b7e452b77e2174 62de828a32e36ab676f57d291690df36bce3eed05a6693b009ac147c27d5a606
GET /favicon.ico HTTP/1.1
Host: infast.canadatest.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infast.canadatest.top/
Cookie: session_id=46bf3c8f-db60-4803-8379-1f4b8883cb7d; csrf=b8e06f54-02b8-4f77-b22e-57780e6aca35
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 10 Mar 2025 23:59:26 GMT
content-type: text/html; charset=utf-8
vary: Cookie, Accept-Encoding
cf-cache-status: BYPASS
set-cookie: session_id=46bf3c8f-db60-4803-8379-1f4b8883cb7d; max-age=259200; path=/; HttpOnly; secure; SameSite=Lax
csrf=b8e06f54-02b8-4f77-b22e-57780e6aca35; expires=Tue, 11 Mar 2025 00:29:26 GMT; path=/; HttpOnly; secure; SameSite=Lax
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1BTdn4ilmwocQY%2BfpbRSv0SYc3qG%2FzSuS%2BiMmFoVYsXEVGuXQZcfcC9GPZyX7WiMhZx3mzq%2FNUgRrcIH7SS%2FAe%2FoWnRzkSF3FNSpxZTL1iVrgHwQLi7Wi6Hu8pKBTEDqOcOeGeeamBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e6c40f1e700b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3230&min_rtt=1862&rtt_var=1717&sent=18&recv=12&lost=0&retrans=0&sent_bytes=6152&recv_bytes=1791&delivery_rate=7366&cwnd=12000&unsent_bytes=0&cid=89735a1a2892dc70&ts=674&x=1", cfExtPri, cfHdrFlush;dur=0
|