itsresiotdsuricesji-356257.asia/
163 B URL itsresiotdsuricesji-356257.asia/
IP
ASN #18403 FPT Telecom Company
File type HTML document text\012- HTML document, ASCII text
Hash f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.asia domain
GET / HTTP/1.1
Host: itsresiotdsuricesji-356257.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
last-modified: Wed, 17 Jun 2020 20:01:33 GMT
accept-ranges: bytes
content-length: 163
date: Sun, 04 Jun 2023 20:18:46 GMT
server: LiteSpeed
itsresiotdsuricesji-356257.asia/cgi-sys/defaultwebpage.cgi
6.4 kB URL itsresiotdsuricesji-356257.asia/cgi-sys/defaultwebpage.cgi
IP
ASN #18403 FPT Telecom Company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5861)
Hash 505ab59e056a46e2baa82ea5b22f52bc
2915048a3ed47684cbd2ac285ccdb49034bd16af
e4e6d167bf9a57e5350bdb65d82a6bcab5d0a575e992815ff519d9e2c666fe18
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.asia domain
GET /cgi-sys/defaultwebpage.cgi HTTP/1.1
Host: itsresiotdsuricesji-356257.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 04 Jun 2023 20:18:47 GMT
server: LiteSpeed
IP
Hash d11f1919fef5d8fccf8a87cf62ec7d61
b862276403c5375ce0cf2707ff0141d0f765fafa
7002839ec0a73f7a79f9f8720287932bd850a6a1b741ad91808e402ecb1c0d48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 20:18:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:300,400&subset=vietnamese
1.1 kB URL fonts.googleapis.com/css?family=Open+Sans:300,400&subset=vietnamese
IP
File type gzip compressed data, max compression\012- data
Hash 039b2337eb6eb077485babf7a62605cb
c44e00019d147384ef8c29d807630939a16133fe
68d81301add01b8efa35209f5246b501adf90c54a1ab1d59dd33197a20929123
GET /css?family=Open+Sans:300,400&subset=vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://itsresiotdsuricesji-356257.asia/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Jun 2023 20:18:47 GMT
date: Sun, 04 Jun 2023 20:18:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
itsresiotdsuricesji-356257.asia/favicon.ico
6.0 kB URL itsresiotdsuricesji-356257.asia/favicon.ico
IP
ASN #18403 FPT Telecom Company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5861)
Hash a3aec26051ee1344783ba52a7f1055e7
a717f7cca30e69cc68f0aa817db90d35fd57d373
e86c08b2da9f4e57fd1a906b8bcf1037b0d6531c7afa8b853e76c79b82f93841
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.asia domain
GET /favicon.ico HTTP/1.1
Host: itsresiotdsuricesji-356257.asia
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://itsresiotdsuricesji-356257.asia/cgi-sys/defaultwebpage.cgi
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 5988
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 04 Jun 2023 20:18:47 GMT
server: LiteSpeed
210.245.90.207
142.250.74.131