| mashinno.com/blog/wordpress/wp-content/plugins/masterx/dhl/login.php?cmd=login_submit&id=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e&session=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e |  104.21.96.1 | 301 Moved Permanently | 167 B |
URL User Request GET HTTP/3mashinno.com/blog/wordpress/wp-content/plugins/masterx/dhl/login.php?cmd=login_submit&id=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e&session=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e IP104.21.96.1:443
CertificateIssuerGoogle Trust Services Subjectmashinno.com Fingerprint92:5D:33:F8:8D:E5:D9:73:D4:3E:C0:21:75:DF:32:D6:8E:7B:3E:82 ValidityFri, 31 Jan 2025 13:45:27 GMT - Thu, 01 May 2025 14:43:43 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
| NIDS | Severity | Alert |
|---|
| suricata | high | ET PHISHING Generic Phishkit Activity (GET) |
GET /blog/wordpress/wp-content/plugins/masterx/dhl/login.php?cmd=login_submit&id=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e&session=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e HTTP/1.1
Host: mashinno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sat, 22 Feb 2025 10:23:37 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 22 Feb 2025 11:23:37 GMT
Location: https://mashinno.com/blog/wordpress/wp-content/plugins/masterx/dhl/login.php?cmd=login_submit&id=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e&session=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=doMf4sznN36TuKuByLdL482rMdTR6pFszfB0ZPVcb4ndS4I0EZIwpbdlnCsRZkxMhL8dCG9qQkM7hDASQlFocxRNBFMjeQU9HxhovibY0VJHocHrlSLeSlbvXIs6PqQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 915e4305d82156b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=470&min_rtt=470&rtt_var=235&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=610&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
IP104.21.64.1:443
Requested byhttps://mashinno.com/blog/wordpress/wp-content/plugins/masterx/dhl/login.php?cmd=login_submit&id=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e&session=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e CertificateIssuerGoogle Trust Services Subjectmashinno.com Fingerprint92:5D:33:F8:8D:E5:D9:73:D4:3E:C0:21:75:DF:32:D6:8E:7B:3E:82 ValidityFri, 31 Jan 2025 13:45:27 GMT - Thu, 01 May 2025 14:43:43 GMT
File typegzip compressed data, from Unix Hash6383fc5c148bf9075afff5be207c5882 3ad7c639ddab27b9a855d6011e0ee2ae7c42c093 2a57ba047b0d4a3c825533e0d9c7a7505cc288c29f451623ba2dd47fd7df1eb9
GET /favicon.ico HTTP/1.1
Host: mashinno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mashinno.com/blog/wordpress/wp-content/plugins/masterx/dhl/login.php?cmd=login_submit&id=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e&session=4d140432aa28b553e3ccc9549436ef2e4d140432aa28b553e3ccc9549436ef2e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Feb 2025 10:23:38 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UHiNFbUlbaHQC67I%2B%2FevMr2ID4I36OvSCKKPf9Rl8pXnCKSVSLMtitZGNHEZjMgkQ1WCx05NKy0vdlKYcSHqy8TyOqVyN%2B1tkf6zKxpwI4iR5IgnWG3%2F8b4eL8gbMl0%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=14400
last-modified: Sat, 09 Mar 2024 13:46:16 GMT
etag: W/"3aee-18e2376dc40"
vary: Accept-Encoding
content-encoding: gzip
x-cache: MISS
cf-cache-status: EXPIRED
cf-ray: 915e4307fe8d712f-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
|