| |  75.119.158.10 | | 297 B |
IP75.119.158.10:0
File typeHTML document, ASCII text Hash65edd685f7730040640937cc4975d7f6 bde67e6c0da4c907d28aad4ca5ac5b99b0caf20d 87429cf57d09aa62609da54414f9e4160dcc073459562296987fc532a98798ab
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain | | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: ns1.oldrove.dumi.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 11:35:39 GMT
Content-Type: text/html
Content-Length: 297
Connection: keep-alive
Last-Modified: Wed, 24 Mar 2021 09:29:10 GMT
ETag: "1b0-5be44ee61e580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-regular-be7cb1.woff2 |  185.76.9.24 | 200 OK | 17 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-regular-be7cb1.woff2 IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16708, version 1.0 Hash68c477c4c76baab3a8d1ef6a55aa986f 4af50379e13514558dd53d123db8ea101ec5e24c 0364d368abf457d4e70dbc7a7a360f3486eaea2837b194915b23d4398bee91ac
GET /static/default-website-content/public/fonts/inter-v12-latin-regular-be7cb1.woff2 HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ns1.oldrove.dumi.zip/
Origin: http://ns1.oldrove.dumi.zip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: font/woff2
content-length: 16708
permissions-policy: interest-cohort=()
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: "6602afce-4144"
expires: Tue, 26 Mar 2024 11:37:32 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 5820:2F9512:14EF420:153A190:6602B123
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230105-FRA
x-cache-hits: 0
x-timer: S1711452452.047905,VS0,VE110
vary: Accept-Encoding
x-fastly-request-id: 1fc428596a3b781d6112844b6ce5366178589f5b
x-77-nzt: EwwBuUwJFAH3NAIAAAwBuUwKCQH3BwAAAAwBJRPCLgH3AQAAAA
x-77-nzt-ray: af58563071ffa0ff8c063e6673ca0011
x-accel-expires: @1715340966
x-accel-date: 1715340376
x-77-cache: HIT
x-77-age: 564
server: CDN77-Turbo
x-cache: HIT
x-age: 564
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-700-54321e.woff2 | 185.76.9.24 | 200 OK | 18 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-700-54321e.woff2 IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17784, version 1.0 Hash8d7a3f034881d1712b3325cc71425c10 9594f24367800a20297a96c2d4f957e62c63e207 ced2d8e02e2fbf08d2edec9b5f13648ed8348588a05f7181632f3c1dd6e1f5c3
GET /static/default-website-content/public/fonts/inter-v12-latin-700-54321e.woff2 HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ns1.oldrove.dumi.zip
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: font/woff2
content-length: 17784
permissions-policy: interest-cohort=()
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: "6602afce-4578"
expires: Tue, 26 Mar 2024 11:41:21 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B286:0E6B:16951F4:16E7088:6602B209
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230114-FRA
x-cache-hits: 0
x-timer: S1711452681.193162,VS0,VE94
vary: Accept-Encoding
x-fastly-request-id: f9e4bc65fbfb00c11bbcf68d1d76ce17379bc695
x-77-nzt: EwwBuUwJFAG2PwMAAAwBuUwKCQH39gEAAAwBnJIhJwH3JgAAAA
x-77-nzt-ray: af58563071ffa0ff8c063e6665f1c911
x-accel-expires: @1715341059
x-accel-date: 1715340109
x-77-cache: HIT
x-77-age: 831
server: CDN77-Turbo
x-cache: REVALIDATED
x-age: 831
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| assets.plesk.com/static/default-website-content/public/img/robot-4b152c.svg | 185.76.9.24 | 200 OK | 148 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/img/robot-4b152c.svg IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typegzip compressed data, from Unix Size148 kB (148167 bytes) Hasha4bfdae7702f719a0556cbcb47a2b8ea 20dcc012e04dbc886a4f3c83ac81ca920005ca87 4daa5862dd79d8d21d56f425fc65e3c1776bc2bb6b4494062787e34aa927c029
GET /static/default-website-content/public/img/robot-4b152c.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: W/"6602afce-15bb6"
expires: Tue, 26 Mar 2024 11:35:11 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: A58A:387378:521FA:53205:6602B097
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230048-FRA
x-cache-hits: 0
x-timer: S1711452312.939184,VS0,VE103
vary: Accept-Encoding, Accept-Encoding
x-fastly-request-id: a38c95da814c9e0793538a22dfbc337dc9016051
x-77-nzt: EwwBuUwJFAH3TwIAAAwBuUwKEwH3cAEAAAwBnJIhHwGTAQ8AAA
x-77-nzt-ray: af585630f1089cfa8c063e66ba385611
x-accel-expires: @1715340946
x-accel-date: 1715340349
x-77-cache: HIT
x-77-age: 591
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 591
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| assets.plesk.com/static/default-website-content/public/img/logo-81ca7a.svg | 185.76.9.24 | 200 OK | 1.5 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/img/logo-81ca7a.svg IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typegzip compressed data, from Unix Hashfab0740bc1b627854c5c93a0112bb57c da6416d3d5e6996c166092720174d9fdd3c763a8 5e94ba70b6eae153ee2dbaf9e40cc6d23119243ec15b6b997f1dfe786c4e809e
GET /static/default-website-content/public/img/logo-81ca7a.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: W/"6602afce-833"
expires: Tue, 26 Mar 2024 11:32:23 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FDFE:0E21:117938A:11B807F:6602AFE7
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230024-FRA
x-cache-hits: 0
x-timer: S1711452144.643986,VS0,VE101
vary: Accept-Encoding, Accept-Encoding
x-fastly-request-id: 3299a9d69f6104d24f663426806d1cf562c10358
x-77-nzt: EwwBuUwJFAH30AEAAAwBuUwKDAH3EwIAAAwBJRPCLgH3BgAAAA
x-77-nzt-ray: af585630f1089cfa8c063e66e9c8850f
x-accel-expires: @1715341001
x-accel-date: 1715340476
x-77-cache: HIT
x-77-age: 464
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 464
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| firehose.us-west-2.amazonaws.com/ |  52.94.215.250 | 200 OK | 20 B |
URL OPTIONS HTTP/1.1firehose.us-west-2.amazonaws.com/ IP52.94.215.250:443
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerAmazon Subjectfirehose.us-west-2.amazonaws.com FingerprintC8:0B:E8:54:5E:CA:79:A8:22:9F:A6:5F:7B:32:42:88:60:0E:FF:7A ValidityMon, 26 Feb 2024 00:00:00 GMT - Sun, 16 Feb 2025 23:59:59 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash3970e82605c7d109bb348fc94e9eecc0 e03849ea786b9f7b28a35c17949e85a93eb1cff1 f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
OPTIONS / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Referer: http://ns1.oldrove.dumi.zip/
Origin: http://ns1.oldrove.dumi.zip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amzn-RequestId: dbc36a3c-886d-d936-857b-62f0df97b488
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Access-Control-Allow-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Access-Control-Allow-Methods: POST
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Access-Control-Max-Age: 172800
Content-Length: 20
Date: Fri, 10 May 2024 11:35:40 GMT
|
|
| firehose.us-west-2.amazonaws.com/ | 52.94.215.250 | 200 OK | 247 B |
URL OPTIONS HTTP/1.1firehose.us-west-2.amazonaws.com/ IP52.94.215.250:443
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerAmazon Subjectfirehose.us-west-2.amazonaws.com FingerprintC8:0B:E8:54:5E:CA:79:A8:22:9F:A6:5F:7B:32:42:88:60:0E:FF:7A ValidityMon, 26 Feb 2024 00:00:00 GMT - Sun, 16 Feb 2025 23:59:59 GMT
Hash45160ae46f551fbb6d3fc36946b6f44b b69d02a514fa8009e5b16eae8a0ef2fb2814e7d9 abe25ac57033f5967b0283e370ade6f78db98364a9767e207cb911352130637a
POST / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Amz-User-Agent: aws-sdk-js/2.1335.0 callback
Content-Type: application/x-amz-json-1.1
X-Amz-Target: Firehose_20150804.PutRecord
X-Amz-Content-Sha256: 535bd23c05f737a296ba8a038fa5f323e71e2810281975fcbadc0aea5f6e8ad5
X-Amz-Date: 20240510T113540Z
Authorization: AWS4-HMAC-SHA256 Credential=AKIAR4YEYRJL6JKBNRGP/20240510/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=cd69616808ca2ba7171505f8bc61e6186633889fa0e35fd262b955fc4f1eeed5
Content-Length: 108
Origin: http://ns1.oldrove.dumi.zip
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amzn-RequestId: d7bdf588-5fc1-6859-8905-fd45083b05e7
Access-Control-Allow-Origin: *
Content-Encoding: gzip
x-amz-id-2: 9ZfR76knTJdAoAXFPY4fFg2nDbeVEHbXi0+yVghJMyJrnBZzKZr29yCFYYi6w1i3aWMN28J5pPjvDRs+XMoQX06clkgKwsHy
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Content-Type: application/x-amz-json-1.1
Content-Length: 247
Date: Fri, 10 May 2024 11:35:41 GMT
|
|
| assets.plesk.com/static/default-website-content/public/img/stars-fb15b6.svg | 185.76.9.24 | 200 OK | 24 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/img/stars-fb15b6.svg IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typeSVG Scalable Vector Graphics image Hash18aa9407cb97208391f24bcef249457f c76eef71591d7d92fb30f51b49dadf16ae600a05 30628c4c5254e81ed7f953bd449c6976ce87210089c4b221f00c3a7a5d597736
GET /static/default-website-content/public/img/stars-fb15b6.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: W/"6602afce-5c23"
expires: Tue, 26 Mar 2024 11:32:23 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FDFC:2F9512:14CF978:151A128:6602AFEF
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230085-FRA
x-cache-hits: 0
x-timer: S1711452144.633279,VS0,VE108
vary: Accept-Encoding, Accept-Encoding
x-fastly-request-id: 970a08d8fbe07d460e5ffb9661c77cbe7d9c9d03
x-77-nzt: EwwBuUwJFAH3pAEAAAwBuUwKCQH3EwIAAAwB1GY4EQH3BgAAAA
x-77-nzt-ray: af585630f1089cfa8c063e66811dec10
x-accel-expires: @1715341109
x-accel-date: 1715340520
x-77-cache: HIT
x-77-age: 420
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 420
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| assets.plesk.com/static/default-website-content/public/default-server-index.js | 185.76.9.24 | 200 OK | 30 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/default-server-index.js IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/default-website-content/public/default-server-index.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: W/"6602afce-73fa"
expires: Tue, 26 Mar 2024 11:40:21 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 82FE:0DFA:14CB679:1514057:6602B1CC
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230062-FRA
x-cache-hits: 0
x-timer: S1711452621.484776,VS0,VE106
vary: Accept-Encoding, Accept-Encoding
x-fastly-request-id: 0384528d823d67bbcda04094a21a1cd89bffdc4c
x-77-nzt: EwwBuUwJFAH3qgAAAAwBuUwKDAH3AgAAAAwBnJIhJwH3AQAAAA
x-77-nzt-ray: af585630f1089cfa8c063e66e7da0104
x-accel-expires: @1715341354
x-accel-date: 1715340770
x-77-cache: HIT
x-77-age: 170
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 170
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| assets.plesk.com/static/default-website-content/public/favicon-2d0e10.ico | 185.76.9.24 | 200 OK | 114 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/favicon-2d0e10.ico IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typeMS Windows icon resource - 7 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel Size114 kB (113459 bytes) Hash1db747255c64a30f9236e9d929e986ca 384023452346aa087d40c93c23ca2f5e32ff1b1f 88baf40feb43463a8f6aa6543e88bdbe33f0db9a317486e786eee1e5c76a9544
GET /static/default-website-content/public/favicon-2d0e10.ico HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: image/vnd.microsoft.icon
content-length: 113459
permissions-policy: interest-cohort=()
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: "6602afce-1bb33"
expires: Tue, 26 Mar 2024 11:39:13 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: BC0C:0E9C:6F6BA79:7148E37:6602B188
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230079-FRA
x-cache-hits: 0
x-timer: S1711452553.270343,VS0,VE108
vary: Accept-Encoding
x-fastly-request-id: f07654d8b90e04e53155baf147ff4cbf52e84243
x-77-nzt: EwwBuUwJFAH3qgAAAAwBuUwKEwH3GAAAAAwBJRPCNAH3AQAAAA
x-77-nzt-ray: af585630f1089cfa8c063e6676606914
x-accel-expires: @1715341260
x-accel-date: 1715340770
x-77-cache: HIT
x-77-age: 170
server: CDN77-Turbo
x-cache: HIT
x-age: 170
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ns1.oldrove.dumi.zip/favicon.ico |  0.0.0.0 | | 0 B |
URL GET ns1.oldrove.dumi.zip/favicon.ico IP0.0.0.0:0
Requested byhttp://ns1.oldrove.dumi.zip/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain | | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /favicon.ico HTTP/1.1
Host: ns1.oldrove.dumi.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Pragma: no-cache
Cache-Control: no-cache
|
|
| assets.plesk.com/static/default-website-content/public/bundle.js | 185.76.9.24 | 200 OK | 295 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/bundle.js IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size295 kB (295325 bytes) Hashc7a9f0e4da53a89761ad5d0278130614 58db235e943b3fc06bbd00031236e140614abc13 8916961fade067cb7c7ff49f8396e6afa17b539db8f0d32fdc1bc2740d7615c6
GET /static/default-website-content/public/bundle.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: W/"6602afce-4819d"
expires: Tue, 26 Mar 2024 11:34:37 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 655C:387378:4E86C:4F7DA:6602B074
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230085-FRA
x-cache-hits: 0
x-timer: S1711452277.052257,VS0,VE112
vary: Accept-Encoding, Accept-Encoding
x-fastly-request-id: 7e23bc1f5c953d3eac00013959ff632cd9e9adf1
x-77-nzt: EwwBuUwJFAH3DgIAAAwBuUwKDAH3CAAAAAwBJRPCMQGzWQIAAA
x-77-nzt-ray: af585630f1089cfa8c063e668e7da10f
x-accel-expires: @1715340997
x-accel-date: 1715340414
x-77-cache: HIT
x-77-age: 526
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 526
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| assets.plesk.com/static/default-website-content/public/img/wpg-b313a8.svg | 185.76.9.24 | 200 OK | 1.3 kB |
URL GET HTTP/2assets.plesk.com/static/default-website-content/public/img/wpg-b313a8.svg IP185.76.9.24:443 ASN#60068 Datacamp Limited
Requested byhttp://ns1.oldrove.dumi.zip/ CertificateIssuerLet's Encrypt Subject1226552209.rsc.cdn77.org FingerprintAE:20:9D:44:8B:B6:CE:2B:90:7A:19:0A:88:0D:BC:AD:CE:DA:DF:3C ValiditySat, 27 Apr 2024 02:34:14 GMT - Fri, 26 Jul 2024 02:34:13 GMT
File typeSVG Scalable Vector Graphics image Hash8c8776a0d4f1510848eaa08c3f135a0e b4c7f29e1dc49cd2100574cad8a399b546102f56 c3d2cc73e309a5b566cb0ad6d8d84874d9bdaccf6fba832b9cc8e6b562f0bef7
GET /static/default-website-content/public/img/wpg-b313a8.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ns1.oldrove.dumi.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 11:35:40 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Tue, 26 Mar 2024 11:21:50 GMT
access-control-allow-origin: *
etag: W/"6602afce-518"
expires: Tue, 26 Mar 2024 11:35:11 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4E80:0E6B:16717F0:16C2F9F:6602B097
via: 1.1 varnish
age: 0
x-served-by: cache-fra-eddf8230024-FRA
x-cache-hits: 1
x-timer: S1711452312.171874,VS0,VE4
vary: Accept-Encoding, Accept-Encoding
x-fastly-request-id: 97e49bd78a121aed1b2ca31ffba4a0e925882073
x-77-nzt: EwwBuUwJFAH3YAAAAAwBuUwKAQH3cAEAAAgBisclwQGB
x-77-nzt-ray: af585630f1089cfa8c063e665a288b0f
x-accel-expires: @1715341429
x-77-cache: HIT
content-encoding: gzip
x-accel-date: 1715340844
x-77-age: 96
server: CDN77-Turbo
x-cache: HIT
x-age: 96
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|