| | 104.21.48.1 | 200 OK | 1.5 kB |
URL User Request GET HTTP/1.1IP 104.21.48.1:80
File typeHTML document, ASCII text Hashf1b12d93e45a4029a7e53291cc0655c9 d7c378ff68d436cb528c30104de2b143729cbfc6 4a7ae89af4ca9c236f4eccd2e44717fe1168d98f295b03e20f97dd7be7261e25
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET /i/ HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 10 Feb 2025 20:51:57 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 21 Oct 2020 07:28:00 GMT
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ry5lwkkpumZKMu0BF5uoPEY%2Bn89MROH6hpmc45vD4ildBdYkQ775bvVunGGxjUlxYfYfAowD7sZX%2BbTm21uI6PQV%2FUwn5%2F8Zt6tWg1KyRaQEJBvItIv1V24d10HqMKs5wGTW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 90fefae8af85712e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=494&min_rtt=494&rtt_var=247&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=403&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| GET ezdrivemajyr.top/i/assets/index-OFH_oJCt.js | 104.21.48.1 | 200 OK | 145 kB |
URL GET HTTP/1.1ezdrivemajyr.top/i/assets/index-OFH_oJCt.js IP 104.21.48.1:80
Requested byhttp://ezdrivemajyr.top/i/
File typeJavaScript source, ASCII text, with very long lines (36039) Size145 kB (145122 bytes) Hash40415c4acec8ad366f230a192f833b84 3f45b9ef4bd2235e14f8e2afaf8a7eab5aef7883 78d27466bac0d8daf94aeace79e01001fd6667f27a18c5051218c4a102141795
GET /i/assets/index-OFH_oJCt.js HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ezdrivemajyr.top/i/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 10 Feb 2025 20:51:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6787212a-61ed5"
Last-Modified: Wed, 21 Oct 2020 07:28:00 GMT
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sE9DV2YfVUJFsEQsO7DPwbu8bzyZY3N%2BAv05bePxcKICnzgFmRLQnzQmZxmkxs3PYenk7husN6Jtda0rj5pBbbn3CSh440b9Wk1GGTvwXoU9QYAn9ujZj0KkRY85%2BG0nDxZN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 90fefaebeadf712e-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=540&min_rtt=494&rtt_var=171&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2373&recv_bytes=755&delivery_rate=6552036&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| GET ezdrivemajyr.top/i/assets/index-B_SRXrkB.css | 104.21.48.1 | 200 OK | 578 kB |
URL GET HTTP/1.1ezdrivemajyr.top/i/assets/index-B_SRXrkB.css IP 104.21.48.1:80
Requested byhttp://ezdrivemajyr.top/i/
File typeUnicode text, UTF-8 text, with very long lines (65132), with no line terminators Size578 kB (577941 bytes) Hash32a4e71e356e7dfa34d3acece6c1d27a ead17cf002b91004a7b50bd16e3fb7dd6186936c e3a624d54a9985210dc78bb41b4fd4dba75f2bfbad2cbdab2a70bd20cf1c1ef0
GET /i/assets/index-B_SRXrkB.css HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ezdrivemajyr.top/i/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 10 Feb 2025 20:51:57 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6787212a-38be86"
Last-Modified: Wed, 21 Oct 2020 07:28:00 GMT
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rWbok2BnlVvTIBJRZIghnC0JfDSsVOjpI1UfwoVxzFlH9G6cAtYKl9omZefddm7yFeE1EqQqZ%2BCaLP22HGe66WaPu2mymtsrC%2FuMg5oXFqiAOUBqtlsrtmcJf6rmgK356070"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 90fefaebef847128-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=457&min_rtt=457&rtt_var=228&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=368&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| GET ezdrivemajyr.top/favicon.ico | 104.21.48.1 | 404 Not Found | 125 B |
URL GET HTTP/1.1ezdrivemajyr.top/favicon.ico IP 104.21.48.1:80
Requested byhttp://ezdrivemajyr.top/i/
File typeHTML document, ASCII text, with CRLF line terminators Hash1b7c22a214949975556626d7217e9a39 d01c97e2944166ed23e47e4a62ff471ab8fa031f 340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /favicon.ico HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ezdrivemajyr.top/i/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Mon, 10 Feb 2025 20:51:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ctoAmxJwLfrXHc5msd6qXwGy8kZl5FTp8tISEXRcux%2BFvb6HaDvCDWr0gHLYUmzHn0EpMmDh1EoG6fbETk1A8DZTsdupaLGxM0q3JYm00e76BypxeXm8Pgemg6mDt2oTJ%2FF"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 90fefaf4fac77128-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=1745&min_rtt=438&rtt_var=67&sent=413&recv=312&lost=0&retrans=0&sent_bytes=579057&recv_bytes=727&delivery_rate=103672698&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| ezdrivemajyr.top/ws | 104.21.48.1 | 101 Switching Protocols | 0 B |
IP 104.21.48.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Sec-WebSocket-Version: 13
Origin: http://ezdrivemajyr.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0JeqUzyiWSdSvyEumMrypA==
DNT: 1
Connection: keep-alive, Upgrade
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 10 Feb 2025 20:51:59 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Version: 13
Sec-WebSocket-Accept: F8q2xrmnGf8LRW53n0Y+mb+ImfU=
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IKLXUFcFVl%2BkRjfMyV%2B4khTsHG6cWQbdRbhdC544v9ZLqKsQOzaAb3wp2rAUqDLTuXZyDYKWoSK8JG0t1wSfbUh3qipNp7FyM7uLcHyuBnUk9CmpZdI1WmTylQbWini9gH6F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 90fefaf60f1556b1-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=487&min_rtt=487&rtt_var=243&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=471&delivery_rate=0&cwnd=248&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| GET ezdrivemajyr.top/i/assets/loading-WdnO4B_X.jpg | 104.21.48.1 | 200 OK | 82 kB |
URL GET HTTP/1.1ezdrivemajyr.top/i/assets/loading-WdnO4B_X.jpg IP 104.21.48.1:80
Requested byhttp://ezdrivemajyr.top/i/
File typeGIF image data, version 89a, 630 x 637 Hash9e0373c2b4410c49439dfd822c5fd16e 427f86c03751b7e107fd282bbe32be18fc2e0898 05eb745176d79ec27d52d544582483fc4d0f6378c7ed2060be24dfc4e8990668
GET /i/assets/loading-WdnO4B_X.jpg HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ezdrivemajyr.top/i/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 10 Feb 2025 20:51:59 GMT
Content-Type: image/jpeg
Content-Length: 81572
Connection: keep-alive
ETag: "6787212a-13ea4"
Last-Modified: Wed, 21 Oct 2020 07:28:00 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXOuQJOmEjE92f2TQRRBS4Bcb8nfWWHzhnOxN7mh6Z3dg%2BNNy6oWDrzCjg%2FVIJ0JiCpzg21ryxbVWHkAZ5mNhqJoHHOZ6EjEI57u4g2mmo%2BNntcaXIx0UPNpU9ycZN3tCWXq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 90fefaf5ee10712e-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=807&min_rtt=494&rtt_var=261&sent=113&recv=45&lost=0&retrans=0&sent_bytes=148486&recv_bytes=1132&delivery_rate=19669801&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| | 104.21.48.1 | 301 Moved Permanently | 2.4 kB |
URL User Request GET HTTP/2IP 104.21.48.1:443
CertificateIssuerGoogle Trust Services Subjectezdrivemajyr.top Fingerprint6A:B3:18:1B:B0:1F:AD:10:F6:26:85:3F:80:F3:EB:69:84:CD:2D:D3 ValidityMon, 10 Feb 2025 13:53:53 GMT - Sun, 11 May 2025 14:51:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Mon, 10 Feb 2025 20:51:56 GMT
content-type: text/html
location: http://ezdrivemajyr.top/i/
last-modified: Wed, 21 Oct 2020 07:28:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=btdoNDnkzsJppoL2FleA7pMlyJBOQmM%2Fiaz%2B4uz8PUM51V2MP9rdAKLPxefzgC9bjB7rfrURS6wVSM2aW1mgViuZ1w9SvJa2Ut%2B5M3NLO5RAfq6jgfpRbfVWba86lMu09YkY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 90fefae7194cb4fd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6470&min_rtt=389&rtt_var=12132&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3216&recv_bytes=1127&delivery_rate=7554782&cwnd=252&unsent_bytes=0&cid=37a95d7a4395721d&ts=254&x=0"
X-Firefox-Spdy: h2
|
|
| GET ezdrivemajyr.top/ws | 104.21.48.1 | 101 Switching Protocols | 0 B |
IP 104.21.48.1:80
Requested byhttp://ezdrivemajyr.top/i/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws HTTP/1.1
Host: ezdrivemajyr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Sec-WebSocket-Version: 13
Origin: http://ezdrivemajyr.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0JeqUzyiWSdSvyEumMrypA==
DNT: 1
Connection: keep-alive, Upgrade
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 10 Feb 2025 20:51:59 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Version: 13
Sec-WebSocket-Accept: F8q2xrmnGf8LRW53n0Y+mb+ImfU=
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IKLXUFcFVl%2BkRjfMyV%2B4khTsHG6cWQbdRbhdC544v9ZLqKsQOzaAb3wp2rAUqDLTuXZyDYKWoSK8JG0t1wSfbUh3qipNp7FyM7uLcHyuBnUk9CmpZdI1WmTylQbWini9gH6F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 90fefaf60f1556b1-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=487&min_rtt=487&rtt_var=243&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=471&delivery_rate=0&cwnd=248&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|