| cdn.discordapp.com/attachments/1228310630193168384/1228319984975872171/b9d32a-M5_Sound_Mod_0.1.rar?ex=678b9da1&is=678a4c21&hm=c1c3837cf7010e61dfd09fb1cd6198707cb13debd67edec21435d51e759cf509& |  162.159.135.233 | 301 Moved Permanently | 167 B |
URL User Request GET HTTP/3cdn.discordapp.com/attachments/1228310630193168384/1228319984975872171/b9d32a-M5_Sound_Mod_0.1.rar?ex=678b9da1&is=678a4c21&hm=c1c3837cf7010e61dfd09fb1cd6198707cb13debd67edec21435d51e759cf509& IP162.159.135.233:443
CertificateIssuerGoogle Trust Services Subjectdiscordapp.com Fingerprint0A:D4:AE:4F:06:AD:72:A7:F1:78:90:F7:BD:F9:12:3F:64:33:FD:87 ValidityWed, 15 Jan 2025 02:59:08 GMT - Tue, 15 Apr 2025 03:58:50 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO RAR File Download Request via Discord | | suricata | low | ET HUNTING Redirect to Discord Attachment Download |
GET /attachments/1228310630193168384/1228319984975872171/b9d32a-M5_Sound_Mod_0.1.rar?ex=678b9da1&is=678a4c21&hm=c1c3837cf7010e61dfd09fb1cd6198707cb13debd67edec21435d51e759cf509& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 17 Jan 2025 21:21:44 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 17 Jan 2025 22:21:44 GMT
Location: https://cdn.discordapp.com/attachments/1228310630193168384/1228319984975872171/b9d32a-M5_Sound_Mod_0.1.rar?ex=678b9da1&is=678a4c21&hm=c1c3837cf7010e61dfd09fb1cd6198707cb13debd67edec21435d51e759cf509&
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1rgZRrDWYj3zphNyD2JL1TfCmN%2FsCs6G%2BN%2Fl%2FXuMtW4nthiiw7rAaT5LiDA6%2Bfx3gavGIdN0EF1QizyebP6lxp84dckgqOtXb%2BLIhqQ8toHlWDdHYCI5IC11Vp2AKN%2BnQoUh7w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
Set-Cookie: __cf_bm=ZeV0pO72caUeDDPhXw_LKaXL8563EG2LB_1Y8BgjKPM-1737148904-1.0.1.1-4CQJPtPkwptlWjfY._rz08l_8zmLlSkhRqiunCWdingqhnSR5dfugRiS3zq0Of4DdU0GampEAGr311Y.rWd.bA; path=/; expires=Fri, 17-Jan-25 21:51:44 GMT; domain=.discordapp.com; HttpOnly
_cfuvid=5O06QW_BXElvQx7.NryaFp2QU8e21ygFOfi0ZTNwG4Y-1737148904813-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly
Server: cloudflare
CF-RAY: 9039658f0f3f56af-OSL
alt-svc: h3=":443"; ma=86400
|