URL User Request GET HTTP/3IP188.114.96.1:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintCE:BE:97:25:8A:18:9F:A7:09:F0:6B:A0:05:36:21:9F:DD:60:D7:55 ValidityFri, 17 Mar 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT
File typeHTML document, ASCII text, with no line terminators Hash9187e2d29226ab9e054264ead651eb4c 6fbed5a982e9464daeb151e9edf5f84b06685ceb c01ed16b037919ee1abac02ed92a088b14c71939c7d651a12bf36450c073d402
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: duty.beforelike.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Fri, 09 Jun 2023 04:16:01 GMT
content-type: text/html
location: https://duty.beforelike.top/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jzd8vfFBSk4ibSX2ZTGdR%2FAf%2BV%2FIimn74g3sjSBAhVUd%2BSlHxRvQg%2BUQap%2FkJdxt9%2BAC3hUquXES4fKtue3dOBp3FJLAFPzS2uQe29tFdUhN4itmdHgJvM2ENjRHNSuPsm1Xsnfn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d468e864fa40b31-OSL
alt-svc: h3=":443"; ma=86400
|
URL User Request GET HTTP/3IP188.114.96.1:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintCE:BE:97:25:8A:18:9F:A7:09:F0:6B:A0:05:36:21:9F:DD:60:D7:55 ValidityFri, 17 Mar 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT
File typeHTML document, ASCII text, with no line terminators Hasha068e5e65fe22019729ada8762bc5d8d b8fd2a28efe7af517e9ffd8b9936f8a649fed423 2a1850db9e82316333b7dbbc37c790664ce51f785319c05bc498d844a32d7c0d
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: duty.beforelike.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Fri, 09 Jun 2023 04:16:03 GMT
content-type: text/html
location: https://duty.beforelike.top/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=noTo6JaunLXUWvgw2dJfmjg2lP2F5aY9%2FXe9nPO3Xf%2Fx%2BaR7cFZRiGlRCAKUzTdcT9K2ZGxe3yXrCvqTCpUSyn8P%2F5Q4jkcMB8nHgOwqsp7NcnlOQMNU9lrdquO3usssLYvh9Ch%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d468e910bbb0b4d-OSL
alt-svc: h3=":443"; ma=86400
|