| brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260 | 104.21.4.148 | 403 Forbidden | 0 B |
URL User Request GET HTTP/3brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260 IP 104.21.4.148:443
CertificateIssuerLet's Encrypt Subjectstonecarv.top FingerprintC9:CD:92:AE:B3:B3:96:B3:A4:1F:A3:A4:30:B4:EB:CA:9E:BE:BA:C3 ValidityThu, 23 Nov 2023 13:25:44 GMT - Wed, 21 Feb 2024 13:25:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET /blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260 HTTP/1.1
Host: brnok.stonecarv.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 03 Dec 2023 22:19:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 03 Dec 2023 23:19:48 GMT
Location: https://brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7sciitntXsvsSfImQfiy%2BF18PrQrmId4rsMEPtWlXBoxhRPb6VDDt2TJ%2Bqzr0ppOuGzrv5thENI0Ls7J6u7hR8Re2TxZszg8WsRwuP9LsqYdMAcX2z2y%2FFoREcTInul0dNd%2BP9CM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82ff317c4fdfb4f7-OSL
alt-svc: h2=":443"; ma=60
|
|
| cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/5.1.0/css/bootstrap.min.css | 104.17.25.14 | 200 OK | 17 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/5.1.0/css/bootstrap.min.css IP 104.17.25.14:443
Requested byhttps://brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (65306) Hashe451b87914db6243b6afa3c5e484ec16 396f51b333ff6f0926f6e67ad6e6c9c69bea7b31 cfc391e34328c09f0680ae8ff3d63e86224ae7e71c973147ccb84540b2fdd9b8
GET /ajax/libs/twitter-bootstrap/5.1.0/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://brnok.stonecarv.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 22:19:48 GMT
content-type: text/css; charset=utf-8
content-length: 17426
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "610aba41-4412"
last-modified: Wed, 04 Aug 2021 16:03:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 656590
expires: Fri, 22 Nov 2024 22:19:48 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tbHEvKfX17bEOug78peQaierdLD1K%2B3NKQHvG%2FywMpaMfiBHEW9lioCQNfSTWCbIAkSTJCopO9f4aSSdkl9vq66Pb6CysdAsra1gZ%2BHpDSzbQzjTz2f%2BltOZq7tYf1YY2GvORgKw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ff317e9e07b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css | 104.17.25.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css IP 104.17.25.14:443
Requested byhttps://brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (59119) Hashecd507b3125edc4d2a03aa6ae5d07da9 a57ee68d11601b0fd8e5037fc241ff65a754473c 99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e
GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://brnok.stonecarv.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 22:19:48 GMT
content-type: text/css; charset=utf-8
content-length: 10462
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613fa20b-28de"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 669250
expires: Fri, 22 Nov 2024 22:19:48 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6hQXxDIuY65t%2Ft4C3WTFFEnIs6hVrXNP39Lqv1%2Frm8otyCPE8kLQOG52B1qLF96BvRaakeLKBSmtQwSaZVQubbgo18A3w9NEHpJ3zj%2FahdK1kodODlxZtawALDIO%2FxSh3efnWQ6k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ff317e9e08b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| brnok.stonecarv.top/favicon.ico | 104.21.4.148 | 204 No Content | 0 B |
URL GET HTTP/3brnok.stonecarv.top/favicon.ico IP 104.21.4.148:443
Requested byhttps://brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260 CertificateIssuerLet's Encrypt Subjectstonecarv.top FingerprintC9:CD:92:AE:B3:B3:96:B3:A4:1F:A3:A4:30:B4:EB:CA:9E:BE:BA:C3 ValidityThu, 23 Nov 2023 13:25:44 GMT - Wed, 21 Feb 2024 13:25:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: brnok.stonecarv.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sun, 03 Dec 2023 22:19:49 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4871
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EeuLO8tAK4hGELK0vFsCeqIlhFWttBA%2F9hilaYcVjehDNVjYK%2FEBqOHt%2BM8ojF59fYETcR%2FL%2BnhxjLJt4E7NQSR7ZzYK2QTpW8wZy8UKPvHFUAfsRT6vxIqzVvR8hyxtxLog%2Fum5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ff317f4c3fb523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 | 104.17.25.14 | 200 OK | 78 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 IP 104.17.25.14:443
Requested byhttps://brnok.stonecarv.top/blue-robot/?pl=O9ZLZ9y9AUaQ3TSAoWKVMA&sm=blue-robot&click_id=55db5h9ikghgmx9e20&sub_id=15309904&nrid=1eb4fc56d9924c8b894f288665f68c14&hash=kflz8kLw4BYqXYm63KnJ_A&exp=1701642260 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78268, version 331.-31196\012- data Hashd824df7eb2e268626a2dd9a6a741ac4e 0ccb2c814a7e4ca12c4778821633809cb0361eaa 9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://brnok.stonecarv.top
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 22:19:49 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 78268
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "613fa20b-131bc"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1016047
expires: Fri, 22 Nov 2024 22:19:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6r%2FnLqfFgAQoIFjDRKrJF1cFn0uS%2BW6N7Es5j4yF6FT2ktBebRzFhrsA%2BCrHHstp7Rly%2B24AFLLZUK%2FEHbTOwVjYbrGD%2FCaAhGQPaTh8O%2FTxg1GE0Zhdq4%2BBYz352pB%2Fd2cSEvwR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ff317f6ebdb517-OSL
alt-svc: h3=":443"; ma=86400
|
|