| cashcomeclm.buzz/ | 188.114.96.1 | | 4.5 kB |
IP188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text Hashba47dab94da778404a14cfc2b286b8ad 5d84a40d79ca1f3fbe5df274bf0c5aac2dbbe650 cc07cf240eb27a83815eb648b92cf3e259d37a5d5ecec48dc190977b5c808d7f
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET / HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:31:51 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: loclang=en; expires=Tue, 23-Apr-2024 10:31:51 GMT; Max-Age=259200; path=/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XNW71fwrKQI%2FRDjDUQUDnZSJhDXJNIDNrePNHikJAyRw4sMVdVxiM8WooibF7HwdJifRgHbjU8sE3%2Flzyxs8BcEpCiAQgMgALEGgMVf2CSWK1rglXzliBvSXCqOiDz1FMHKD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87747792dbb756b1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 0 B |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 20 Apr 2024 10:31:52 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: ./login.php
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fl1SO%2F0DdcRPRIoXVhnVyMjuz0HkiOgN6rkuoEEWAUs5OAd3tkSMOdU4kf80kobt6vL%2FUTVH7LpIdm3kO9LDYhvYfo3tyx%2Fc4pLATWFhbG8uAgex9zgy9x8ui4uj3alYlLHH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87747796fba656bb-OSL
alt-svc: h2=":443"; ma=60
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 4.6 kB |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hash635422472be8810a6e8dd8924a5b45d3 7626adc88f3326ba6d2b8a8568e3c7fcd5848174 6930fbf6315cc28ae1e8aa2cd11889531070865eae9371475c77ebb29b1e0790
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:31:51 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPzxa6AzNoBUH6v7A%2FBpxC1GiospKx85lPd3gpfiUKsP%2FQqWsyGDsx9LUy%2FN9%2B0WQVVuL5b4%2FLDKkvvCgrBW4reZUxSVRAA%2FOgU0kUHQt4F0Qufmbwv6YjdujJlVeKGckAk%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877477909d7e56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 0 B |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:31:56 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BIN6%2BtORmcFw8CPjvQ0Djcqj8Tz2IAyH8HdwGks480cmxg7bVRv6Jtf9FqAEuijnkLxUx4SFJOeFl%2FjVEdTkg0ZEt1zw1lneCcZ5F60WviUU9lR%2B4ujhbknJdZT0eZe0Lgch"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877477b34fea56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 7.4 kB |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hashee8abd89e8e5ef1e1f7762e628fae200 4e3215094dac6bbe5add6dd68eaeefc62a032591 acb895181c30a1939bff6df38322e32f44fc3a3fe03f3278aa83f25c074989d2
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: loclang=en
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:31:52 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XvVYgmzZPmiGh4HxLdyAsBYQbAOoYnlcV2d3ufxmBDyE%2BF5JYEqErXSb5Yfj4%2BXnhxxmSjXzK3zyooSCEmAG93qKaCACb6WcyX6h1xiuhCVwYOy6h8UmJjx7qcnq4eMw0Rip"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877477988dc056af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 8.1 kB |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hash2d424a345d45863f022ba508369ec353 86a6d8b831a90d531a68b9a8df858a25f6cf5bb7 27c881dac0bb2597f92810fbf8547149b700065cd0aedc6b6cb1589613a98a02
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:31:59 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y1E5cQFj522u%2BbHM6tOu7UCMrlW4U7o8Jt8XVGEEZvmFc9z5mQBGpUhlyxApAlxCD87vCMYOvXs7coIRl%2FVIqv%2FKci%2BhSTmMJjx%2BE66lr97VfEHvpCgoAGKevpIps2s6RGnu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877477c25fd156af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 8.5 kB |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hasheb47e7627f96569a1c7de1c059396be1 690d0a7374e00bf55a0cb744248aaa8441f6511d d0492e71c505c21ec5b8e83a875d1925758708476427fa5999d6e609e9a2dbe8
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:31:50 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CL%2F9eNR%2FWl7IaMiV1w7oJfijaR68tkvVNca068%2BQW2YldhuVwfxVcodmnHQLMx%2FDkhFln2eN3l%2FQDwDfKOGbMrdNs0hpPDAxnExF1jxu%2FIFDy2R5qaEaA2CJTuRXNaI%2FkTld"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8774778a9fdd56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 7.0 kB |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hash5a4d2dd26b53b72e8b03d230c854ef88 1f87ba300e9cf86cf09aa98e15e8c51cf530b5cb 0dee255f50efbb5637407efd9a1f95c925bf3540d55935ed328aa8908cecd212
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:32:01 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=snHdiNxqkX7%2FXWzcv95RteSJrfWObtjPWNImTrigf%2FCGhkJ29kid8HAeCq5bHbP8Q0Z2GhKQb6yi0KUx196gH0r8B2prtSEVzhqljiB4jvedZy3NjNLvjCOn9syLR1PtMGXm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877477ce4b8a56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 0 B |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:31:58 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k4mxjuIrkB1IQ1rvdUT9zB4ZNdvcYtESraKsKKOCK%2FejDIVwHLn9kGCVLbYYajp7metPjdqSp51UesWKeRENldvublEmV3rPNsCT2og6GMyoBys0xgNfsaEKVrDKBsk6rHdg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877477bdeb3256af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 0 B |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:32:06 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3o2urk7UZjQgYx7G1V2ETDHvM%2FCEQKtNKxcZ74pwDB71n00f3nKf3MWrf803EqrpRTEAPHOc8HLELqUApjhe1lvvems5fA7NIdmWXtpl0fTlPJMxidsvS9okS8AOYAvgQW71"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877477ec4aa056af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php | 188.114.97.1 | | 0 B |
URL User Request GET cashcomeclm.buzz/dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php IP188.114.97.1:0
CertificateIssuerGoogle Trust Services LLC Subjectcashcomeclm.buzz Fingerprint14:4A:D0:DA:E1:05:3B:50:88:3B:F6:E9:B9:24:64:7B:FF:22:42:AD ValidityThu, 21 Mar 2024 05:52:14 GMT - Wed, 19 Jun 2024 05:52:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain | suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /dashboard.php/login.php./login.php./login.php./login.php./login.php./login.php HTTP/1.1
Host: cashcomeclm.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: loclang=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sat, 20 Apr 2024 10:31:50 GMT
content-type: text/html;charset=utf-8
location: ./login.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iw9IAi8b9hWH0i5YaLaVc9zt0ZqwNe92DGmKW375d4pCacC%2FmHZft%2FWZRNzbZ5JgJsMnLrkQ2jQ8%2BjXPgO6dN7t4TUHSH%2FSQQCccXoJpuQqdFchLn9%2F6qDqMXXLwJgJzDsza"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8774778d9a4656af-OSL
alt-svc: h3=":443"; ma=86400
|
|