| 138.197.145.229/lmaoWTF/loligang.mips | 138.197.145.229 | 302 Found | 232 B |
URL User Request GET HTTP/1.1138.197.145.229/lmaoWTF/loligang.mips IP138.197.145.229:80 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, ASCII text Hash435ee06312ae73c091acb967c2e6412d 457751a9900fd0295256a5e813a24b7d5e16d8b0 6bc78d38f288f9272393a4e08ec1add12e38d87e22bf3848139f5fdd1d451370
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
NIDS | Severity | Alert | suricata | medium | ET INFO MIPS File Download Request from IP Address |
GET /lmaoWTF/loligang.mips HTTP/1.1
Host: 138.197.145.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 19 Apr 2024 09:21:24 GMT
Server: Apache
Location: https://tahltan.dsilabs.ca/lmaoWTF/loligang.mips
Content-Length: 232
Keep-Alive: timeout=100, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| tahltan.dsilabs.ca/lmaoWTF/loligang.mips | 138.197.145.229 | 302 Found | 211 B |
URL User Request GET HTTP/1.1tahltan.dsilabs.ca/lmaoWTF/loligang.mips IP138.197.145.229:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerDigiCert Inc Subject*.dsilabs.ca Fingerprint5A:6A:AB:80:F2:0D:E8:40:2D:C7:C5:FD:B2:89:46:3A:06:46:B3:DC ValidityThu, 11 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeHTML document, ASCII text Hashd918900982ac7f4bc21f045f80baa431 cb1544ed35f135050973ceba014ab3b6c3de1bef 056121be3db3c72980c41a1620859cfd679e07193493e0cd6de5062d69529e7f
GET /lmaoWTF/loligang.mips HTTP/1.1
Host: tahltan.dsilabs.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 19 Apr 2024 09:21:25 GMT
Server: Apache
Set-Cookie: dz4sid=b89e4d36a1ec4e0694512464353f81f2; expires=Fri, 19 Apr 2024 10:21:25 GMT; httponly Set-Cookie: dz4sub=c4219c5dbe414357a979788940f042a8; expires=Sat, 19 Apr 2025 09:21:25 GMT; httponly
Location: https://tahltan.dsilabs.ca/
Content-Length: 211
Keep-Alive: timeout=100, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| | 138.197.145.229 | 200 OK | 1.4 kB |
URL User Request GET HTTP/1.1IP138.197.145.229:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerDigiCert Inc Subject*.dsilabs.ca Fingerprint5A:6A:AB:80:F2:0D:E8:40:2D:C7:C5:FD:B2:89:46:3A:06:46:B3:DC ValidityThu, 11 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeHTML document, ASCII text Hash24b338fb0794fc4dd2c7107cea8a7761 b8c52db6736992488b729cf73cbab911c740495f 2b64af78a07c091c7f6fb1809ffec6c2fd016ea140d3c9cae1aafbe3dfeb1964
GET / HTTP/1.1
Host: tahltan.dsilabs.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:21:25 GMT
Server: Apache
X-FRAME-OPTIONS: DENY
Cache-Control: no-cache
Set-Cookie: dz4sid=db6e8c9e7401473b83f89885713a40d8; expires=Fri, 19 Apr 2024 10:21:25 GMT; httponly Set-Cookie: dz4sub=e86b79d1c6044d06bf5a6cca11256f0c; expires=Sat, 19 Apr 2025 09:21:25 GMT; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 1381
Keep-Alive: timeout=100, max=99
Connection: Keep-Alive
Content-Type: text/html
|
|
| tahltan.dsilabs.ca/themes/tahltan/css/style.css | 138.197.145.229 | 200 OK | 1.8 kB |
URL GET HTTP/1.1tahltan.dsilabs.ca/themes/tahltan/css/style.css IP138.197.145.229:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://tahltan.dsilabs.ca/ CertificateIssuerDigiCert Inc Subject*.dsilabs.ca Fingerprint5A:6A:AB:80:F2:0D:E8:40:2D:C7:C5:FD:B2:89:46:3A:06:46:B3:DC ValidityThu, 11 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash0c666242073a65ec0c385ce87d0c2033 f0acf82b82afa819c8f91a2a71fad0d6aa213d99 84160ef0874104e9eba48eda65f0f839309a2d05b539dbfd1f84bd6dde78242a
GET /themes/tahltan/css/style.css HTTP/1.1
Host: tahltan.dsilabs.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tahltan.dsilabs.ca/
Cookie: dz4sid=db6e8c9e7401473b83f89885713a40d8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:21:26 GMT
Server: Apache
Last-Modified: Sat, 24 Sep 2022 19:17:16 GMT
ETag: "1ca6-5e9712483e2ce-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 1825
Keep-Alive: timeout=100, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| fonts.googleapis.com/css?family=Ubuntu:regular,italic,bold,bolditalic | 142.250.74.74 | 200 OK | 1.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Ubuntu:regular,italic,bold,bolditalic IP142.250.74.74:443
Requested byhttps://tahltan.dsilabs.ca/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hash11560a1e5b0372329955243ad9b53572 8fe53f71fd98b348ab7e55f84fdbde6c8f566cf6 0abe331760900b311b9da71221b5ae2dd971996df35fa5dfbbb1952d117d8e04
GET /css?family=Ubuntu:regular,italic,bold,bolditalic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tahltan.dsilabs.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 09:21:26 GMT
date: Fri, 19 Apr 2024 09:21:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 | 216.58.207.227 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 IP216.58.207.227:443
Requested byhttps://tahltan.dsilabs.ca/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34852, version 1.0 Hash0e8eefb4549a2edf26c560cb9845952e 8d0b1718aacad934fd0043c87cbc54aa091396bf 7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tahltan.dsilabs.ca
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:13 GMT
expires: Fri, 18 Apr 2025 02:38:13 GMT
cache-control: public, max-age=31536000
age: 110593
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tahltan.dsilabs.ca/favicon.ico | 138.197.145.229 | 404 Not Found | 196 B |
URL GET HTTP/1.1tahltan.dsilabs.ca/favicon.ico IP138.197.145.229:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://tahltan.dsilabs.ca/ CertificateIssuerDigiCert Inc Subject*.dsilabs.ca Fingerprint5A:6A:AB:80:F2:0D:E8:40:2D:C7:C5:FD:B2:89:46:3A:06:46:B3:DC ValidityThu, 11 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeHTML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: tahltan.dsilabs.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tahltan.dsilabs.ca/
Cookie: dz4sid=db6e8c9e7401473b83f89885713a40d8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 19 Apr 2024 09:21:26 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=100, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| tahltan.dsilabs.ca/themes/tahltan/image/menu_bg1.png | 138.197.145.229 | 200 OK | 207 B |
URL GET HTTP/1.1tahltan.dsilabs.ca/themes/tahltan/image/menu_bg1.png IP138.197.145.229:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://tahltan.dsilabs.ca/ CertificateIssuerDigiCert Inc Subject*.dsilabs.ca Fingerprint5A:6A:AB:80:F2:0D:E8:40:2D:C7:C5:FD:B2:89:46:3A:06:46:B3:DC ValidityThu, 11 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typePNG image data, 1 x 35, 8-bit/color RGBA, non-interlaced Hash6301429c7ee2ff5b0f119de0421e9ecc 558845e3d5ddeae30b2be0658ec02fb2301070f5 5ca030c39e9a5b273c00845bedab0cc04ef2c5077b31b8b935205d2a0d960157
GET /themes/tahltan/image/menu_bg1.png HTTP/1.1
Host: tahltan.dsilabs.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tahltan.dsilabs.ca/
Cookie: dz4sid=db6e8c9e7401473b83f89885713a40d8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:21:26 GMT
Server: Apache
Last-Modified: Sat, 24 Sep 2022 19:17:16 GMT
ETag: "cf-5e9712483f26e"
Accept-Ranges: bytes
Content-Length: 207
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=100, max=100
Connection: Keep-Alive
Content-Type: image/png
|
|
| tahltan.dsilabs.ca/themes/tahltan/image/main_bg4.jpg | 138.197.145.229 | 200 OK | 48 kB |
URL GET HTTP/1.1tahltan.dsilabs.ca/themes/tahltan/image/main_bg4.jpg IP138.197.145.229:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://tahltan.dsilabs.ca/ CertificateIssuerDigiCert Inc Subject*.dsilabs.ca Fingerprint5A:6A:AB:80:F2:0D:E8:40:2D:C7:C5:FD:B2:89:46:3A:06:46:B3:DC ValidityThu, 11 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1595x117, components 3 Hashd7ab981b92e69314e9f0ec479fa2e788 32a91495418f1976d4c95446818dca5edbe12241 9c616ada944151a6d6a176cbb20c42444791f5647d977fbc77ef9e3d936f098a
GET /themes/tahltan/image/main_bg4.jpg HTTP/1.1
Host: tahltan.dsilabs.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tahltan.dsilabs.ca/
Cookie: dz4sid=db6e8c9e7401473b83f89885713a40d8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:21:26 GMT
Server: Apache
Last-Modified: Sat, 24 Sep 2022 19:17:16 GMT
ETag: "baae-5e9712483f26e"
Accept-Ranges: bytes
Content-Length: 47790
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=100, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
|
|