| www.freewebtown.com/copiameesta/msn.exe |  104.21.80.1 | 522 No Reason Phrase | 7.1 kB |
URL User Request GET HTTP/2www.freewebtown.com/copiameesta/msn.exe IP104.21.80.1:443
CertificateIssuerGoogle Trust Services Subjectfreewebtown.com Fingerprint7F:C4:8C:3D:C0:AE:F1:2C:57:84:8C:D8:47:B8:D1:4A:8E:0D:66:56 ValidityWed, 22 Jan 2025 18:34:35 GMT - Tue, 22 Apr 2025 19:28:12 GMT
File typeHTML document, ASCII text, with very long lines (460) Hash9718dc76eaf46b4fcae35d1551a03308 05956bf3ac103654efd7f465513f3bc50681334b cec90a08823efdcd3f7a617206aaaa2cec57a03657911c9872e3d648ab6ca11b
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile |
GET /copiameesta/msn.exe HTTP/1.1
Host: www.freewebtown.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 522 No Reason Phrase
date: Fri, 24 Jan 2025 05:39:57 GMT
content-type: text/html; charset=UTF-8
content-length: 7102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dx7mT3JD4kkKN%2FdB8W%2BNpza3w9h3sArleDv9g57lLhEUWmxSQ2Xsl%2B5ipongejG1W9P1Ar6oo3a4o0efCdYfxesr0dzsmHStpEsWidMfAXvAnUOFNBLJOf8FPI%2B0y7Nn%2FcqJJbA4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 906daf23c847569b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6167&min_rtt=474&rtt_var=11380&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3211&recv_bytes=1133&delivery_rate=6672811&cwnd=254&unsent_bytes=0&cid=048dfcb281430a01&ts=19518&x=0"
X-Firefox-Spdy: h2
|