| |  44.227.65.245 | 200 OK | 1.2 kB |
IP44.227.65.245:0
File typeHTML document, ASCII text Hash6449e4ce6f4a7f2c0008b1135cb312c4 b4b3c9a980b436d4abb75f644038507121b63c64 694ad62d13a66f7f629d6f708b59b028d3af5623089d64614a7f3f70f8822ea9
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: fixit.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 31 Dec 2024 01:31:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=8Q4dzDgC/QDjqNbo7+fIeYksL1iv4Ut0JJZEhDTaPR6q7+n07QuxZiTZ8wQDomgJgWhbvueolIsaS52l0JkDgn5vr/lrqLOuj2yBp+dg/DQUzmQbfpN6d6ppHzTD; Expires=Tue, 07 Jan 2025 01:31:33 GMT; Path=/
AWSALBCORS=8Q4dzDgC/QDjqNbo7+fIeYksL1iv4Ut0JJZEhDTaPR6q7+n07QuxZiTZ8wQDomgJgWhbvueolIsaS52l0JkDgn5vr/lrqLOuj2yBp+dg/DQUzmQbfpN6d6ppHzTD; Expires=Tue, 07 Jan 2025 01:31:33 GMT; Path=/; SameSite=None
X-Powered-By: PHP/8.0.25
Content-Encoding: gzip
X-Cache: BYPASS
X-Service: pixie-default
|
|
| GET fixit.zip/css/all.css | 44.227.65.245 | 200 OK | 760 B |
IP44.227.65.245:80
File typeassembler source, ASCII text Hash471455653355f8522415709a7c044824 b6ffda6c2a7274c8e1e0b8d968bca4388aa81035 8f1a07a9d25f8024707864cc12f5651aff384619400f5a4972edab0ea3bb8ff1
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /css/all.css HTTP/1.1
Host: fixit.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fixit.zip/
Cookie: AWSALB=8Q4dzDgC/QDjqNbo7+fIeYksL1iv4Ut0JJZEhDTaPR6q7+n07QuxZiTZ8wQDomgJgWhbvueolIsaS52l0JkDgn5vr/lrqLOuj2yBp+dg/DQUzmQbfpN6d6ppHzTD
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 31 Dec 2024 01:31:33 GMT
Content-Type: text/css
Content-Length: 760
Connection: keep-alive
Set-Cookie: AWSALB=GTTPb4yrv0DOc62S66oWYa88f1M/AJFw96fMTInPJ03CzWgjZKiak0O9lhu9Os1fRxlF4+LdUIjae2GTudldY+pkDO7mBTX431NE4U/qGlph7e3VSL2HlT9raugT; Expires=Tue, 07 Jan 2025 01:31:33 GMT; Path=/
AWSALBCORS=GTTPb4yrv0DOc62S66oWYa88f1M/AJFw96fMTInPJ03CzWgjZKiak0O9lhu9Os1fRxlF4+LdUIjae2GTudldY+pkDO7mBTX431NE4U/qGlph7e3VSL2HlT9raugT; Expires=Tue, 07 Jan 2025 01:31:33 GMT; Path=/; SameSite=None
Last-Modified: Fri, 30 Sep 2022 23:50:30 GMT
ETag: "633780c6-2f8"
Accept-Ranges: bytes
X-Cache: BYPASS
X-Service: pixie-default
|
|
| GET www.googletagmanager.com/gtag/js?id=UA-59154711-35 | 216.58.207.200 | 200 OK | 82 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-59154711-35 IP216.58.207.200:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3835) Hash555439e5ea2d65ccfa20fbf8e6795bbd 3496bb81f80299862bbbf68ad75463d1cd831b23 be6e43807a32b7378dc10f477b82a989adf5801c7013eaac5a7a417b30c6a667
GET /gtag/js?id=UA-59154711-35 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://fixit.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Dec 2024 01:31:33 GMT
expires: Tue, 31 Dec 2024 01:31:33 GMT
cache-control: private, max-age=900
last-modified: Tue, 31 Dec 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 81574
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.googletagmanager.com/gtag/js?id=G-WZSBC7FK9S&l=dataLayer&cx=c>m=457e4cc1za200 | 216.58.207.200 | 200 OK | 98 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-WZSBC7FK9S&l=dataLayer&cx=c>m=457e4cc1za200 IP216.58.207.200:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hash613cdfd9836478094a39604bd4f8af82 67e0aecb39a52f967e0a9513573718400b5ab206 e951a9524456c9e6e21bbccb7d93e16620513f61f45d704d7cbf5a4119c725c3
GET /gtag/js?id=G-WZSBC7FK9S&l=dataLayer&cx=c>m=457e4cc1za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://fixit.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Dec 2024 01:31:33 GMT
expires: Tue, 31 Dec 2024 01:31:33 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 98383
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET fixit.zip/images/parked-on-the-bun.png | 44.227.65.245 | 200 OK | 87 kB |
URL GET HTTP/1.1fixit.zip/images/parked-on-the-bun.png IP44.227.65.245:80
File typePNG image data, 1801 x 1800, 8-bit/color RGBA, interlaced Hash1087c0ae6e62fb2e6213592b32577b9d 2f8d36c6a365668e9ca88883ee3274ffdb603a8e 212937185c686760c7c5a16ffd42bfc8ceec508f6101318bbc70a8dccbd32f9b
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /images/parked-on-the-bun.png HTTP/1.1
Host: fixit.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fixit.zip/
Cookie: AWSALB=8Q4dzDgC/QDjqNbo7+fIeYksL1iv4Ut0JJZEhDTaPR6q7+n07QuxZiTZ8wQDomgJgWhbvueolIsaS52l0JkDgn5vr/lrqLOuj2yBp+dg/DQUzmQbfpN6d6ppHzTD
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 31 Dec 2024 01:31:33 GMT
Content-Type: image/png
Content-Length: 86989
Connection: keep-alive
Set-Cookie: AWSALB=YOkiBAIX3/CsVlWFl18mktWxNd+3MLFHKobYLRKZGrcSS/dR7TzyDGhQ+0mVVR1EoBdweWTnuisOBF3R+CRcPpiEOjMA2hiedY3xzTqU5dyt0FGZqtkNXpoNfOCO; Expires=Tue, 07 Jan 2025 01:31:33 GMT; Path=/
AWSALBCORS=YOkiBAIX3/CsVlWFl18mktWxNd+3MLFHKobYLRKZGrcSS/dR7TzyDGhQ+0mVVR1EoBdweWTnuisOBF3R+CRcPpiEOjMA2hiedY3xzTqU5dyt0FGZqtkNXpoNfOCO; Expires=Tue, 07 Jan 2025 01:31:33 GMT; Path=/; SameSite=None
Last-Modified: Fri, 30 Sep 2022 23:50:30 GMT
ETag: "633780c6-153cd"
Accept-Ranges: bytes
X-Cache: BYPASS
X-Service: pixie-default
|
|
| GET porkbun-media.s3-us-west-2.amazonaws.com/tld-buns/_zip.svg | 3.5.80.200 | 200 OK | 34 kB |
URL GET HTTP/1.1porkbun-media.s3-us-west-2.amazonaws.com/tld-buns/_zip.svg IP3.5.80.200:443
CertificateIssuerAmazon Subject*.s3-us-west-2.amazonaws.com Fingerprint1F:2E:6D:29:9C:0E:7C:92:7F:D0:3C:03:69:41:27:01:30:88:84:42 ValidityThu, 14 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1dc685ca76e0047af7aa1fb1ff10c47f d9abb0820143a4be01d98cbbad5c5d45cbfd7b26 e21ec34996d3bb2bd3f3cf5885efc01d37cdd5ae36d9ba4fde1c58de975e4f4d
GET /tld-buns/_zip.svg HTTP/1.1
Host: porkbun-media.s3-us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://fixit.zip/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: GmuF/BUozeF+m/LSNAIYj2uqIpShcOI2SAQ26XZThdf76UyXVkXMYfhGdcFsZJgcutlupkyouDjSbvPpoq2SJw==
x-amz-request-id: F52PP3PC34GRHYQ4
Date: Tue, 31 Dec 2024 01:31:34 GMT
Last-Modified: Thu, 17 Aug 2023 21:04:51 GMT
ETag: "1dc685ca76e0047af7aa1fb1ff10c47f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/svg+xml
Content-Length: 33463
Server: AmazonS3
|
|
| GET fixit.zip/favicon.ico | 44.227.65.245 | 200 OK | 1.2 kB |
IP44.227.65.245:80
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashfbe9e8b65fbb503a7aea9722b01e630c 5902b9a47b0a21b6180ee9075a89139887988394 db897943d379d0ec62705f42a980896fc936de5ed8a9c65dea59790aa915c37a
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /favicon.ico HTTP/1.1
Host: fixit.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fixit.zip/
Cookie: AWSALB=YOkiBAIX3/CsVlWFl18mktWxNd+3MLFHKobYLRKZGrcSS/dR7TzyDGhQ+0mVVR1EoBdweWTnuisOBF3R+CRcPpiEOjMA2hiedY3xzTqU5dyt0FGZqtkNXpoNfOCO; _ga_WZSBC7FK9S=GS1.1.1735608693.1.0.1735608693.0.0.0; _ga=GA1.1.459805350.1735608694
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 31 Dec 2024 01:31:34 GMT
Content-Type: image/x-icon
Content-Length: 1150
Connection: keep-alive
Set-Cookie: AWSALB=PcmYk9+WzFxNfl4oES6N8a0h1OWcMQMetcBLGt170tQ1hNrmwSYGb+zQAeOq1VNKT0qDxJXBpGoL20OQaoMiBpc9tPhnWoqHV7rug/UBxQISIkw/NjMAUFXYaZAf; Expires=Tue, 07 Jan 2025 01:31:34 GMT; Path=/
AWSALBCORS=PcmYk9+WzFxNfl4oES6N8a0h1OWcMQMetcBLGt170tQ1hNrmwSYGb+zQAeOq1VNKT0qDxJXBpGoL20OQaoMiBpc9tPhnWoqHV7rug/UBxQISIkw/NjMAUFXYaZAf; Expires=Tue, 07 Jan 2025 01:31:34 GMT; Path=/; SameSite=None
Last-Modified: Wed, 15 Sep 2021 16:58:59 GMT
ETag: "61422653-47e"
Accept-Ranges: bytes
X-Cache: BYPASS
X-Service: pixie-default
|
|
| GET maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css |  104.18.11.207 | 200 OK | 121 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP104.18.11.207:443
CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint4C:46:68:E4:35:94:CF:F1:17:E4:0B:28:EF:F8:44:64:A1:01:5A:ED ValidityMon, 18 Nov 2024 00:43:34 GMT - Sun, 16 Feb 2025 00:43:33 GMT
File typeASCII text, with very long lines (65371) Size121 kB (121200 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fixit.zip
DNT: 1
Connection: keep-alive
Referer: http://fixit.zip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 31 Dec 2024 01:31:33 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 12/25/2024 01:51:04
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: afa045530185c441f8ef25d43123ac7a
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8fa682bd1a29b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0