IP 72.52.179.175:443
CertificateIssuerLet's Encrypt Subjecttv0800.zip Fingerprint0D:E7:7C:9A:EA:E2:40:4D:7B:1A:17:EF:BF:EF:D0:09:EF:75:07:77 ValidityMon, 28 Apr 2025 00:12:46 GMT - Sun, 27 Jul 2025 00:12:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: tv0800.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 14 May 2025 17:45:21 GMT
content-type: text/html
content-length: 0
location: http://ww1.tv0800.zip/?usid=27&utid=12470039263
cache-control: no-cache
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
| GET ww1.tv0800.zip/?usid=27&utid=12470039263 |  64.190.63.136 | 403 Forbidden | 93 B |
URL User Request GET ww1.tv0800.zip/?usid=27&utid=12470039263 IP64.190.63.136:80
File typeHTML document, ASCII text Hashb0d506893d4802090edf1644f5f082cd 4bf0d7ecb70703857c7029754fa02a7496313b63 0d3e98ca727fc1201b436170af5a63f23348aaf146a3ac6234f6c4da283e8b34
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /?usid=27&utid=12470039263 HTTP/1.1
Host: ww1.tv0800.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html
|
| GET ww1.tv0800.zip/favicon.ico | 64.190.63.136 | 403 Forbidden | 93 B |
URL GET ww1.tv0800.zip/favicon.ico IP64.190.63.136:80
Requested byhttp://ww1.tv0800.zip/?usid=27&utid=12470039263
File typeHTML document, ASCII text Hashb0d506893d4802090edf1644f5f082cd 4bf0d7ecb70703857c7029754fa02a7496313b63 0d3e98ca727fc1201b436170af5a63f23348aaf146a3ac6234f6c4da283e8b34
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /favicon.ico HTTP/1.1
Host: ww1.tv0800.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww1.tv0800.zip/?usid=27&utid=12470039263
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html
|