IP 172.67.144.192:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /favicon.ico HTTP/1.1
Host: pekora.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://pekora.zip/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 11 May 2025 09:53:55 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 11 May 2025 10:53:55 GMT
Location: http://www.pekora.zip/favicon.ico
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cmeeOrUl4pmVKkn%2BZpw4BlvvBU5EUpXvhVSMvH%2BhnJYzFWnvaqo2Upgul3xqK3a%2BuLJRb2ibPn%2BbvH607P55scp8DJROTMe3q5UIuOcAnv8YSqowz77ORgLqHaUg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93e0cac40b0756bd-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=608&min_rtt=450&rtt_var=155&sent=11&recv=15&lost=0&retrans=0&sent_bytes=8314&recv_bytes=1503&delivery_rate=8598574&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| www.pekora.zip/favicon.ico | 104.21.95.120 | 302 Found | 0 B |
URL GET www.pekora.zip/favicon.ico IP 104.21.95.120:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /favicon.ico HTTP/1.1
Host: www.pekora.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://pekora.zip/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 11 May 2025 09:53:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Location: /auth/homepage
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data: https://cdn.discordapp.com; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com https://*.archive.org; style-src 'unsafe-inline' 'self' http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://pekora.zip https://www.pekora.zip https://cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css https://pekora.zip/fonts/gotham1.css http://*.pekora.zip; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net http://www.pekora.zip https://pekora.zip https://*.pekora.zip https://www.pekora.zip/fonts/GothamSSmBold.woff2 https://www.pekora.zip/fonts/GothamSSmMedium.woff2 https://www.pekora.zip/fonts/GothamSSmBook.woff2; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/* ws://localhost:*; worker-src 'self';
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8hkVDdA5PT1C4JqHAI6coO%2F1D%2FEKfLqAaqdd%2BgA47pEWoKlu%2Brmx3Ho3ncuTfIpbaxt3MEnJeo2kmk4FiHzyrF0mP4bHSVkp5ZYRk42tfAYabxnDLRAEymLtE24CtUKTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93e0cac48e495684-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=436&min_rtt=436&rtt_var=218&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=349&delivery_rate=0&cwnd=248&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| www.pekora.zip/auth/homepage | 104.21.95.120 | 403 Forbidden | 0 B |
URL GET www.pekora.zip/auth/homepage IP 104.21.95.120:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /auth/homepage HTTP/1.1
Host: www.pekora.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://pekora.zip/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 11 May 2025 09:53:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3aQ5NSSj36Tf1gj2e9aXEM2jr4LhCkPvNYIiuBj9HLpYIURHAOjAEgnIn2THDAF5kKWPpnIL%2F1xiotrQv5TWmc69MNrFcmA%2FIATZWIEHcdl3BoP3wemIwavDfMkQXrk0xg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93e0cac5a85b5684-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: chlray;desc="93e0cac5a85b5684", cfL4;desc="?proto=TCP&rtt=504&min_rtt=436&rtt_var=152&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2686&recv_bytes=700&delivery_rate=8418604&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
IP 172.67.144.192:443
CertificateIssuerGoogle Trust Services Subjectpekora.zip FingerprintB9:08:43:80:BC:8C:61:7C:43:58:E9:65:92:79:B5:21:82:6C:BA:DA ValiditySun, 13 Apr 2025 19:16:07 GMT - Sat, 12 Jul 2025 20:14:46 GMT
File typeHTML document, ASCII text, with very long lines (394) Hashd465a22adcbffb23d7ea2cfb02f65947 ee2b8f9f48458a351e089f50a0bd6db07eaab4a2 cb8adaed2a00c48ea09d1e542702ed51c8f48ae08a4372b5ba83862f94271622
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: pekora.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 11 May 2025 09:53:55 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
cf-ray: 93e0cac1d84456be-OSL
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oXcZSb8fObgpOQoEv02W%2FPQPFzXxqc%2BuB20vjc0xEBGlFluL46zC6RpDhShZ18aRqVq05alwkqkfcYDu5SUx253Unu1lIPsXTkTB2VliXLHyLFXLad1opROy866%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
|
IP 172.67.144.192:80
File typeHTML document, ASCII text, with very long lines (394) Hash10f3faeb709ace4c9279d34308a8085d bd12c86878c2c896fb340d443e00fa21b68e85ad 5f852ae3068b6f92e83ea30842fd5a1e8dba8cd2536810d90f979aaa2b902799
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: pekora.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 11 May 2025 09:53:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dba95duuXZCDr4H5pPh0TyuPikX4YHYLUHmBs2QJ%2FMZ9GNe0Kf8sVNROZ5UQgBuZfwEXj%2F%2BkhjU%2BmjAXiEX4QPBeQIeqieuZGR7mXxlQO0592qG1laiidGmle9en"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93e0cac2a8d656bd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
| pekora.zip/cdn-cgi/styles/cf.errors.css | 172.67.144.192 | 200 OK | 24 kB |
URL GET pekora.zip/cdn-cgi/styles/cf.errors.css IP 172.67.144.192:80
File typeASCII text, with very long lines (24050) Hash5e8c69a459a691b5d1b9be442332c87d f24dd1ad7c9080575d92a9a9a2c42620725ef836 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: pekora.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://pekora.zip/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 May 2025 09:53:55 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 May 2025 09:55:49 GMT
ETag: W/"6819dca5-5df3"
Server: cloudflare
CF-RAY: 93e0cac3ba4d56bd-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 11 May 2025 11:53:55 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
|
| pekora.zip/cdn-cgi/images/icon-exclamation.png?1376755637 | 172.67.144.192 | 200 OK | 452 B |
URL GET pekora.zip/cdn-cgi/images/icon-exclamation.png?1376755637 IP 172.67.144.192:80
File typePNG image data, 54 x 54, 8-bit colormap, non-interlaced Hashc33de66281e933259772399d10a6afe8 b9f9d500f8814381451011d4dcf59cd2d90ad94f f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
Host: pekora.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://pekora.zip/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 May 2025 09:53:55 GMT
Content-Type: image/png
Content-Length: 452
Connection: keep-alive
Last-Modified: Tue, 06 May 2025 09:55:49 GMT
ETag: "6819dca5-1c4"
Server: cloudflare
CF-RAY: 93e0cac3daa356bd-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 11 May 2025 11:53:55 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
|