| GET vndsihvsdbidshbisud.theworkpc.com/ |  0.0.0.0 | | 0 B |
URL User Request GET vndsihvsdbidshbisud.theworkpc.com/ IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.theworkpc .com Domain |
GET / HTTP/1.1
Host: vndsihvsdbidshbisud.theworkpc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
| GET vndsihvsdbidshbisud.theworkpc.com/ |  185.176.220.94 | 200 OK | 2.9 kB |
URL User Request GET vndsihvsdbidshbisud.theworkpc.com/ IP185.176.220.94:80
File typeHTML document, ASCII text Hash5579b46a42c095866498b962e8686a58 bb8bb5f4fc856f86d6a156bf4ba48cf0912be5c9 195d14d48ccba2be9f51b7f66923592bce185035fa83269c1ca055645c7b6781
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.theworkpc .com Domain |
GET / HTTP/1.1
Host: vndsihvsdbidshbisud.theworkpc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
X-Address: gin_throttle_mw_7200000000_91.90.42.154
X-Ratelimit-Limit: 500
X-Ratelimit-Remaining: 499
X-Ratelimit-Reset: 1752142853
Date: Thu, 10 Jul 2025 09:20:53 GMT
Transfer-Encoding: chunked
|
| GET vndsihvsdbidshbisud.theworkpc.com/assets/styles.css | 185.176.220.94 | 200 OK | 1.4 kB |
URL GET vndsihvsdbidshbisud.theworkpc.com/assets/styles.css IP185.176.220.94:80
Requested byhttp://vndsihvsdbidshbisud.theworkpc.com/
Hash1fb5edfea0af10d301efcd56738ba30a 1aac6eb08825ad63ac334cff1f816cc9eca71219 161d0961994dd86814fafba6edd6fa7a75d17b19b2e60e1ee01adaa9ea19dadc
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.theworkpc .com Domain |
GET /assets/styles.css HTTP/1.1
Host: vndsihvsdbidshbisud.theworkpc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://vndsihvsdbidshbisud.theworkpc.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1435
Content-Type: text/css; charset=utf-8
Last-Modified: Thu, 17 Apr 2025 02:46:19 GMT
Date: Thu, 10 Jul 2025 09:20:53 GMT
|
| GET vndsihvsdbidshbisud.theworkpc.com/favicon.ico | 185.176.220.94 | 404 Not Found | 0 B |
URL GET vndsihvsdbidshbisud.theworkpc.com/favicon.ico IP185.176.220.94:80
Requested byhttp://vndsihvsdbidshbisud.theworkpc.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.theworkpc .com Domain |
GET /favicon.ico HTTP/1.1
Host: vndsihvsdbidshbisud.theworkpc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://vndsihvsdbidshbisud.theworkpc.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Address: gin_throttle_mw_7200000000_91.90.42.154
X-Ratelimit-Limit: 500
X-Ratelimit-Remaining: 498
X-Ratelimit-Reset: 1752142853
Date: Thu, 10 Jul 2025 09:20:53 GMT
Content-Length: 0
|