| relevant-craft.su/launcher/scripts/rc_auth.php |  188.114.97.1 | 403 Forbidden | 242 B |
URL User Request GET HTTP/1.1relevant-craft.su/launcher/scripts/rc_auth.php IP188.114.97.1:80
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hashb5cdc8bbdf872369c75223b46a0c4794 cbe1cbaa0bb9b4815a466e85156a85a54238a3bc b2a07993770074a05729ee3a8e7662d935a002035bfe7ad5e2b0619c1118c9e4
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /launcher/scripts/rc_auth.php HTTP/1.1
Host: relevant-craft.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 20 Aug 2023 06:39:47 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DHsPX6Yvkoq9o0siFmyjX9mkGvZAKoNO01r5%2FN7B9eRObmg%2B%2FRqZqf5trEPI5sqxT%2FcTvvc8SJqi0Ps9X1clnyzPIJ%2FtXW3ZYYP8%2FIimAOtySdiK9SmDDalHE7iasxhbxJRZgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7f98a41e5ed6b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
| relevant-craft.su/favicon.ico | 188.114.97.1 | 404 Not Found | 231 B |
URL GET HTTP/1.1relevant-craft.su/favicon.ico IP188.114.97.1:80
Requested byhttp://relevant-craft.su/launcher/scripts/rc_auth.php
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash72e7cdda114a128d5fe9556fccfabbfb 2aaa11f890ee995092b78b42a55bdcc147b493e9 81c081f5d1d0ce5b6e700cee031cb52eb22c915f58d0f79d8fd0ea3042f563b3
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /favicon.ico HTTP/1.1
Host: relevant-craft.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://relevant-craft.su/launcher/scripts/rc_auth.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 20 Aug 2023 06:39:47 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aX4eEclkup8TmbGauIa%2FSm8pIbVBOLdVi%2FH3U4Tbgh4v3whULDZC7mL%2Fb2YPN5YJ7udyv0sr1ytPfNSSY0fBCwYIQzwTewEcsZtGqHaoPrRT%2FCXb2%2FVLPlx6fCmMTTjvC%2BKHAA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7f98a420d958b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|