| | 104.18.14.101 | 403 Forbidden | 2.8 kB |
IP 104.18.14.101:80
File typeHTML document, ASCII text, with very long lines (2882), with no line terminators Hash325fbe72c110e7a50629f35949ab9258 00e298e55aa9faa7d253a326d8e11cf8c10c4d11 da3e6f6bd74bd560d216358c4f52c1d20c9ff6779d585143f0feb5ef3de3328b
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 22 Mar 2025 15:41:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Server: cloudflare
CF-RAY: 9246cbd7894f0b49-OSL
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css | 104.17.24.14 | 200 OK | 59 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css IP 104.17.24.14:443
CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeASCII text, with very long lines (59119) Hashecd507b3125edc4d2a03aa6ae5d07da9 a57ee68d11601b0fd8e5037fc241ff65a754473c 99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e
GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 15:41:58 GMT
content-type: text/css; charset=utf-8
content-length: 10462
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613fa20b-28de"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 649618
expires: Thu, 12 Mar 2026 15:41:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r6u9d33j9aj2v3dUm10Bsfnpd3qGjjpFtpjdBU5k7BbFfQj3ggfaMDUUfq8evHHEjeuSM54i23vtDRhlb%2Bwi4t2BI4e0WL68g180QkCWP4On0vgN3wVyWtneiet4PeNdpHM%2Bj%2Bsg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9246cbd8e8a6b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 123d68.top/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.18.14.101 | 302 Moved Temporarily | 8.5 kB |
URL GET 123d68.top/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.18.14.101:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sat, 22 Mar 2025 15:41:58 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://123d68.top/cdn-cgi/challenge-platform/scripts/jsd/main.js
Vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Server: cloudflare
CF-RAY: 9246cbd9bcdf0b49-OSL
|
|
| 123d68.top/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.18.14.101 | 302 Found | 8.5 kB |
URL GET 123d68.top/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.18.14.101:443
CertificateIssuerGoogle Trust Services Subject123d68.top Fingerprint20:18:FB:58:DF:C4:34:6F:97:21:58:3A:A6:17:A2:7D:EB:E4:EC:62 ValidityFri, 31 Jan 2025 09:23:08 GMT - Thu, 01 May 2025 10:23:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 22 Mar 2025 15:41:58 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 9246cbda1c4db515-OSL
X-Firefox-Spdy: h2
|
|
| 123d68.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? | 104.18.14.101 | 200 OK | 8.5 kB |
URL GET 123d68.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? IP 104.18.14.101:443
CertificateIssuerGoogle Trust Services Subject123d68.top Fingerprint20:18:FB:58:DF:C4:34:6F:97:21:58:3A:A6:17:A2:7D:EB:E4:EC:62 ValidityFri, 31 Jan 2025 09:23:08 GMT - Thu, 01 May 2025 10:23:04 GMT
File typeJavaScript source, ASCII text, with very long lines (8483), with no line terminators Hash5c292d8b9e3e7a3b277ec9f60808d7be 97fc84370b4cb16bb9607e7386daded5c6824a62 8fccbe56d8a83299e8fc1b0585097803f85523a406892c19077933fe7bfcd4cb
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 15:41:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 9246cbda7d2ab515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 123d68.top/cdn-cgi/challenge-platform/h/b/jsd/r/0.48931990952615645:1742657044:XOp3J1mtvE4qmqpPtmdqoiojQEcNHho_sMjkl43G9-E/9246cbd7894f0b49 | 104.18.14.101 | 302 Moved Temporarily | 0 B |
URL POST 123d68.top/cdn-cgi/challenge-platform/h/b/jsd/r/0.48931990952615645:1742657044:XOp3J1mtvE4qmqpPtmdqoiojQEcNHho_sMjkl43G9-E/9246cbd7894f0b49 IP 104.18.14.101:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.48931990952615645:1742657044:XOp3J1mtvE4qmqpPtmdqoiojQEcNHho_sMjkl43G9-E/9246cbd7894f0b49 HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 11483
Origin: http://123d68.top
DNT: 1
Connection: keep-alive
Referer: http://123d68.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sat, 22 Mar 2025 15:41:59 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://123d68.top/cdn-cgi/challenge-platform/h/b/jsd/r/0.48931990952615645:1742657044:XOp3J1mtvE4qmqpPtmdqoiojQEcNHho_sMjkl43G9-E/9246cbd7894f0b49
Vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Server: cloudflare
CF-RAY: 9246cbdbc8120b49-OSL
|
|
| | 104.18.14.101 | 403 Forbidden | 2.8 kB |
IP 104.18.14.101:443
CertificateIssuerGoogle Trust Services Subject123d68.top Fingerprint20:18:FB:58:DF:C4:34:6F:97:21:58:3A:A6:17:A2:7D:EB:E4:EC:62 ValidityFri, 31 Jan 2025 09:23:08 GMT - Thu, 01 May 2025 10:23:04 GMT
File typeHTML document, ASCII text, with very long lines (2882), with no line terminators Hashf714fdc77bc4932f3d4c81dc28369a8b 57a84292ed8136a0b3dc2f168ca35b8bfb4d8700 fdd06d3bf4b471b8d87840fad0feeac9915a113db5e6381a494fc902333649c0
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sat, 22 Mar 2025 15:41:58 GMT
content-type: text/html
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 9246cbd6df1456a2-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 | 104.17.24.14 | 200 OK | 78 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 IP 104.17.24.14:443
CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78268, version 331.-31196 Hashd824df7eb2e268626a2dd9a6a741ac4e 0ccb2c814a7e4ca12c4778821633809cb0361eaa 9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://123d68.top
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 22 Mar 2025 15:41:58 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 78268
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "613fa20b-131bc"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 822552
expires: Thu, 12 Mar 2026 15:41:58 GMT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rt9RC9CWRuy1%2BQdYeBafNUh08pGztW6vUIivnDi9lxMw555COWYBRhGBxLeWMolzFMLHS3bhwnYn71pb%2F4Ur3xbiNvaAQJNHtUIbBDhOD5WyKLqGY3m3Q%2BCuYafQHrPGJNzGNJZ3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9246cbd9bf5756ca-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 123d68.top/favicon.ico | 104.18.14.101 | 403 Forbidden | 1.9 kB |
IP 104.18.14.101:80
File typeHTML document, ASCII text, with very long lines (1942), with no line terminators Hash116032fe5528413e3e582a7d55046788 7f57d1ce819715b78c1a5a4478beed70cac54a8f 9ba8365049c4ce35b9a2ee41e8de74a839763ffadeff70813f5e77a42ab90081
GET /favicon.ico HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://123d68.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 22 Mar 2025 15:41:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Server: cloudflare
CF-RAY: 9246cbd9ed1e0b49-OSL
Content-Encoding: gzip
|
|
| 123d68.top/cdn-cgi/challenge-platform/h/b/jsd/r/0.48931990952615645:1742657044:XOp3J1mtvE4qmqpPtmdqoiojQEcNHho_sMjkl43G9-E/9246cbd7894f0b49 | 104.18.14.101 | 405 Method Not Allowed | 0 B |
URL GET 123d68.top/cdn-cgi/challenge-platform/h/b/jsd/r/0.48931990952615645:1742657044:XOp3J1mtvE4qmqpPtmdqoiojQEcNHho_sMjkl43G9-E/9246cbd7894f0b49 IP 104.18.14.101:443
CertificateIssuerGoogle Trust Services Subject123d68.top Fingerprint20:18:FB:58:DF:C4:34:6F:97:21:58:3A:A6:17:A2:7D:EB:E4:EC:62 ValidityFri, 31 Jan 2025 09:23:08 GMT - Thu, 01 May 2025 10:23:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.48931990952615645:1742657044:XOp3J1mtvE4qmqpPtmdqoiojQEcNHho_sMjkl43G9-E/9246cbd7894f0b49 HTTP/1.1
Host: 123d68.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://123d68.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 405 Method Not Allowed
date: Sat, 22 Mar 2025 15:41:59 GMT
content-length: 0
allow: POST
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 9246cbdbefd2b515-OSL
X-Firefox-Spdy: h2
|
|