| GET ezdrivema-com-yhvlp.top/ |  43.133.216.118 | 403 Forbidden | 16 B |
URL User Request GET HTTP/1.1IP43.133.216.118:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerZeroSSL Subjectezdrivema-com-yhvlp.top FingerprintA3:6A:36:89:82:66:07:DC:05:0A:64:27:5B:98:F9:1A:A1:6E:F9:B8 ValiditySun, 23 Feb 2025 00:00:00 GMT - Sat, 24 May 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash7ce4c2cdf157d795f8b5b9283938ad86 c120ec55466996ce8a6b1054f1747aa6452c1889 9db51a4a98430c003f04cb7b0aba67367116bd4d0d7b0b22c5f928f3c4e8d324
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: ezdrivema-com-yhvlp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.27.4
Date: Wed, 26 Feb 2025 18:06:23 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 16
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: *
Access-Control-Allow-Headers: *
|
| GET ezdrivema-com-yhvlp.top/ | 43.133.216.118 | 301 Moved Permanently | 169 B |
URL User Request GET HTTP/1.1IP43.133.216.118:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerZeroSSL Subjectezdrivema-com-yhvlp.top FingerprintA3:6A:36:89:82:66:07:DC:05:0A:64:27:5B:98:F9:1A:A1:6E:F9:B8 ValiditySun, 23 Feb 2025 00:00:00 GMT - Sat, 24 May 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash7a4431853a978843e5cc96135444bda9 06b3959c1e098c11e996adf71143b175a1a89c40 f9aefcf398d4244dfe91c0315a9ae695c65cdd7aeb6a7e8fa4108bd3b673ce63
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: ezdrivema-com-yhvlp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.27.4
Date: Wed, 26 Feb 2025 18:06:24 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://ezdrivema-com-yhvlp.top/
|
| GET ezdrivema-com-yhvlp.top/ | 43.133.216.118 | 403 Forbidden | 16 B |
URL User Request GET HTTP/1.1IP43.133.216.118:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerZeroSSL Subjectezdrivema-com-yhvlp.top FingerprintA3:6A:36:89:82:66:07:DC:05:0A:64:27:5B:98:F9:1A:A1:6E:F9:B8 ValiditySun, 23 Feb 2025 00:00:00 GMT - Sat, 24 May 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash7ce4c2cdf157d795f8b5b9283938ad86 c120ec55466996ce8a6b1054f1747aa6452c1889 9db51a4a98430c003f04cb7b0aba67367116bd4d0d7b0b22c5f928f3c4e8d324
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: ezdrivema-com-yhvlp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.27.4
Date: Wed, 26 Feb 2025 18:06:24 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 16
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: *
Access-Control-Allow-Headers: *
|
| GET ezdrivema-com-yhvlp.top/favicon.ico | 43.133.216.118 | 200 OK | 4.3 kB |
URL GET HTTP/1.1ezdrivema-com-yhvlp.top/favicon.ico IP43.133.216.118:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://ezdrivema-com-yhvlp.top/ CertificateIssuerZeroSSL Subjectezdrivema-com-yhvlp.top FingerprintA3:6A:36:89:82:66:07:DC:05:0A:64:27:5B:98:F9:1A:A1:6E:F9:B8 ValiditySun, 23 Feb 2025 00:00:00 GMT - Sat, 24 May 2025 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hashca8e60db8ac38153ce755ab7bded841d 9ec169e4a2dfbf96cd360a19859fbff409b328a6 0cea7756f84a86db7a4dc435dfe65ebf7b653dd6de01a9f00e5f55de0117b60d
GET /favicon.ico HTTP/1.1
Host: ezdrivema-com-yhvlp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ezdrivema-com-yhvlp.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.27.4
Date: Wed, 26 Feb 2025 18:06:25 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Wed, 26 Feb 2025 06:25:11 GMT
|