| |  59.120.251.97 | | 6.8 kB |
IP59.120.251.97:0 ASN#3462 Data Communication Business Group
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (683), with CRLF, LF line terminators Hashf99cdf680672c4bd127a18e3c0e7d8a6 613035c6a98ad1af9a4f914454ca1a9cd5cb3d46 b584f4b3756a54aaff6e03d74f6c00bbcc770b0b40f80287d541eb752e1d2b43
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:13 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 6848
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/tab-jquery/tabulous.css | 59.120.251.97 | 200 OK | 1.1 kB |
URL GET HTTP/1.159.120.251.97/tab-jquery/tabulous.css IP59.120.251.97:80 ASN#3462 Data Communication Business Group
Hashca18cf030410bdac49ebb3542a32f076 9d85f9a9b72c22986ba129d63bf46477005fd643 5037403546794dca722ced2961a98d1518c4fda62cb9f66456b2177274afa2c4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tab-jquery/tabulous.css HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:13 GMT
Content-Type: text/css
Content-Length: 1107
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:42 GMT
ETag: "1476-5278b56197680-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/bimg-jquery/css/bimg.css | 59.120.251.97 | 200 OK | 455 B |
URL GET HTTP/1.159.120.251.97/bimg-jquery/css/bimg.css IP59.120.251.97:80 ASN#3462 Data Communication Business Group
Hash1cb4072a4a00645383c6f3ae8371acd0 817a56253de551aee2db27975afcc60ae198d88b f7b1fc3bdfa36c9d90c0d95863feda0559ade598388e89523023e9299d2e39bc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bimg-jquery/css/bimg.css HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:13 GMT
Content-Type: text/css
Content-Length: 455
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:32 GMT
ETag: "368-5278b51ed5900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/side-jquery/css/side.css | 59.120.251.97 | 200 OK | 627 B |
URL GET HTTP/1.159.120.251.97/side-jquery/css/side.css IP59.120.251.97:80 ASN#3462 Data Communication Business Group
Hash51c502a382ac03bdb12b240405d6292d d41a2345f3d7807c1f2a9836c7e127cc67b9adcc 104fdbf87fea100bb0e426a391a435aad43a2a94a202dfd083d7b28b846eb3bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/css/side.css HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: text/css
Content-Length: 627
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:41 GMT
ETag: "82c-5278b560a3440-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/font-awesome-4.3.0/css/font-awesome.min.css | 59.120.251.97 | 200 OK | 6.0 kB |
URL GET HTTP/1.159.120.251.97/font-awesome-4.3.0/css/font-awesome.min.css IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeASCII text, with very long lines (23577) Hash04425bbdc6243fc6e54bf8984fe50330 8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5 541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /font-awesome-4.3.0/css/font-awesome.min.css HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: text/css
Content-Length: 6015
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:34 GMT
ETag: "5cbb-5278b520bdd80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/healthnews-tab-jquery/tabulous.js | 59.120.251.97 | 200 OK | 1.3 kB |
URL GET HTTP/1.159.120.251.97/healthnews-tab-jquery/tabulous.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, ASCII text Hash855b9b5ae0018687289fa83d45895161 f45d9bd846b97b5a4b5e29c3afa6a25b92f51094 4ef660bcb827b26c3c14dd8ebf5979b7567c66a79bfe7707dfa478024d6a2162
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /healthnews-tab-jquery/tabulous.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 1306
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:35 GMT
ETag: "113a-5278b521b1fc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/healthnews-tab-jquery/js.js | 59.120.251.97 | 200 OK | 141 B |
URL GET HTTP/1.159.120.251.97/healthnews-tab-jquery/js.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, ASCII text Hash94b4ce57a1e4b8e3e906666ea312dbc8 60b9b7767f92b3908893120234b93e087ab648ad 7e274e2e341f7c29d07a0242b209c3e30973ffc04a012891e81f1a6db9cf233f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /healthnews-tab-jquery/js.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 141
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:35 GMT
ETag: "127-5278b521b1fc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/bimg-jquery/js/jquery.superslide.2.1.1.js | 59.120.251.97 | 200 OK | 3.9 kB |
URL GET HTTP/1.159.120.251.97/bimg-jquery/js/jquery.superslide.2.1.1.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (11014) Hashea87d140e853cafbf2f0cd1be576f066 4c4474ad227018a0ea883e0ca3f568a1263fa5f7 e87bdddf5df8f69bb2c83a0266ca4cdbb32c8f6fabd51ab11ab3504f5d1efd1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bimg-jquery/js/jquery.superslide.2.1.1.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 3940
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:33 GMT
ETag: "2c91-5278b51fc9b40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/bimg-jquery/js/bimg.js | 59.120.251.97 | 200 OK | 296 B |
URL GET HTTP/1.159.120.251.97/bimg-jquery/js/bimg.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, Unicode text, UTF-8 text Hash85c297dbfc6353e3436e1f2625eae304 75bba13c51cfe5f878796150b53b3b5e80c2d04c f9d18fb12c25c10b0566cb2daf5fee0ac7eacba3e09c8d6f1340b35eb599c473
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bimg-jquery/js/bimg.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 296
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:32 GMT
ETag: "1bf-5278b51ed5900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/healthnews-tab-jquery/jquery.min.js | 59.120.251.97 | 200 OK | 37 kB |
URL GET HTTP/1.159.120.251.97/healthnews-tab-jquery/jquery.min.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /healthnews-tab-jquery/jquery.min.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 37372
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:35 GMT
ETag: "1762a-5278b521b1fc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/side-jquery/js/side.js | 59.120.251.97 | 200 OK | 363 B |
URL GET HTTP/1.159.120.251.97/side-jquery/js/side.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, Unicode text, UTF-8 text Hashd67f5c7213995f0696a8c18d604d7ad9 e96f69d98af101baee8633f6f7218d96514d5dc8 d99f61fcfe31e44d1ecec1ffc04ab11ab9b699613271f48f9070786a9646d939
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/js/side.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 363
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:42 GMT
ETag: "378-5278b56197680-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/bimg-jquery/js/jquery1.42.min.js | 59.120.251.97 | 200 OK | 28 kB |
URL GET HTTP/1.159.120.251.97/bimg-jquery/js/jquery1.42.min.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, ASCII text, with very long lines (820) Hashdf0ff7fe7cd0e9795a02c58de82f6d69 5ddc254648c0d8f2b20f277a7de6da3e1d8f960c 83eca7ad41f603b88fa13c9022aeb1e4de0d85280ddd1df2df6df93fb1d6eae5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bimg-jquery/js/jquery1.42.min.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 27684
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:33 GMT
ETag: "119ed-5278b51fc9b40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/css/sc.css | 59.120.251.97 | 200 OK | 7.8 kB |
IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeUnicode text, UTF-8 text, with very long lines (4060) Hashbf7f83273537e1525caa7922836cb881 0c446ec4f69a4e3ab25c0c1df3bfa508536f506d b0a4b01cdb9eebb2af9edd69ba6fff066c6b2d2c3801f8399ba748d06a1e8391
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/sc.css HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: text/css
Content-Length: 7811
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:33 GMT
ETag: "9a1b-5278b51fc9b40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/side-jquery/js/jquery-2.0.3.min.js | 59.120.251.97 | 200 OK | 33 kB |
URL GET HTTP/1.159.120.251.97/side-jquery/js/jquery-2.0.3.min.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, ASCII text, with very long lines (32023) Hash0a6e846b954e345951e710cd6ce3440e fbf9c77d0c4e3c34a485980c1e5316b6212160c8 b13cb5989e08fcb02314209d101e1102f3d299109bdc253b62aa1da21c9e38ba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/js/jquery-2.0.3.min.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 32958
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:42 GMT
ETag: "1469c-5278b56197680-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/css/voide.css | 59.120.251.97 | 200 OK | 705 B |
URL GET HTTP/1.159.120.251.97/css/voide.css IP59.120.251.97:80 ASN#3462 Data Communication Business Group
Hash30b2fecc089665d319162efcfcc3bc00 e7bc49d0fc73d594029306e5615f388a41dadb22 0f7785200921addfa0b1c03f3d830188bb13cb13144a2a133b10269e8e6bdb25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/voide.css HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: text/css
Content-Length: 705
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:32 GMT
ETag: "9dc-5278b51ed5900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| fonts.googleapis.com/css?family=Sarpanch:400,900 |  142.250.74.106 | 200 OK | 468 B |
URL GET HTTP/1.1fonts.googleapis.com/css?family=Sarpanch:400,900 IP142.250.74.106:80
Hash61534b43b5bab4836b66fe54753ab03a cfaa749e9326e915281126446e3b567723f710bb 5cc675ae282205f8f92e7743b32e2fbcf2697c30ff9f976844b1891475fdd42f
GET /css?family=Sarpanch:400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 24 Apr 2024 04:17:14 GMT
Date: Wed, 24 Apr 2024 04:17:14 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
|
|
| 59.120.251.97/js/jquery.js | 59.120.251.97 | 200 OK | 30 kB |
URL GET HTTP/1.159.120.251.97/js/jquery.js IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJavaScript source, ASCII text, with very long lines (820) Hash26017704bb47f70e670d173a81d23fd0 f3d6ef29bb5a89b387c14593e5973231ad1c03c3 49954fc12660ff38bcf35a55f7f9c443d53ba46cb2c5cd5d799b27ee98ae2561
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.js HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:14 GMT
Content-Type: application/javascript
Content-Length: 29963
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:00 GMT
ETag: "138fc-5278b53989800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 59.120.251.97/side-jquery/images/side_icon05.png | 59.120.251.97 | 200 OK | 1.8 kB |
URL GET HTTP/1.159.120.251.97/side-jquery/images/side_icon05.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 54 x 54, 8-bit/color RGBA, interlaced Hasha267c5509a34219ea9d9f103a751be7c a1ca4b6fb04b605fc39ff0ef7d728632eb693c68 93e72182ff8dafb5cc31bcf4e1bc405201da7876d5cfd0379cb1a849082d4788
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/images/side_icon05.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 1814
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:42 GMT
ETag: "716-5278b56197680"
Accept-Ranges: bytes
|
|
| 59.120.251.97/side-jquery/images/side_icon03.png | 59.120.251.97 | 200 OK | 46 kB |
URL GET HTTP/1.159.120.251.97/side-jquery/images/side_icon03.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 54 x 53, 8-bit/color RGBA, non-interlaced Hash7371d3e72e7c58277916cae90ea7382a 4812e5c04f662150398398c06acecb7591fe8421 a9730cdc4a77dc17b7286e02d9968c9130aea00c4be5d02f08c9a1b47c322a96
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/images/side_icon03.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 46041
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:41 GMT
ETag: "b3d9-5278b560a3440"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/logo.png | 59.120.251.97 | 200 OK | 77 kB |
URL GET HTTP/1.159.120.251.97/images/logo.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 497 x 69, 8-bit/color RGBA, non-interlaced Hashba861fca5f6e80b26553dda0a65908a1 32ba57441e2e59d9b143f642e7be9847d8dfa926 1239d4fcafb9b98bea9910263e2939c4ede72c54d8f406e1afb4f765625100c5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/logo.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 77324
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:39 GMT
ETag: "12e0c-5278b525828c0"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/home.png | 59.120.251.97 | 200 OK | 48 kB |
URL GET HTTP/1.159.120.251.97/images/home.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced Hash3c8b73db2fd87aff6fb4a60387d9e0e0 d6961fc2abf86a90b2d416fa3567cbfe86d0233e f5e36bbf827ec70bbefb5dbf3b7c5281a7cbefeb4cf2cd353de59118bb42a36b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/home.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 48168
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:36 GMT
ETag: "bc28-5278b522a6200"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/header-bg.jpg | 59.120.251.97 | 200 OK | 14 kB |
URL GET HTTP/1.159.120.251.97/images/header-bg.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1100x69, components 3 Hash98b99a636130644a7f9a069e4c57c715 13f4d1db37e5204ba89c662ebda8c2809c758825 7c406d8ec2cab2f8ab1834905fc3ab4230c3d7fa77a4ae4de44c5674ebf90ae2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/header-bg.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/css/sc.css
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/jpeg
Content-Length: 14065
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:36 GMT
ETag: "36f1-5278b522a6200"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/white70.png | 59.120.251.97 | 200 OK | 41 kB |
URL GET HTTP/1.159.120.251.97/images/white70.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced Hash4374581554c0db99add6add0a5247677 01f74dea7c0af43b48d8d08cc0098e3ac62fd3f4 d6a46a1ffa6d4265f57146a9623b9416b9e076622f7acca84cf00feb098e1a88
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/white70.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/css/sc.css
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 41365
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:44 GMT
ETag: "a195-5278b52a47400"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/sitemap.png | 59.120.251.97 | 200 OK | 47 kB |
URL GET HTTP/1.159.120.251.97/images/sitemap.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced Hashbf6dbf21e0c3aba70375c2d3d2443241 46324b2811d77c6e05d4c7afcdbf525231463d60 5bd656421feed6799a157282841b211bcb3a629e6fb79eb8612f40c8c5f83fd7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sitemap.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 46930
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:40 GMT
ETag: "b752-5278b52676b00"
Accept-Ranges: bytes
|
|
| 59.120.251.97/font-awesome-4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 | 59.120.251.97 | 200 OK | 57 kB |
URL GET HTTP/1.159.120.251.97/font-awesome-4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeWeb Open Font Format (Version 2), TrueType, length 56780, version 4.197 Hash97493d3f11c0a3bd5cbd959f5d19b699 1075231650f579955905bb2f6527148a8e2b4b16 aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /font-awesome-4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/font-awesome-4.3.0/css/font-awesome.min.css
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: font/woff2
Content-Length: 56780
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:34 GMT
ETag: "ddcc-5278b520bdd80"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/search.png | 59.120.251.97 | 200 OK | 57 kB |
URL GET HTTP/1.159.120.251.97/images/search.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 290 x 126, 8-bit/color RGBA, non-interlaced Hash64a9d01c79e788dd53ed5cde31fce63a 9c44524bbf70254d6917589736db76eafbe7e5fb 4b914bbc8d8a69323650896d76b074d5e564b55620a0cb8e34b1c97418c393fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/search.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/css/sc.css
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 57010
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:40 GMT
ETag: "deb2-5278b52676b00"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/white90.png | 59.120.251.97 | 200 OK | 42 kB |
URL GET HTTP/1.159.120.251.97/images/white90.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced Hash33ddb45fb695c943eea1ba296d3db08d 1d6438b7f3b9f33ecaadbcd95b1b4ff158098a56 7273260c546f61449308e9a535c3655ee44d982459c4cb8d2e443273893e25d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/white90.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/css/sc.css
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 41472
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:44 GMT
ETag: "a200-5278b52a47400"
Accept-Ranges: bytes
|
|
| 59.120.251.97/SSLSeal.gif | 59.120.251.97 | 404 Not Found | 1.6 kB |
URL GET HTTP/1.159.120.251.97/SSLSeal.gif IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeHTML document, ASCII text, with very long lines (2140) Hashcb34a639d2dcaf02912f8cb08cf8e536 8ae092d5706783adb2b8279ba14dcab7529a3f44 b37c2d0d928551912e6b6119573d3d9e8fbe172d76e73dc5edadedaa8e01fa63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /SSLSeal.gif HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Wed, 17 Mar 2021 11:02:44 GMT
ETag: W/"b98-5bdb96c1d1d00;616731bd5ea44
Content-Encoding: gzip
|
|
| 59.120.251.97/images/mail.png | 59.120.251.97 | 200 OK | 46 kB |
URL GET HTTP/1.159.120.251.97/images/mail.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced Hash3932b9144dd3731b1d6f0b6a27616d24 9c193aeac39559f111e1782e17707a792dbca41b 812090382bfb42046b1c997e5c180d188f3e2fef39bd8140561f7e0d6e94a809
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/mail.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/png
Content-Length: 46321
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:39 GMT
ETag: "b4f1-5278b525828c0"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/slide4.jpg | 59.120.251.97 | 200 OK | 78 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/slide4.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:01:24 16:29:03], progressive, precision 8, 690x210, components 3 Hash6160320b9a4124ec8ce053ffeffe2655 3ba0857510fe3121b662f321dbd49dd505fbd6ff 2bbfd3b2fea12cd77e556723a329277b6283b318df7a5bb043df220abc0d9ad3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/slide4.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/jpeg
Content-Length: 77789
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Tue, 16 Apr 2019 08:48:22 GMT
ETag: "12fdd-586a1d4d8d361"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/slide13.jpg | 59.120.251.97 | 200 OK | 148 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/slide13.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 690x210, components 3 Size148 kB (147750 bytes) Hash6ced5e7f8ca71dee3a3270cc76b0a205 3851e6bd074d9a5b81c7c0499ff2aa77032bbcb3 d2516d71e9e2f182572fb008d7faac4813c51ffca49fc179bb9d2ece62af2317
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/slide13.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/jpeg
Content-Length: 147750
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Tue, 16 Apr 2019 08:50:42 GMT
ETag: "24126-586a1dd30d079"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/findclinic.png | 59.120.251.97 | 200 OK | 53 kB |
URL GET HTTP/1.159.120.251.97/images/findclinic.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 143 x 100, 8-bit/color RGBA, non-interlaced Hash234b693c5b66f7cdc49788dfef79fcb7 13021f839f7faf47e79b4927466eddc2f6a0cb63 7c552a0932a8bb93fbb611c0fb6b2c591c985033ae5ec7cbf5ad51eb68d44185
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/findclinic.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/png
Content-Length: 52810
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:36 GMT
ETag: "ce4a-5278b522a6200"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/slide2.jpg | 59.120.251.97 | 200 OK | 115 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/slide2.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 680x230, components 3 Size115 kB (115435 bytes) Hasha6fce0cd6dece563e179e37c9aa2c048 7d8619355e787b2bcfe8055dee63d4fedf784420 2cfebd4ca2277661b74d12fa588173e1fdae5a59a6be8beb88eaa040d19bba5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/slide2.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/jpeg
Content-Length: 115435
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 23 Apr 2015 17:00:00 GMT
ETag: "1c2eb-5146735c76400"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/slide1.jpg | 59.120.251.97 | 200 OK | 107 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/slide1.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 690x210, components 3 Size107 kB (107073 bytes) Hashbe492a0273de27c8763d0b1571d7c5fc 6ca3cf03e27c83481d4c644c97e5a6b945266321 da71278a5078ac18ff048e244f70b95d8c49633b70bb31177dea40edef843870
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/slide1.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/jpeg
Content-Length: 107073
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 03 May 2017 10:10:40 GMT
ETag: "1a241-54e9bde520ef5"
Accept-Ranges: bytes
|
|
| 59.120.251.97/images/finddoctor.png | 59.120.251.97 | 200 OK | 57 kB |
URL GET HTTP/1.159.120.251.97/images/finddoctor.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 143 x 100, 8-bit/color RGBA, non-interlaced Hash9b83a1a35577beb2169b4b18331133ba 0e13ce695ed5f8c39b2e45c6b2c922b0944575d3 678529bb766032039de5fd9c0641fce3b102a49cad99d2921320b43acbe82b07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/finddoctor.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/png
Content-Length: 57311
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:36 GMT
ETag: "dfdf-5278b522a6200"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/slide3.jpg | 59.120.251.97 | 200 OK | 108 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/slide3.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 680x230, components 3 Size108 kB (108199 bytes) Hashb298cb70929c83401ab460a8ed25e62d ac3ad79eba0bb7237b9c493699cc23ba5d9d268f 8c1807bb598c24c0c5b6d572d0ecc901416f98a6b6435f3666d9d5748c5d8c13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/slide3.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/jpeg
Content-Length: 108199
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 23 Apr 2015 17:01:00 GMT
ETag: "1a6a7-51467395aeb00"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/new-open.png | 59.120.251.97 | 200 OK | 88 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/new-open.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 198 x 59, 8-bit/color RGBA, non-interlaced Hash37bd5766fb46c1f818d85092b91b6232 01c959d741b35d4d58a2e7688d1739cc65fdc9b0 a5395357b040132d7fad5c497a35204566c6bdd7b735e6058aa27e269e35c220
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/new-open.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/png
Content-Length: 87472
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:03 GMT
ETag: "155b0-5278b53d20358"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/software.png | 59.120.251.97 | 200 OK | 84 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/software.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 198 x 59, 8-bit/color RGBA, non-interlaced Hash01d6fd8c245a1c58c63496ccc917a2b5 2dcbcb684e966757ef0a8c2b0975b7bed71a3e0e 4e6e772db9ea867a13175f1d64318408687ee441616cc7d01f9fe98dc0113ef9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/software.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/png
Content-Length: 84290
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:03 GMT
ETag: "14942-5278b53d3d048"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/2023020855001lnk13_img.jpg | 59.120.251.97 | 200 OK | 8.3 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/2023020855001lnk13_img.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 198x50, components 3 Hash91351bcd0ff7de2cd86c0fbab337a141 154ae439779effcc4ccd10833a65408160db5b7f a7c46cfab85f9efcf869ba27a45a45602aa8047ce92a09acb2d622ad4f8df67a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/2023020855001lnk13_img.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/jpeg
Content-Length: 8274
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 08 Feb 2023 09:50:01 GMT
ETag: "2052-5f42d30211559"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/2017072844701lnk11_img.jpg | 59.120.251.97 | 200 OK | 20 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/2017072844701lnk11_img.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2017:07:28 16:51:30], progressive, precision 8, 198x50, components 3 Hash81b0f04ba0914033fe03deea6e06d155 143d02063fde98876ab277b6ed9c08e4b94d4d10 bcd1ed4c5c31765c8abbe790d64114339b54d9a50dd64c91ef257ae9f924fc7d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/2017072844701lnk11_img.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/jpeg
Content-Length: 19513
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 28 Jul 2017 09:53:06 GMT
ETag: "4c39-5555da5e2140d"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/2015050773752lnk6_img.png | 59.120.251.97 | 200 OK | 52 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/2015050773752lnk6_img.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 230x120, components 3 Hash2fc60212064a35d100fdd474182f8f04 9480ada5f66d30e4075d28c66c43d4c68299de39 0b9c586d2537f2a4d9e8d150ee77c790e148ed0f348561f5dbd3daea3ec0dedc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/2015050773752lnk6_img.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/png
Content-Length: 51802
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 07 May 2015 07:39:00 GMT
ETag: "ca5a-515790143cd00"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/20170220111139lnk10_img.jpg | 59.120.251.97 | 200 OK | 20 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/20170220111139lnk10_img.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 230x58, components 3 Hashe8ba63ca466a78bbd14a6052e5e01ce3 89d2858692b2009e0f1a8765e610cb208322b0db d342689f6b62f5dd56d0aa8bff3f1401d273dab1b0890861014f789cd0390fc6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/20170220111139lnk10_img.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/jpeg
Content-Length: 19713
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 20 Feb 2017 03:11:39 GMT
ETag: "4d01-548ed9f38b8ee"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/2016062323740lnk8_img.jpg | 59.120.251.97 | 200 OK | 21 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/2016062323740lnk8_img.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 230x51, components 3 Hash3e00418c3aa8348012e0ffdf21d8c13a ba8781b13350b0fc59bc4017604cd43334d062fc 3ffe43718ea080419a759e69d1f4ea4e26c4c7ec70762fcd137a9319d4fd245b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/2016062323740lnk8_img.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/jpeg
Content-Length: 20866
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 23 Jun 2016 06:39:44 GMT
ETag: "5182-535ec51d16639"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/20160316102147lnk7_img.png | 59.120.251.97 | 200 OK | 19 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/20160316102147lnk7_img.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 230 x 53, 8-bit/color RGB, non-interlaced Hashfe97e5789f2d68e16b9a4e47eb226116 d01cd4778b2176777cc70274b2bd0228909b6c3c 4e58d968642d01d1a8da79b5c6bd80a96056c15dfd6f9e1992f9a361f03ead2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/20160316102147lnk7_img.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:16 GMT
Content-Type: image/png
Content-Length: 19114
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 16 Mar 2016 02:21:47 GMT
ETag: "4aaa-52e212cff9cdc"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/project.png | 59.120.251.97 | 200 OK | 179 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/project.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:05:09 16:55:51], progressive, precision 8, 680x230, components 3 Size179 kB (178979 bytes) Hash7e6249f32d18fce56ef074d94146adcb 423f9cb2d0a48f05f7e84655da8f7df7130872f3 d60513047f162f14cd90dab7eae70c7578a7272adb51523104da41a50b5c8a42
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/project.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:17 GMT
Content-Type: image/png
Content-Length: 178979
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Thu, 09 May 2019 08:56:23 GMT
ETag: "2bb23-588709fdd0df2"
Accept-Ranges: bytes
|
|
| 59.120.251.97/scadmin/file/activity.png | 59.120.251.97 | 200 OK | 164 kB |
URL GET HTTP/1.159.120.251.97/scadmin/file/activity.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:02:18 21:03:12], progressive, precision 8, 690x210, components 3 Size164 kB (164386 bytes) Hash4f8f5a7ef12ff211706b125d1a162313 8995f767e9af1babae231ef1f4e8814c3f900f04 6cf1632015bec9719ffb1c5bf6d574e2929ee83865f780a201936402a030acc0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scadmin/file/activity.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:17 GMT
Content-Type: image/png
Content-Length: 164386
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Feb 2019 13:03:12 GMT
ETag: "28222-5822abf4680ef"
Accept-Ranges: bytes
|
|
| 59.120.251.97/side-jquery/images/side_icon02.png | 59.120.251.97 | 200 OK | 46 kB |
URL GET HTTP/1.159.120.251.97/side-jquery/images/side_icon02.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced Hash4cb5003c6cd4c6f8dff597d743aca08d c657d734b035cd51b688520d543d1fd86437ce5f 4ddd1baa8c025f117937c9d3fa6b9aeba80a5753d336255fa41ba4ec3e436a44
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/images/side_icon02.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:17 GMT
Content-Type: image/png
Content-Length: 45829
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:42 GMT
ETag: "b305-5278b56197680"
Accept-Ranges: bytes
|
|
| 59.120.251.97/side-jquery/images/side_icon04.png | 59.120.251.97 | 200 OK | 51 kB |
URL GET HTTP/1.159.120.251.97/side-jquery/images/side_icon04.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced Hashf4b8faead4afff2011de67e35286d01f ceb3546956b64bc57d8dbd0b4339ed0c48d09ed3 d13ad8f980287083187762f7c3ef0b9ddc17de097b0bbf5c102f49e8dbdf2931
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/images/side_icon04.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:17 GMT
Content-Type: image/png
Content-Length: 51209
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:42 GMT
ETag: "c809-5278b56197680"
Accept-Ranges: bytes
|
|
| 59.120.251.97/random.php | 59.120.251.97 | 200 OK | 209 B |
IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 52 x 26, 2-bit colormap, non-interlaced Hashc8a5c09382fef083fab7620bbadf21b4 d077a366fc24596b4d120f88823261c68a78a194 40d21178b37cf871983fa5390605e819425d89d92d632f217ed9897b7ebca783
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /random.php HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:17 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
|
|
| 59.120.251.97/images/bg.jpg | 59.120.251.97 | 200 OK | 2.2 MB |
URL GET HTTP/1.159.120.251.97/images/bg.jpg IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1530x1935, components 3 Size2.2 MB (2231093 bytes) Hashd712dc761513b8738b8fc28387afbd61 69c834b1c145cb63b0134aa9e3cda5927fc76d5d aa82d0b10fa91d34aec1bcb221ede63e63c28c518e4f6e9dcdc67ae9897a8e75
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/bg.jpg HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/css/sc.css
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:15 GMT
Content-Type: image/jpeg
Content-Length: 2231093
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:37 GMT
ETag: "220b35-5278b5239a440"
Accept-Ranges: bytes
|
|
| www.google.com/cse/cse.js?cx=018146618503497187325:1gwqsx8mp1m | 142.250.74.164 | 301 Moved Permanently | 267 B |
URL GET HTTP/1.1www.google.com/cse/cse.js?cx=018146618503497187325:1gwqsx8mp1m IP142.250.74.164:80
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash26421e988704d3e2caa3fdab38e692e1 4046a541c82b79d3458dfa3521c40c336402bdbd 933c3e45b48fe2cb5a70084217b603234f480a2aa7b89be373634b488f2a0693
GET /cse/cse.js?cx=018146618503497187325:1gwqsx8mp1m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://cse.google.com/cse/cse.js?cx=018146618503497187325:1gwqsx8mp1m
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Wed, 24 Apr 2024 04:17:17 GMT
Expires: Wed, 24 Apr 2024 04:47:17 GMT
Cache-Control: public, max-age=1800
Server: sffe
Content-Length: 267
X-XSS-Protection: 0
|
|
| 59.120.251.97/side-jquery/images/side_icon06.png | 59.120.251.97 | 200 OK | 47 kB |
URL GET HTTP/1.159.120.251.97/side-jquery/images/side_icon06.png IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typePNG image data, 54 x 154, 8-bit/color RGBA, non-interlaced Hash81fa8d0ac418eeae87fea6ee46a3c2e6 434a66bfa8fb3552427a35d34d3403f3c432d0f0 3eee525c0a6bb41309269303d79bb332fac3b41f34165136d7ba380b29e82069
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /side-jquery/images/side_icon06.png HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:17 GMT
Content-Type: image/png
Content-Length: 47373
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:04:42 GMT
ETag: "b90d-5278b56197680"
Accept-Ranges: bytes
|
|
| cse.google.com/cse/cse.js?cx=018146618503497187325:1gwqsx8mp1m | 142.250.74.174 | 200 OK | 2.5 kB |
URL GET HTTP/2cse.google.com/cse/cse.js?cx=018146618503497187325:1gwqsx8mp1m IP142.250.74.174:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (613) Hashad2a9367d4f807524fe001378f589e93 fbead8acdf39874b93f56a5716aeef928e81249d c54ffd2bea931f6b6fa8f2d9fbe460edf37841e45f91d87837f591800e668923
GET /cse/cse.js?cx=018146618503497187325:1gwqsx8mp1m HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://59.120.251.97/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-RhqQtBkuhl-ylD13AvnONQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Wed, 24 Apr 2024 04:17:17 GMT
server: gws
content-length: 2481
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 59.120.251.97/images/favicon.ico | 59.120.251.97 | 200 OK | 3.3 kB |
URL GET HTTP/1.159.120.251.97/images/favicon.ico IP59.120.251.97:80 ASN#3462 Data Communication Business Group
File typeMS Windows icon resource - 1 icon, 32x32 Hash192dbf9f5105501102fec4c0b689e2d2 fb4ce4ed9b2900833d07b139024a4bb8102ef703 f302544548cad93cb107b7ebedd9a121c033400719801f3bd9ae24447975350e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/favicon.ico HTTP/1.1
Host: 59.120.251.97
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Cookie: PHPSESSID=lkjp8rasc223gneq8dgrjp2cb7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 04:17:17 GMT
Content-Type: image/x-icon
Content-Length: 3262
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Wed, 23 Dec 2015 07:03:36 GMT
ETag: "cbe-5278b522a6200"
Accept-Ranges: bytes
|
|
| www.google.com/cse/static/style/look/v4/default.css | 142.250.74.164 | 200 OK | 1.3 kB |
URL GET HTTP/2www.google.com/cse/static/style/look/v4/default.css IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
Hashc14e45e189f801818b14f1315605a632 dd7e7fb9d156b343beef0155b41da1c847d69e41 dcec22bbcb68119d6c7d6d5e088fb82183a9826d0c9e3403f1386fd837f06a89
GET /cse/static/style/look/v4/default.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 04:07:10 GMT
expires: Wed, 24 Apr 2024 04:57:10 GMT
cache-control: public, max-age=3000
age: 608
last-modified: Wed, 17 Jun 2020 00:00:00 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/cse/static/element/8435450f13508ca1/default+zh_TW.css | 142.250.74.164 | 200 OK | 9.1 kB |
URL GET HTTP/2www.google.com/cse/static/element/8435450f13508ca1/default+zh_TW.css IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
Hashbaccb7180fe061b63ed061ec10c3b0c8 bfb31590ba6e758eb8f25735b564d7e4a0919025 a5402de70228d4bf5379b518225b702918f6ae277e9293f9d16334c2b1fa31e3
GET /cse/static/element/8435450f13508ca1/default+zh_TW.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 9068
date: Wed, 24 Apr 2024 04:17:18 GMT
expires: Wed, 24 Apr 2024 04:17:18 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/cse/static/element/8435450f13508ca1/cse_element__zh_tw.js?usqp=CAI%3D | 142.250.74.164 | 200 OK | 109 kB |
URL GET HTTP/3www.google.com/cse/static/element/8435450f13508ca1/cse_element__zh_tw.js?usqp=CAI%3D IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (1648) Size109 kB (108611 bytes) Hashe538c738f11db6ba906372b8edfe046b 3849c05cce26acc77fab46d87144c4bbcfee40f1 e1d710bde28db5db59d856dcfa17409bcb8a5088ec6e16881bad3fff68eec723
GET /cse/static/element/8435450f13508ca1/cse_element__zh_tw.js?usqp=CAI%3D HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 108611
date: Wed, 24 Apr 2024 04:17:18 GMT
expires: Wed, 24 Apr 2024 04:17:18 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/cse/static/images/1x/zh_TW/branding.png | 142.250.74.164 | 200 OK | 1.7 kB |
URL GET HTTP/3www.google.com/cse/static/images/1x/zh_TW/branding.png IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typePNG image data, 112 x 15, 8-bit/color RGBA, non-interlaced Hash56e37c4f5f5f5c64d1880af11bfc3db1 303c9e7e6c84ec7465acc8bdb5c3808d374adf61 d2b51bccc3947fe2d0187c509e3ea52fef2cc84285dd1b61bd8c9a19977dcebf
GET /cse/static/images/1x/zh_TW/branding.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:56:38 GMT
expires: Fri, 18 Apr 2025 17:56:38 GMT
cache-control: public, max-age=31536000
age: 469240
last-modified: Thu, 07 Dec 2023 21:00:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/cse/static/css/v2/clear.png | 142.250.74.164 | 200 OK | 1.0 kB |
URL GET HTTP/3www.google.com/cse/static/css/v2/clear.png IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typePNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced Hash2df778bf2e22d52fe849babb330ec977 0f833f030bb43f282473bddd3a33b5f8cba7a845 329d1a750114920332eadc55c129957d9dbe5a1b25745e2f7e0ed4fad75e04cd
GET /cse/static/css/v2/clear.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/cse/static/element/8435450f13508ca1/default+zh_TW.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 19:13:15 GMT
expires: Wed, 23 Apr 2025 19:13:15 GMT
cache-control: public, max-age=31536000
age: 32643
last-modified: Mon, 25 May 2020 08:30:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| clients1.google.com/generate_204 | 142.250.74.110 | 204 No Content | 0 B |
URL GET HTTP/1.1clients1.google.com/generate_204 IP142.250.74.110:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204 HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Content-Length: 0
Cross-Origin-Resource-Policy: cross-origin
Date: Wed, 24 Apr 2024 04:17:18 GMT
|
|
| cse.google.com/adsense/search/async-ads.js | 142.250.74.174 | 200 OK | 73 kB |
URL GET HTTP/1.1cse.google.com/adsense/search/async-ads.js IP142.250.74.174:80
File typeJavaScript source, ASCII text, with very long lines (2247) Hashd08ab029b675980ba98ff05a2c1181ff 22e59c825debede6d18db2ecdf361f9ffc438eeb 829dd937b06e88c18cb9ee5093527f309566edea9dd10fc47eac0b9d65592a67
GET /adsense/search/async-ads.js HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.120.251.97/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Wed, 24 Apr 2024 04:17:18 GMT
Expires: Wed, 24 Apr 2024 04:17:18 GMT
Cache-Control: private, max-age=3600
ETag: "8710102545208601555"
X-Content-Type-Options: nosniff
Link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
|
|