| 3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s |  3.14.128.45 | 200 OK | 7.5 kB |
URL User Request GET HTTP/1.13.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s IP3.14.128.45:80
File typeHTML document, ASCII text, with very long lines (4022), with CRLF, LF line terminators Hash82933fc40d80feb1e10138c6902e6914 bd454a743b1c2544568f7b22b43bbbaa5cd5a3a7 054237d210f963b42e6dfe48de836dcd6025d9d2c3e086156390abe629ee7d76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Powered-By: PHP/7.3.7
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
X-Frame-Options: SAMEORIGIN
Set-Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; path=/; HttpOnly
PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; path=/
wordpress_test_cookie=WP+Cookie+check; path=/
wordpress_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/wp-admin
wordpress_sec_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/wp-admin
wordpress_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/wp-content/plugins
wordpress_sec_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/wp-content/plugins
wordpress_logged_in_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpress_logged_in_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wp-settings-0=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wp-settings-time-0=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpress_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpress_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpress_sec_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpress_sec_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpressuser_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpresspass_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpressuser_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wordpresspass_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
wp-postpass_4c825f1fe05a32a9d98e2f581fa02ec1=+; expires=Tue, 25-Apr-2023 00:29:51 GMT; Max-Age=0; path=/
Vary: Cookie,Accept-Encoding
X-Mod-Pagespeed: 1.13.35.2-0
Content-Encoding: gzip
Cache-Control: no-cache, must-revalidate, max-age=0, max-age=0, no-cache, s-maxage=10
Content-Length: 7522
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css?ver=1.0 | 151.101.1.229 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css?ver=1.0 IP151.101.1.229:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/select2@4.1.0-beta.1/dist/css/select2.min.css?ver=1.0 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css
Accept-Ranges: bytes
Date: Wed, 24 Apr 2024 00:29:51 GMT
X-Served-By: cache-hel1410032-HEL
X-Cache: HIT
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css | 151.101.1.229 | 200 OK | 2.4 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css IP151.101.1.229:443
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (15822) Hash809b4f5299218eab37a7c31e4c20478b c9448efbf22bc6f6fbbbbfebbd656642bab13767 907f4395f54e25a1da1181672f1a498e98b26f7bfc6dcb6c209a737472451e49
GET /npm/select2@4.1.0-beta.1/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://3.14.128.45/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.0-beta.1
x-jsd-version-type: version
etag: W/"3dcf-yUSO+/Irxvb7u7/rvWVmQrqxN2c"
content-encoding: br
accept-ranges: bytes
date: Wed, 24 Apr 2024 00:29:51 GMT
age: 9667814
x-served-by: cache-fra-eddf8230060-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2372
X-Firefox-Spdy: h2
|
|
| 3.14.128.45/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 | 3.14.128.45 | 200 OK | 4.8 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (13326) Hash5cfa2b481de6e87c2190a0e3538515d8 0fccf3c8ab2c10b4dcc7970e64ce997ab1622f68 9810aee7e6d57d8cceaa96322b88e6df46710194689ae12b284149148cabc2f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "3470-5fe93c9cdb1e5-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 4795
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/jquery/jquery.min.js?ver=3.6.4 | 3.14.128.45 | 200 OK | 31 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/jquery/jquery.min.js?ver=3.6.4 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (65447) Hash0e850a69bc7fd0acc2e92ce6eee87959 8be6d9e7f7a61ccf0b8eac8a8144d770b608a19c afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.4 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "15ed7-5fe93c9cdd125-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 31049
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/excanvas.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 4.8 kB |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/excanvas.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (11147) Hashf55726289e08732a934c3d9c2d41bae5 28d6e945b74830e8f435fd71bd0f71af918980c4 b538dc292231c0df3a66ebf4615177620130fd1c572992c4ff7d71639d9635ee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/excanvas.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 05 Dec 2019 14:29:07 GMT
ETag: "311f-598f5c079dd54-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 4771
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/jquery.ba-throttle-debounce.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 462 B |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/jquery.ba-throttle-debounce.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (479), with CRLF line terminators Hash3063b47a3871d8744a27aac6331b9904 2f33a1405372bab3bdd20a15695aa8481e8d364c 110973afe37ac008e0b5da625081cbdbe0da67ee31159d507bdd3f836c570b1e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/jquery.ba-throttle-debounce.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 05 Dec 2019 14:29:07 GMT
ETag: "2e3-598f5c079dd54-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 462
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/js/jquery.redcountdown.no-presets.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 1.4 kB |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/js/jquery.redcountdown.no-presets.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ISO-8859 text, with very long lines (5107), with CRLF line terminators Hashc86268af87189b2386de47d97258012b 866029622ec0008c45ade47a199d3884bb636e9f 4f3499febc7a9daf1cc3247b01b895e8e6825ca9f199996b6392301eacc25ac0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/redcountdown/jquery.redcountdown/js/jquery.redcountdown.no-presets.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 05 Dec 2019 14:29:07 GMT
ETag: "14d9-598f5c079ecf4-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1382
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/jquery.knob.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 3.8 kB |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/jquery.knob.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (10890) Hashfa5ef16b85650e14f4b8dbf7cd91564a 26dfefa31e55fec28ad89dd565e034d26dd0ac6d 5667e30daf7cc9cff5aecdf5b1479d2c25af2a2b91d78ae80fe2bb091f88f97e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/redcountdown/jquery.redcountdown/3rdparty/jquery.knob.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 05 Dec 2019 14:29:07 GMT
ETag: "2ba5-598f5c079dd54-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 3841
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-admin/css/color-picker.min.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 876 B |
URL GET HTTP/1.13.14.128.45/wp-admin/css/color-picker.min.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (3091) Hashf3cc1985788e0fee54693619119afafe 162416549d107dbb7fab10dbef484509bf8522fa 4aa1f650fe19f5b6d21c8d9e5128a66ba0144be4833b4ca32d52d53d77bf8cfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/css/color-picker.min.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 12 Aug 2021 00:52:56 GMT
ETag: "c36-5c95227d2df40-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 876
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-content/plugins/easy-sign-up/css/esu-styles.css?ver=3.4 | 3.14.128.45 | 200 OK | 475 B |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/easy-sign-up/css/esu-styles.css?ver=3.4 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Hashba2f04e74d27e331626c3bbde59ca13f 5f8d836dece9df9ca1fa0c09061191d4246e9b22 8bcd3b43f594891ba46451b470991af74dfba414a36fb35d2a4aa78e976c9435
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/easy-sign-up/css/esu-styles.css?ver=3.4 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 05 Dec 2019 14:29:06 GMT
ETag: "397-598f5c06f8cb1-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 475
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-content/plugins/simple-org-chart/css/custom.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 1.2 kB |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/simple-org-chart/css/custom.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Hash2b345a136dc4b1568b8233fd5cc8b280 f84038ceedc1923cbc2842cb715aae829f97d9ec e95eb8f71c7a1ed5527df6a54f74d23ef3e9fd0515d7d035a6c40ab355425f9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/simple-org-chart/css/custom.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 13 Mar 2023 18:02:43 GMT
ETag: "d8d-5f6cbeae6f74e-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1174
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-content/plugins/simple-org-chart/css/jquery.jOrgChart.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 492 B |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/simple-org-chart/css/jquery.jOrgChart.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Hash8461f92e2fd971eebb25d96873f82340 f8b81288bbab30a56026f22c3a79be00bb882ec6 18a4939ea33f99dbb23f94cc73cbf99db59b76f026cd2b34904baa3b91bd8db9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/simple-org-chart/css/jquery.jOrgChart.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 13 Mar 2023 18:02:43 GMT
ETag: "4d4-5f6cbeae6f74e-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 492
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-includes/css/buttons.min.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 1.5 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/css/buttons.min.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (5819) Hash61acbb6ebdd2479dcb66e467e3f1d80f 82f9d6c19de343cc39b2c461b4a9a97770699ec8 a263951ba358b2b766fe5e06c24a5869f2a67aeee53a4ba7d3b1f9d478fc3c34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/buttons.min.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 12 Aug 2021 00:52:56 GMT
ETag: "16de-5c95227d5ec81-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1453
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-admin/css/forms.min.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 6.4 kB |
URL GET HTTP/1.13.14.128.45/wp-admin/css/forms.min.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (26460) Hash3464bd853293e178b391d848ecddba07 d97b8c51cf1910fb81e5ac3cc222f3a91cfc5ecc 882c01510d516f35f8c0198bb80e21f0870bc2f21f66584ddcd50175f4caa5c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/css/forms.min.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "677f-5fe93c9cab445-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 6393
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-admin/css/l10n.min.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 686 B |
URL GET HTTP/1.13.14.128.45/wp-admin/css/l10n.min.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (2442) Hash2b2ed5045b480dcfac2e6babbd2f2007 9d590c9bbc4c357ccec1c8b94ffe9feeeab58d3c 86669f0412fff3ba05a09c21f077c7a9ec4d9054633216b6ce04eb3c6c57538b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/css/l10n.min.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 11 Dec 2018 16:13:26 GMT
ETag: "9ad-57cc15c805580-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 686
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-admin/css/login.min.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 2.2 kB |
URL GET HTTP/1.13.14.128.45/wp-admin/css/login.min.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (6280) Hash327c0a1e1130f01ead36730293810c1a 19b8dfcca682bc85fe21fdb5e609e9c3e84728ed 38a7a5628e536d54062615d2b9b779b885facd3c488ec4b25a6ec6ec5347d0af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/css/login.min.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:12 GMT
ETag: "18ab-5f63f955f4cd8-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 2157
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 | 3.14.128.45 | 200 OK | 1.1 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (3224) Hashc4a1336d5abc0f160d866481f99b1717 4498359374276a34a59ab798d667da38fd17a439 809ec973a018b6bf8ac18e74bfffc3d25182e6f44df00128d531cf3e07570ee6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "d4a-5f63f956382f7-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1085
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 3.14.128.45 | 200 OK | 7.1 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8189) Hashc4e68a0f3463c0bd3c39eab38815e881 0ce58644e9f3c5063a11453ff287c5ec096465a7 ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "53be-5fe93c9cdc185-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 7099
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/css/dashicons.min.css?ver=6.2.5 | 3.14.128.45 | 200 OK | 36 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/css/dashicons.min.css?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (58981) Hashd68d6bf519169d86e155bad0bed833f8 27ba9c67d0e775fc4e6dd62011daf4c3902698fc c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dashicons.min.css?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:51 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 12 Aug 2021 00:52:56 GMT
ETag: "e688-5c95227d5ec81-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 35730
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.14.128.45/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2 | 3.14.128.45 | 200 OK | 4.8 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (18139) Hash9de2eef8d91573cfebe00f9a7908cd34 7c19d72cbb0f90d90f399a0cb4452487c03e4bcd 6d5db554f7ae65713d70fd359a046d051dada869941279557a39d0749beded33
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "4791-5fe93c9cdc185-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 4839
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 | 3.14.128.45 | 200 OK | 3.1 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (10549) Hasha8f8aaa5156c364da8cf20f3a484d0c8 279953b7348d460444ece4548ed2d899ed5b52f7 3681c04c0ff2875ebbc18c582f7312f63a6fa21d4569c3bde1cf4a299d619311
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "29e8-5fe93c9cdc185-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 3120
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2 | 3.14.128.45 | 200 OK | 585 B |
URL GET HTTP/1.13.14.128.45/wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (985) Hash4cc86d1003c45134d6838f13e3885db1 7e24d802fa52db547e437a5d92f21932bb858993 196bed4faf0fe38b89a496b1f41319b2a8077263f85819f8ad42933e0a2e2e52
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Wed, 11 Apr 2012 02:58:23 GMT
ETag: "49b-4bd5e699831c0-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 585
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-admin/js/iris.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 8.1 kB |
URL GET HTTP/1.13.14.128.45/wp-admin/js/iris.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (23476) Hash8932e03208a83f1cdea19a1c197bc4c3 a0c50ed35660e77d6440605805f895e5d2e87257 ab52d53b8df3da6c127e38e08336523b1c5a7917cd850a2254ef58c3553dcf0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/js/iris.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:12 GMT
ETag: "5c5b-5f63f955edf78-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 8079
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 540 B |
URL GET HTTP/1.13.14.128.45/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (1191), with no line terminators Hash51300497928562f8c86c7aaba99237cd e5826832b85c6afc6502b74cbb8ac5394b04c363 6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "4a7-5f63f95634477-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 540
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-content/plugins/easy-sign-up/js/esu-validate.js?ver=3.4 | 3.14.128.45 | 200 OK | 1.2 kB |
URL GET HTTP/1.13.14.128.45/wp-content/plugins/easy-sign-up/js/esu-validate.js?ver=3.4 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text Hash277a1d8eccb9c02defc01641f5b79873 93cb9a2268338f62a050cd9342da7c6cb1794d29 f142f0d529322b126ebbc96025dc8eb528055df4a337ba662f9b5f8863f2bb6f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/easy-sign-up/js/esu-validate.js?ver=3.4 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 05 Dec 2019 14:29:06 GMT
ETag: "1279-598f5c06f8cb1-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1176
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/zxcvbn-async.min.js?ver=1.0 | 3.14.128.45 | 200 OK | 256 B |
URL GET HTTP/1.13.14.128.45/wp-includes/js/zxcvbn-async.min.js?ver=1.0 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (316) Hashc6f045d5e79f0a4f5ce90419ca598162 45d70af2ab1d5d4ff738afc052758a0242f31a00 e93e18f2f34a865e27d2d839eaccca6bec750d357f1c937980026d6d25507c2c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 12 Aug 2021 00:52:56 GMT
ETag: "15f-5c95227d4e2e1-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 256
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11 | 3.14.128.45 | 200 OK | 2.5 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (6607), with no line terminators Hash9a4f28a615173df36cb84be2b345816e f709263841708d9e40268f24a0072ff4fe811b35 6974bfd8fa06b7831f05cb4b25860c851a5ad3f02a6699ebe688987dd7a6ebe6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "19cf-5fe93c9cd7365-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 2499
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 | 3.14.128.45 | 200 OK | 2.5 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (8171), with no line terminators Hashdda652db133fddb9b80a05c6d1b5c540 60c8514c57a5db2980c4b046b0dd479bd427357b c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "1feb-5fe93c9cd7365-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 2484
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 3.14.128.45 | 200 OK | 6.5 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (17819), with no line terminators Hashe495a4709e3eae31c67f8263f25d2d39 d43ba6a092e4823a71f3bff75d5ed279a481636b 1c1fef6e6b4f9832603850b9b6562e74d9a6a3700ba836efe88facc577121e8b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "459f-5f63f95631597-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 6532
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 | 3.14.128.45 | 200 OK | 39 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (65266) Hashe53ec3d6e21be78115810135f5e956fe 523892839b88351523e0498ba881c4431197b54e b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "26935-5f63f95635417-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 38789
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 | 3.14.128.45 | 200 OK | 1.7 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (4875) Hashb33ab4d5dcf02436276a717e9d1b7c18 f47b9a9c41b3b11c9dffabca22945727c3ec6566 9bd82960d99b3a76f4af77a88a346bd61f87bac5ff2f385ee28cd669d8f22134
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "132e-5f63f9562e6b7-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1661
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae | 3.14.128.45 | 200 OK | 3.9 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Hash8cd696505481e74ffee89b4995f37379 ee9aad199ef2bc60a3460f4c52f37d22907b2ec9 01c3955df67a9b9d1367957e2c187729eae46b72e92c2b52bdb217b14a8fc874
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "27f6-5f63f956305f7-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 3866
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-admin/js/password-strength-meter.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 621 B |
URL GET HTTP/1.13.14.128.45/wp-admin/js/password-strength-meter.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeASCII text, with very long lines (1088) Hashb2e45ac2d733c572ee0b3b5dd53c7cc0 f0d35678945439784d91ded2f48936c0396095dc fcbe9e9ff2d1c20cab10bf43dc49914e188b44ae21f34257b4a0ef5cae90f7ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/js/password-strength-meter.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 12 Aug 2021 00:52:56 GMT
ETag: "463-5c95227d29120-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 621
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/underscore.min.js?ver=1.13.4 | 3.14.128.45 | 200 OK | 7.3 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/underscore.min.js?ver=1.13.4 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (18798) Hashf88d5720bb454ed5d204cbdb56901f6b f1952292fde4b15936e9aac16b2b9896684db95b 726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "4991-5f63f95634477-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 7311
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-includes/js/wp-util.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 756 B |
URL GET HTTP/1.13.14.128.45/wp-includes/js/wp-util.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (1391) Hash19d386c9004e54941c1cc61d357efa5d 0a77594006c8d86fdcc0adbc2b9aecaef3869586 3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-util.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Mon, 06 Mar 2023 18:37:13 GMT
ETag: "592-5f63f956334d7-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 756
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-admin/js/user-profile.min.js?ver=6.2.5 | 3.14.128.45 | 200 OK | 2.3 kB |
URL GET HTTP/1.13.14.128.45/wp-admin/js/user-profile.min.js?ver=6.2.5 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (6152) Hash8e87df7db3cc569572d966f8a245949a 4213fba4479f8ef544d2f69037a38e3a66e834dc 13ce049e552a9e5cb26693c36bb745bc0e6db98fbc79f329e5be3dc2e3775440
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/js/user-profile.min.js?ver=6.2.5 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Tue, 20 Jun 2023 18:26:22 GMT
ETag: "182b-5fe93c9ca8565-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 2326
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.14.128.45/wp-admin/images/wordpress-logo.svg?ver=20131107 | 3.14.128.45 | 200 OK | 1.5 kB |
URL GET HTTP/1.13.14.128.45/wp-admin/images/wordpress-logo.svg?ver=20131107 IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeSVG Scalable Vector Graphics image Hashf34ef6259364f7ef0ccf67cd1dddc970 18b563726b3d24a73552791fff91f61077ae1ec5 a0bbefd626f1e76f9245ec6c6101b679ba27412b71b32fc43eccda9db40f394b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/images/wordpress-logo.svg?ver=20131107 HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.14.128.45/wp-admin/css/login.min.css?ver=6.2.5
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie
Last-Modified: Sun, 05 Apr 2015 21:20:27 GMT
ETag: "5f1-51300c013bcc0"
Accept-Ranges: bytes
Content-Length: 1521
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/svg+xml
|
|
| 3.14.128.45/bitnami/images/xcorner-logo.png.pagespeed.ic.6TukXqDtLV.png | 3.14.128.45 | 200 OK | 17 kB |
URL GET HTTP/1.13.14.128.45/bitnami/images/xcorner-logo.png.pagespeed.ic.6TukXqDtLV.png IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typePNG image data, 240 x 231, 8-bit/color RGBA, non-interlaced Hashe93ba45ea0ed2d5314927f1aa465156a 101481fe7dc52e3f82f126b1f1c10b9ec643d502 f491527b54c03adeba7206d3ab37a4978958639446cf59ed71714e1126a3aca6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bitnami/images/xcorner-logo.png.pagespeed.ic.6TukXqDtLV.png HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
Link: <http://3.14.128.45/bitnami/images/corner-logo.png>; rel="canonical"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Expires: Fri, 18 Apr 2025 04:48:30 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
Last-Modified: Thu, 18 Apr 2024 04:48:30 GMT
X-Original-Content-Length: 26352
Content-Length: 17101
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| 3.14.128.45/wp-content/uploads/2019/06/cropped-MaterialsMarketing_Logo_Primary-1-32x32.jpg | 3.14.128.45 | 200 OK | 652 B |
URL GET HTTP/1.13.14.128.45/wp-content/uploads/2019/06/cropped-MaterialsMarketing_Logo_Primary-1-32x32.jpg IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 32x32, components 3 Hashdc7990a7ff8a393fdf21ac3f5c55866c 7e0da4c351737611e06243c22691739d34f2f6e8 c3d7fc3a2232b7610fcc776b10a7b9336d3962edc0113b9e29d69e56df5cc912
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2019/06/cropped-MaterialsMarketing_Logo_Primary-1-32x32.jpg HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie
Last-Modified: Thu, 05 Dec 2019 14:27:08 GMT
ETag: "28c-598f5b961a250"
Accept-Ranges: bytes
Content-Length: 652
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| 3.14.128.45/wp-content/uploads/2019/06/cropped-MaterialsMarketing_Logo_Primary-1-192x192.jpg | 3.14.128.45 | 200 OK | 5.5 kB |
URL GET HTTP/1.13.14.128.45/wp-content/uploads/2019/06/cropped-MaterialsMarketing_Logo_Primary-1-192x192.jpg IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 192x192, components 3 Hash35976eb9e4245674ea599221a7d07c86 2c9136dab267e34e9e485fa1124e83eec0608e4a 2a20d97ccaa8e8b13d86f183e15be0b804d2b03b35746e4d1e137712b9d21dc7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2019/06/cropped-MaterialsMarketing_Logo_Primary-1-192x192.jpg HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie
Last-Modified: Thu, 05 Dec 2019 14:27:01 GMT
ETag: "1570-598f5b8f962b4"
Accept-Ranges: bytes
Content-Length: 5488
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| 3.14.128.45/mod_pagespeed_beacon?url=http%3A%2F%2F3.14.128.45%2Fwp-login.php%3Fredirect_to%3D3.14.128.45%2F%26reauth%3D1%2527%2C%25278Xxa2XQLv9%2527%2Ctrue%2Cfalse%2C%25271YSCUYw2W-s | 3.14.128.45 | 204 No Content | 0 B |
URL POST HTTP/1.13.14.128.45/mod_pagespeed_beacon?url=http%3A%2F%2F3.14.128.45%2Fwp-login.php%3Fredirect_to%3D3.14.128.45%2F%26reauth%3D1%2527%2C%25278Xxa2XQLv9%2527%2Ctrue%2Cfalse%2C%25271YSCUYw2W-s IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /mod_pagespeed_beacon?url=http%3A%2F%2F3.14.128.45%2Fwp-login.php%3Fredirect_to%3D3.14.128.45%2F%26reauth%3D1%2527%2C%25278Xxa2XQLv9%2527%2Ctrue%2Cfalse%2C%25271YSCUYw2W-s HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
Content-Type: application/x-www-form-urlencoded
Content-Length: 41
Origin: http://3.14.128.45
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie
Cache-Control: max-age=0, no-cache
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
|
|
| 3.14.128.45/wp-includes/js/zxcvbn.min.js | 3.14.128.45 | 200 OK | 400 kB |
URL GET HTTP/1.13.14.128.45/wp-includes/js/zxcvbn.min.js IP3.14.128.45:80
Requested byhttp://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
File typeJavaScript source, ASCII text, with very long lines (53869) Size400 kB (399661 bytes) Hash027c098ebca6235056092f7b954dfc5f 1ea18e5e6ece74f6f3a7c1a57d2ac2462c9c666b daa6634ed8d6376bfd22d8f68942d00e1b56db0fa8c9f90ba2af52734dd5593b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/zxcvbn.min.js HTTP/1.1
Host: 3.14.128.45
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.14.128.45/wp-login.php?redirect_to=3.14.128.45/&reauth=1%27,%278Xxa2XQLv9%27,true,false,%271YSCUYw2W-s
DNT: 1
Connection: keep-alive
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; PHPSESSID=2aori1l1i21ehlht2q1qc2gqe8; wordpress_test_cookie=WP+Cookie+check
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 00:29:52 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Cookie,Accept-Encoding
Last-Modified: Thu, 12 Aug 2021 00:52:56 GMT
ETag: "c8bdd-5c95227d4b401-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=hnT3zF6ZihB4AO1Dwt3yKt68sYn2XBX7Vm_MPQ2IPyjLF0RZKsxC5zGT3JxSbNtuS-eeC8wyr5oAZlf8mAS3GKNj-02oIBt4y4_J_7suG7BAbJcr8fXabiCbzfAAgJod
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
date: Wed, 24 Apr 2024 00:29:36 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 33
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|