| mitmdetection.services.mozilla.com/ |  108.157.214.77 | | 0 B |
URL mitmdetection.services.mozilla.com/ IP108.157.214.77:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: mitmdetection.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: application/xml
date: Fri, 10 May 2024 22:17:21 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 797e08d987207122bff536abc6502d6c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: kXfEIDa2trndp4vsp2gtGYfekv97f2Tt-o5msnKO1LO1PuhNH9aH8g==
X-Firefox-Spdy: h2
|
|
| 157.65.87.203/ |  157.65.87.203 | | 272 B |
IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
File typeXML 1.0 document, ASCII text Hashbf09f1ff72ee7a91714816f78a2fd976 dc5404c9571e34c3f637a4ca3082212d4fd4d89a a0e089d1aca81cbe85313ac63b02086d5067eb0424bfa57c56b037314ccbd18a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "9f5-110-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:22 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Cache-Control: no-cache
Expires: 0
Content-Type: text/html
Content-Length: 272
|
|
| 157.65.87.203/ | 157.65.87.203 | | 2.7 kB |
IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
File typeHTML document, ASCII text, with very long lines (1747) Hashe9d1fa9763cbfedee33351cd5382197d 313aebd0ac3bb0105c0e60094282ca40a4c07d36 6c086ba19af6edbd9271d1274885d5ed6629e0e888e6c5c3cd89552153428918
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Location: https://157.65.87.203:443/
Connection: close
|
|
| 157.65.87.203/webpages/themes/default/css/perfect-scrollbar.css?t=6aa325ef | 157.65.87.203 | 200 OK | 1.7 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/perfect-scrollbar.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (1712), with no line terminators Hash2266db0e4804abc5551b10758d96d9ab 00aa0d250bcc5bb3962b8b597107c0eb14a80208 48b73d75d4d603b31f1c5e538603615adaf8143019776a7ec00248026bb62946
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/perfect-scrollbar.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b19-6b0-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:24 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 1712
|
|
| 157.65.87.203/webpages/themes/default/css/spectrum.css?t=6aa325ef | 157.65.87.203 | 200 OK | 11 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/spectrum.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (11024), with no line terminators Hash3eb8116a2ea5240dcb32d4a1888a0922 1ccda78005f2780429ee4177c2c7e21eb0217117 d00cd01ff37cc98d27c886d154fb83bd7efac29e2e30f2c337cac8c42d42951c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/spectrum.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b16-2b10-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:24 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 11024
|
|
| 157.65.87.203/webpages/themes/default/css/jquery.Jcrop.css?t=6aa325ef | 157.65.87.203 | 200 OK | 2.0 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/jquery.Jcrop.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (2033), with no line terminators Hash02ca092c4a82596b0545badcd8e0c729 f0028c3d9c5c500541550874fcee7141d79410e7 38dede5e611b2ac278c317a87aeebec2d09e8b1993d73e3c4cae6eb7a885d408
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/jquery.Jcrop.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b1a-7f1-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:24 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 2033
|
|
| 157.65.87.203/webpages/js/libs/jquery.backgroundSize.js?t=6aa325ef | 157.65.87.203 | 200 OK | 3.1 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/jquery.backgroundSize.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (3109), with no line terminators Hash43258b085f705146ca9d70efb8f90f90 b41578053363819e95e6e3ddfaad0764c5b2f198 5b115c2e9115631ae4ddac5bd6489bb92547bb9119fe94426f2aacf99d468e63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/jquery.backgroundSize.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b08-c25-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:24 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 3109
|
|
| 157.65.87.203/webpages/themes/default/css/base.css?t=6aa325ef | 157.65.87.203 | 200 OK | 320 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/base.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size320 kB (320113 bytes) Hash7d568d66f61ffc84e4b4e5b0878361f5 40bb72e8b18e7c59001218e412b82b5ffa073bd7 cb240c94c836ee5cabbc81549a0c0b65f3152d5ff2d7aa0783f654d1b779adad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/base.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b15-4e271-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:24 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 320113
|
|
| 157.65.87.203/webpages/js/libs/jquery.min.js?t=6aa325ef | 157.65.87.203 | 200 OK | 93 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/jquery.min.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (32099), with CRLF line terminators Hash9b14664296b814b7582745bbcca984ae 6e67990f25e71355d6d4d7b8fa0413303cabc1e4 7027f29e2515bf207b7c0a289b5cb6dc8f04ec88b0e36817e22eff6014c4a1bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/jquery.min.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b00-16b68-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:25 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 93032
|
|
| 157.65.87.203/webpages/js/libs/base64.js?t=6aa325ef | 157.65.87.203 | | 1.5 kB |
URL GET 157.65.87.203/webpages/js/libs/base64.js?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef
File typeASCII text, with very long lines (1519), with no line terminators Hash53c84b283a1846393807eaaac47d2f25 de011b4e1951880757b9df0088c8fc3109f54ce5 994c7f91f26c2d7eeb6a7ffc6b5206c6ac7d20eb2e463fc223facf0c765ada1e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/base64.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b02-5ef-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:26 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 1519
|
|
| 157.65.87.203/webpages/js/libs/encrypt.js?t=6aa325ef | 157.65.87.203 | | 18 kB |
URL GET 157.65.87.203/webpages/js/libs/encrypt.js?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef
File typeASCII text, with very long lines (18496), with no line terminators Hashd7593648d4b3bab81b1ddc3b10112060 d949e51378968137227c0cdf31eaf520305b2578 052a84e573e6f1a89fda7832fd16425f4f11a236ed41bc7e0fa5eb3daf04cc0b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/encrypt.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b0c-4840-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:26 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 18496
|
|
| 157.65.87.203/webpages/js/libs/cryptoJS.min.js?t=6aa325ef | 157.65.87.203 | 200 OK | 37 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/cryptoJS.min.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (37061), with no line terminators Hash242f7a6460d88d62952bc73f3fdee691 679c50b118801a48f13ab4a0e06c00370d48d719 fe07d716cf3b06012d630b58916b1863d3d2359805d1a2309c8bd199a10a4eb8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/cryptoJS.min.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b0d-90c5-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:26 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 37061
|
|
| 157.65.87.203/webpages/js/libs/tpEncrypt.js?t=6aa325ef | 157.65.87.203 | 200 OK | 4.4 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/tpEncrypt.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (4397), with no line terminators Hashe8295344cd1e3dd8999d29f7d013e467 b9ebfdf983c10f6e90d466087cadcba7303e9641 bdc6938b8220bc44c78758948a8669ccefd3fc95d5908c38d75ad00445c6d5b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/tpEncrypt.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b0b-112d-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:26 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 4397
|
|
| 157.65.87.203/webpages/js/libs/polyfill.js?t=6aa325ef | 157.65.87.203 | 200 OK | 1.9 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/polyfill.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (1931), with no line terminators Hash2d2d42fe4c1014078321a16fc3da952f 03aee3d9d6d7b51294abc5dca4f8d12aedfb52d3 3b694e1f75d276a71eae17d2789360b15bc44db5e4a763b86ab1b90ddb8d5d88
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/polyfill.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b07-78b-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:26 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 1931
|
|
| 157.65.87.203/webpages/js/app/url.js?t=6aa325ef | 157.65.87.203 | | 343 B |
URL GET 157.65.87.203/webpages/js/app/url.js?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef
File typeASCII text, with very long lines (343), with no line terminators Hasha2105319a91383beb0268e59de3606d7 d3d00b4777aca00b46c47afb9b86ba9b8833b2c0 3457c3f3a2ba21af60cc5bd03707a296531436402a4b62f9a66b93d40625fcab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/app/url.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b0e-157-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:26 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 343
|
|
| 157.65.87.203/webpages/js/libs/spectrum.js?t=6aa325ef | 157.65.87.203 | | 28 kB |
URL GET 157.65.87.203/webpages/js/libs/spectrum.js?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef
File typeJavaScript source, ASCII text, with very long lines (28369), with no line terminators Hash8e010dfc1c8a875af98ff0b2f9c56799 6a00013175683e8585e609af66c2f4de1901b888 6f9bdb643f58d0a784750d6862972c4b29eccb4b5715477eff51eb6f984f01ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/spectrum.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b01-6ed1-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:27 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 28369
|
|
| 157.65.87.203/webpages/js/su/frame.js?t=6aa325ef | 157.65.87.203 | | 671 kB |
URL GET 157.65.87.203/webpages/js/su/frame.js?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef
File typeUnicode text, UTF-8 text, with very long lines (65516), with no line terminators Size671 kB (671383 bytes) Hash578a5c608e5267e752b140bff541a644 830e2fc6505e2892a3ebe99bb0d4f2a046c3b46d a8a0267b417f788ef87748386f81020759b1ccdcf5f337d7fcd247549f2336f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/su/frame.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b10-a3e97-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:28 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 671383
|
|
| 157.65.87.203/webpages/js/su/language.js?t=6aa325ef | 157.65.87.203 | 200 OK | 1.8 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/su/language.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeHTML document, ASCII text, with very long lines (1798), with no line terminators Hashc871dbc799953de79ee0bd16bbdf8c4a 39ec7cf5ee050b72a8d521f229ac4e4ecbda61b6 a64a9af679231a2aab61a54ab7e3ba554750680d5f788c125473ee875477c2a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/su/language.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b12-706-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:29 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 1798
|
|
| 157.65.87.203/webpages/js/su/char.js?t=6aa325ef | 157.65.87.203 | | 3.8 kB |
URL GET 157.65.87.203/webpages/js/su/char.js?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef
File typeASCII text, with very long lines (3828), with no line terminators Hash492a8b26dc4ceee50242d80e4949efff cb78326c06ccc0ab873e0365d90b3a93abd7ff66 5249880594a0525556b122a6e1eed9a986040d8a901b8763d372d13c28c7d2a5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/su/char.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b0f-ef4-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:30 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 3828
|
|
| 157.65.87.203/webpages/locale/ispAutoConf.js?t=6aa325ef | 157.65.87.203 | | 205 kB |
URL GET 157.65.87.203/webpages/locale/ispAutoConf.js?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef
File typeUnicode text, UTF-8 text, with very long lines (57629), with no line terminators Size205 kB (205435 bytes) Hash437b609ab66f3afeacf42b80415f5f51 b543b7e7f1edd7ebc9de2ada3dc38218ec6c6e2e 65cb613156ee5f4035eeacf4db7b2c2061452f81d68a528755c226a7ed24e645
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/locale/ispAutoConf.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b83-3227b-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:29 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 205435
|
|
| 157.65.87.203/webpages/js/libs/jquery.Jcrop.js?t=6aa325ef | 157.65.87.203 | 200 OK | 15 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/jquery.Jcrop.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (15091), with no line terminators Hash57bd6f4c19cfe246769bdd07f95bba0e c3baed8fe6781e94f96041dae1818fa7ca79d7cf 9104f7393823633798ac860e5293a4a9bc155f9560c876a70b6be34cd94f8854
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/jquery.Jcrop.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b06-3af3-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:30 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 15091
|
|
| 157.65.87.203/webpages/locale/jp_JP/lan.js?_=1715379447677 | 157.65.87.203 | | 236 kB |
URL 157.65.87.203/webpages/locale/jp_JP/lan.js?_=1715379447677 IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
File typeUnicode text, UTF-8 text, with very long lines (36943), with no line terminators Size236 kB (235720 bytes) Hash95cea84570d691613b98ff157e5b4fa3 218d8b3c1f0d6e9c26810bfc0b42349ca5bdc4dc 6dd13d42e456a1333c6b30cdb0be343cac5bf42195a82053edbc3af69770b275
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/locale/jp_JP/lan.js?_=1715379447677 HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "bad-398c8-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:31 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 235720
|
|
| 157.65.87.203/webpages/favicon.ico?t=6aa325ef | 157.65.87.203 | | 8.0 kB |
URL 157.65.87.203/webpages/favicon.ico?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Hash952622d053b89d528848bc16d58bcc84 0d96740a05d950bfcfaaeafcbee474af7052dc25 94111d7d462f0c0735bce1c5e145ec672d20ca82c3ba578460fa0574338d76c4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/favicon.ico?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b71-1f5c-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:33 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: application/octet-stream
Content-Length: 8028
|
|
| 157.65.87.203/webpages/locale/jp_JP/lan.css?t=6aa325ef | 157.65.87.203 | | 364 B |
URL 157.65.87.203/webpages/locale/jp_JP/lan.css?t=6aa325ef IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
File typeASCII text, with CRLF line terminators Hash6a1a8cc73611b231a2ce1ab2ae859c98 32a7e96f9e7eabc5d132f4478640bee05c0f6520 987bdb0ce988820d3e3fcbf2a97f5c97c5d13d57ab835398b555b61aa05d211f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/locale/jp_JP/lan.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "bac-16c-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:33 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 364
|
|
| 157.65.87.203/webpages/locale/jp_JP/help.js?_=1715379447678 | 157.65.87.203 | | 0 B |
URL 157.65.87.203/webpages/locale/jp_JP/help.js?_=1715379447678 IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/locale/jp_JP/help.js?_=1715379447678 HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "bab-0-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:33 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 0
|
|
| 157.65.87.203/webpages/locale/language.js?_=1715379447679 | 157.65.87.203 | | 2.8 kB |
URL 157.65.87.203/webpages/locale/language.js?_=1715379447679 IP157.65.87.203:0 ASN#2514 NTT PC Communications, Inc.
File typeUnicode text, UTF-8 text, with very long lines (2725), with no line terminators Hash2f2d140f79c0079aa22e367d27278f43 1e0f6bf0f1ea5dec37b6448b04cf2b7272404e03 b97641dedfdd968588b3e25d152fa30859cd2a2caa147d3417503ec5f1957253
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/locale/language.js?_=1715379447679 HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "bc0-af8-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:33 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 2808
|
|
| 157.65.87.203/webpages/index.html?t=6aa325ef | 157.65.87.203 | 200 OK | 2.7 kB |
URL User Request GET HTTP/1.1157.65.87.203/webpages/index.html?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeHTML document, ASCII text, with very long lines (1747) Hashe9d1fa9763cbfedee33351cd5382197d 313aebd0ac3bb0105c0e60094282ca40a4c07d36 6c086ba19af6edbd9271d1274885d5ed6629e0e888e6c5c3cd89552153428918
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/index.html?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "9f8-ab9-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:34 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Cache-Control: no-cache
Expires: 0
Content-Type: text/html
Content-Length: 2745
|
|
| 157.65.87.203/webpages/themes/default/css/perfect-scrollbar.css?t=6aa325ef | 157.65.87.203 | 200 OK | 1.7 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/perfect-scrollbar.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (1712), with no line terminators Hash2266db0e4804abc5551b10758d96d9ab 00aa0d250bcc5bb3962b8b597107c0eb14a80208 48b73d75d4d603b31f1c5e538603615adaf8143019776a7ec00248026bb62946
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/perfect-scrollbar.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b19-6b0-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:34 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 1712
|
|
| 157.65.87.203/webpages/themes/default/css/spectrum.css?t=6aa325ef | 157.65.87.203 | 200 OK | 11 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/spectrum.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (11024), with no line terminators Hash3eb8116a2ea5240dcb32d4a1888a0922 1ccda78005f2780429ee4177c2c7e21eb0217117 d00cd01ff37cc98d27c886d154fb83bd7efac29e2e30f2c337cac8c42d42951c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/spectrum.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b16-2b10-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:35 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 11024
|
|
| 157.65.87.203/webpages/themes/default/css/base.css?t=6aa325ef | 157.65.87.203 | 200 OK | 320 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/base.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size320 kB (320113 bytes) Hash7d568d66f61ffc84e4b4e5b0878361f5 40bb72e8b18e7c59001218e412b82b5ffa073bd7 cb240c94c836ee5cabbc81549a0c0b65f3152d5ff2d7aa0783f654d1b779adad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/base.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b15-4e271-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:35 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 320113
|
|
| 157.65.87.203/webpages/themes/default/css/jquery.Jcrop.css?t=6aa325ef | 157.65.87.203 | 200 OK | 2.0 kB |
URL GET HTTP/1.1157.65.87.203/webpages/themes/default/css/jquery.Jcrop.css?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (2033), with no line terminators Hash02ca092c4a82596b0545badcd8e0c729 f0028c3d9c5c500541550874fcee7141d79410e7 38dede5e611b2ac278c317a87aeebec2d09e8b1993d73e3c4cae6eb7a885d408
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/themes/default/css/jquery.Jcrop.css?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b1a-7f1-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:36 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/css
Content-Length: 2033
|
|
| 157.65.87.203/webpages/js/libs/jquery.min.js?t=6aa325ef | 157.65.87.203 | 200 OK | 93 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/jquery.min.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (32099), with CRLF line terminators Hash9b14664296b814b7582745bbcca984ae 6e67990f25e71355d6d4d7b8fa0413303cabc1e4 7027f29e2515bf207b7c0a289b5cb6dc8f04ec88b0e36817e22eff6014c4a1bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/jquery.min.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b00-16b68-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:36 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 93032
|
|
| 157.65.87.203/webpages/js/libs/jquery.backgroundSize.js?t=6aa325ef | 157.65.87.203 | 200 OK | 3.1 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/jquery.backgroundSize.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (3109), with no line terminators Hash43258b085f705146ca9d70efb8f90f90 b41578053363819e95e6e3ddfaad0764c5b2f198 5b115c2e9115631ae4ddac5bd6489bb92547bb9119fe94426f2aacf99d468e63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/jquery.backgroundSize.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b08-c25-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:37 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 3109
|
|
| 157.65.87.203/webpages/js/libs/cryptoJS.min.js?t=6aa325ef | 157.65.87.203 | 200 OK | 37 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/cryptoJS.min.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (37061), with no line terminators Hash242f7a6460d88d62952bc73f3fdee691 679c50b118801a48f13ab4a0e06c00370d48d719 fe07d716cf3b06012d630b58916b1863d3d2359805d1a2309c8bd199a10a4eb8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/cryptoJS.min.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b0d-90c5-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:37 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 37061
|
|
| 157.65.87.203/webpages/js/libs/tpEncrypt.js?t=6aa325ef | 157.65.87.203 | 200 OK | 4.4 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/tpEncrypt.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeASCII text, with very long lines (4397), with no line terminators Hashe8295344cd1e3dd8999d29f7d013e467 b9ebfdf983c10f6e90d466087cadcba7303e9641 bdc6938b8220bc44c78758948a8669ccefd3fc95d5908c38d75ad00445c6d5b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/tpEncrypt.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b0b-112d-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:37 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 4397
|
|
| 157.65.87.203/webpages/js/libs/polyfill.js?t=6aa325ef | 157.65.87.203 | 200 OK | 1.9 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/polyfill.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (1931), with no line terminators Hash2d2d42fe4c1014078321a16fc3da952f 03aee3d9d6d7b51294abc5dca4f8d12aedfb52d3 3b694e1f75d276a71eae17d2789360b15bc44db5e4a763b86ab1b90ddb8d5d88
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/polyfill.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b07-78b-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:37 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 1931
|
|
| 157.65.87.203/webpages/js/libs/jquery.Jcrop.js?t=6aa325ef | 157.65.87.203 | 200 OK | 15 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/libs/jquery.Jcrop.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (15091), with no line terminators Hash57bd6f4c19cfe246769bdd07f95bba0e c3baed8fe6781e94f96041dae1818fa7ca79d7cf 9104f7393823633798ac860e5293a4a9bc155f9560c876a70b6be34cd94f8854
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/libs/jquery.Jcrop.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b06-3af3-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:37 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 15091
|
|
| 157.65.87.203/webpages/js/su/language.js?t=6aa325ef | 157.65.87.203 | 200 OK | 1.8 kB |
URL GET HTTP/1.1157.65.87.203/webpages/js/su/language.js?t=6aa325ef IP157.65.87.203:443 ASN#2514 NTT PC Communications, Inc.
Requested byhttps://157.65.87.203/webpages/index.html?t=6aa325ef CertificateIssuer Subjecttplinkwifi.net FingerprintA3:69:0C:FA:D2:6F:91:CA:8B:2B:10:1B:93:FC:1E:FE:16:1B:B0:88 ValidityFri, 01 Jan 2010 00:00:00 GMT - Tue, 31 Dec 2030 00:00:00 GMT
File typeHTML document, ASCII text, with very long lines (1798), with no line terminators Hashc871dbc799953de79ee0bd16bbdf8c4a 39ec7cf5ee050b72a8d521f229ac4e4ecbda61b6 a64a9af679231a2aab61a54ab7e3ba554750680d5f788c125473ee875477c2a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webpages/js/su/language.js?t=6aa325ef HTTP/1.1
Host: 157.65.87.203
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.65.87.203/webpages/index.html?t=6aa325ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: close
ETag: "b12-706-6381af03"
Last-Modified: Sat, 26 Nov 2022 06:15:31 GMT
Date: Fri, 10 May 2024 22:17:38 GMT
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'
Content-Type: text/javascript
Content-Length: 1798
|
|