| 2navi.com/_static/1715139656/sentry/js/ads.js |  172.67.214.22 | 200 OK | 33 B |
URL GET HTTP/32navi.com/_static/1715139656/sentry/js/ads.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
Hash2977ef85be0774de10805830b17a70ee 1a04b2bf334506dd77dc62536acee96aa52a4dc0 c3166797c34b1c0ea7f2f30e7b25a21b36277005925cfa302fddc579bac9b9b0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/1715139656/sentry/js/ads.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
content-length: 33
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=315360000
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: HIT
age: 25301
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c0l%2FQsoq5w5xFhzmnS1xJiXnRJJ%2FSt%2FFkoNKtdwFOabDCYTqWOFjLOZffqlX8XQb58SBhSEFHcDucd1ek2n%2BkekoDdzqL35mqNXrfN8SGGISMsL2QpDB8b2V3r8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999caaf35712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/1715139656/sentry/images/logos/default-organization-logo.png | 172.67.214.22 | 200 OK | 1.7 kB |
URL GET HTTP/32navi.com/_static/1715139656/sentry/images/logos/default-organization-logo.png IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typePNG image data, 96 x 96, 8-bit colormap, non-interlaced Hash0e6c0f82435bb74eb732446b7a6f351b 1a30a673a6cb8352a0058fe2371ba1759d893fe5 93abdbb7f64d188ea898526bccc25d7303753478ab7c65400a12d4bcc98bae71
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/1715139656/sentry/images/logos/default-organization-logo.png HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: image/png
content-length: 1660
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
cache-control: max-age=315360000
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: HIT
age: 25301
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bjr3%2FCIDoQfySMigvf3Sp%2FXy5VQ9s5PkTzNgODKCJlpLoSrBO1Y7TqKfpSilUSm7JqUBi1%2FMbu08yUBCzadhSECo%2Bzsjsp6Z5ZheECr29qNZpA1njqpBZ4Cyzxo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999caaf3a712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/assets/sentry-pattern.dba661a9db73aaaf2ea0.png | 172.67.214.22 | 200 OK | 28 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/assets/sentry-pattern.dba661a9db73aaaf2ea0.png IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typePNG image data, 862 x 714, 8-bit colormap, non-interlaced Hash05b46fcbf56464bad61476030726b3ec 851eeab038ee10e93ed82f6703308d3166a83d18 0e0ab4324b8665aaa1354a12fec50812239eee7192cb8b168d0321d1cdd766b2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/assets/sentry-pattern.dba661a9db73aaaf2ea0.png HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/_static/dist/sentry/entrypoints/sentry.css
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: image/png
content-length: 28146
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x9uL8DjdgKHwc74fRGE%2Ftpq9p%2FBUlEp6UjPWnTwDjvat7Q3dfjqIBjtCqVxlGUs2aY9NbOf%2FAN%2FAK4ctj1JLzZt64OFdJCs6I2BqTUYiO5DEU3yqll7SRVHJylc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbe888712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/entrypoints/app.js | 172.67.214.22 | 200 OK | 39 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/entrypoints/app.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe96d64e58bb700c10a436e891251cb24 f6419b7123e82a28d1972863eb338b62511811bd 43b065a9add8df5a5eb349bc7bdf527ea3a6431f08c36ebaa4a8fa7f9143f179
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/entrypoints/app.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PQPjCE1NuziJT3l25niCqNd9RGhoy55TQPNMkZUD3GUYYj4Jvf7g0OKIGUnjbaZf8uQI34o9lpnxQ97xTwkiF3CLf%2FAm0yif5SDvSEBKfI%2FMFQ9TDZXmUfnCo4s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999ca9f33712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/assets/rubik-regular.ac2d143aa7c4dc5fb505.woff | 172.67.214.22 | 200 OK | 30 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/assets/rubik-regular.ac2d143aa7c4dc5fb505.woff IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeWeb Open Font Format, TrueType, length 30384, version 1.0 Hash754368049fb25395610764715ea59958 fb87a857920b3e85909145414e12cac102c352e1 8059006107114b187d3cb8e967a1b8a1f3c047ab9b7508639eeb98000e2a98da
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/assets/rubik-regular.ac2d143aa7c4dc5fb505.woff HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/_static/dist/sentry/entrypoints/sentry.css
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/font-woff
content-length: 30384
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2FXOthCXDRMNOQKbyj7uZTVHUmeSZ9l507Q3AKuUrcYB5W80a6Z%2BUcPOzC34pNtXEvAhh3lEm0nnhjyd9T%2BGaOA7aNgggWLJxmA%2FhMmGSKZzbEVJHmJSNE1lS4g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbf891712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/assets/sentry-simple.560778129eda82ce960f.woff | 172.67.214.22 | 200 OK | 14 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/assets/sentry-simple.560778129eda82ce960f.woff IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeWeb Open Font Format, TrueType, length 13844, version 0.0 Hash9b8f8163d26e3709f8edab07f6b1ce0c ee480b709a8de88216bf82b99b6855d58d29e0f4 6f401a5d129874bac913712bf2e3f999589c8f676fdd28fc91fda27341f85039
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/assets/sentry-simple.560778129eda82ce960f.woff HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/_static/dist/sentry/entrypoints/sentry.css
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/font-woff
content-length: 13844
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xc5TyR4h%2F%2B12jtQAa4MbSfs2J2v%2BL9KKPxcI9T8lV2Nplgb0u7JHJhPKRCS0WfQxOVNbD6GjGWAEPUr5CxN%2BgqNw1a5hRbjtNfyzdBWSNkt4S4WzvwhgqEw4Yxk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbf894712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/assets/rubik-medium.c9da53ef4973605ec234.woff | 172.67.214.22 | 200 OK | 30 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/assets/rubik-medium.c9da53ef4973605ec234.woff IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeWeb Open Font Format, TrueType, length 30540, version 1.0 Hash49506accbefed8ae4f056db9bcb6336c 867d74964db7251c28fc004a745d48aacf048bc5 601819e671b749bedfa7061557701f3933fb381e0d50ae34e4266ac877a1e3a5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/assets/rubik-medium.c9da53ef4973605ec234.woff HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/_static/dist/sentry/entrypoints/sentry.css
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/font-woff
content-length: 30540
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4wijfWxupwAq18Mxu%2B7sGv8uRhuoMHs7zRs6tULvZ%2FdvomyVDhknkSbAC1O1nomNW15zVtHtgZVmxNzIkuiDSLrO9W%2Fq1Qg0MAdxeew%2F7%2FX234FaYmcb8WXedEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cc08b0712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_sentry_react_esm_index_js-node_modules_sentry_release-parser_lib_parser_-e63f97.98afd42cf75e317f0c44.js | 172.67.214.22 | 200 OK | 200 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_sentry_react_esm_index_js-node_modules_sentry_release-parser_lib_parser_-e63f97.98afd42cf75e317f0c44.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (38017) Size200 kB (199875 bytes) Hash65b276b756d24b302c148a663f3b93c9 a7e8a48ac70f6416f9ade3f01947c0b7f8f22107 db41a94131e405377cbd95385a7eddb9bbe7228f8d15aa3edc52a230da3d8667
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_sentry_react_esm_index_js-node_modules_sentry_release-parser_lib_parser_-e63f97.98afd42cf75e317f0c44.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C8BNfQfF%2Ff0iBBtljzjRn149v4KzkaEelzrkr7maLkam8S%2BETmGWAlRij%2BslBhL%2BvmdAcTkblKAIn88HKX7jDx%2FywQMo3Z%2B8IOS4PMR56RIe6o%2B5ksRxP7b3jTw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd4a0d712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_acl_access_tsx-app_components_badge_featureBadge_tsx-app_components_events_eve-24a32c.d33dd5a405a9c6a6bad7.js | 172.67.214.22 | 200 OK | 21 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_acl_access_tsx-app_components_badge_featureBadge_tsx-app_components_events_eve-24a32c.d33dd5a405a9c6a6bad7.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (38932) Hash7de870d7b5024430f625a199d589a23a bf097623d29fde8629f7c47d664321d97d4dc83b 2009886b31ab87c4e34905fe3c55ffbd8392c1e1a9d4c7ddb777000e50f7be1a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_acl_access_tsx-app_components_badge_featureBadge_tsx-app_components_events_eve-24a32c.d33dd5a405a9c6a6bad7.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3UT9ZzmPWc06Mw7DLQY6kiApcgVAIixulUfinM%2BpoXpyV7tWn0OIA2isxAxRpSyqI2BRKuUdtP8vansAIUswTPyx5lnOxdSL7UchFQTzibLYPXgu8NoF1F30Zv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd4a18712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_assigneeSelector_tsx-app_components_lazyRender_tsx-app_components_timeRangeSel-51ef30.ad1e356af4b33892bb47.js | 172.67.214.22 | 200 OK | 31 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_assigneeSelector_tsx-app_components_lazyRender_tsx-app_components_timeRangeSel-51ef30.ad1e356af4b33892bb47.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (29657) Hashc11368002044d0e0698a134b9e80c322 53e43bccd6ec0e53b22aeb22dd2f6c1c7067bdd7 92472e4f1f298e45fceadf4551283836ddbb57f927812ba85f8ddd7ba9a7603c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_assigneeSelector_tsx-app_components_lazyRender_tsx-app_components_timeRangeSel-51ef30.ad1e356af4b33892bb47.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TYOGigPkwFJgZtphvj2EBGgCaajgqOgFhaDfTF5t87LqC%2BhX1%2FG5sRjimgUehp3CvWitrlbhLrMVPGwrTxZokJcTgNCm7HMdqA2YSAmQmt61%2FYQyLLG6eOfG74Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd6a3a712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_sentry_react_esm_errorboundary_js-node_modules_date-fns_format_index_js--55d38c.24cefc6d881a557e8f47.js | 172.67.214.22 | 200 OK | 15 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_sentry_react_esm_errorboundary_js-node_modules_date-fns_format_index_js--55d38c.24cefc6d881a557e8f47.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (36431) Hash743bc19230e6adc5cdca868bd7d73675 1947f21894f634ed70a1b0bb566727013ca5a8f7 c2f53eefc7ec3fce45eb3f883ff4288dd5c7769c1e8f4d7bdde57a2bc40f7143
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_sentry_react_esm_errorboundary_js-node_modules_date-fns_format_index_js--55d38c.24cefc6d881a557e8f47.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xpQez1k3AtRrlCNp3xkFmFitJtoelhRlUGCsisMbKpXXsvhAUpAEzfYMbvu%2FC6RScQef75XWu0onTJVudcTQA4YSaoy%2BBDwtHDb9YERa9cR8MZs%2FvJqNQhuO1nI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd39fe712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_react-aria_gridlist_dist_import_mjs-node_modules_react-aria_listbox_dist-e2c395.858c12029b3cc8567164.js | 172.67.214.22 | 200 OK | 14 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_react-aria_gridlist_dist_import_mjs-node_modules_react-aria_listbox_dist-e2c395.858c12029b3cc8567164.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (40797) Hash343319aebc97b1f85c27aaf734f889b8 8af519032eee59905dee0c009bc3674959051015 19a4ede79560b3a95b8ef9a53bfc08065601a88139f89041fd774a87f9240303
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_react-aria_gridlist_dist_import_mjs-node_modules_react-aria_listbox_dist-e2c395.858c12029b3cc8567164.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sJ%2BW8LhIPppK8IdUjpN5iVHYWiOXLvm4g4uSFw0bO%2FbdoN2UQJ0TDuRRVhM%2BqZQV9eVtpksZYw8jtjyYdWH2yeLr4fRrD9XFFMeIOAj0aN7iZIqlFdOPlkQvlOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd39ed712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_compactSelect_list_tsx-app_components_compactSelect_listBox_index_tsx.45d97d728833c5bcdc5e.js | 172.67.214.22 | 200 OK | 13 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_compactSelect_list_tsx-app_components_compactSelect_listBox_index_tsx.45d97d728833c5bcdc5e.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (22262) Hashc1277222349e76f163f041ba55d77640 f8f6a264b8d728922b29ce05b255c1a5ad325369 eee0d151e9929c9e420bbe195a56d4f74c3de0c0f5dd1cab7b62a11a7ed23d46
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_compactSelect_list_tsx-app_components_compactSelect_listBox_index_tsx.45d97d728833c5bcdc5e.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YbV%2Bia6zhNDetH5c3kdbr%2BLTQBXGVqEkaCdVHJeeoI16WKPZwE49DVfkmg%2Fc38H31RknEPW6gi4WwSei8nixT8Lm%2Few1mshp1t9%2FZ558NnQBwebc8g9n0aoWzhs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd5a23712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_deprecatedAsyncComponent_tsx.5ae2eea408a92cfe4967.js | 172.67.214.22 | 200 OK | 12 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_deprecatedAsyncComponent_tsx.5ae2eea408a92cfe4967.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (7302) Hash2ef854e98a928cb51355e5c13418dd8a d6c1b48c43752bbc9e4ff558f98409df4e41745d 925402649e55eb419632061a31ec4d5f27e26ca8365dce5dd437e89475df79c1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_deprecatedAsyncComponent_tsx.5ae2eea408a92cfe4967.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CNWGmrKHAhkG1oc0ffOP%2Fg26XYc%2BEK7A5R%2BZybXVqgQkp4cqYKnEONbbAT%2BQhpSbXXPKFpSG1zOYJGFdyk61khz6mH0WrmG5kP6mz7FEqxeuV7WkbudXp1xv8IA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd6a34712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_emotion_styled_base_dist_emotion-styled-base_browser_esm_js-node_modules-24d3a3.b949135fa4d6afde54e4.js | 172.67.214.22 | 200 OK | 729 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_emotion_styled_base_dist_emotion-styled-base_browser_esm_js-node_modules-24d3a3.b949135fa4d6afde54e4.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (27311) Size729 kB (728614 bytes) Hash83e487236d9ecfcda0d968a990e04455 6bf398610c5070a9c6f4de36d4307f76da56b9b8 b90b6a372993c25a3e58a877dab57d70b85a016ec1a55f7f9f033c8dacb50c8d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_emotion_styled_base_dist_emotion-styled-base_browser_esm_js-node_modules-24d3a3.b949135fa4d6afde54e4.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVROAmdzWF8Gzb2QIo0Gok7ggti%2BPpC9MX%2FiC9DgfU2N9LVCmF5TnnUl9hGhzRn0g3c2TBHvQfbDxPIEkKJvDwQcqaLlPiBq0eyK7LVpBn3XrQw1a92en9gf0To%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd3a04712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_base64-arraybuffer_dist_base64-arraybuffer_es5_js-node_modules_echarts_l-48362c.c37cc3becd76f1187742.js | 172.67.214.22 | 200 OK | 62 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_base64-arraybuffer_dist_base64-arraybuffer_es5_js-node_modules_echarts_l-48362c.c37cc3becd76f1187742.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
Hashb9a6873ca2c1c64d5161445f0a937286 2c0938a62aed01c6fbbed1ae00fdfb15c69bebff ae146000384f9b24d7bce35d22f853d7d551616e221646003153caaa07a9abbb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_base64-arraybuffer_dist_base64-arraybuffer_es5_js-node_modules_echarts_l-48362c.c37cc3becd76f1187742.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B1uUx9ebaWha0cLvttpLxrvnBBSm6LuKmi4xIg389oF6TFgAiE1%2BFsjAKA1S6TCxIkDRNWPBZUcdTKpCsYIn%2BkxeI85%2BmYI5wpcmwoXp0wnKaEjofXMvHADqsto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd39fd712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_bootstrap_initializeMain_tsx.f88619f4cf19a6e72150.js | 172.67.214.22 | 200 OK | 297 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_bootstrap_initializeMain_tsx.f88619f4cf19a6e72150.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (15748) Size297 kB (297298 bytes) Hash886d4659835ebd78198490913588e795 4c885562da70af86517c8f421618d87230726e2c 62e4f442f71a3d1c856cb5dd8dbd16165c8775a3c007259707bf076a44aa614c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_bootstrap_initializeMain_tsx.f88619f4cf19a6e72150.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSNlDgENgJsSm90HtghF3RznF%2FUuQnssIxKzK69NwMm%2FYvtDf8azKsW5MEZkAA2rvhOJkvzQSylgHhSZubmzbW%2FcTuqKfJJeh2qpf6gPlnbxlZVgH6NpDPvLaN4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbb869712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_dropdownMenu_index_tsx.0f696a5427d6e2cbabb7.js | 172.67.214.22 | 200 OK | 11 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_dropdownMenu_index_tsx.0f696a5427d6e2cbabb7.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (10765) Hashe85c5a2e0bdd89fed575b369a7392cf4 9da7af544acf48e8369ca022f98a13d0a31b3693 e1691183bdbaf66578ad2ffe7cc3db7839c3e22a7a0d2ad1fd97229a67114610
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_dropdownMenu_index_tsx.0f696a5427d6e2cbabb7.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nG0ln4EuvVqYyEGgXCPzSnpxvp%2Feu12RUbegqRCl%2BvxS%2BvPyWpLUZJ10ec%2B5Im%2BwV4is36HRzqqM8urkqWVcc6PRlf4lw6%2FR9snkldZj5BwMbyZb9B2s%2BSFyA4U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd5a29712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 45.15.158.92:9000/_static/1715139656/sentry/images/logos/apple-touch-icon-152x152.png |  0.0.0.0 | | 0 B |
URL GET 45.15.158.92:9000/_static/1715139656/sentry/images/logos/apple-touch-icon-152x152.png IP0.0.0.0:0
Requested byhttps://2navi.com/auth/login/sentry/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/1715139656/sentry/images/logos/apple-touch-icon-152x152.png HTTP/1.1
Host: 45.15.158.92:9000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 2navi.com/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/ | 172.67.214.22 | 302 Found | 15 kB |
URL User Request GET HTTP/32navi.com/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/ IP172.67.214.22:443
CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/ HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 08 May 2024 12:54:50 GMT
content-type: text/html; charset=utf-8
location: /auth/login/
x-robots-tag: noindex, nofollow
vary: Accept-Language, Cookie
content-language: en
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
set-cookie: sentrysid=.eJyrVorPS60oUbJS0k8sLcnQz8lPz8xDZhan5pUUVeKQpJw5avyo8YPS-OHop1HjR40fQpaOGk8P45VqAcS7CyU:1s4gos:mDPy4cSU9FCq6sZJyjcuo3nnutFrYln7LxgjyIUfyXw; expires=Wed, 22 May 2024 12:54:50 GMT; HttpOnly; Max-Age=1209600; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PqvVBdzPziLyj%2Fan8aUmlZXeBnz%2FDnkdAIABvNFc4EqkQzMaCU3h2GhgG5wrHRU8fmGbm3WXnnYmAxVFGt4b6p4eWH%2F4vrS3XeqIJ9%2F37wwQqhEMVO9xIZYyEbo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999c66a8a712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 172.67.214.22 | 302 Found | 15 kB |
URL User Request GET HTTP/3IP172.67.214.22:443
CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /auth/login/ HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: sentrysid=.eJyrVorPS60oUbJS0k8sLcnQz8lPz8xDZhan5pUUVeKQpJw5avyo8YPS-OHop1HjR40fQpaOGk8P45VqAcS7CyU:1s4gos:mDPy4cSU9FCq6sZJyjcuo3nnutFrYln7LxgjyIUfyXw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 08 May 2024 12:54:50 GMT
content-type: text/html; charset=utf-8
location: /auth/login/sentry/
expires: Wed, 08 May 2024 12:54:50 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
vary: Accept-Language, Cookie
content-language: en
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
set-cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; expires=Wed, 22 May 2024 12:54:50 GMT; HttpOnly; Max-Age=1209600; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nFkmBmqkpa2APT1zDmSgajd2JBu%2Bxa%2FKMIeh3M7vMF7dt3lzBaFGCClQ8lAjQyEub4KE0kEbwmT4bzFRcwiMeG1iVkB12CqKiPx1lcIV1BL2xfxJjMambukFRaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999c70b6f712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_checkbox_tsx-app_components_emptyStateWarning_tsx-app_utils_useOverlay_tsx-app-1ce895.f3ad040f6b486b0b30b2.js | 172.67.214.22 | 200 OK | 8.2 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_checkbox_tsx-app_components_emptyStateWarning_tsx-app_utils_useOverlay_tsx-app-1ce895.f3ad040f6b486b0b30b2.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (8581), with no line terminators Hash8d22575dbbacf1974bdb74330e27cc91 73a2cac6ad2e50dc465dcd545ba3289c7c96ad35 5fd425eae9b91ce4d8de21812955dd5020b76009f520e6a31fc62179996c3ea1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_checkbox_tsx-app_components_emptyStateWarning_tsx-app_utils_useOverlay_tsx-app-1ce895.f3ad040f6b486b0b30b2.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TU6uqDMVC8D%2B1B8aageJgUZ3Oehuw8oxvMCoBET0hYUtgQF0U31HndnaNTzWdDwlM1Hp%2FNlRPpr594dWFmUMp4xMoc9wM%2B3BLh7EvZLpoVZADRztsprhWDxU1HM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd4a1e712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_bootstrap_index_tsx.190fe6d06fbf54cb175d.js | 172.67.214.22 | 200 OK | 2.3 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_bootstrap_index_tsx.190fe6d06fbf54cb175d.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (2305), with no line terminators Hashab7d66a9623884e708227935507706a8 e9167eac69b5279f19bed84dfd76cc296d9a5a37 8995c1680ed2675eefe1c9eb9f40f8463ce4e1ab686f030287b77a501c95376e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_bootstrap_index_tsx.190fe6d06fbf54cb175d.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=APY%2FT2wcrowFLjzUMk4YS6anLZGvWNWDLTnePFULzKMWpeokl2MeYq7cXU9W%2BnWflNLZ1PjBN7slFmuAbqz5fouRLtAJxsnquqf8djFX8S%2FyXmr8n5eQVu6MA0A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbc86f712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_lodash_partition_js-node_modules_lodash_sortBy_js-node_modules_react-ari-8ee41e.593a745ebf023a95846c.js | 172.67.214.22 | 200 OK | 14 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_lodash_partition_js-node_modules_lodash_sortBy_js-node_modules_react-ari-8ee41e.593a745ebf023a95846c.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (13616) Hash1410eb4030f1f8565c89fa6f224da38e 5c6da6a93615b23f99e4d4cfc3a7074c9ba5ca50 a2d5ab540184358bc97c60a7942dae70442e3013a2b3eaa9e1ca0f606130db32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_lodash_partition_js-node_modules_lodash_sortBy_js-node_modules_react-ari-8ee41e.593a745ebf023a95846c.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vgFjcZU13YxnDbiYAYzZ7%2BVefefk%2BGkWi1EZY4cPO8R2%2FjNtVPeyefByYZ8JefBnhZiIJBQECkNPwZ6iJqhcFS3O45wcUtRRjltR6GVjzFb35X57ANxL69S%2Fm%2BI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd29ea712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_acl_feature_tsx-app_components_acl_featureDisabled_tsx.fcc49746ea97440d98ad.js | 172.67.214.22 | 200 OK | 7.2 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_acl_feature_tsx-app_components_acl_featureDisabled_tsx.fcc49746ea97440d98ad.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (7449), with no line terminators Hash376e388b9915c7aed8ba322fd3b8353e 44356931332fe01c5061a41d136812b5b45d6486 54388305dc4c4331940e995ab29f53dd3c6bc10ae0d791d4ab28f4f3f570b2b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_acl_feature_tsx-app_components_acl_featureDisabled_tsx.fcc49746ea97440d98ad.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SL1V1uvG5sGtRy4cgVKyUkTXGew7rXMP%2Fd2nWXjXAu0Hg83sVfzanVobZvRSJR1Efb0z6yq6%2BYjhan1LNFZvMwWmqnVP%2BUt%2BoOi%2FBffYnY6qCVODfcpMbx%2B2AbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd5a2d712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_sentry_core_esm_exports_js-node_modules_sentry_utils_esm_tracing_js-node-1efc4a.1a2e028b7ed17e4e367e.js | 172.67.214.22 | 200 OK | 14 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_sentry_core_esm_exports_js-node_modules_sentry_utils_esm_tracing_js-node-1efc4a.1a2e028b7ed17e4e367e.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (6937) Hash8740aea8621763e279dd349f7fffcf91 424d804aebfbd2993d3de2aa066a9d114d7ed46b 2da631ee253328ec2d5d22466b2aff243b52f3ed2e9639c8440bf8881097a1cd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_sentry_core_esm_exports_js-node_modules_sentry_utils_esm_tracing_js-node-1efc4a.1a2e028b7ed17e4e367e.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gsNHV4%2BtJUmrA%2F4wv6DHCIS4fshWk1sGonO47aPIPoMQoLvtDraZF2cv2NpFzvSJaHIqArgx6DdAXLufCF8KudyrxpZWKADMWO6fQtefthxseczIBXc7RfjylMY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbb864712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_actionCreators_navigation_tsx.2553bfccfe2d787f5dc3.js | 172.67.214.22 | 200 OK | 10 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_actionCreators_navigation_tsx.2553bfccfe2d787f5dc3.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (10282) Hashf08bd6cba50a79ff331fe4bbbd7cf5d7 e0c7ab2de61c08858c8bae4d3868ad2133def774 5baf0422b6f7829670fd497d2404b491c0853bda45f7f9fa2f4305b90b1ae5de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_actionCreators_navigation_tsx.2553bfccfe2d787f5dc3.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LhqamW%2Blo4vU0qsvon%2BJY9%2BYjDOcrh%2FLChDRBMvj3XuVI0Fv3pJDET74eSrMdvuSETrxOOFT1NSL1LptvgxvX56sRCrGfo7LlFnuluCIGM7oKr23cUHe7Ax8x5s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd6a3e712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_bootstrap_initializeApp_tsx-app_components_emptyMessage_tsx-app_components_events_interfa-ed9fd1.d7d5161b172fe5dadcfe.js | 172.67.214.22 | 200 OK | 1.2 MB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_bootstrap_initializeApp_tsx-app_components_emptyMessage_tsx-app_components_events_interfa-ed9fd1.d7d5161b172fe5dadcfe.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
Size1.2 MB (1233760 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_bootstrap_initializeApp_tsx-app_components_emptyMessage_tsx-app_components_events_interfa-ed9fd1.d7d5161b172fe5dadcfe.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HA6RDDlzv8lrYtZ9SLYzmJMciQlyBk54VajdbLFD0wBxtHToX%2FDLhotbPc4rrryvWVCdaF5mcgKbyug12l5hoQrSGZ2VRX3nPr3VEuHMNx0wYLtq4Cs%2BEAf86fY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd6a44712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/entrypoints/sentry.css | 172.67.214.22 | 200 OK | 131 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/entrypoints/sentry.css IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
Size131 kB (130916 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/entrypoints/sentry.css HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: text/css
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2FbrFhScnqaN0uqPHhG4CJ08PNxIL6CR4HvZzb4sdeUDkJe3RWz4ttLiqGNzU%2BtEl3oP7uJX7gA8t7HVriUMrahxeLnO7kz%2FBoHf3x4vuBnG4O%2B3PSIlxRft7i4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999ca9f31712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/assets/sentry-avatar.4e3866d94215522d5507.png | 172.67.214.22 | 200 OK | 12 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/assets/sentry-avatar.4e3866d94215522d5507.png IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash56d2f1c02a8c965f1987f83ad696f604 1429782ba402e3a91c92a7a1ebf9cc016195d2b1 5db9088087feb376c9d7a8820055352ea2e49643aab1318a300fda2ca9cde476
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/assets/sentry-avatar.4e3866d94215522d5507.png HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/_static/dist/sentry/entrypoints/sentry.css
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: image/png
content-length: 12475
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ReDI5p5vIZ1AfFUB9Pt%2FYCz1js4L0a88mf%2B9zgT8f16IUiyZWlPTFHO5KZeyAsvlRL3PPRkr2v%2FORdluzsHaBA%2FW%2F58TLZ9LcH4tOIEKPaWzPoFBNq9md%2FbzKYQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbe88d712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_actionCreators_redirectToProject_tsx-app_actionCreators_sudoModal_tsx-app_bootstrap_commo-cf8dfb.d5b3290fe6460613d1b8.js | 172.67.214.22 | 200 OK | 431 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_actionCreators_redirectToProject_tsx-app_actionCreators_sudoModal_tsx-app_bootstrap_commo-cf8dfb.d5b3290fe6460613d1b8.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (34020) Size431 kB (430758 bytes) Hashbd9646d269870dd69e346f780db7223a b17c0a229312cf75ce15ba9a05094733a9859581 106c7a04c6907f4b5f63a278948c9ed4ca348d81a6914dc7b920c4c50c02ec18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_actionCreators_redirectToProject_tsx-app_actionCreators_sudoModal_tsx-app_bootstrap_commo-cf8dfb.d5b3290fe6460613d1b8.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bDdP4TejBsPFGzGiQ1pWfAmjSbTc0ouI3ZjkcFA%2FvU%2FQ24D9wmslXhlSr3tVuA4JAynsxVllA%2FJ9lEfaAhGJ2hYyMWAaiEz7BqpQsVyUrzDW87KL%2FVT3DTjbojI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd6a42712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_lodash_throttle_js-node_modules_zxcvbn_lib_main_js.aab47a88db7d3d567bcd.js | 172.67.214.22 | 200 OK | 820 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_lodash_throttle_js-node_modules_zxcvbn_lib_main_js.aab47a88db7d3d567bcd.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size820 kB (820114 bytes) Hashbf898b5dd47359bd3ab6a8823cdf335e 2ed736d1810f7b8aa4b4ef61b913db8abecf2e68 4db19ab63491e3c90189e25bf3e890a452da9419bb1dacd440a6494ab900fd84
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_lodash_throttle_js-node_modules_zxcvbn_lib_main_js.aab47a88db7d3d567bcd.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:52 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vaKd3b7K%2Flje1jE8MozDFYD10g6g5xJQrNZf2x2NiSwdERiz76VJ0x8kheaJd0q%2F5fm0ugA8GKKm9BCr7SKK3%2ByC9MrDLXezbVJKr6iuBPqCzprXxKCB8AnUU8M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999d368f6712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/auth/login/sentry/ | 172.67.214.22 | 200 OK | 15 kB |
URL User Request GET HTTP/32navi.com/auth/login/sentry/ IP172.67.214.22:443
CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (1741) Hash979c2d7ef38b149e6f56d1bb6c9a7f3c 7552d113f95c44a841c4d7e277db60bf8a06847d a1bd0b75e595f34d4a030b9704a3998ec9ac44dd53e34d54ad7455016b3331e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /auth/login/sentry/ HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:50 GMT
content-type: text/html
expires: Wed, 08 May 2024 12:54:50 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
vary: Accept-Language, Cookie
content-language: en
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-qq4tr32ZK8vprh4kkD10Zg=='; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
set-cookie: sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE; expires=Wed, 07 May 2025 12:54:50 GMT; Max-Age=31449600; Path=/; SameSite=Lax
sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; expires=Wed, 22 May 2024 12:54:50 GMT; HttpOnly; Max-Age=1209600; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dW%2BnTdz7%2FSlcp6xRiqvkDWOgVu0hYQWJXU%2Fqnx4QE7SElG9gn9BQ2DyD9UNhXR%2FfrAFXMXp3NN%2FBWOZxrPR4iiw2JbDb%2FTtKsURPD7%2FCMxD%2BnjNdMn3QDIgQbHo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999c7bc2a712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_emotion_react_jsx-runtime_dist_emotion-react-jsx-runtime_browser_esm_js--04f6a0.5d2ad2c276d7024bc087.js | 172.67.214.22 | 200 OK | 177 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_emotion_react_jsx-runtime_dist_emotion-react-jsx-runtime_browser_esm_js--04f6a0.5d2ad2c276d7024bc087.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (32793) Size177 kB (177196 bytes) Hashaa106ffd22e3aee035bdc0a7f5bbbdc8 9982b0df73b0b42bc9e12f7f18ade935b1deafcf a21c34f21d31e832a1362881aab1f4c4a1e3a8aa3d828d7f55c212af8a4e848d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_emotion_react_jsx-runtime_dist_emotion-react-jsx-runtime_browser_esm_js--04f6a0.5d2ad2c276d7024bc087.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UczYAZDOYg5JrggLYab6MrsSrGHTUKR9JRjHdom%2BGzWS0Yj3NJZC%2FMgrdBngY49OZtexv0l11C5YuNxCuaAlG3H7V7vaBz5mRJ3FTkG7VGn68iuax9rXeUCZx1Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cbb85c712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 45.15.158.92:9000/_static/1715139656/sentry/images/favicon.png | 0.0.0.0 | | 0 B |
URL GET 45.15.158.92:9000/_static/1715139656/sentry/images/favicon.png IP0.0.0.0:0
Requested byhttps://2navi.com/auth/login/sentry/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/1715139656/sentry/images/favicon.png HTTP/1.1
Host: 45.15.158.92:9000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_react-stately_selection_dist_import_mjs.3c520a66481c2e80a37b.js | 172.67.214.22 | 200 OK | 12 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_react-stately_selection_dist_import_mjs.3c520a66481c2e80a37b.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (11851) Hash882c09540b321c02da26aa1216743910 922eac4fcf222395f32d206777cc97569c799fe6 f8509f9b766943f16ce324e74c079c5c0ebde25f945452e5a4a7f3a641f34333
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_react-stately_selection_dist_import_mjs.3c520a66481c2e80a37b.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ehMEJLnPOrX2Jwssi5D%2BQPbk6bzn2vqd5i57NusBxIo3%2FRsbZZ5y29I0V%2F3rezMkwIwArJ6EnYYMmVpr7C6mb%2F1uv2g24lAcEcZtC58RGBz3HO46TdWJsnBw6uA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd29d7712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/vendors-node_modules_react-aria_button_dist_import_mjs-node_modules_react-aria_overlays_dist_-b6cd09.e95ec61376ef5c3c8818.js | 172.67.214.22 | 200 OK | 34 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/vendors-node_modules_react-aria_button_dist_import_mjs-node_modules_react-aria_overlays_dist_-b6cd09.e95ec61376ef5c3c8818.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (34110) Hash0538f0c35a4d98a78d529ce705088dfe 5c78f1a89b58e43be2f7370c7cf249bd857c88b1 56b48bc618085a926b92e68b986e5d0c03aa8dfce7458c316160d18d09f5566c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/vendors-node_modules_react-aria_button_dist_import_mjs-node_modules_react-aria_overlays_dist_-b6cd09.e95ec61376ef5c3c8818.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:58 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNLKswbXPhELNbmL%2F7D4t4QTQeuw5cNE5GkYS8s0%2B2aGv7cbnsFxFKLvQUIMsnxlb6R9gHuXG82oXWAU7dVPXsDiZObXvm%2BXW%2F6bbC3%2BpNV%2FF59ueNQWGiT5x5g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd29e2712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/_static/dist/sentry/chunks/app_components_gridEditable_styles_tsx-app_components_searchSyntax_utils_tsx-app_utils_discov-7ab1f0.530915fa4e696602f7f3.js | 172.67.214.22 | 200 OK | 549 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/app_components_gridEditable_styles_tsx-app_components_searchSyntax_utils_tsx-app_utils_discov-7ab1f0.530915fa4e696602f7f3.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typeJavaScript source, ASCII text, with very long lines (39218) Size549 kB (548845 bytes) Hash004d28affd64fcaae2c6028736e434df b0dafa734912debfc0ba75caad50a5364c87574f b3b34da3e1536e057b3b03a7bd140a7abcc90ff6259ad584c54c9468d3a30226
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/app_components_gridEditable_styles_tsx-app_components_searchSyntax_utils_tsx-app_utils_discov-7ab1f0.530915fa4e696602f7f3.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:51 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y0LVOnhSk9tWqyvEY3RDmzk85erHW0X%2FqOLoSG%2Fa1EWCd0euZcQ%2Fp9%2FQHXyopAm%2FjabE6aFvYtd%2F0sXiYIl9mdoOBzTxxioeYPB9vsaTKKfTmdU4tMNpp%2B7j64A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999cd5a2e712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 2navi.com/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login | 172.67.214.22 | 301 Moved Permanently | 15 kB |
URL User Request GET HTTP/22navi.com/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login IP172.67.214.22:443
CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 08 May 2024 12:54:50 GMT
content-type: text/html; charset=utf-8
location: /auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/sentry/auth/login/auth/login/auth/login/auth/login/auth/login/auth/login/
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-XXikdDPx/WIF56Au69liLg=='; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wap48mUlnQYEyIQI7DJuWComNAW9PabRl%2FW5%2FhKgNtZ644PX5Ojp%2FMhJG%2B2isOgVWcREZLIlmxwidT8DbQwDGWz64ruWYPdPdxIaS%2BurejwMgdHASyNHMViRots%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999c53e290b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 2navi.com/_static/dist/sentry/chunks/PasswordStrength.f4a5ba0ffb32a3a20ac7.js | 172.67.214.22 | 200 OK | 2.5 kB |
URL GET HTTP/32navi.com/_static/dist/sentry/chunks/PasswordStrength.f4a5ba0ffb32a3a20ac7.js IP172.67.214.22:443
Requested byhttps://2navi.com/auth/login/sentry/ CertificateIssuerGoogle Trust Services LLC Subject2navi.com Fingerprint6A:A0:D9:1C:D8:C9:5A:C1:EF:2A:59:EE:DC:01:DD:6A:74:CB:58:1D ValidityFri, 15 Mar 2024 02:13:58 GMT - Thu, 13 Jun 2024 02:13:57 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2575), with no line terminators Hashf13888664f9c618d4d0b960f9e81b9e5 25de792135dc7d8824defcba31ea39d2865f7e33 bb406f289550f60e811ff0033dfaa686929c86ecf78d19fb269caf6663ccb86d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_static/dist/sentry/chunks/PasswordStrength.f4a5ba0ffb32a3a20ac7.js HTTP/1.1
Host: 2navi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2navi.com/auth/login/sentry/
Cookie: sentrysid=.eJyrVipJLS5Jzs_PzkxVslIqzy_KTk1R0lGKz0utKAEK6CeWlmTo5-SnZ-YhM4tT80qKKnFIUs4cNX7U-EFp_HD006jxo8YPIUtHjaeH8Uq1AOa1Etk:1s4gos:vGaxgBZpMIaWz_uu3Z_Pjt3eRP8zE25SNVYJDnvCP10; sc=EfrQb6k2ju00lbNd94ChnP8TaKHWWSnE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 12:54:52 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 23:25:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400, must-revalidate
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy-report-only: img-src blob: data: *; font-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample'; media-src *; base-uri 'none'; style-src 'unsafe-inline' *; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fum4WhCHUxU6ZT6Sg0les%2BoxIV1p%2Ft9s%2FtokZS%2FZzcTamHR5B94w4XtecaXO68gIpKMdc4Kxo8oSLmkOqUSpUT4Ii60hVJwLHZq8CoauhEH0MU%2FKBSLTppZcjbY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880999d368f9712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|