| |  83.202.25.242 | 200 OK | 2.9 kB |
URL User Request GET HTTP/1.1IP83.202.25.242:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (522) Hash102c4156fc60ca8a7a226da06b679bcb 51301fcf7b53c3a312ec5dcb2dde5e1dbd7f6104 eaf0168a07e6f6ac90d12b5ec3d5eaf724a1651c5d99de9d428ed8d220c53d98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:19 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:08 GMT
Etag: "1535021228:b3d"
CONTENT-LENGTH: 2877
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/html
|
|
| 83.202.25.242/projectPath.js | 83.202.25.242 | 200 OK | 55 B |
URL GET HTTP/1.183.202.25.242/projectPath.js IP83.202.25.242:80
File typeASCII text, with no line terminators Hash71397840d9e17c98a0997b67e0f1c0b9 28a110eb13c293254e1640f2194ccea8af59bc50 b5d1d89fbbaab2e2e2d82f2fdd91a1b5972bb61ed35191a056c7eba29d687790
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /projectPath.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:19 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:37"
CONTENT-LENGTH: 55
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/jsCore/require-config.js | 83.202.25.242 | 200 OK | 1.0 kB |
URL GET HTTP/1.183.202.25.242/app/jsCore/require-config.js IP83.202.25.242:80
File typeASCII text, with very long lines (1049), with no line terminators Hash78ced353de87a381e8752a7acb98bb56 b9ba0f586767665ddb114d7b770597e9bf21a5c4 f353234ea6407442ffc34e4c59f553582edf2f0dd032c9a505e87e813b2d7db5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/jsCore/require-config.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:19 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:419"
CONTENT-LENGTH: 1049
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/pluginVersion.js | 83.202.25.242 | 200 OK | 332 B |
URL GET HTTP/1.183.202.25.242/pluginVersion.js IP83.202.25.242:80
File typeASCII text, with CRLF line terminators Hash740f047e070c28e34f6fc739ab5fd1c5 5a8eca185e249ffeaf2df4181bb37b9c573bb699 186132b25b933409fe8406ae0358560f742023b3a33ad8068670da8d75efa9b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pluginVersion.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:19 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:14c"
CONTENT-LENGTH: 332
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/webVersion.js | 83.202.25.242 | 200 OK | 39 B |
URL GET HTTP/1.183.202.25.242/webVersion.js IP83.202.25.242:80
File typeASCII text, with no line terminators Hash803bb297f3d393a57a9062535b7afb30 6e7771c472278130bb2903cd94859c3b5e0c46b3 f5e479ecfd71ca525cd26afe9974bb53be16618389c1a52eff45d1ece889f164
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /webVersion.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:19 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:27"
CONTENT-LENGTH: 39
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/require.js | 83.202.25.242 | 200 OK | 18 kB |
URL GET HTTP/1.183.202.25.242/app/libs/require.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (17565), with no line terminators Hash1f57901f2b583f9e73ca4889563c8c63 7100752ecadeea47c28b8dc0904326e55b45ea8b 3a6bc24af5efcbc41dd27c5ca7b0bec34ac8a4fd078ac0ca0ba1668c56fb8343
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/require.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:19 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:449d"
CONTENT-LENGTH: 17565
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/cap.js | 83.202.25.242 | 200 OK | 210 B |
IP83.202.25.242:80
Hash25970060dfc53e5227bb5b352413e8e2 613c7e74c37f6ef5e59dbfc4761354d0ae494e10 a2e189f48bd9cb170c8c938c88ed91a9c221e14b082c482e55d812568009136f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cap.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONTENT-LENGTH: 210
CONNECTION: keep-alive
Content-type: application/x-javascript;charset=utf-8
|
|
| 83.202.25.242/ext/ext-all.js | 83.202.25.242 | 200 OK | 1.5 MB |
URL GET HTTP/1.183.202.25.242/ext/ext-all.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (64818) Size1.5 MB (1497654 bytes) Hash33c8a2191d27ee2812d9e5469f094556 7655fa8f1e248587943ea14c9c8739e5dd0b3e05 affefe36854341fcff50a56695f122ff2eec7e893891aa17ba4f0f98888f6f38
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ext/ext-all.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:19 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:16da36"
CONTENT-LENGTH: 1497654
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/images/favicon.ico | 83.202.25.242 | 200 OK | 1.2 kB |
URL GET HTTP/1.183.202.25.242/baseProj/images/favicon.ico IP83.202.25.242:80
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hasha437e84d20c9cf7442fffab49e0f07e7 a9b858bd48976f8c2f2ab471a0d7843bfde58c7b 6fe49ae6a389a8cc3ef2866682443909dbb6987ca1918392b6e5d6473cbdd969
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/images/favicon.ico HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:47e"
CONTENT-LENGTH: 1150
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/x-icon
|
|
| 83.202.25.242/app/libs/jsonpath.js | 83.202.25.242 | 200 OK | 12 kB |
URL GET HTTP/1.183.202.25.242/app/libs/jsonpath.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (11775), with no line terminators Hash0c2131a1d823906bd625d8fecd324fe8 c8c96935d117db1206539c4917e8aacd2a5dddd2 b4a0f6a3d27f3a57d1881fc1ea4e6bcf526098fe6e31559afdc10a695ac2c0c4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/jsonpath.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2dff"
CONTENT-LENGTH: 11775
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/base64.js | 83.202.25.242 | 200 OK | 1.5 kB |
URL GET HTTP/1.183.202.25.242/app/libs/base64.js IP83.202.25.242:80
File typeASCII text, with very long lines (1466), with no line terminators Hash512bb7f354e5bd222c2ffbc3f9d601b9 c386932682ec7abc2726fed93bd72b552c6c4a2f 3b3cf5585ebda2f6e7e6bd9ace18ca949f5d9320175dca73c46834c91f6d56d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/base64.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5ba"
CONTENT-LENGTH: 1466
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/json2.js | 83.202.25.242 | 200 OK | 3.0 kB |
URL GET HTTP/1.183.202.25.242/app/libs/json2.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (2964), with no line terminators Hashfbc338d3e23ad41974333c762ec15d9a 76c9c988b04ba6fc08d4091c0da4ba97cc2fb024 d9b708897b69993198e81809ab25a960118a6712b8236f1fb02b2a08adc48a44
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/json2.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:b94"
CONTENT-LENGTH: 2964
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/md5.js | 83.202.25.242 | 200 OK | 4.3 kB |
URL GET HTTP/1.183.202.25.242/app/libs/md5.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (4302), with no line terminators Hash60507d416334913c0aa439206a56b809 93d7d042fe9ce7e19c4f0e9bac5327d3ad82adce b2c98d52873337d8ec20f30582e1af4125fd612e396e6821d2dd3e848f48169d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/md5.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:10ce"
CONTENT-LENGTH: 4302
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/aes.js | 83.202.25.242 | 200 OK | 14 kB |
URL GET HTTP/1.183.202.25.242/app/libs/aes.js IP83.202.25.242:80
File typeASCII text, with very long lines (13633), with no line terminators Hash99e69df704e8b0718b8c6fc7fc60d6ba 62ab8b0d8243aec79a66062aea3d36f98e19cbaa 4558c48972521df0d7337323da7137d6b997e68037de93cdfbfd10f56422e8f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/aes.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3541"
CONTENT-LENGTH: 13633
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/qrcode.js | 83.202.25.242 | 200 OK | 17 kB |
URL GET HTTP/1.183.202.25.242/app/libs/qrcode.js IP83.202.25.242:80
File typeASCII text, with very long lines (16822), with no line terminators Hash0c0bf3d65c914a7d3032fa8df5cc0f6e a83ce2bf605052bfb87cb5a6ba842fb29bbbd609 098321cb38307503aff3735e37a77b8464b28329a0e2024b7f6a0c402bcb16d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/qrcode.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:41b6"
CONTENT-LENGTH: 16822
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/rsa.js | 83.202.25.242 | 200 OK | 12 kB |
URL GET HTTP/1.183.202.25.242/app/libs/rsa.js IP83.202.25.242:80
File typeASCII text, with very long lines (11740), with no line terminators Hasha227364ff603d1a6b6b1a969bb86d9f4 d5fe143af42b9f5b305513975bd696be84fb00db a7466ff04bff6f719423ff1e0ad7fbdc84205b5090a6b3087de33ce5771c66cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/rsa.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2ddc"
CONTENT-LENGTH: 11740
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/css.min.js | 83.202.25.242 | 200 OK | 1.4 kB |
URL GET HTTP/1.183.202.25.242/app/libs/css.min.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (1417), with no line terminators Hashd262841a0c904e72ca20f78f03258b81 516bcda3260f418c9ccd00cd2fb42950093572c4 5fe56d8b09444a439e57fdfc6792371cdfff1c7814e6e6415ac8d63305b92e2d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/css.min.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:589"
CONTENT-LENGTH: 1417
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/jquery.js | 83.202.25.242 | 200 OK | 96 kB |
URL GET HTTP/1.183.202.25.242/app/libs/jquery.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (32073) Hash4776dee8907881fcc27087852756abb8 8d1613ec8a13300b7d0d4ff1f6be17265b01f46d 3a44dbc1750aa9cc4a96e0bda84ae11e86f85f5ea52104dae8f94c70fe3c2fa5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/jquery.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:178cb"
CONTENT-LENGTH: 96459
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/css/main.css | 83.202.25.242 | 200 OK | 7.7 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/main.css IP83.202.25.242:80
File typeASCII text, with very long lines (7748), with no line terminators Hash0267dfde6446d06c3ccb64db56413fb8 aafbe497fc1875df59d64f38e782195d1a522871 6b7baeeb347739f01c8b74c4452296862461143651aaa8e28f00e7306c39d6a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/main.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1e44"
CONTENT-LENGTH: 7748
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/iconsui.css | 83.202.25.242 | 200 OK | 2.5 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/iconsui.css IP83.202.25.242:80
File typeASCII text, with very long lines (2532), with no line terminators Hash3c3dcec4bf71abf5c8c9f0a6aacb35fc 358c6395c89a7bda4faca5a3ab794558b28a3092 87de5c092c4593bf3789538bbee26026b2170217138322567306c0a80b3ca513
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/iconsui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:9e4"
CONTENT-LENGTH: 2532
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/desktopui.css | 83.202.25.242 | 200 OK | 21 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/desktopui.css IP83.202.25.242:80
File typeASCII text, with very long lines (20850), with no line terminators Hash7504dc79164e933d3b8e28a59b74084f 590f0baff3e761e95fb6c304cf27e6583073a973 e13df56e56c89cf714280f2e3384dbc6c8369932803483ed44561bf1933dcbfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/desktopui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5172"
CONTENT-LENGTH: 20850
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/widgetui.css | 83.202.25.242 | 200 OK | 31 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/widgetui.css IP83.202.25.242:80
File typeASCII text, with very long lines (30638), with no line terminators Hash0cec8af6aeacd4f90749bddf64b33fa6 45fb56b3bef5565a2ebdd9c095f3eafcc7edc4fc fcad16133441955f27a4c718d1908703c025fafca5022dde9a8d01a15d4da2a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/widgetui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:77ae"
CONTENT-LENGTH: 30638
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/loginui.css | 83.202.25.242 | 200 OK | 1.7 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/loginui.css IP83.202.25.242:80
File typeASCII text, with very long lines (1664), with no line terminators Hash0a3c082967dd91eb0b2fdc10729585ca 05ad3eaa2973076b0f266a634af9fd87092e6214 b26c5468d8b222a4482f8592843aae2d49c9663841d57105a049d0e04704d85d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/loginui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:680"
CONTENT-LENGTH: 1664
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/deviceInitui.css | 83.202.25.242 | 200 OK | 310 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/deviceInitui.css IP83.202.25.242:80
File typeASCII text, with very long lines (310), with no line terminators Hash7b3ed6060b4e43aa84a6ca2e94b5dd24 29815a426c4b2ae69a9b34d6f4a972b979fd0908 175681c824ec3787357999a81981406b6e91cbb2fb141b40c278f2c970f967b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/deviceInitui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:136"
CONTENT-LENGTH: 310
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/findPwdui.css | 83.202.25.242 | 200 OK | 235 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/findPwdui.css IP83.202.25.242:80
File typeASCII text, with no line terminators Hash5fbd5d1712e7d81176b63a7a927b49d9 cfe8d2925bfcc810a8fab9a257f0ffaaaaa9daa8 bed2b74440fa80bd72c206f32f642b15efdfcf1ab1d4aee2353459619366268f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/findPwdui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:eb"
CONTENT-LENGTH: 235
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/previewui.css | 83.202.25.242 | 200 OK | 16 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/previewui.css IP83.202.25.242:80
File typeASCII text, with very long lines (15619), with no line terminators Hash623816b32929e87a4ef8886af4b89ba1 e5aec9e697c4763f4e31780bb078857e4c172f2c 762b6e4ee8c7ffcd58744f81869ff64906d6312b738b35d0dddebad984b33810
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/previewui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3d03"
CONTENT-LENGTH: 15619
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/componentui.css | 83.202.25.242 | 200 OK | 25 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/componentui.css IP83.202.25.242:80
File typeASCII text, with very long lines (25387), with no line terminators Hasha10bc95b4358da5f39d73c5df1fdd40e 9fe20c985be66c9ff6eea526d670ef329d88b20d e68b2c34b738a470eed06e94aec5b3d0c71c2ba7166474371ae7ccce4b01fc27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/componentui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:632b"
CONTENT-LENGTH: 25387
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css | 83.202.25.242 | 200 OK | 319 kB |
URL GET HTTP/1.183.202.25.242/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css IP83.202.25.242:80
File typeASCII text, with very long lines (65536), with no line terminators Size319 kB (318915 bytes) Hash4192c2ac72ce736d0b52ee7380afdfdc 3fc3a5ee6534da4c2bddb9f313ebe8bf72d35e3b 98d87264c50a5f3c87f473d49c9303f33452ffa88a064eee4769a1f1aa13f1a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4ddc3"
CONTENT-LENGTH: 318915
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/playbackui.css | 83.202.25.242 | 200 OK | 10 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/playbackui.css IP83.202.25.242:80
File typeASCII text, with very long lines (10343), with no line terminators Hash7022f98b5682fc81d94c1b6bc87519fa 0347d10da62c30f71c4be471145278b0cecc0135 a4d942dd055547bbe21387d0fa91b37b385a04986ff682b86fd2a1e6b768d7ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/playbackui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2867"
CONTENT-LENGTH: 10343
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/alarmui.css | 83.202.25.242 | 200 OK | 51 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/alarmui.css IP83.202.25.242:80
File typeASCII text, with no line terminators Hashd336c6571483eb03ad7a9ee7cceb9cb1 fb3f2090cf3b6b8ecaee4acb17380a7c95ccff0f c5fe618e4098e4fe227d34b0c590091f90b15901e7698b0f8f3d419d21372de8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/alarmui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:33"
CONTENT-LENGTH: 51
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/iotui.css | 83.202.25.242 | 200 OK | 778 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/iotui.css IP83.202.25.242:80
File typeASCII text, with very long lines (778), with no line terminators Hash94681929136a2f122bd9ef25b9c2c2b8 a2575397e1fa218af13ba337508608bf0e389e1d ffb690b8635bace6f72f90f92be4c91c9d87661994603a7ea00ae18446a473e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/iotui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:30a"
CONTENT-LENGTH: 778
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/outmodeui.css | 83.202.25.242 | 200 OK | 135 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/outmodeui.css IP83.202.25.242:80
File typeASCII text, with no line terminators Hash948c1488ce19b119f25a9d8586d22fca 6e31213f80a6e9dce4277b2da66ae19b84939090 1a592b2d8f976dad4a4e28eec997c2e2a211ac0df24b38e97071776f519f9826
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/outmodeui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:87"
CONTENT-LENGTH: 135
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/backupui.css | 83.202.25.242 | 200 OK | 1.4 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/backupui.css IP83.202.25.242:80
File typeassembler source, ASCII text, with very long lines (1370), with no line terminators Hash88c9e38c6e0a0829ab6351a654844138 2ffe2c2b9b13a40d5c29d96c7f44e7d106cb7af7 c24766c86d072cee5f2e717189e3ab6a2e71c9079a8100abdaf531a986a01538
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/backupui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:55a"
CONTENT-LENGTH: 1370
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/intelui.css | 83.202.25.242 | 200 OK | 1.3 kB |
URL GET HTTP/1.183.202.25.242/baseProj/css/intelui.css IP83.202.25.242:80
File typeASCII text, with very long lines (1264), with no line terminators Hashf48ae8b8df8f6f73f2b1e2229bfea44e 645e9c9598d2115d5b93d43b85ee5360b8ed4296 7ab25e5ba4b59a1b858d0b4f99682ed6406fac4fb76fba4dbb8df5bb3f0cdf20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/intelui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4f0"
CONTENT-LENGTH: 1264
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/audioui.css | 83.202.25.242 | 200 OK | 973 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/audioui.css IP83.202.25.242:80
File typeASCII text, with very long lines (973), with no line terminators Hash3e21b9f5cd1ecbea42c27c539ed017b0 8e52caee688883fa1b1911380ebb548ddf4b4c7f 281b7e5981c4431951bd3537fcfe8986c2279f3a7f99647721fd101a9b64c05f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/audioui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3cd"
CONTENT-LENGTH: 973
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/accountManui.css | 83.202.25.242 | 200 OK | 948 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/accountManui.css IP83.202.25.242:80
File typeASCII text, with very long lines (948), with no line terminators Hash756725f1d49b297f47500da75c4c120a c486b1519f7b0680275befa9ebc095b5ae2c90f0 3fef70de5262f1cca4893368c3e8e0f616805ca1ca3342a92920eaa264e5994a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/accountManui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:20 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3b4"
CONTENT-LENGTH: 948
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/channelTypeui.css | 83.202.25.242 | 200 OK | 487 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/channelTypeui.css IP83.202.25.242:80
File typeASCII text, with very long lines (487), with no line terminators Hashc0de1fd5b85b93491da2268244317fcb 7c700f16e583c64f05bc200c320aaf3c3770335e 1433e96354377d367b05627bf6b9efc93408c7d44b48c46ee6a45bc908c4e9bc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/channelTypeui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1e7"
CONTENT-LENGTH: 487
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/baseProj/css/storageui.css | 83.202.25.242 | 200 OK | 30 B |
URL GET HTTP/1.183.202.25.242/baseProj/css/storageui.css IP83.202.25.242:80
File typeASCII text, with no line terminators Hashd4d56eb8c518030eedc673df85e21872 d353a1e22a3a402dcf3a5b0b4e09f52558fe5eb3 caefcf0c58bbb22b90edb1be0e736036ada3bee32906d202919c985afd47922f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/css/storageui.css HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1e"
CONTENT-LENGTH: 30
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
|
|
| 83.202.25.242/app/libs/jquery.ui.core.js | 83.202.25.242 | 200 OK | 16 kB |
URL GET HTTP/1.183.202.25.242/app/libs/jquery.ui.core.js IP83.202.25.242:80
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15856), with no line terminators Hashd16214611dfc9f2b1f0293d43383661b df865143f0f51d72546a025ccaa2b6d21c6060b1 d322635f8d81553035aaa5f750698281be1971cf6a4b7ae0e6b465449c424996
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/jquery.ui.core.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3e4d"
CONTENT-LENGTH: 15949
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/jsCore/extend.js | 83.202.25.242 | 200 OK | 24 kB |
URL GET HTTP/1.183.202.25.242/app/jsCore/extend.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (23622), with no line terminators Hashac8b52231eec7ddf7911a3197621c947 7dd3469ee276fb8b4a53401637ef13ad5593d724 e15595765bc99647db50276f6409dd8c36782c85b626742e0d72136096ca04b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/jsCore/extend.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5c46"
CONTENT-LENGTH: 23622
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/libs/jquery.pubsub.js | 83.202.25.242 | 200 OK | 908 B |
URL GET HTTP/1.183.202.25.242/app/libs/jquery.pubsub.js IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (908), with no line terminators Hashfb110f87d00598231a539918e2b5c5ca fc310b9cc162e338acb6e8bfd096197006b3a941 502a31b0c5cbd2927b1fe353d2569f7fbb0a2f23a3b428dc708a283de7cfac07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/libs/jquery.pubsub.js HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:38c"
CONTENT-LENGTH: 908
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/jsCore/Common.js?_dc=1713912790109 | 83.202.25.242 | 200 OK | 13 kB |
URL GET HTTP/1.183.202.25.242/app/jsCore/Common.js?_dc=1713912790109 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (13414), with no line terminators Hash88cd89c6f01756b8be206c66097b1c7e 5bbac9c5f775785058ec8b11c6eaeb888ffb9171 6e9a9bf4fcd698f59aac1c9ebc48e85dad01a0b9803dd8c69359a190381c4b13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/jsCore/Common.js?_dc=1713912790109 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3466"
CONTENT-LENGTH: 13414
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/current_config/preLanguage?1713912790195&_dc=1713912790195 | 83.202.25.242 | 200 OK | 25 B |
URL GET HTTP/1.183.202.25.242/current_config/preLanguage?1713912790195&_dc=1713912790195 IP83.202.25.242:80
Hashefa10b41a93ca0db5094a5e86d1b5b63 4f6c35410ee1f4115c69441e21a8d93f40ad3aa0 658b3792c816056d0806390529eaf6fb2f61ebc678c3cbe961bf778c2de8badf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /current_config/preLanguage?1713912790195&_dc=1713912790195 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Tue, 13 Feb 2024 14:59:36 GMT
Etag: "1707836376:19"
CONTENT-LENGTH: 25
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
|
|
| 83.202.25.242/custom_lang/French.txt?_dc=1713912790276 | 83.202.25.242 | 404 Not Found | 48 B |
URL GET HTTP/1.183.202.25.242/custom_lang/French.txt?_dc=1713912790276 IP83.202.25.242:80
File typeHTML document, ASCII text, with no line terminators Hashde47b8952cf60220f474d5004f9f04df d44daa88381eacd58e1186a9d7a36bdc5adae7d3 a5ab8a7699e699284cf698b35a5172defde53ab4db229b33d24307656cbed54b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /custom_lang/French.txt?_dc=1713912790276 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
CONNECTION: close
CONTENT-LENGTH: 48
CONTENT-TYPE: text/html
|
|
| 83.202.25.242/web_lang/English.txt?_dc=1713912790277 | 83.202.25.242 | 200 OK | 269 kB |
URL GET HTTP/1.183.202.25.242/web_lang/English.txt?_dc=1713912790277 IP83.202.25.242:80
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (364), with CRLF line terminators Size269 kB (268846 bytes) Hash61c8ac839894eb89126a0753d786cc08 366f5b5d0066406886091b897ffaf6318bc49f07 2f59bec1f7a88c976daa261066b0b18ebb42a7d7476a13d61df5435b14829419
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web_lang/English.txt?_dc=1713912790277 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:41a2e"
CONTENT-LENGTH: 268846
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
|
|
| 83.202.25.242/ext/locale/ext-lang-fr.js?_dc=1713912790576 | 83.202.25.242 | 200 OK | 12 kB |
URL GET HTTP/1.183.202.25.242/ext/locale/ext-lang-fr.js?_dc=1713912790576 IP83.202.25.242:80
File typeJavaScript source, Unicode text, UTF-8 text Hash307170ca19e3919a322a015ea7ba630a 71bdb089af0cb66a872451821abff3663a0e3d9d 0478e7716ee4878ddde10e3dd24428aa65f4e41e4ceb70ae63804e21d08683e7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ext/locale/ext-lang-fr.js?_dc=1713912790576 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2cca"
CONTENT-LENGTH: 11466
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/baseCls/App.js?_dc=1713912790578 | 83.202.25.242 | 200 OK | 4.6 kB |
URL GET HTTP/1.183.202.25.242/app/baseCls/App.js?_dc=1713912790578 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (4583), with no line terminators Hash03066e2e77ee5cdefd8af4c25f79514a 54a3154af7fc564205df1d1b2c370fd2204ef168 a9e8124b2a763431117982eb2e1acfeaeb292547f71cc0120620005d50d4560f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/baseCls/App.js?_dc=1713912790578 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:11e7"
CONTENT-LENGTH: 4583
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj//js/desktop/Wallpaper.js?_dc=1713912790660 | 83.202.25.242 | 200 OK | 939 B |
URL GET HTTP/1.183.202.25.242/baseProj//js/desktop/Wallpaper.js?_dc=1713912790660 IP83.202.25.242:80
File typeASCII text, with very long lines (939), with no line terminators Hash6a8ec113cd97c5f21f0f3d93e9830e04 efa1dea371edad5e4b4709662891c3a38c72ad73 cd8c21aaebd85bd8f2be1638735d8ea6af48c850fe1a2bb7075022bd208fdbed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//js/desktop/Wallpaper.js?_dc=1713912790660 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3ab"
CONTENT-LENGTH: 939
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/Login.js?_dc=1713912790661 | 83.202.25.242 | 200 OK | 4.9 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/Login.js?_dc=1713912790661 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (4871), with no line terminators Hasha60408d4d27d980b7851661818374e0b 249296ed8de2c8f2a0057dbb626e04080f4b5211 ed18635bcc7f62db9e28bb88399c7d9478bcf4856b6d4387c4bcee22a3d83265
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/Login.js?_dc=1713912790661 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1307"
CONTENT-LENGTH: 4871
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj//js/desktop/Desktop.js?_dc=1713912790660 | 83.202.25.242 | 200 OK | 5.1 kB |
URL GET HTTP/1.183.202.25.242/baseProj//js/desktop/Desktop.js?_dc=1713912790660 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (5075), with no line terminators Hasha16bab7582596f2058bc488aa06ab866 38d7ba71505c11d7eb0b16ac0ca62117e0dc4339 5948728e1157a5af0355b71ba2136a6e3cd8f7890b5e268dd734e23606a2f633
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//js/desktop/Desktop.js?_dc=1713912790660 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:13d3"
CONTENT-LENGTH: 5075
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/web_lang/French.txt?_dc=1713912790276 | 83.202.25.242 | 200 OK | 67 kB |
URL GET HTTP/1.183.202.25.242/web_lang/French.txt?_dc=1713912790276 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (32082) Hashfff14228b82c99f0e40f804eb71bd9a4 208eef3a57a3a7bcafa94d56cd1c947d543b87c1 26a024e57231802acf06c446095c2927ba050cfe112cd3cbf73da1897d9af08e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web_lang/French.txt?_dc=1713912790276 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:4d542"
CONTENT-LENGTH: 316738
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
|
|
| 83.202.25.242/baseProj//data/Constants.js?_dc=1713912790747 | 83.202.25.242 | 200 OK | 330 B |
URL GET HTTP/1.183.202.25.242/baseProj//data/Constants.js?_dc=1713912790747 IP83.202.25.242:80
File typeASCII text, with very long lines (330), with no line terminators Hash2bce71cd30368a209b59c0c246c76b6b ccc2efff38f115b2284b4e2edbef395c6b9d596e e7237b9f5fefae39e761e5ff58f362f1be2dbedacbaf26ebef5a9b0063371047
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//data/Constants.js?_dc=1713912790747 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:14a"
CONTENT-LENGTH: 330
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/jsCore/KeepAlive.js?_dc=1713912790749 | 83.202.25.242 | 200 OK | 1.2 kB |
URL GET HTTP/1.183.202.25.242/app/jsCore/KeepAlive.js?_dc=1713912790749 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (1186), with no line terminators Hashd168896c7907d4af4baa3d11d14e273c 29faba5246f13a99ffbdf5742f5ad231fcc8eba1 7da437d7273141c01edc8e086189793f438d57e2b5916cbd5df7ed115212ade6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/jsCore/KeepAlive.js?_dc=1713912790749 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4a2"
CONTENT-LENGTH: 1186
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/startingUp/StartingUp.js?_dc=1713912790748 | 83.202.25.242 | 200 OK | 1.9 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/startingUp/StartingUp.js?_dc=1713912790748 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (1873), with no line terminators Hashcd803ff4959d2f6cd34503926fe8f3d9 9dfdf6f54b483d066775ad2734c6887e4983e840 bcd4f784ef4f45f5e8106ecedf9f41bc9aefb9cdd466d0b58514de69b1c20835
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/startingUp/StartingUp.js?_dc=1713912790748 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:751"
CONTENT-LENGTH: 1873
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/jsCore/Ability.js?_dc=1713912790748 | 83.202.25.242 | 200 OK | 12 kB |
URL GET HTTP/1.183.202.25.242/app/jsCore/Ability.js?_dc=1713912790748 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (12032), with no line terminators Hash79c572b57c9315b54e92e387d45d8cb8 8787b0f105fe25159bc47872093cd8e3baa09f2b cc48f2037cbcf58d6b51cf95fc326f5ef81405941a3675214a9122e4c12d9ff4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/jsCore/Ability.js?_dc=1713912790748 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2f00"
CONTENT-LENGTH: 12032
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/Factory.js?_dc=1713912790747 | 83.202.25.242 | 200 OK | 22 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/Factory.js?_dc=1713912790747 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (21759), with no line terminators Hash17583d7e7b9cb8e51abac4a37a529f09 75783cc88361d86fb53259a46c5f06f11656ead0 f4da41dd24da5acd007b150a04427a61f1723d176b9cbf59f5d73eecc1a7704e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/Factory.js?_dc=1713912790747 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:54ff"
CONTENT-LENGTH: 21759
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj//js/desktop/TaskBar.js?_dc=1713912790752 | 83.202.25.242 | 200 OK | 4.0 kB |
URL GET HTTP/1.183.202.25.242/baseProj//js/desktop/TaskBar.js?_dc=1713912790752 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (4018), with no line terminators Hash416e6a6ca5800a537c06a574a059cfa2 98647123b45756fcb656e449fb7a11b965d3a2b1 0c3a3c65d3361467466d6f2579552d11d0178f9972d226e06c5401db3c911ac3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//js/desktop/TaskBar.js?_dc=1713912790752 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:fb2"
CONTENT-LENGTH: 4018
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj//js/desktop/Page.js?_dc=1713912790752 | 83.202.25.242 | 200 OK | 1.4 kB |
URL GET HTTP/1.183.202.25.242/baseProj//js/desktop/Page.js?_dc=1713912790752 IP83.202.25.242:80
File typeASCII text, with very long lines (1445), with no line terminators Hashcf4728150e7e05ea22fa7d9d23faedd8 428bf17972c06a5f9575f5f6bf841e9950540bc3 2d129372f538a20ada813e2fc68356fdf325760e58dfb404dfe4c8de47a6d6a5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//js/desktop/Page.js?_dc=1713912790752 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5a5"
CONTENT-LENGTH: 1445
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/plugin/Plugin.js?_dc=1713912790752 | 83.202.25.242 | 200 OK | 2.8 kB |
URL GET HTTP/1.183.202.25.242/app/plugin/Plugin.js?_dc=1713912790752 IP83.202.25.242:80
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2742), with no line terminators Hash8fe6e401c31f24e6e335a34e6cd5dc4f 027a720319346ec62e71c58fcb341db96c51cbcc d56a518dca8731995530af063b3aa124734fb94c962c89cf12ce08e02ec19e62
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/plugin/Plugin.js?_dc=1713912790752 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:ace"
CONTENT-LENGTH: 2766
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/OutsideCmd | 83.202.25.242 | 200 OK | 602 B |
IP83.202.25.242:80
Hashe698d2649645f177d4086c501223b7e3 bd498d6979cb4f37c787c06a334c61091ff7289f ccc1bbac1574f47e911501782b8c0b8bfba3678543326aec082a6fc9707d4c66
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /OutsideCmd HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 69
Origin: http://83.202.25.242
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: Keep-Alive
CONTENT-LENGTH: 602
|
|
| 83.202.25.242/baseProj/js/widget/Time.js?_dc=1713912790868 | 83.202.25.242 | 200 OK | 7.6 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/Time.js?_dc=1713912790868 IP83.202.25.242:80
File typeASCII text, with very long lines (7609), with no line terminators Hashcc3b8333488c1d09424a66afe847a77b 5e9edb50869540106b34a75c86ec03e9b7a6c4c6 53847a7e7ff8bb06afcb811117b228f27c74c1df6523a1655989068bd728886f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/Time.js?_dc=1713912790868 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1db9"
CONTENT-LENGTH: 7609
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/Date.js?_dc=1713912790868 | 83.202.25.242 | 200 OK | 1.6 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/Date.js?_dc=1713912790868 IP83.202.25.242:80
File typeASCII text, with very long lines (1595), with no line terminators Hash27476a2edce3863315dd82dff02598f1 bbc167ec0a6e652ac5780c966aeeedcdb77a33be f94eee621595993d7bbe8d7b9ad9eba6e4d066ea87d755f130c039a24acd6006
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/Date.js?_dc=1713912790868 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:63b"
CONTENT-LENGTH: 1595
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/DateTime.js?_dc=1713912790869 | 83.202.25.242 | 200 OK | 4.9 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/DateTime.js?_dc=1713912790869 IP83.202.25.242:80
File typeASCII text, with very long lines (4899), with no line terminators Hash09c02d88ec7a0e0b578d2e24b2c32c35 5cd7a237cad90f80f669fef75aa2c541ba9875ae b34191b25601169cfa1ed621490d43113551d98b9bd214f998acf3a94b3294b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/DateTime.js?_dc=1713912790869 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1323"
CONTENT-LENGTH: 4899
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/Numberfield.js?_dc=1713912790869 | 83.202.25.242 | 200 OK | 1.4 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/Numberfield.js?_dc=1713912790869 IP83.202.25.242:80
File typeASCII text, with very long lines (1421), with no line terminators Hash98236d8bb297ff7682e80072c8485d53 f41d803bf75fdf192e278ea9c821b802bbff4491 6975d3c1cb5df76a2667c292fd7d63473d8aface35d3001401529961ce4e4327
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/Numberfield.js?_dc=1713912790869 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:58d"
CONTENT-LENGTH: 1421
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/IconList.js?_dc=1713912790868 | 83.202.25.242 | 200 OK | 5.5 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/IconList.js?_dc=1713912790868 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (5475), with no line terminators Hash393c806b0d22aae17e42b2d3b991f384 91000a2c225966880c96bc0ea999b7d6dd1cb69b 0cf9c6681b9ee5ee7e98eb41a290795c49164f9387cf013fa9ccf55480f0149e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/IconList.js?_dc=1713912790868 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1563"
CONTENT-LENGTH: 5475
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/Zoombar.js?_dc=1713912790868 | 83.202.25.242 | 200 OK | 2.7 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/Zoombar.js?_dc=1713912790868 IP83.202.25.242:80
File typeASCII text, with very long lines (2746), with no line terminators Hash827a64dd226a1b70be807b07b88dbcf2 60c34673866177895f92549f25265c504cf31d4b ea4562b90b817f1a83993fde5a87d2e2ba8a9fca97b43e2680a41ef5b9a82fca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/Zoombar.js?_dc=1713912790868 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:aba"
CONTENT-LENGTH: 2746
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/macAdress.js?_dc=1713912790869 | 83.202.25.242 | 200 OK | 365 B |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/macAdress.js?_dc=1713912790869 IP83.202.25.242:80
File typeASCII text, with very long lines (365), with no line terminators Hash25c0123cffcc92a06c4c615fc749345d a4909e39d246e8329d9175ca0a1453da1fc6b18a 22a9c438f3b9dddd13348cdd261e5dffac3dc5aa7bd56dffa6333cc2e1f3983b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/macAdress.js?_dc=1713912790869 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:16d"
CONTENT-LENGTH: 365
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/ipv4Address.js?_dc=1713912790869 | 83.202.25.242 | 200 OK | 219 B |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/ipv4Address.js?_dc=1713912790869 IP83.202.25.242:80
File typeASCII text, with no line terminators Hash977ddd9ad9d679a00e42abad41fb0128 c7eda14f2ca1bd54f8305ac256036499034edf45 73133460324b4afe039d71c072e85ce20640de7e35328dfc92ae4ffe6ae06bb9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/ipv4Address.js?_dc=1713912790869 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:db"
CONTENT-LENGTH: 219
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/Switch.js?_dc=1713912790867 | 83.202.25.242 | 200 OK | 638 B |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/Switch.js?_dc=1713912790867 IP83.202.25.242:80
File typeASCII text, with very long lines (638), with no line terminators Hash6d396e81ada7d1776064e60946963435 6ad7ea3a282c6c9178f98408fd51319493cad3e7 72831a29f7d192b2a136caecfa40e03c81d64630d48a2d2319005523834caaba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/Switch.js?_dc=1713912790867 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:27e"
CONTENT-LENGTH: 638
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/Button.js?_dc=1713912790867 | 83.202.25.242 | 200 OK | 829 B |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/Button.js?_dc=1713912790867 IP83.202.25.242:80
File typeASCII text, with very long lines (829), with no line terminators Hash00e5d0cb76bb09303e9da87d7185f4ac 864d708ba2cdb17f24dd6b2a7c4852bf855434db a1630219c06a29977bbf18b9b8f7f6e8f1393bc783394acbb1160a4ec5ecaa5a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/Button.js?_dc=1713912790867 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:33d"
CONTENT-LENGTH: 829
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj//js/desktop/StartMenu.js?_dc=1713912790891 | 83.202.25.242 | 200 OK | 309 B |
URL GET HTTP/1.183.202.25.242/baseProj//js/desktop/StartMenu.js?_dc=1713912790891 IP83.202.25.242:80
File typeASCII text, with very long lines (309), with no line terminators Hash211780f7450e7bc9bbeac1304be76144 fee5b848c1de8e47bb1fa9e5181c5f9eb6285a98 7a8e1d689a8676c3c1840b59bf59b89c28d9fdc35d5b5642e073ce45100da42f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//js/desktop/StartMenu.js?_dc=1713912790891 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:135"
CONTENT-LENGTH: 309
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj//js/desktop/ShutdownMenu.js?_dc=1713912790892 | 83.202.25.242 | 200 OK | 3.0 kB |
URL GET HTTP/1.183.202.25.242/baseProj//js/desktop/ShutdownMenu.js?_dc=1713912790892 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (3029), with no line terminators Hashbcc109debca6453b259c81ee0c09fe08 21f7c0dc3db6560101ce37cdeb0a8309c2758196 319dadd8f9afb40f96e7755e1eee1d6dd69e6ffcff549bc607cb8063443ed12f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//js/desktop/ShutdownMenu.js?_dc=1713912790892 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:bd5"
CONTENT-LENGTH: 3029
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj//js/desktop/QrCodeWin.js?_dc=1713912790892 | 83.202.25.242 | 200 OK | 2.0 kB |
URL GET HTTP/1.183.202.25.242/baseProj//js/desktop/QrCodeWin.js?_dc=1713912790892 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (1977), with no line terminators Hash699ef27594fc7a62928710a9c8be89dc 72a0f6baf691719de1cd44d73266f91c9e9b9f6c e53c7bcd15c248bd6460dbc9597fb7d6a6478cf247f678b6c4e9332676323a07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj//js/desktop/QrCodeWin.js?_dc=1713912790892 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:7b9"
CONTENT-LENGTH: 1977
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/plugin/platForm/Ocx.js?_dc=1713912790906 | 83.202.25.242 | 200 OK | 1.5 kB |
URL GET HTTP/1.183.202.25.242/app/plugin/platForm/Ocx.js?_dc=1713912790906 IP83.202.25.242:80
File typeASCII text, with very long lines (1537), with no line terminators Hashb381753157a02f7d86e2775223846235 de33f19ed5c5c5fe1697ebd4f04faf409cfae85c 94649973b4aa2a7de970b953402feac7518ef2e22943d0c9cb28fc3c6d8b4904
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/plugin/platForm/Ocx.js?_dc=1713912790906 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:601"
CONTENT-LENGTH: 1537
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/component/Calendar.js?_dc=1713912790950 | 83.202.25.242 | 200 OK | 5.8 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/component/Calendar.js?_dc=1713912790950 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (5770), with no line terminators Hash609f798205cc6cee52d12c4c3781c37c e8ee659d396ceac93fc0c0fbbf45b39c98c161ec 37d29457769031d3eb4211d19cd0ccd3fabfea3dd5d0f40e454b8dec8a1cdba5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/component/Calendar.js?_dc=1713912790950 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:168a"
CONTENT-LENGTH: 5770
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/multipleInput.js?_dc=1713912791020 | 83.202.25.242 | 200 OK | 3.3 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/multipleInput.js?_dc=1713912791020 IP83.202.25.242:80
File typeASCII text, with very long lines (3343), with no line terminators Hashf4d4556a28afd59cc88e2e7563c8a1f5 d8a82716b648474d1afe9535a3e1ed55f114d7df b4bba8570c87b0ff742625c7c27193d2c81bc22cd1e4e056108a93e3cfe0e8a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/multipleInput.js?_dc=1713912791020 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:d0f"
CONTENT-LENGTH: 3343
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/baseProj/js/widget/SetupWinow.js?_dc=1713912791098 | 83.202.25.242 | 200 OK | 1.2 kB |
URL GET HTTP/1.183.202.25.242/baseProj/js/widget/SetupWinow.js?_dc=1713912791098 IP83.202.25.242:80
File typeASCII text, with very long lines (1170), with no line terminators Hashfda3064cce985566af376c60a8ec70f9 d4084840fd8aea1aff87c26745f2032ee7be43de fd4c9155a6a7b933eb74c811aa37097ab1805399631d3bbfbb59cb337a75d6d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/js/widget/SetupWinow.js?_dc=1713912791098 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:492"
CONTENT-LENGTH: 1170
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/app/plugin/platForm/Base.js?_dc=1713912791102 | 83.202.25.242 | 200 OK | 19 kB |
URL GET HTTP/1.183.202.25.242/app/plugin/platForm/Base.js?_dc=1713912791102 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (19331), with no line terminators Hashd5043697f1b1de7097a74427e87853fe f11115d30c00ec61a226d2d5bc3b9e8b0c36eb47 daff4e279415c30cc7d786f672ae8371bf6c1226c8db8acc16a6c327f43c2b32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/plugin/platForm/Base.js?_dc=1713912791102 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4b83"
CONTENT-LENGTH: 19331
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|
| 83.202.25.242/custom_logo/web_logo.png?v=1713912791236&_dc=1713912791236 | 83.202.25.242 | 200 OK | 4.9 kB |
URL GET HTTP/1.183.202.25.242/custom_logo/web_logo.png?v=1713912791236&_dc=1713912791236 IP83.202.25.242:80
File typePNG image data, 330 x 60, 8-bit/color RGBA, non-interlaced Hash77e117eb9b319906ab1bd1dcdba4b97e 59dc3ab2dbff9a974dc9c06aa3b4b7393f5faf49 5c5a60f07288ff8fa5d428f4f9593de60ea0b13a6912e6534b06e934891401b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /custom_logo/web_logo.png?v=1713912791236&_dc=1713912791236 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Etag: "0:1339"
CONTENT-LENGTH: 4921
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/ext/packages/ext-theme-neptune/build/resources/images/form/exclamation.png | 83.202.25.242 | 200 OK | 1.2 kB |
URL GET HTTP/1.183.202.25.242/ext/packages/ext-theme-neptune/build/resources/images/form/exclamation.png IP83.202.25.242:80
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hashbf74ccfa102bff05b125e6e22ca90270 e9b217f949c96f2f300919c71e34685b9662c53a 35b3fef1b7e3037df04c0d1c5b84a65559200d5897987b8e12330cb19d614af8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ext/packages/ext-theme-neptune/build/resources/images/form/exclamation.png HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4a6"
CONTENT-LENGTH: 1190
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/custom_logo/web_logo.png?v=1713912791317 | 83.202.25.242 | 200 OK | 4.9 kB |
URL GET HTTP/1.183.202.25.242/custom_logo/web_logo.png?v=1713912791317 IP83.202.25.242:80
File typePNG image data, 330 x 60, 8-bit/color RGBA, non-interlaced Hash77e117eb9b319906ab1bd1dcdba4b97e 59dc3ab2dbff9a974dc9c06aa3b4b7393f5faf49 5c5a60f07288ff8fa5d428f4f9593de60ea0b13a6912e6534b06e934891401b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /custom_logo/web_logo.png?v=1713912791317 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Etag: "0:1339"
CONTENT-LENGTH: 4921
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/ext/packages/ext-theme-neptune/build/resources/images/form/trigger.png | 83.202.25.242 | 200 OK | 1.1 kB |
URL GET HTTP/1.183.202.25.242/ext/packages/ext-theme-neptune/build/resources/images/form/trigger.png IP83.202.25.242:80
File typePNG image data, 110 x 22, 8-bit/color RGBA, non-interlaced Hashfca4af5e2452f40a414f56b9b2c2470e dfbf253048b082732ceea90ad04e9167ec819f79 11e57653c592be9601f0ce314967b2792dffb2fefc0ee34cb8a6f1de3a4c447c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ext/packages/ext-theme-neptune/build/resources/images/form/trigger.png HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:471"
CONTENT-LENGTH: 1137
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/baseProj/images/username2.png | 83.202.25.242 | 200 OK | 315 B |
URL GET HTTP/1.183.202.25.242/baseProj/images/username2.png IP83.202.25.242:80
File typePNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced Hash23ffabccd22d557dd6c3809abfca618f edb625a91db415d9d61591247a6220cf7a99c519 70216e48ed9cbec99dd5df2669f827c5407262aab1fd07d74ab56fbb4a9d9f1e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/images/username2.png HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/baseProj/css/loginui.css
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:13b"
CONTENT-LENGTH: 315
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/baseProj/images/password2.png | 83.202.25.242 | 200 OK | 289 B |
URL GET HTTP/1.183.202.25.242/baseProj/images/password2.png IP83.202.25.242:80
File typePNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced Hash09b1219364e683dee063e3e5314d43c8 2ddf9340b4f2e76b226589328fa5d9fb56930df4 75633bff12747df02c3d77710da58d80b16d96f2e3f0bdc3b56aa73265d01686
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/images/password2.png HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/baseProj/css/loginui.css
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:121"
CONTENT-LENGTH: 289
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/OutsideCmd | 83.202.25.242 | 200 OK | 80 B |
IP83.202.25.242:80
Hash96402f390abdff2d4343994bcfe61fe2 a4e9084473469394421bd46178e48abb6c0940f7 7cd809a9f4500d4e2b5ad6cf3acb646b8ddbf9adefc1fab49f64889b02a87f5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /OutsideCmd HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 63
Origin: http://83.202.25.242
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: Keep-Alive
CONTENT-LENGTH: 80
|
|
| 83.202.25.242/defaultCap.jsonp | 83.202.25.242 | 200 OK | 8.9 kB |
URL GET HTTP/1.183.202.25.242/defaultCap.jsonp IP83.202.25.242:80
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashbddce26dffe4faa9977bb4bd63453943 7c7b1db932a83f4d4f94383600b7453adbdc27d1 3db4f08bf960c42e546ac6dca5db2b58e5d9bb6778d87892a44a4f40dd383d76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /defaultCap.jsonp HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:22d3"
CONTENT-LENGTH: 8915
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
|
|
| 83.202.25.242/baseProj/images/bg.jpg | 83.202.25.242 | 200 OK | 91 kB |
URL GET HTTP/1.183.202.25.242/baseProj/images/bg.jpg IP83.202.25.242:80
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3 Hashd8f52a1713e4ec448e49c71acd7fc1b6 a14d5c78e165093418d71b5252888e478b7a18b5 1cf3ba63094d19fb1c4a6576d11d296787e847d74fd5c3998f7166ee5182ad2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/images/bg.jpg HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:16245"
CONTENT-LENGTH: 90693
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/jpeg
|
|
| 83.202.25.242/baseProj/images/login.png?20180815180247 | 83.202.25.242 | 200 OK | 677 B |
URL GET HTTP/1.183.202.25.242/baseProj/images/login.png?20180815180247 IP83.202.25.242:80
File typePNG image data, 62 x 30, 8-bit/color RGBA, non-interlaced Hash9c9415e6b38b3be6a4dc9826cff2cf99 46cc5106e4b531625c658dd6353c35e0287a4d88 2dae9046f1966d0479b61ac4cc79fb199f19620365c5dd061e33215e992067d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/images/login.png?20180815180247 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/baseProj/css/loginui.css
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2a5"
CONTENT-LENGTH: 677
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/current_config/WebCapConfig?v=1713912791496 | 83.202.25.242 | 200 OK | 1.3 kB |
URL GET HTTP/1.183.202.25.242/current_config/WebCapConfig?v=1713912791496 IP83.202.25.242:80
Hash241a82ff24ad1cb56c45b4de1c58298d 65b3c747aab4e07ef8ca3abf962b385ef05bb917 01b27bdef47370d5711c6371a08b17c52bbf442a02bbf34fe574900a980c62eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /current_config/WebCapConfig?v=1713912791496 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Tue, 13 Feb 2024 14:59:36 GMT
Etag: "1707836376:531"
CONTENT-LENGTH: 1329
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
|
|
| 83.202.25.242/baseProj/images/widget.png?20180815180249 | 83.202.25.242 | 200 OK | 25 kB |
URL GET HTTP/1.183.202.25.242/baseProj/images/widget.png?20180815180249 IP83.202.25.242:80
File typePNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced Hash0bd6380b07c1939d021152efcd914c18 2c660000b72f504a58d9cf3c2bb8a5b2c11bc108 443a3e1b5b79639e1e248da98d10b7821185dcd334cefd2d54aaabe29513dbfd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /baseProj/images/widget.png?20180815180249 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/baseProj/css/widgetui.css
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:22 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:609d"
CONTENT-LENGTH: 24733
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
|
|
| 83.202.25.242/cap.js?_=1713912789753 | 83.202.25.242 | 200 OK | 210 B |
URL GET HTTP/1.183.202.25.242/cap.js?_=1713912789753 IP83.202.25.242:80
Hash25970060dfc53e5227bb5b352413e8e2 613c7e74c37f6ef5e59dbfc4761354d0ae494e10 a2e189f48bd9cb170c8c938c88ed91a9c221e14b082c482e55d812568009136f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cap.js?_=1713912789753 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONTENT-LENGTH: 210
CONNECTION: keep-alive
Content-type: application/x-javascript;charset=utf-8
|
|
| 83.202.25.242/app/jsCore/RPC.js?_dc=1713912790661 | 83.202.25.242 | 200 OK | 67 kB |
URL GET HTTP/1.183.202.25.242/app/jsCore/RPC.js?_dc=1713912790661 IP83.202.25.242:80
File typeJavaScript source, ASCII text, with very long lines (32082) Hashfff14228b82c99f0e40f804eb71bd9a4 208eef3a57a3a7bcafa94d56cd1c947d543b87c1 26a024e57231802acf06c446095c2927ba050cfe112cd3cbf73da1897d9af08e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app/jsCore/RPC.js?_dc=1713912790661 HTTP/1.1
Host: 83.202.25.242
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.202.25.242/
Cookie: curLanguage=French
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
CONNECTION: close
Date: Tue, 23 Apr 2024 23:55:21 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:104e3"
CONTENT-LENGTH: 66787
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
|
|