| 3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M |  3.23.174.243 | | 37 kB |
URL User Request GET 3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M IP3.23.174.243:0
File typeHTML document, ASCII text, with very long lines (9462) Hashc089494b4abe08efc33429a32fd539d6 413a8676f724f15700b99137883740ecb3987bf7 4c6e4870fcee04d3e82dfb3aedb73fe6a80cb2fdeb5dc425a12f1503f637413d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /','8Xxa2XQLv9',true,false,'wX4SjGqpM-M HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 04 May 2024 20:45:52 GMT
Server: Apache
X-Powered-By: PHP/7.4.13
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://3.23.174.243/wp-json/>; rel="https://api.w.org/"
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap | 142.250.74.74 | 200 OK | 2.3 kB |
URL GET HTTP/1.1fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap IP142.250.74.74:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with very long lines (1572) Hash5c20908c3646258b47d562d252e1ad99 8dd32c7e4e713d946083efcc433d774687e1c747 865a5f3cd5a68d69bea0ce1f0f65411aad96e4dd38c151424ad8f402bd2f8958
GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 04 May 2024 20:45:53 GMT
Date: Sat, 04 May 2024 20:45:53 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
|
|
| 3.23.174.243/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 3.23.174.243 | 200 OK | 15 kB |
URL GET HTTP/1.13.23.174.243/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 14824
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 03 Apr 2024 03:15:33 GMT
ETag: "1bae5-61528a2c33b76-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 113381
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.23.174.243/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 3.23.174.243 | 200 OK | 4.9 kB |
URL GET HTTP/1.13.23.174.243/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 4869
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 09 Aug 2023 02:15:31 GMT
ETag: "3509-602740dd43c9f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 13577
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/et-cache/global/et-divi-customizer-global-17133256869213.min.css | 3.23.174.243 | 200 OK | 1.0 kB |
URL GET HTTP/1.13.23.174.243/wp-content/et-cache/global/et-divi-customizer-global-17133256869213.min.css IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with very long lines (4267), with no line terminators Hash8e5d70414c2a08cc7d50e6be056f4430 1dbc271d6f67ed666618ac272f027599436e0d7a 33f36d3bcc7f7d8704a090cd6b8ee5d0635430c4f5c0020973fde174ade748df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/et-cache/global/et-divi-customizer-global-17133256869213.min.css HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1020
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 17 Apr 2024 03:48:07 GMT
ETag: "10ab-61642b8f7d412-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 4267
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.23.174.243/wp-includes/css/dashicons.min.css?ver=6.5.2 | 3.23.174.243 | 200 OK | 36 kB |
URL GET HTTP/1.13.23.174.243/wp-includes/css/dashicons.min.css?ver=6.5.2 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with very long lines (58981) Hashd68d6bf519169d86e155bad0bed833f8 27ba9c67d0e775fc4e6dd62011daf4c3902698fc c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dashicons.min.css?ver=6.5.2 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 35684
X-Frame-Options: SAMEORIGIN
Last-Modified: Thu, 15 Apr 2021 19:24:24 GMT
ETag: "e688-5c007cfa3cca8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 59016
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.23.174.243/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 3.23.174.243 | 200 OK | 30 kB |
URL GET HTTP/1.13.23.174.243/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 30342
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 08 Nov 2023 05:24:34 GMT
ETag: "15601-6099d4d761a4e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 87553
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushAS3.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.3 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushAS3.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF, LF line terminators Hash40acb3622b561860abbe4b91a862de9f 548fb0924a13474ef1670150201ba3332c19571c 794ef8f25d053b1789063fff266b03fb293179039297c428c51b56f09f631c3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushAS3.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1316
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "b69-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2921
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shCore.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 11 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shCore.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeJavaScript source, ASCII text, with very long lines (18603), with CRLF, LF line terminators Hash88c9a0d2dba6b31130637548b59cbb61 250d44abc8d6519dfc46b9d459b7ccf0f2efe44c d5cb8414c848226121c50689b4a602c67ac48c65a87e952e9afe09420e510e9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shCore.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 10762
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:13 GMT
ETag: "4cdd-5b8a7a8b47e49-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 19677
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/themes/Divi/core/admin/fonts/modules.ttf | 3.23.174.243 | 200 OK | 92 kB |
URL GET HTTP/1.13.23.174.243/wp-content/themes/Divi/core/admin/fonts/modules.ttf IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules Hashde27b3e66b2f8017e000aa9d8d24d60e e6d716de8f35ba6daf55d57e7fe0ed8d8e50f1f7 d201a2c3118a00c82cc48e89815f5139f23956bbe248107dcf522acc77b97c09
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/Divi/core/admin/fonts/modules.ttf HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Sun, 03 Jan 2021 03:46:13 GMT
ETag: "168f0-5b7f6d09f91e3"
Accept-Ranges: bytes
Content-Length: 92400
Cache-Control: s-maxage=10
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/ttf
|
|
| 3.23.174.243/wp-content/themes/Divi/style.css?ver=4.7.7 | 3.23.174.243 | 200 OK | 81 kB |
URL GET HTTP/1.13.23.174.243/wp-content/themes/Divi/style.css?ver=4.7.7 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with very long lines (64513) Hash4c8dd51c4a2753b61893c0e94c0fe24d 3ca12fa9866c7ded4ea0f6d74d86f2103e2202d7 7670b72adc45f883c8a50156462719d577055efde1861d50749e4d1d5f1c35e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/Divi/style.css?ver=4.7.7 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 81006
X-Frame-Options: SAMEORIGIN
Last-Modified: Sun, 03 Jan 2021 03:46:13 GMT
ETag: "c7ad1-5b7f6d09fa183-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 817873
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushBash.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.6 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushBash.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash75a008836df6202da68465bece81b6ec 2986b5452c36922d4ee12e27a2d073cd5c7172f6 dbfc7a9be7e746622e688ceffb845846e6c029d493c11e07d2d2722b10b07b5a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushBash.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1645
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:13 GMT
ETag: "d9a-5b8a7a8b47e49-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 3482
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushColdFusion.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 3.5 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushColdFusion.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF, LF line terminators Hash92a16519c82b3a2c50f72ba7ed416d01 69d8aec878f3660dfecc93850feaba7670dfe19e d98c843adccc49f72b637948541436c9e6d256317d5bb0009cdf6ca85d247ebb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushColdFusion.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 3512
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "2235-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 8757
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushClojure.js?ver=20090602 | 3.23.174.243 | 200 OK | 709 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushClojure.js?ver=20090602 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hasha981572e8249105651305bf3d82e4d51 efc574dd1ac508438046c8737dc84fd3a9df80d3 a0228fc0725900aa681941f94d46aa46152cad79d41f16a6fbcba2a94698dbf9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushClojure.js?ver=20090602 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 709
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "5d2-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 1490
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushDelphi.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.4 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushDelphi.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hashe6e3095599206a5cdd6a919ee876fd5c c1797cb2652ef5da8e83658d4b849d764ef4297a b19af85cbad58828ec1ecd3879792a873ac97bf0d2e210e512b5f3d0530345ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushDelphi.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1353
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "b5b-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2907
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCpp.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 2.5 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCpp.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hashb2042554ed69ad234c57910e46e15284 085b1dd7eba188e7396a7e914b1a1f246aed69fa 8741ce670610809cc459b578de5a3ef33128797536eb40e0c923cab127f4651a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCpp.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 2541
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "16ae-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 5806
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCSharp.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.4 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCSharp.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash0414fd39941c2ae8da1a3f940c5fcbe0 c163a107b036b5d9ccdde24e00d688be8792f286 cf72928e0a8a6ac8417235708e460836655619f9e59b74e6da6718e393fb7f29
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCSharp.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1389
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:13 GMT
ETag: "bf1-5b8a7a8b47e49-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 3057
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCss.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 2.7 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCss.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hashaba9c9560ffbce23e3aaebaf5adefeb6 412823b3c0911cab5e2375b08ec53eeac7ef7f10 1bb748451178337ef0683859aebf591050f5391adb9bc9fca6f826c432a5941a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushCss.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 2658
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "184a-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 6218
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3.23.174.243
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 02 May 2024 02:15:12 GMT
Expires: Fri, 02 May 2025 02:15:12 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Dec 2023 02:08:40 GMT
Content-Type: font/woff2
Age: 239441
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3.23.174.243
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 02 May 2024 02:15:12 GMT
Expires: Fri, 02 May 2025 02:15:12 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Dec 2023 02:08:40 GMT
Content-Type: font/woff2
Age: 239441
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushDiff.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 759 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushDiff.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash455703d86fb1eabc6e37d6de8e5c190c 880b4d7be7d7ab75a23dbdaff7d847c662d1ff34 b1aad7755d90a9c913acca2309e85e6713a87dcd17a8e1eac02085b057a3cab4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushDiff.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 759
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "62a-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 1578
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3.23.174.243
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 02 May 2024 02:15:12 GMT
Expires: Fri, 02 May 2025 02:15:12 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Dec 2023 02:08:40 GMT
Content-Type: font/woff2
Age: 239441
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3.23.174.243
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 02 May 2024 02:15:12 GMT
Expires: Fri, 02 May 2025 02:15:12 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Dec 2023 02:08:40 GMT
Content-Type: font/woff2
Age: 239441
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushArduino.js?ver=2.1.364 | 3.23.174.243 | 404 Not Found | 37 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushArduino.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeHTML document, ASCII text, with very long lines (9462) Hash22f0ad04d48d7155731ca6ef8a5ac87f 3ab31bac2daa6ea28541ca39737bcdee25d94c54 b8942ea806a5af055407fba398b7469d94fd64068994f93d4cb88d921278cd9c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushArduino.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
X-Powered-By: PHP/7.4.13
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://3.23.174.243/wp-json/>; rel="https://api.w.org/"
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushErlang.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.0 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushErlang.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF, LF line terminators Hash2009efe6c602a99b76f9c725f9b2df17 ff037bb80d89c66ca8002e30c4fc0f367718bb79 cf718f6223153cb61122b8b9ecbaabd8c806c1ad58bd41e97487b800f7e83338
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushErlang.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1047
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "8a5-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2213
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushFSharp.js?ver=20091003 | 3.23.174.243 | 200 OK | 999 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushFSharp.js?ver=20091003 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hasha1120ac1e8bc6416f10a0cd3b9c75141 d59d6698c82376d9c785b3ce946a66fd06f5723a a92be5bb10b3644e4771261912da368e2dcddebffdb66c064b8aef0b9145ca78
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushFSharp.js?ver=20091003 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 999
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "842-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2114
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushGroovy.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.5 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushGroovy.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF, LF line terminators Hash00e4cbd52c50ad610175bbf267de60d4 3f53b0a68b3d0d5df0161afc6660c1ca1145bc4e 8d1c9a3f113b2eb4c1121e494753902275c574b890b33f6fe960eee3ee7776e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushGroovy.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1534
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "db0-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 3504
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJava.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.2 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJava.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash8ed774ae369cdbaceab952f8607debcc d27247e43636581bc86e7d852d75d7aa0ec488cc 1b18f1bf5dc2bbe895f3aa07a6f8c46433f0a8a4988acc3dedb291ba737e3076
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJava.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1241
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "a40-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2624
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJavaFX.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.3 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJavaFX.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF, LF line terminators Hash65159a9ed02b24aec0b77c5f037699a0 e2cd03b658af8020f39ebdbfe936fca01cc7d185 123190fe22708720b853c120ae2f10c19decf82f9f3f6407e39ad9ab1b8374d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJavaFX.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1291
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:13 GMT
ETag: "aad-5b8a7a8b47e49-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2733
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJScript.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 998 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJScript.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash4cb20668b9ec2d5213f55f65ba8850ea 2de27cf082bf359fcded0db2d8f7b0d247e06b27 119c701022c9f82a41eab438b2deaa8231ba79a269d75d681c2021b5472c164e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushJScript.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 998
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "8b4-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2228
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushLatex.js?ver=20090613 | 3.23.174.243 | 200 OK | 928 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushLatex.js?ver=20090613 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF, LF line terminators Hashd1db981e39f957e55df7c9022e736334 7c6e161e59076f3b626131268727139e4d1c6116 4bf06577cc032e7ac795ccee5eeb605ee55cd2ccbc8ac3c9af12aa0c3d1cf240
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushLatex.js?ver=20090613 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 928
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "773-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 1907
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushMatlabKey.js?ver=20091209 | 3.23.174.243 | 200 OK | 440 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushMatlabKey.js?ver=20091209 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash09792428d91aaa6494f2e033e34bb13f a7c660f8dfab21e2ba32bdb9cabc62f38940244c a58ede5d29ba9186ffd8be7753e67cefdecf3821eeb522475e6355a95bba4e99
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushMatlabKey.js?ver=20091209 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 440
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "357-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 855
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushObjC.js?ver=20091207 | 3.23.174.243 | 200 OK | 1.0 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushObjC.js?ver=20091207 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Hash6b4a58cf9ee703c2b7c968b5bdc10029 87bd94582282baf5d939c466cc7bc279538daa2c ea00df8135b09f7fde0c6e692e4466e0977791b5176a82ad775942a7b1acc07f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushObjC.js?ver=20091207 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1005
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "946-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2374
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPerl.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.7 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPerl.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash8b97f5765de0ccf09623ed58acb90a2b fef762409e3599d6afc00d7ff89a9d8939c1a868 8fae5260fd2c759a1ada1ff4b6638e4d602021977b47515b6aeeaece199cfd28
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPerl.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:53 GMT
Server: Apache
Content-Length: 1695
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "e72-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 3698
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPhp.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 2.3 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPhp.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash884bcb073f8669d342dbe350588f90ce 4bd91b43420b193bee367f1536d5ed6d7a0e37d0 7114488c57c2e914e4e2b6cb52abc02c9ae25eab3e54a0b583fa9e99dcf27fcd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPhp.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 2334
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "1669-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 5737
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPlain.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 645 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPlain.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hasha713ee68aff0219c643467e9b6b61eff 4c52c18da89bb5442330426e812764d0dd19141a 648021b951a9675829103fc39c2148c781c96fd8e5b33722bb257f7aad8f649b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPlain.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 645
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "4f8-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 1272
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPowerShell.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.9 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPowerShell.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash47e8a820a384d8d875a8f58b22909d06 6f7b8a124a278a9acdbd712dca81b81cedb57118 6d4c3e8dcd5c75016c75618791fe2d6ac88a0895ce37af7cc1b9923323bab698
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPowerShell.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1929
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:13 GMT
ETag: "115d-5b8a7a8b47e49-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 4445
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPython.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.4 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPython.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash422fb2c03119f64d1965c9d9d02bb3c4 999c60617516d39885ec62dfe4cb247ddf05387e a2ae5269fe7b54a4fe931f889fec3c996e33b36b785bf8f6786e7e3ea77b381d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushPython.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1414
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "b9a-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2970
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushR.js?ver=20100919 | 3.23.174.243 | 200 OK | 506 B |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushR.js?ver=20100919 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash4fd220d38b21339472b00fb6ae40741b 77c271f66d167eee2accc948927554711d6589cf e6504536b2f9b11a90eb02721da3a82c5769a3da70f262f8ab93d2d44139793e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/third-party-brushes/shBrushR.js?ver=20100919 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 506
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "40b-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 1035
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushRuby.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.3 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushRuby.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash863661d03acafe75d7b6be7b3554a740 cc995642b350dae7a0f5774fef4d0a7a77695b1a f638a1abef5caa9f42bb2ef3fccd2b597908406ead9d39b04fea1188d240ecd7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushRuby.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1272
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "a99-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2713
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushScala.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.1 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushScala.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hashbb0eac424b654978a0c454ca5a15ece3 720b3336bd007b96c41c8e6a007b43da1706d763 d634ba272426d4811cdb1effddbbbe6e3dd5145cdb3e909d3c65e352ff6e25fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushScala.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1090
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "98a-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2442
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushSql.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.6 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushSql.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash9db6cff1ccb457970e0ae1dc0b651df2 1745556ec2ccf551d5dd8bd139a97d01cfe77ac0 07d90b7e0fee7bbb51dd2156668ed52099c2d44aec4f1b18105aac80213b7cdc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushSql.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1646
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "df8-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 3576
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushVb.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.4 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushVb.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hashe59df9690ff9ebaa0c834851f4526492 b9b076419704d216da579ef3a3d14abde739f713 b14f2d451113cdf4e412711648eb12656da1bb4acaf29926c185d2015998c33a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushVb.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1400
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:13 GMT
ETag: "aef-5b8a7a8b47e49-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2799
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushXml.js?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.1 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushXml.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeexported SGML document, ASCII text, with CRLF line terminators Hashc8fc2b53b0a6bd913c8a5c04a2b9cc3a 35bd58103de55680b554f456e854c586431c5e4b c49a3d2791ce59fda18bb4e29ea8597e5e5d656a544658f06b0d23e32fecf219
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushXml.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1147
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "9d9-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 2521
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/themes/Divi/core/admin/js/common.js?ver=4.7.7 | 3.23.174.243 | 200 OK | 577 B |
URL GET HTTP/1.13.23.174.243/wp-content/themes/Divi/core/admin/js/common.js?ver=4.7.7 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeJavaScript source, ASCII text Hash82b34a0f20682b94458a89521a92c7ca cd97bdd72c8f7ca65a37ea7d78ff71580633169a c05ee8fac93fde19412046a913b9aecd86210aba6b72cff7c94e01170dd11e3b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.7.7 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 577
X-Frame-Options: SAMEORIGIN
Last-Modified: Sun, 03 Jan 2021 03:46:13 GMT
ETag: "550-5b7f6d09f91e3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:27 GMT
X-Original-Content-Length: 1360
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| sqlcommunity.s3.us-east-2.amazonaws.com/SQLServerCommunityLogo.png | 3.5.132.105 | 200 OK | 47 kB |
URL GET HTTP/1.1sqlcommunity.s3.us-east-2.amazonaws.com/SQLServerCommunityLogo.png IP3.5.132.105:443
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M CertificateIssuerAmazon Subject*.s3.us-east-2.amazonaws.com Fingerprint40:BF:36:14:45:F6:3D:12:C3:E4:1A:78:65:F3:B1:81:07:4F:84:E8 ValidityThu, 29 Feb 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
File typePNG image data, 1776 x 237, 8-bit/color RGBA, non-interlaced Hashc3ef733de0628c4bd8d7f1bf91e076b4 1625aa37e444697b41570ed2caf924eb92e69993 bac363ee6db0e9c837974695ecde5a64ea190e3dce9b1d0b96549c005d7e3d7d
GET /SQLServerCommunityLogo.png HTTP/1.1
Host: sqlcommunity.s3.us-east-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: vCgLEIEfaNPCRypQU90+DIZgcETESE7C2jAFsgXRgbVcu8d6WbeaO1Xr/x06GI0qMQeF7sXhOBw6Rn5FFJ5eGQ==
x-amz-request-id: S840HT17TAKDFE9B
Date: Sat, 04 May 2024 20:45:55 GMT
Last-Modified: Mon, 04 Jan 2021 05:35:24 GMT
ETag: "c3ef733de0628c4bd8d7f1bf91e076b4"
x-amz-version-id: 0qhU5cwDf4ZCj.KDJpvPbVmxFRo34ojF
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 46915
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushYaml.js?ver=2.1.364 | 3.23.174.243 | 404 Not Found | 37 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushYaml.js?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeHTML document, ASCII text, with very long lines (9462) Hash22f0ad04d48d7155731ca6ef8a5ac87f 3ab31bac2daa6ea28541ca39737bcdee25d94c54 b8942ea806a5af055407fba398b7469d94fd64068994f93d4cb88d921278cd9c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/scripts/shBrushYaml.js?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
X-Powered-By: PHP/7.4.13
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://3.23.174.243/wp-json/>; rel="https://api.w.org/"
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| 3.23.174.243/wp-content/themes/Divi/js/custom.unified.js?ver=4.7.7 | 3.23.174.243 | 200 OK | 137 kB |
URL GET HTTP/1.13.23.174.243/wp-content/themes/Divi/js/custom.unified.js?ver=4.7.7 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (29665) Size137 kB (137320 bytes) Hash177d9519de792c0016c6ddce17f9a062 4e145c9ceb9070b77c6bf0366a595f570ba4483e d7d3283eb905321340d73ee954d8f8924e0b2365cd46243bbdb62e4440d59753
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/Divi/js/custom.unified.js?ver=4.7.7 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 137320
X-Frame-Options: SAMEORIGIN
Last-Modified: Sun, 03 Jan 2021 03:46:13 GMT
ETag: "78da3-5b7f6d0a108e0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:28 GMT
X-Original-Content-Length: 495011
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/styles/shCore.css?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.9 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/styles/shCore.css?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash16a93c77b7143585e8397413b75ac97b 71d187acdca6d6ee744725f854ac187c6abac5ff 9741e26c75f8f45c3178fb1ba51659fc83eeafefa244b75eccd8cc724bd01b0b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/styles/shCore.css?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1922
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "1c81-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:28 GMT
X-Original-Content-Length: 7297
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/styles/shThemeDefault.css?ver=2.1.364 | 3.23.174.243 | 200 OK | 1.1 kB |
URL GET HTTP/1.13.23.174.243/wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/styles/shThemeDefault.css?ver=2.1.364 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeASCII text, with CRLF line terminators Hash183834d1ac48d739391c4c966aa3286a 1d79741ef2cdc3a7f83e4e13148249433f420313 c16083ac5f4e736fc26e776f5d8e88890322ab9d9f3f813e29c5f12b0ae30567
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/syntaxhighlighter/syntaxhighlighter2/styles/shThemeDefault.css?ver=2.1.364 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 1108
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 11 Jan 2021 22:45:12 GMT
ETag: "e34-5b8a7a8b46ea9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:28 GMT
X-Original-Content-Length: 3636
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
|
|
| 3.23.174.243/wp-content/uploads/2021/01/cropped-SQLCommunity-Favicon-192x192.png | 3.23.174.243 | 200 OK | 19 kB |
URL GET HTTP/1.13.23.174.243/wp-content/uploads/2021/01/cropped-SQLCommunity-Favicon-192x192.png IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hashc467dd55afb63f65cb2dbb08feb6b064 32d85acf63666a25d1fffa68f1aa0fdb28b189c2 ff951c35ff1e171c0cf6c6ee1c4388b4a892bf90a09b30654fd91f8db962e954
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/01/cropped-SQLCommunity-Favicon-192x192.png HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 04 Jan 2021 07:21:58 GMT
ETag: "488d-5b80df20e8254"
Accept-Ranges: bytes
Content-Length: 18573
Cache-Control: s-maxage=10
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| 3.23.174.243/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 3.23.174.243 | 200 OK | 5.0 kB |
URL GET HTTP/1.13.23.174.243/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
Content-Length: 4968
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 03 Apr 2024 03:15:34 GMT
ETag: "4926-61528a2c648b5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Expires: Sat, 04 May 2024 20:50:28 GMT
X-Original-Content-Length: 18726
Content-Encoding: gzip
Cache-Control: s-maxage=10
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 3.23.174.243/wp-content/themes/Divi/core/admin/fonts/modules.ttf | 3.23.174.243 | 200 OK | 92 kB |
URL GET HTTP/1.13.23.174.243/wp-content/themes/Divi/core/admin/fonts/modules.ttf IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules Hashde27b3e66b2f8017e000aa9d8d24d60e e6d716de8f35ba6daf55d57e7fe0ed8d8e50f1f7 d201a2c3118a00c82cc48e89815f5139f23956bbe248107dcf522acc77b97c09
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/Divi/core/admin/fonts/modules.ttf HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/wp-content/themes/Divi/style.css?ver=4.7.7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:54 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Sun, 03 Jan 2021 03:46:13 GMT
ETag: "168f0-5b7f6d09f91e3"
Accept-Ranges: bytes
Content-Length: 92400
Cache-Control: s-maxage=10
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: font/ttf
|
|
| 3.23.174.243/wp-content/uploads/2021/01/cropped-SQLCommunity-Favicon-32x32.png | 3.23.174.243 | 200 OK | 1.1 kB |
URL GET HTTP/1.13.23.174.243/wp-content/uploads/2021/01/cropped-SQLCommunity-Favicon-32x32.png IP3.23.174.243:80
Requested byhttp://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash7457e851fac75fe68fe2af11c2b266b6 dab15368464f244eaeeae7a0bb486cc0805453b2 9159238254640b73294e2858886a6f0ab285e18030dd7fd9d34ae9a2a551d130
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/01/cropped-SQLCommunity-Favicon-32x32.png HTTP/1.1
Host: 3.23.174.243
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://3.23.174.243/','8Xxa2XQLv9',true,false,'wX4SjGqpM-M
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 20:45:55 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 04 Jan 2021 07:21:58 GMT
ETag: "457-5b80df210c46f"
Accept-Ranges: bytes
Content-Length: 1111
Cache-Control: s-maxage=10
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|