109.104.198.139/
200 OK 2.9 kB IP
ASN #12436 Bergon Internet Ltd.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (522)
Hash 102c4156fc60ca8a7a226da06b679bcb
51301fcf7b53c3a312ec5dcb2dde5e1dbd7f6104
eaf0168a07e6f6ac90d12b5ec3d5eaf724a1651c5d99de9d428ed8d220c53d98
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:07 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:08 GMT
Etag: "1535021228:b3d"
CONTENT-LENGTH: 2877
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/html
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0be6cec5607bb65c06dbadd33456aec1
9d13129e936eb5fc82e403931884cdc8c6e6ab92
cb028034340b709ece65e45e8fc1a26a64dd85926beaa542f308d3f1d5ee2c84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB028034340B709ECE65E45E8FC1A26A64DD85926BEAA542F308D3F1D5EE2C84"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6347
Expires: Wed, 25 Jan 2023 00:01:04 GMT
Date: Tue, 24 Jan 2023 22:15:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e46725831d8d722872bf68d752f4c5
cf37793a1b73e3f84fe6c37fb27382c83b49dbc0
0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12936
Expires: Wed, 25 Jan 2023 01:50:53 GMT
Date: Tue, 24 Jan 2023 22:15:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 24 Jan 2023 21:35:07 GMT
content-type: application/json
age: 2410
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cd4f1da1215c7473500807c185f2449
b14db0c67cf1f5faf85648ed8f94baf2dd03808b
9750518efd869da5ff74ba65a196445bd4340c909157cc1a420f62c1d07224a0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9750518EFD869DA5FF74BA65A196445BD4340C909157CC1A420F62C1D07224A0"
Last-Modified: Mon, 23 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8307
Expires: Wed, 25 Jan 2023 00:33:44 GMT
Date: Tue, 24 Jan 2023 22:15:17 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vae7AkvkgpQDqGi6N4KZlt1zkP28nigI0HX6UHIfq3lbt/YDDPKdr0Kf+DofjmvDyNpcKD/a7ZI=
x-amz-request-id: YGK5G7R6ZGT77YWG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 24 Jan 2023 21:48:19 GMT
age: 1618
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 24 Jan 2023 22:15:17 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
109.104.198.139/projectPath.js
200 OK 55 B URL HTTP/1.1 109.104.198.139/projectPath.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with no line terminators
Hash 71397840d9e17c98a0997b67e0f1c0b9
28a110eb13c293254e1640f2194ccea8af59bc50
b5d1d89fbbaab2e2e2d82f2fdd91a1b5972bb61ed35191a056c7eba29d687790
Analyzer Verdict Alert quad9 Sinkholed
GET /projectPath.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:07 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:37"
CONTENT-LENGTH: 55
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/jsCore/require-config.js
200 OK 1.0 kB URL HTTP/1.1 109.104.198.139/app/jsCore/require-config.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1049), with no line terminators
Hash 78ced353de87a381e8752a7acb98bb56
b9ba0f586767665ddb114d7b770597e9bf21a5c4
f353234ea6407442ffc34e4c59f553582edf2f0dd032c9a505e87e813b2d7db5
Analyzer Verdict Alert quad9 Sinkholed
GET /app/jsCore/require-config.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:07 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:419"
CONTENT-LENGTH: 1049
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/webVersion.js
200 OK 39 B URL HTTP/1.1 109.104.198.139/webVersion.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with no line terminators
Hash 803bb297f3d393a57a9062535b7afb30
6e7771c472278130bb2903cd94859c3b5e0c46b3
f5e479ecfd71ca525cd26afe9974bb53be16618389c1a52eff45d1ece889f164
Analyzer Verdict Alert quad9 Sinkholed
GET /webVersion.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:07 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:27"
CONTENT-LENGTH: 39
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/pluginVersion.js
200 OK 332 B URL HTTP/1.1 109.104.198.139/pluginVersion.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with CRLF line terminators
Hash 740f047e070c28e34f6fc739ab5fd1c5
5a8eca185e249ffeaf2df4181bb37b9c573bb699
186132b25b933409fe8406ae0358560f742023b3a33ad8068670da8d75efa9b9
Analyzer Verdict Alert quad9 Sinkholed
GET /pluginVersion.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:07 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:14c"
CONTENT-LENGTH: 332
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/require.js
200 OK 18 kB URL HTTP/1.1 109.104.198.139/app/libs/require.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (17565), with no line terminators
Hash 1f57901f2b583f9e73ca4889563c8c63
7100752ecadeea47c28b8dc0904326e55b45ea8b
3a6bc24af5efcbc41dd27c5ca7b0bec34ac8a4fd078ac0ca0ba1668c56fb8343
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/require.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:07 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:449d"
CONTENT-LENGTH: 17565
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/cap.js
200 OK 199 B IP
ASN #12436 Bergon Internet Ltd.
Hash 31626044b96af6bb0c8f498072cdd117
94e91bab68fc13daf4c75e19e122719d99ade445
8768dc58fbee3fb54c6bf95b42d39f1277c7617dce8ad7b75dc1af2f1afaa11a
Analyzer Verdict Alert quad9 Sinkholed
GET /cap.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONTENT-LENGTH: 199
CONNECTION: keep-alive
Content-type: application/x-javascript;charset=utf-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 24 Jan 2023 21:48:59 GMT
age: 1578
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16067
Expires: Wed, 25 Jan 2023 02:43:05 GMT
Date: Tue, 24 Jan 2023 22:15:18 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NnlUBjgwAVCnD/7/ezKTDQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GFpZFamyzdp7I5D9Sji/LeltdoA=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7652
Expires: Wed, 25 Jan 2023 00:22:51 GMT
Date: Tue, 24 Jan 2023 22:15:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7652
Expires: Wed, 25 Jan 2023 00:22:51 GMT
Date: Tue, 24 Jan 2023 22:15:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7652
Expires: Wed, 25 Jan 2023 00:22:51 GMT
Date: Tue, 24 Jan 2023 22:15:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7652
Expires: Wed, 25 Jan 2023 00:22:51 GMT
Date: Tue, 24 Jan 2023 22:15:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7652
Expires: Wed, 25 Jan 2023 00:22:51 GMT
Date: Tue, 24 Jan 2023 22:15:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1844f7f6-6470-4363-8fb9-e75d0315e86b.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1844f7f6-6470-4363-8fb9-e75d0315e86b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 019a2ef8bc38b89b40d57eb0b1619527
bdae9e51ce465861c1059d2c6e35476d29152b52
39ff0ae12d164850443a9dcbba51543f7f1f28a91f65f92e573c51af3b73f74b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1844f7f6-6470-4363-8fb9-e75d0315e86b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4486
x-amzn-requestid: 680bd2f9-5d7e-4262-8b86-d914ceadd975
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRE7TEo2oAMFiFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d04eae-48fea4443a71db9a691050ba;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 21:33:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WbEr30ewNe8lmcY6tTodHnTpLP-oxFEUDMdXRypg3N8oSMpIfLEnjg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 21:38:59 GMT
etag: "bdae9e51ce465861c1059d2c6e35476d29152b52"
content-type: image/jpeg
age: 2180
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccf5342f-6184-4859-b154-9913ddd9b112.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccf5342f-6184-4859-b154-9913ddd9b112.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af3ceda828750acf5ac7c837612a6e0f
f6364de0805cf3cfe66d19293085da16a2c2f832
baa0cb6e3cec7f840477dfdcea518968f5b72a828dbd346abb09e2d3e3aa3bee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccf5342f-6184-4859-b154-9913ddd9b112.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9091
x-amzn-requestid: c5849f51-8fc6-40c0-a1e3-9deb74e06c59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRE7TEzxoAMFmuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d04eae-22d80a0c3e6485dd62f420ef;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 21:33:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JlD-eXZtA8-dDqRe6gMZSyNbPuksroMQ4J_L2g_NjPQB8KQGgZWpXA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 21:36:12 GMT
age: 2347
etag: "f6364de0805cf3cfe66d19293085da16a2c2f832"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe71d97f7-2292-4cf5-a029-f42cbbf136b7.png
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe71d97f7-2292-4cf5-a029-f42cbbf136b7.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 72c3b8253eada5e517356b2a93aa2cb1
cdba249871f2234d685eddaf22834c531bca4db0
b8287bcef62f40ac749ea6b4f9a8714b4cfc124fb49ac39c08ad09afa9c29ff2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe71d97f7-2292-4cf5-a029-f42cbbf136b7.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8985
x-amzn-requestid: 3de4f2c8-913a-4ca2-a237-2ed1c12d1fa9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0MTkG3dIAMFeTQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4c0e3-1f88ffba391806fa4eb8f5fd;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:13:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NCxD9d8V5EyIme3NDXXu6ft8NLRXzORMgFme32QbzHPflXZRJ_gGbg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 21:39:05 GMT
age: 2174
etag: "cdba249871f2234d685eddaf22834c531bca4db0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cb7be12333fa7ea3353901b4b3215af
4b758cc432874384f330568177eef5a328d7e69a
d6f86c0ddbabd5c4fd7cee72ce4da62ccddd9d29139c9ab033bb1ab8425bae22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11918
x-amzn-requestid: ff47dd24-004f-4cc7-acfb-283b2e751f23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEqxwEyWoAMF3gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb580b-1e95f74b0846080f75a757f6;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:12:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ntW_cYMwX6UWInGOxxPlwnV1AJh46X-hiLvwggRz9oa1Yno6jyE51g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 03:28:47 GMT
age: 67592
etag: "4b758cc432874384f330568177eef5a328d7e69a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c2ede8d-ac50-4d79-98d8-53ba683ea9fe.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c2ede8d-ac50-4d79-98d8-53ba683ea9fe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03ba93e6c29fb268712e33228fa5ee38
2528a659d067ce39b31d5d8a0a9943e313a4caa6
2a3dfcbafd31bfc0cc653f9f43cfa98206334551b8ab76e9ab6d20338c8d6e1c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c2ede8d-ac50-4d79-98d8-53ba683ea9fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9864
x-amzn-requestid: dd368937-de20-4e2a-82e3-e82bc20a806c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e4AtgGu3oAMFaoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c647ef-7efe789a5411c14a74ec327a;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 07:02:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MDBCOwO8k543vmWo7ROvYyqyzju9iJIyGZvMpzHv7VqIoats0p3Nxg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 10:10:42 GMT
age: 43477
etag: "2528a659d067ce39b31d5d8a0a9943e313a4caa6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59be5df3-0d3c-4611-9b91-9ce5041a7a57.jpeg
200 OK 3.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59be5df3-0d3c-4611-9b91-9ce5041a7a57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dbbcba4403c1ea4e45ff47894d66e984
8555e8d6a38b78829a7dd2f10eb99bdbb254d89a
c9acd732889f9a58b085ceee3ceb8040fedb1e85ddb9f5b933960472c2f8d147
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59be5df3-0d3c-4611-9b91-9ce5041a7a57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3109
x-amzn-requestid: 89df621b-47d8-4127-8e4f-8e57f3244419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fKV9hFNKIAMFtlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cd9d23-0b4c0b5d2bf8c22b2ada0e9c;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 20:31:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: B62xY4rlFNdJGd5ethwkCIwQTsegDVJy6s7OptIr1g_E8GvwttW2sQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 10:04:44 GMT
age: 43835
etag: "8555e8d6a38b78829a7dd2f10eb99bdbb254d89a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
109.104.198.139/ext/ext-all.js
200 OK 1.5 MB URL HTTP/1.1 109.104.198.139/ext/ext-all.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (64818)
Size 1.5 MB (1497654 bytes)
Hash 33c8a2191d27ee2812d9e5469f094556
7655fa8f1e248587943ea14c9c8739e5dd0b3e05
affefe36854341fcff50a56695f122ff2eec7e893891aa17ba4f0f98888f6f38
Analyzer Verdict Alert quad9 Sinkholed
GET /ext/ext-all.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:07 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:16da36"
CONTENT-LENGTH: 1497654
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/images/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 109.104.198.139/baseProj/images/favicon.ico
IP
ASN #12436 Bergon Internet Ltd.
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash a437e84d20c9cf7442fffab49e0f07e7
a9b858bd48976f8c2f2ab471a0d7843bfde58c7b
6fe49ae6a389a8cc3ef2866682443909dbb6987ca1918392b6e5d6473cbdd969
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/images/favicon.ico HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:47e"
CONTENT-LENGTH: 1150
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/x-icon
109.104.198.139/app/libs/base64.js
200 OK 1.5 kB URL HTTP/1.1 109.104.198.139/app/libs/base64.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1466), with no line terminators
Hash 512bb7f354e5bd222c2ffbc3f9d601b9
c386932682ec7abc2726fed93bd72b552c6c4a2f
3b3cf5585ebda2f6e7e6bd9ace18ca949f5d9320175dca73c46834c91f6d56d1
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/base64.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5ba"
CONTENT-LENGTH: 1466
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/jsonpath.js
200 OK 12 kB URL HTTP/1.1 109.104.198.139/app/libs/jsonpath.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (11775), with no line terminators
Hash 0c2131a1d823906bd625d8fecd324fe8
c8c96935d117db1206539c4917e8aacd2a5dddd2
b4a0f6a3d27f3a57d1881fc1ea4e6bcf526098fe6e31559afdc10a695ac2c0c4
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/jsonpath.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2dff"
CONTENT-LENGTH: 11775
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/json2.js
200 OK 3.0 kB URL HTTP/1.1 109.104.198.139/app/libs/json2.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (2964), with no line terminators
Hash fbc338d3e23ad41974333c762ec15d9a
76c9c988b04ba6fc08d4091c0da4ba97cc2fb024
d9b708897b69993198e81809ab25a960118a6712b8236f1fb02b2a08adc48a44
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/json2.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:b94"
CONTENT-LENGTH: 2964
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/md5.js
200 OK 4.3 kB URL HTTP/1.1 109.104.198.139/app/libs/md5.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (4302), with no line terminators
Hash 60507d416334913c0aa439206a56b809
93d7d042fe9ce7e19c4f0e9bac5327d3ad82adce
b2c98d52873337d8ec20f30582e1af4125fd612e396e6821d2dd3e848f48169d
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/md5.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:10ce"
CONTENT-LENGTH: 4302
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/aes.js
200 OK 14 kB URL HTTP/1.1 109.104.198.139/app/libs/aes.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (13633), with no line terminators
Hash 99e69df704e8b0718b8c6fc7fc60d6ba
62ab8b0d8243aec79a66062aea3d36f98e19cbaa
4558c48972521df0d7337323da7137d6b997e68037de93cdfbfd10f56422e8f2
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/aes.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3541"
CONTENT-LENGTH: 13633
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/qrcode.js
200 OK 17 kB URL HTTP/1.1 109.104.198.139/app/libs/qrcode.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (16822), with no line terminators
Hash 0c0bf3d65c914a7d3032fa8df5cc0f6e
a83ce2bf605052bfb87cb5a6ba842fb29bbbd609
098321cb38307503aff3735e37a77b8464b28329a0e2024b7f6a0c402bcb16d9
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/qrcode.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:41b6"
CONTENT-LENGTH: 16822
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/css.min.js
200 OK 1.4 kB URL HTTP/1.1 109.104.198.139/app/libs/css.min.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1417), with no line terminators
Hash d262841a0c904e72ca20f78f03258b81
516bcda3260f418c9ccd00cd2fb42950093572c4
5fe56d8b09444a439e57fdfc6792371cdfff1c7814e6e6415ac8d63305b92e2d
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/css.min.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:589"
CONTENT-LENGTH: 1417
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/rsa.js
200 OK 12 kB URL HTTP/1.1 109.104.198.139/app/libs/rsa.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (11740), with no line terminators
Hash a227364ff603d1a6b6b1a969bb86d9f4
d5fe143af42b9f5b305513975bd696be84fb00db
a7466ff04bff6f719423ff1e0ad7fbdc84205b5090a6b3087de33ce5771c66cb
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/rsa.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2ddc"
CONTENT-LENGTH: 11740
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/jquery.js
200 OK 96 kB URL HTTP/1.1 109.104.198.139/app/libs/jquery.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (32073)
Hash 4776dee8907881fcc27087852756abb8
8d1613ec8a13300b7d0d4ff1f6be17265b01f46d
3a44dbc1750aa9cc4a96e0bda84ae11e86f85f5ea52104dae8f94c70fe3c2fa5
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/jquery.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:178cb"
CONTENT-LENGTH: 96459
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/css/main.css
200 OK 7.7 kB URL HTTP/1.1 109.104.198.139/baseProj/css/main.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (7748), with no line terminators
Hash 0267dfde6446d06c3ccb64db56413fb8
aafbe497fc1875df59d64f38e782195d1a522871
6b7baeeb347739f01c8b74c4452296862461143651aaa8e28f00e7306c39d6a2
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/main.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1e44"
CONTENT-LENGTH: 7748
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/iconsui.css
200 OK 2.5 kB URL HTTP/1.1 109.104.198.139/baseProj/css/iconsui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (2532), with no line terminators
Hash 3c3dcec4bf71abf5c8c9f0a6aacb35fc
358c6395c89a7bda4faca5a3ab794558b28a3092
87de5c092c4593bf3789538bbee26026b2170217138322567306c0a80b3ca513
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/iconsui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:9e4"
CONTENT-LENGTH: 2532
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/desktopui.css
200 OK 21 kB URL HTTP/1.1 109.104.198.139/baseProj/css/desktopui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (20850), with no line terminators
Hash 7504dc79164e933d3b8e28a59b74084f
590f0baff3e761e95fb6c304cf27e6583073a973
e13df56e56c89cf714280f2e3384dbc6c8369932803483ed44561bf1933dcbfb
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/desktopui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5172"
CONTENT-LENGTH: 20850
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/widgetui.css
200 OK 31 kB URL HTTP/1.1 109.104.198.139/baseProj/css/widgetui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (30638), with no line terminators
Hash 0cec8af6aeacd4f90749bddf64b33fa6
45fb56b3bef5565a2ebdd9c095f3eafcc7edc4fc
fcad16133441955f27a4c718d1908703c025fafca5022dde9a8d01a15d4da2a7
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/widgetui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:77ae"
CONTENT-LENGTH: 30638
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/loginui.css
200 OK 1.7 kB URL HTTP/1.1 109.104.198.139/baseProj/css/loginui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1664), with no line terminators
Hash 0a3c082967dd91eb0b2fdc10729585ca
05ad3eaa2973076b0f266a634af9fd87092e6214
b26c5468d8b222a4482f8592843aae2d49c9663841d57105a049d0e04704d85d
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/loginui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:680"
CONTENT-LENGTH: 1664
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/deviceInitui.css
200 OK 310 B URL HTTP/1.1 109.104.198.139/baseProj/css/deviceInitui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (310), with no line terminators
Hash 7b3ed6060b4e43aa84a6ca2e94b5dd24
29815a426c4b2ae69a9b34d6f4a972b979fd0908
175681c824ec3787357999a81981406b6e91cbb2fb141b40c278f2c970f967b4
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/deviceInitui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:136"
CONTENT-LENGTH: 310
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/findPwdui.css
200 OK 235 B URL HTTP/1.1 109.104.198.139/baseProj/css/findPwdui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with no line terminators
Hash 5fbd5d1712e7d81176b63a7a927b49d9
cfe8d2925bfcc810a8fab9a257f0ffaaaaa9daa8
bed2b74440fa80bd72c206f32f642b15efdfcf1ab1d4aee2353459619366268f
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/findPwdui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:eb"
CONTENT-LENGTH: 235
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/componentui.css
200 OK 25 kB URL HTTP/1.1 109.104.198.139/baseProj/css/componentui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (25387), with no line terminators
Hash a10bc95b4358da5f39d73c5df1fdd40e
9fe20c985be66c9ff6eea526d670ef329d88b20d
e68b2c34b738a470eed06e94aec5b3d0c71c2ba7166474371ae7ccce4b01fc27
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/componentui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:632b"
CONTENT-LENGTH: 25387
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/previewui.css
200 OK 16 kB URL HTTP/1.1 109.104.198.139/baseProj/css/previewui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (15619), with no line terminators
Hash 623816b32929e87a4ef8886af4b89ba1
e5aec9e697c4763f4e31780bb078857e4c172f2c
762b6e4ee8c7ffcd58744f81869ff64906d6312b738b35d0dddebad984b33810
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/previewui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3d03"
CONTENT-LENGTH: 15619
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/playbackui.css
200 OK 10 kB URL HTTP/1.1 109.104.198.139/baseProj/css/playbackui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (10343), with no line terminators
Hash 7022f98b5682fc81d94c1b6bc87519fa
0347d10da62c30f71c4be471145278b0cecc0135
a4d942dd055547bbe21387d0fa91b37b385a04986ff682b86fd2a1e6b768d7ce
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/playbackui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2867"
CONTENT-LENGTH: 10343
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/alarmui.css
200 OK 51 B URL HTTP/1.1 109.104.198.139/baseProj/css/alarmui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with no line terminators
Hash d336c6571483eb03ad7a9ee7cceb9cb1
fb3f2090cf3b6b8ecaee4acb17380a7c95ccff0f
c5fe618e4098e4fe227d34b0c590091f90b15901e7698b0f8f3d419d21372de8
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/alarmui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:33"
CONTENT-LENGTH: 51
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/iotui.css
200 OK 778 B URL HTTP/1.1 109.104.198.139/baseProj/css/iotui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (778), with no line terminators
Hash 94681929136a2f122bd9ef25b9c2c2b8
a2575397e1fa218af13ba337508608bf0e389e1d
ffb690b8635bace6f72f90f92be4c91c9d87661994603a7ea00ae18446a473e3
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/iotui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:30a"
CONTENT-LENGTH: 778
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/backupui.css
200 OK 1.4 kB URL HTTP/1.1 109.104.198.139/baseProj/css/backupui.css
IP
ASN #12436 Bergon Internet Ltd.
File type assembler source, ASCII text, with very long lines (1370), with no line terminators
Hash 88c9e38c6e0a0829ab6351a654844138
2ffe2c2b9b13a40d5c29d96c7f44e7d106cb7af7
c24766c86d072cee5f2e717189e3ab6a2e71c9079a8100abdaf531a986a01538
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/backupui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:55a"
CONTENT-LENGTH: 1370
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/outmodeui.css
200 OK 135 B URL HTTP/1.1 109.104.198.139/baseProj/css/outmodeui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with no line terminators
Hash 948c1488ce19b119f25a9d8586d22fca
6e31213f80a6e9dce4277b2da66ae19b84939090
1a592b2d8f976dad4a4e28eec997c2e2a211ac0df24b38e97071776f519f9826
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/outmodeui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:87"
CONTENT-LENGTH: 135
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/audioui.css
200 OK 973 B URL HTTP/1.1 109.104.198.139/baseProj/css/audioui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (973), with no line terminators
Hash 3e21b9f5cd1ecbea42c27c539ed017b0
8e52caee688883fa1b1911380ebb548ddf4b4c7f
281b7e5981c4431951bd3537fcfe8986c2279f3a7f99647721fd101a9b64c05f
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/audioui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3cd"
CONTENT-LENGTH: 973
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css
200 OK 319 kB URL HTTP/1.1 109.104.198.139/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (65536), with no line terminators
Size 319 kB (318915 bytes)
Hash 4192c2ac72ce736d0b52ee7380afdfdc
3fc3a5ee6534da4c2bddb9f313ebe8bf72d35e3b
98d87264c50a5f3c87f473d49c9303f33452ffa88a064eee4769a1f1aa13f1a6
Analyzer Verdict Alert quad9 Sinkholed
GET /ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:10 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4ddc3"
CONTENT-LENGTH: 318915
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/intelui.css
200 OK 1.3 kB URL HTTP/1.1 109.104.198.139/baseProj/css/intelui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1264), with no line terminators
Hash f48ae8b8df8f6f73f2b1e2229bfea44e
645e9c9598d2115d5b93d43b85ee5360b8ed4296
7ab25e5ba4b59a1b858d0b4f99682ed6406fac4fb76fba4dbb8df5bb3f0cdf20
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/intelui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4f0"
CONTENT-LENGTH: 1264
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/accountManui.css
200 OK 948 B URL HTTP/1.1 109.104.198.139/baseProj/css/accountManui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (948), with no line terminators
Hash 756725f1d49b297f47500da75c4c120a
c486b1519f7b0680275befa9ebc095b5ae2c90f0
3fef70de5262f1cca4893368c3e8e0f616805ca1ca3342a92920eaa264e5994a
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/accountManui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3b4"
CONTENT-LENGTH: 948
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/channelTypeui.css
200 OK 487 B URL HTTP/1.1 109.104.198.139/baseProj/css/channelTypeui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (487), with no line terminators
Hash c0de1fd5b85b93491da2268244317fcb
7c700f16e583c64f05bc200c320aaf3c3770335e
1433e96354377d367b05627bf6b9efc93408c7d44b48c46ee6a45bc908c4e9bc
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/channelTypeui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1e7"
CONTENT-LENGTH: 487
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/baseProj/css/storageui.css
200 OK 30 B URL HTTP/1.1 109.104.198.139/baseProj/css/storageui.css
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with no line terminators
Hash d4d56eb8c518030eedc673df85e21872
d353a1e22a3a402dcf3a5b0b4e09f52558fe5eb3
caefcf0c58bbb22b90edb1be0e736036ada3bee32906d202919c985afd47922f
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/css/storageui.css HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1e"
CONTENT-LENGTH: 30
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: text/css
109.104.198.139/app/libs/jquery.ui.core.js
200 OK 16 kB URL HTTP/1.1 109.104.198.139/app/libs/jquery.ui.core.js
IP
ASN #12436 Bergon Internet Ltd.
File type Unicode text, UTF-8 text, with very long lines (15856), with no line terminators
Hash d16214611dfc9f2b1f0293d43383661b
df865143f0f51d72546a025ccaa2b6d21c6060b1
d322635f8d81553035aaa5f750698281be1971cf6a4b7ae0e6b465449c424996
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/jquery.ui.core.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3e4d"
CONTENT-LENGTH: 15949
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/jsCore/extend.js
200 OK 24 kB URL HTTP/1.1 109.104.198.139/app/jsCore/extend.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (23622), with no line terminators
Hash ac8b52231eec7ddf7911a3197621c947
7dd3469ee276fb8b4a53401637ef13ad5593d724
e15595765bc99647db50276f6409dd8c36782c85b626742e0d72136096ca04b9
Analyzer Verdict Alert quad9 Sinkholed
GET /app/jsCore/extend.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5c46"
CONTENT-LENGTH: 23622
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/libs/jquery.pubsub.js
200 OK 908 B URL HTTP/1.1 109.104.198.139/app/libs/jquery.pubsub.js
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (908), with no line terminators
Hash fb110f87d00598231a539918e2b5c5ca
fc310b9cc162e338acb6e8bfd096197006b3a941
502a31b0c5cbd2927b1fe353d2569f7fbb0a2f23a3b428dc708a283de7cfac07
Analyzer Verdict Alert quad9 Sinkholed
GET /app/libs/jquery.pubsub.js HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:38c"
CONTENT-LENGTH: 908
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/jsCore/Common.js?_dc=1674598519613
200 OK 13 kB URL HTTP/1.1 109.104.198.139/app/jsCore/Common.js?_dc=1674598519613
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (13414), with no line terminators
Hash 88cd89c6f01756b8be206c66097b1c7e
5bbac9c5f775785058ec8b11c6eaeb888ffb9171
6e9a9bf4fcd698f59aac1c9ebc48e85dad01a0b9803dd8c69359a190381c4b13
Analyzer Verdict Alert quad9 Sinkholed
GET /app/jsCore/Common.js?_dc=1674598519613 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3466"
CONTENT-LENGTH: 13414
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/current_config/preLanguage?1674598519751&_dc=1674598519751
200 OK 26 B URL HTTP/1.1 109.104.198.139/current_config/preLanguage?1674598519751&_dc=1674598519751
IP
ASN #12436 Bergon Internet Ltd.
File type JSON data\012- , ASCII text
Hash 662021470c60975c899f5fb14a073815
d511585b2f18e5c7d9d35e17b54abd0da6bb68f5
d449a5b2f00e1a804cd78a95ec00d495dfc09f6312740d45facb39246d99e180
Analyzer Verdict Alert quad9 Sinkholed
GET /current_config/preLanguage?1674598519751&_dc=1674598519751 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Mon, 19 Dec 2022 10:55:11 GMT
Etag: "1671447311:1a"
CONTENT-LENGTH: 26
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
109.104.198.139/custom_lang/English.txt?_dc=1674598519889
404 Not Found 48 B URL HTTP/1.1 109.104.198.139/custom_lang/English.txt?_dc=1674598519889
IP
ASN #12436 Bergon Internet Ltd.
File type HTML document, ASCII text, with no line terminators
Hash de47b8952cf60220f474d5004f9f04df
d44daa88381eacd58e1186a9d7a36bdc5adae7d3
a5ab8a7699e699284cf698b35a5172defde53ab4db229b33d24307656cbed54b
Analyzer Verdict Alert quad9 Sinkholed
GET /custom_lang/English.txt?_dc=1674598519889 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 404 Not Found
CONNECTION: close
CONTENT-LENGTH: 48
CONTENT-TYPE: text/html
109.104.198.139/web_lang/English.txt?_dc=1674598519889
200 OK 269 kB URL HTTP/1.1 109.104.198.139/web_lang/English.txt?_dc=1674598519889
IP
ASN #12436 Bergon Internet Ltd.
File type Unicode text, UTF-8 (with BOM) text, with very long lines (364), with CRLF line terminators
Size 269 kB (268846 bytes)
Hash 61c8ac839894eb89126a0753d786cc08
366f5b5d0066406886091b897ffaf6318bc49f07
2f59bec1f7a88c976daa261066b0b18ebb42a7d7476a13d61df5435b14829419
Analyzer Verdict Alert quad9 Sinkholed
GET /web_lang/English.txt?_dc=1674598519889 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:41a2e"
CONTENT-LENGTH: 268846
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
109.104.198.139/web_lang/English.txt?_dc=1674598519889
200 OK 269 kB URL HTTP/1.1 109.104.198.139/web_lang/English.txt?_dc=1674598519889
IP
ASN #12436 Bergon Internet Ltd.
File type Unicode text, UTF-8 (with BOM) text, with very long lines (364), with CRLF line terminators
Size 269 kB (268846 bytes)
Hash 61c8ac839894eb89126a0753d786cc08
366f5b5d0066406886091b897ffaf6318bc49f07
2f59bec1f7a88c976daa261066b0b18ebb42a7d7476a13d61df5435b14829419
Analyzer Verdict Alert quad9 Sinkholed
GET /web_lang/English.txt?_dc=1674598519889 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:11 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:10 GMT
Etag: "1535021230:41a2e"
CONTENT-LENGTH: 268846
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
109.104.198.139/ext/locale/ext-lang-en.js?_dc=1674598520390
200 OK 11 kB URL HTTP/1.1 109.104.198.139/ext/locale/ext-lang-en.js?_dc=1674598520390
IP
ASN #12436 Bergon Internet Ltd.
Hash 9acf707801403d1d4ed44585b040b373
93289ad5152e1f61c8377c2d9450ae43cd52bcde
cb12161580b68e3b8dc1c945957f6edc8e062c67464eb03cc04a8ca200cfba8f
Analyzer Verdict Alert quad9 Sinkholed
GET /ext/locale/ext-lang-en.js?_dc=1674598520390 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:29c0"
CONTENT-LENGTH: 10688
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/baseCls/App.js?_dc=1674598520392
200 OK 4.6 kB URL HTTP/1.1 109.104.198.139/app/baseCls/App.js?_dc=1674598520392
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (4583), with no line terminators
Hash 03066e2e77ee5cdefd8af4c25f79514a
54a3154af7fc564205df1d1b2c370fd2204ef168
a9e8124b2a763431117982eb2e1acfeaeb292547f71cc0120620005d50d4560f
Analyzer Verdict Alert quad9 Sinkholed
GET /app/baseCls/App.js?_dc=1674598520392 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:11e7"
CONTENT-LENGTH: 4583
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//js/desktop/Wallpaper.js?_dc=1674598520537
200 OK 939 B URL HTTP/1.1 109.104.198.139/baseProj//js/desktop/Wallpaper.js?_dc=1674598520537
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (939), with no line terminators
Hash 6a8ec113cd97c5f21f0f3d93e9830e04
efa1dea371edad5e4b4709662891c3a38c72ad73
cd8c21aaebd85bd8f2be1638735d8ea6af48c850fe1a2bb7075022bd208fdbed
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//js/desktop/Wallpaper.js?_dc=1674598520537 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:3ab"
CONTENT-LENGTH: 939
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//js/desktop/Desktop.js?_dc=1674598520538
200 OK 5.1 kB URL HTTP/1.1 109.104.198.139/baseProj//js/desktop/Desktop.js?_dc=1674598520538
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (5075), with no line terminators
Hash a16bab7582596f2058bc488aa06ab866
38d7ba71505c11d7eb0b16ac0ca62117e0dc4339
5948728e1157a5af0355b71ba2136a6e3cd8f7890b5e268dd734e23606a2f633
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//js/desktop/Desktop.js?_dc=1674598520538 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:13d3"
CONTENT-LENGTH: 5075
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/Login.js?_dc=1674598520540
200 OK 4.9 kB URL HTTP/1.1 109.104.198.139/baseProj/js/Login.js?_dc=1674598520540
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (4871), with no line terminators
Hash a60408d4d27d980b7851661818374e0b
249296ed8de2c8f2a0057dbb626e04080f4b5211
ed18635bcc7f62db9e28bb88399c7d9478bcf4856b6d4387c4bcee22a3d83265
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/Login.js?_dc=1674598520540 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1307"
CONTENT-LENGTH: 4871
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/jsCore/RPC.js?_dc=1674598520539
200 OK 67 kB URL HTTP/1.1 109.104.198.139/app/jsCore/RPC.js?_dc=1674598520539
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (32082)
Hash fff14228b82c99f0e40f804eb71bd9a4
208eef3a57a3a7bcafa94d56cd1c947d543b87c1
26a024e57231802acf06c446095c2927ba050cfe112cd3cbf73da1897d9af08e
Analyzer Verdict Alert quad9 Sinkholed
GET /app/jsCore/RPC.js?_dc=1674598520539 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:104e3"
CONTENT-LENGTH: 66787
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//data/Constants.js?_dc=1674598520677
200 OK 330 B URL HTTP/1.1 109.104.198.139/baseProj//data/Constants.js?_dc=1674598520677
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (330), with no line terminators
Hash 2bce71cd30368a209b59c0c246c76b6b
ccc2efff38f115b2284b4e2edbef395c6b9d596e
e7237b9f5fefae39e761e5ff58f362f1be2dbedacbaf26ebef5a9b0063371047
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//data/Constants.js?_dc=1674598520677 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:14a"
CONTENT-LENGTH: 330
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/jsCore/Ability.js?_dc=1674598520679
200 OK 12 kB URL HTTP/1.1 109.104.198.139/app/jsCore/Ability.js?_dc=1674598520679
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (12032), with no line terminators
Hash 79c572b57c9315b54e92e387d45d8cb8
8787b0f105fe25159bc47872093cd8e3baa09f2b
cc48f2037cbcf58d6b51cf95fc326f5ef81405941a3675214a9122e4c12d9ff4
Analyzer Verdict Alert quad9 Sinkholed
GET /app/jsCore/Ability.js?_dc=1674598520679 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2f00"
CONTENT-LENGTH: 12032
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/jsCore/KeepAlive.js?_dc=1674598520680
200 OK 1.2 kB URL HTTP/1.1 109.104.198.139/app/jsCore/KeepAlive.js?_dc=1674598520680
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1186), with no line terminators
Hash d168896c7907d4af4baa3d11d14e273c
29faba5246f13a99ffbdf5742f5ad231fcc8eba1
7da437d7273141c01edc8e086189793f438d57e2b5916cbd5df7ed115212ade6
Analyzer Verdict Alert quad9 Sinkholed
GET /app/jsCore/KeepAlive.js?_dc=1674598520680 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4a2"
CONTENT-LENGTH: 1186
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/startingUp/StartingUp.js?_dc=1674598520679
200 OK 1.9 kB URL HTTP/1.1 109.104.198.139/baseProj/js/startingUp/StartingUp.js?_dc=1674598520679
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1873), with no line terminators
Hash cd803ff4959d2f6cd34503926fe8f3d9
9dfdf6f54b483d066775ad2734c6887e4983e840
bcd4f784ef4f45f5e8106ecedf9f41bc9aefb9cdd466d0b58514de69b1c20835
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/startingUp/StartingUp.js?_dc=1674598520679 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:751"
CONTENT-LENGTH: 1873
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/Factory.js?_dc=1674598520678
200 OK 22 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/Factory.js?_dc=1674598520678
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (21759), with no line terminators
Hash 17583d7e7b9cb8e51abac4a37a529f09
75783cc88361d86fb53259a46c5f06f11656ead0
f4da41dd24da5acd007b150a04427a61f1723d176b9cbf59f5d73eecc1a7704e
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/Factory.js?_dc=1674598520678 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:54ff"
CONTENT-LENGTH: 21759
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//js/desktop/TaskBar.js?_dc=1674598520681
200 OK 4.0 kB URL HTTP/1.1 109.104.198.139/baseProj//js/desktop/TaskBar.js?_dc=1674598520681
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (4018), with no line terminators
Hash 416e6a6ca5800a537c06a574a059cfa2
98647123b45756fcb656e449fb7a11b965d3a2b1
0c3a3c65d3361467466d6f2579552d11d0178f9972d226e06c5401db3c911ac3
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//js/desktop/TaskBar.js?_dc=1674598520681 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:fb2"
CONTENT-LENGTH: 4018
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//js/desktop/Page.js?_dc=1674598520681
200 OK 1.4 kB URL HTTP/1.1 109.104.198.139/baseProj//js/desktop/Page.js?_dc=1674598520681
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1445), with no line terminators
Hash cf4728150e7e05ea22fa7d9d23faedd8
428bf17972c06a5f9575f5f6bf841e9950540bc3
2d129372f538a20ada813e2fc68356fdf325760e58dfb404dfe4c8de47a6d6a5
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//js/desktop/Page.js?_dc=1674598520681 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:5a5"
CONTENT-LENGTH: 1445
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/plugin/Plugin.js?_dc=1674598520682
200 OK 2.8 kB URL HTTP/1.1 109.104.198.139/app/plugin/Plugin.js?_dc=1674598520682
IP
ASN #12436 Bergon Internet Ltd.
File type Unicode text, UTF-8 text, with very long lines (2742), with no line terminators
Hash 8fe6e401c31f24e6e335a34e6cd5dc4f
027a720319346ec62e71c58fcb341db96c51cbcc
d56a518dca8731995530af063b3aa124734fb94c962c89cf12ce08e02ec19e62
Analyzer Verdict Alert quad9 Sinkholed
GET /app/plugin/Plugin.js?_dc=1674598520682 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:ace"
CONTENT-LENGTH: 2766
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/OutsideCmd
200 OK 602 B URL HTTP/1.1 109.104.198.139/OutsideCmd
IP
ASN #12436 Bergon Internet Ltd.
File type JSON data\012- , ASCII text, with very long lines (601)
Hash e698d2649645f177d4086c501223b7e3
bd498d6979cb4f37c787c06a334c61091ff7289f
ccc1bbac1574f47e911501782b8c0b8bfba3678543326aec082a6fc9707d4c66
Analyzer Verdict Alert quad9 Sinkholed
POST /OutsideCmd HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 69
Origin: http://109.104.198.139
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: Keep-Alive
CONTENT-LENGTH: 602
109.104.198.139/baseProj/js/widget/Date.js?_dc=1674598520886
200 OK 1.6 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/Date.js?_dc=1674598520886
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1595), with no line terminators
Hash 27476a2edce3863315dd82dff02598f1
bbc167ec0a6e652ac5780c966aeeedcdb77a33be
f94eee621595993d7bbe8d7b9ad9eba6e4d066ea87d755f130c039a24acd6006
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/Date.js?_dc=1674598520886 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:63b"
CONTENT-LENGTH: 1595
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/Time.js?_dc=1674598520885
200 OK 7.6 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/Time.js?_dc=1674598520885
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (7609), with no line terminators
Hash cc3b8333488c1d09424a66afe847a77b
5e9edb50869540106b34a75c86ec03e9b7a6c4c6
53847a7e7ff8bb06afcb811117b228f27c74c1df6523a1655989068bd728886f
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/Time.js?_dc=1674598520885 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1db9"
CONTENT-LENGTH: 7609
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/DateTime.js?_dc=1674598520887
200 OK 4.9 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/DateTime.js?_dc=1674598520887
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (4899), with no line terminators
Hash 09c02d88ec7a0e0b578d2e24b2c32c35
5cd7a237cad90f80f669fef75aa2c541ba9875ae
b34191b25601169cfa1ed621490d43113551d98b9bd214f998acf3a94b3294b4
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/DateTime.js?_dc=1674598520887 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1323"
CONTENT-LENGTH: 4899
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/Numberfield.js?_dc=1674598520887
200 OK 1.4 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/Numberfield.js?_dc=1674598520887
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1421), with no line terminators
Hash 98236d8bb297ff7682e80072c8485d53
f41d803bf75fdf192e278ea9c821b802bbff4491
6975d3c1cb5df76a2667c292fd7d63473d8aface35d3001401529961ce4e4327
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/Numberfield.js?_dc=1674598520887 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:58d"
CONTENT-LENGTH: 1421
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/Zoombar.js?_dc=1674598520885
200 OK 2.7 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/Zoombar.js?_dc=1674598520885
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (2746), with no line terminators
Hash 827a64dd226a1b70be807b07b88dbcf2
60c34673866177895f92549f25265c504cf31d4b
ea4562b90b817f1a83993fde5a87d2e2ba8a9fca97b43e2680a41ef5b9a82fca
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/Zoombar.js?_dc=1674598520885 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:aba"
CONTENT-LENGTH: 2746
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/IconList.js?_dc=1674598520884
200 OK 5.5 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/IconList.js?_dc=1674598520884
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (5475), with no line terminators
Hash 393c806b0d22aae17e42b2d3b991f384
91000a2c225966880c96bc0ea999b7d6dd1cb69b
0cf9c6681b9ee5ee7e98eb41a290795c49164f9387cf013fa9ccf55480f0149e
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/IconList.js?_dc=1674598520884 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:12 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:1563"
CONTENT-LENGTH: 5475
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/ipv4Address.js?_dc=1674598520888
200 OK 219 B URL HTTP/1.1 109.104.198.139/baseProj/js/widget/ipv4Address.js?_dc=1674598520888
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with no line terminators
Hash 977ddd9ad9d679a00e42abad41fb0128
c7eda14f2ca1bd54f8305ac256036499034edf45
73133460324b4afe039d71c072e85ce20640de7e35328dfc92ae4ffe6ae06bb9
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/ipv4Address.js?_dc=1674598520888 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:db"
CONTENT-LENGTH: 219
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/macAdress.js?_dc=1674598520887
200 OK 365 B URL HTTP/1.1 109.104.198.139/baseProj/js/widget/macAdress.js?_dc=1674598520887
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (365), with no line terminators
Hash 25c0123cffcc92a06c4c615fc749345d
a4909e39d246e8329d9175ca0a1453da1fc6b18a
22a9c438f3b9dddd13348cdd261e5dffac3dc5aa7bd56dffa6333cc2e1f3983b
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/macAdress.js?_dc=1674598520887 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:16d"
CONTENT-LENGTH: 365
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/Switch.js?_dc=1674598520883
200 OK 638 B URL HTTP/1.1 109.104.198.139/baseProj/js/widget/Switch.js?_dc=1674598520883
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (638), with no line terminators
Hash 6d396e81ada7d1776064e60946963435
6ad7ea3a282c6c9178f98408fd51319493cad3e7
72831a29f7d192b2a136caecfa40e03c81d64630d48a2d2319005523834caaba
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/Switch.js?_dc=1674598520883 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:27e"
CONTENT-LENGTH: 638
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/Button.js?_dc=1674598520884
200 OK 829 B URL HTTP/1.1 109.104.198.139/baseProj/js/widget/Button.js?_dc=1674598520884
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (829), with no line terminators
Hash 00e5d0cb76bb09303e9da87d7185f4ac
864d708ba2cdb17f24dd6b2a7c4852bf855434db
a1630219c06a29977bbf18b9b8f7f6e8f1393bc783394acbb1160a4ec5ecaa5a
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/Button.js?_dc=1674598520884 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:33d"
CONTENT-LENGTH: 829
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//js/desktop/ShutdownMenu.js?_dc=1674598520936
200 OK 3.0 kB URL HTTP/1.1 109.104.198.139/baseProj//js/desktop/ShutdownMenu.js?_dc=1674598520936
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (3029), with no line terminators
Hash bcc109debca6453b259c81ee0c09fe08
21f7c0dc3db6560101ce37cdeb0a8309c2758196
319dadd8f9afb40f96e7755e1eee1d6dd69e6ffcff549bc607cb8063443ed12f
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//js/desktop/ShutdownMenu.js?_dc=1674598520936 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:bd5"
CONTENT-LENGTH: 3029
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//js/desktop/StartMenu.js?_dc=1674598520935
200 OK 309 B URL HTTP/1.1 109.104.198.139/baseProj//js/desktop/StartMenu.js?_dc=1674598520935
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (309), with no line terminators
Hash 211780f7450e7bc9bbeac1304be76144
fee5b848c1de8e47bb1fa9e5181c5f9eb6285a98
7a8e1d689a8676c3c1840b59bf59b89c28d9fdc35d5b5642e073ce45100da42f
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//js/desktop/StartMenu.js?_dc=1674598520935 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:135"
CONTENT-LENGTH: 309
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj//js/desktop/QrCodeWin.js?_dc=1674598520936
200 OK 2.0 kB URL HTTP/1.1 109.104.198.139/baseProj//js/desktop/QrCodeWin.js?_dc=1674598520936
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1977), with no line terminators
Hash 699ef27594fc7a62928710a9c8be89dc
72a0f6baf691719de1cd44d73266f91c9e9b9f6c
e53c7bcd15c248bd6460dbc9597fb7d6a6478cf247f678b6c4e9332676323a07
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj//js/desktop/QrCodeWin.js?_dc=1674598520936 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:7b9"
CONTENT-LENGTH: 1977
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/plugin/platForm/Ocx.js?_dc=1674598520958
200 OK 1.5 kB URL HTTP/1.1 109.104.198.139/app/plugin/platForm/Ocx.js?_dc=1674598520958
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1537), with no line terminators
Hash b381753157a02f7d86e2775223846235
de33f19ed5c5c5fe1697ebd4f04faf409cfae85c
94649973b4aa2a7de970b953402feac7518ef2e22943d0c9cb28fc3c6d8b4904
Analyzer Verdict Alert quad9 Sinkholed
GET /app/plugin/platForm/Ocx.js?_dc=1674598520958 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:601"
CONTENT-LENGTH: 1537
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/component/Calendar.js?_dc=1674598521023
200 OK 5.8 kB URL HTTP/1.1 109.104.198.139/baseProj/js/component/Calendar.js?_dc=1674598521023
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (5770), with no line terminators
Hash 609f798205cc6cee52d12c4c3781c37c
e8ee659d396ceac93fc0c0fbbf45b39c98c161ec
37d29457769031d3eb4211d19cd0ccd3fabfea3dd5d0f40e454b8dec8a1cdba5
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/component/Calendar.js?_dc=1674598521023 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:168a"
CONTENT-LENGTH: 5770
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/multipleInput.js?_dc=1674598521149
200 OK 3.3 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/multipleInput.js?_dc=1674598521149
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (3343), with no line terminators
Hash f4d4556a28afd59cc88e2e7563c8a1f5
d8a82716b648474d1afe9535a3e1ed55f114d7df
b4bba8570c87b0ff742625c7c27193d2c81bc22cd1e4e056108a93e3cfe0e8a8
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/multipleInput.js?_dc=1674598521149 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:d0f"
CONTENT-LENGTH: 3343
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/baseProj/js/widget/SetupWinow.js?_dc=1674598521280
200 OK 1.2 kB URL HTTP/1.1 109.104.198.139/baseProj/js/widget/SetupWinow.js?_dc=1674598521280
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (1170), with no line terminators
Hash fda3064cce985566af376c60a8ec70f9
d4084840fd8aea1aff87c26745f2032ee7be43de
fd4c9155a6a7b933eb74c811aa37097ab1805399631d3bbfbb59cb337a75d6d7
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/js/widget/SetupWinow.js?_dc=1674598521280 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:492"
CONTENT-LENGTH: 1170
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/app/plugin/platForm/Base.js?_dc=1674598521285
200 OK 19 kB URL HTTP/1.1 109.104.198.139/app/plugin/platForm/Base.js?_dc=1674598521285
IP
ASN #12436 Bergon Internet Ltd.
File type ASCII text, with very long lines (19331), with no line terminators
Hash d5043697f1b1de7097a74427e87853fe
f11115d30c00ec61a226d2d5bc3b9e8b0c36eb47
daff4e279415c30cc7d786f672ae8371bf6c1226c8db8acc16a6c327f43c2b32
Analyzer Verdict Alert quad9 Sinkholed
GET /app/plugin/platForm/Base.js?_dc=1674598521285 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4b83"
CONTENT-LENGTH: 19331
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/x-javascript
109.104.198.139/custom_logo/web_logo.png?v=1674598521509&_dc=1674598521509
200 OK 4.9 kB URL HTTP/1.1 109.104.198.139/custom_logo/web_logo.png?v=1674598521509&_dc=1674598521509
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 330 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 77e117eb9b319906ab1bd1dcdba4b97e
59dc3ab2dbff9a974dc9c06aa3b4b7393f5faf49
5c5a60f07288ff8fa5d428f4f9593de60ea0b13a6912e6534b06e934891401b7
Analyzer Verdict Alert quad9 Sinkholed
GET /custom_logo/web_logo.png?v=1674598521509&_dc=1674598521509 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Etag: "0:1339"
CONTENT-LENGTH: 4921
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/OutsideCmd
200 OK 80 B URL HTTP/1.1 109.104.198.139/OutsideCmd
IP
ASN #12436 Bergon Internet Ltd.
File type JSON data\012- , ASCII text
Hash 96402f390abdff2d4343994bcfe61fe2
a4e9084473469394421bd46178e48abb6c0940f7
7cd809a9f4500d4e2b5ad6cf3acb646b8ddbf9adefc1fab49f64889b02a87f5d
Analyzer Verdict Alert quad9 Sinkholed
POST /OutsideCmd HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 63
Origin: http://109.104.198.139
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: Keep-Alive
CONTENT-LENGTH: 80
109.104.198.139/baseProj/images/username2.png
200 OK 315 B URL HTTP/1.1 109.104.198.139/baseProj/images/username2.png
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 23ffabccd22d557dd6c3809abfca618f
edb625a91db415d9d61591247a6220cf7a99c519
70216e48ed9cbec99dd5df2669f827c5407262aab1fd07d74ab56fbb4a9d9f1e
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/images/username2.png HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/baseProj/css/loginui.css
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:13b"
CONTENT-LENGTH: 315
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/defaultCap.jsonp
200 OK 8.9 kB URL HTTP/1.1 109.104.198.139/defaultCap.jsonp
IP
ASN #12436 Bergon Internet Ltd.
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash bddce26dffe4faa9977bb4bd63453943
7c7b1db932a83f4d4f94383600b7453adbdc27d1
3db4f08bf960c42e546ac6dca5db2b58e5d9bb6778d87892a44a4f40dd383d76
Analyzer Verdict Alert quad9 Sinkholed
GET /defaultCap.jsonp HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:22d3"
CONTENT-LENGTH: 8915
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
109.104.198.139/baseProj/images/login.png?20180815180247
200 OK 677 B URL HTTP/1.1 109.104.198.139/baseProj/images/login.png?20180815180247
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 62 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c9415e6b38b3be6a4dc9826cff2cf99
46cc5106e4b531625c658dd6353c35e0287a4d88
2dae9046f1966d0479b61ac4cc79fb199f19620365c5dd061e33215e992067d9
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/images/login.png?20180815180247 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/baseProj/css/loginui.css
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:2a5"
CONTENT-LENGTH: 677
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/baseProj/images/password2.png
200 OK 289 B URL HTTP/1.1 109.104.198.139/baseProj/images/password2.png
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 09b1219364e683dee063e3e5314d43c8
2ddf9340b4f2e76b226589328fa5d9fb56930df4
75633bff12747df02c3d77710da58d80b16d96f2e3f0bdc3b56aa73265d01686
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/images/password2.png HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/baseProj/css/loginui.css
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:121"
CONTENT-LENGTH: 289
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/custom_logo/web_logo.png?v=1674598521641
200 OK 4.9 kB URL HTTP/1.1 109.104.198.139/custom_logo/web_logo.png?v=1674598521641
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 330 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 77e117eb9b319906ab1bd1dcdba4b97e
59dc3ab2dbff9a974dc9c06aa3b4b7393f5faf49
5c5a60f07288ff8fa5d428f4f9593de60ea0b13a6912e6534b06e934891401b7
Analyzer Verdict Alert quad9 Sinkholed
GET /custom_logo/web_logo.png?v=1674598521641 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Etag: "0:1339"
CONTENT-LENGTH: 4921
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/ext/packages/ext-theme-neptune/build/resources/images/form/trigger.png
200 OK 1.1 kB URL HTTP/1.1 109.104.198.139/ext/packages/ext-theme-neptune/build/resources/images/form/trigger.png
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 110 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash fca4af5e2452f40a414f56b9b2c2470e
dfbf253048b082732ceea90ad04e9167ec819f79
11e57653c592be9601f0ce314967b2792dffb2fefc0ee34cb8a6f1de3a4c447c
Analyzer Verdict Alert quad9 Sinkholed
GET /ext/packages/ext-theme-neptune/build/resources/images/form/trigger.png HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:471"
CONTENT-LENGTH: 1137
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/baseProj/images/bg.jpg
200 OK 91 kB URL HTTP/1.1 109.104.198.139/baseProj/images/bg.jpg
IP
ASN #12436 Bergon Internet Ltd.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Hash d8f52a1713e4ec448e49c71acd7fc1b6
a14d5c78e165093418d71b5252888e478b7a18b5
1cf3ba63094d19fb1c4a6576d11d296787e847d74fd5c3998f7166ee5182ad2e
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/images/bg.jpg HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:16245"
CONTENT-LENGTH: 90693
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/jpeg
109.104.198.139/current_config/WebCapConfig?v=1674598521816
200 OK 1.3 kB URL HTTP/1.1 109.104.198.139/current_config/WebCapConfig?v=1674598521816
IP
ASN #12436 Bergon Internet Ltd.
File type JSON data\012- , ASCII text, with very long lines (1328)
Hash 8e819630f7954c183719c93492046754
f99f43ee01359336a2ba45506f813c8053fca9a0
0cb3ee2adecc92ed0255b2d932b918cb0fd4667ba937e376eb1042ce1421751f
Analyzer Verdict Alert quad9 Sinkholed
GET /current_config/WebCapConfig?v=1674598521816 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Mon, 19 Dec 2022 10:55:11 GMT
Etag: "1671447311:531"
CONTENT-LENGTH: 1329
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: application/octet-stream
109.104.198.139/ext/packages/ext-theme-neptune/build/resources/images/form/exclamation.png
200 OK 1.2 kB URL HTTP/1.1 109.104.198.139/ext/packages/ext-theme-neptune/build/resources/images/form/exclamation.png
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash bf74ccfa102bff05b125e6e22ca90270
e9b217f949c96f2f300919c71e34685b9662c53a
35b3fef1b7e3037df04c0d1c5b84a65559200d5897987b8e12330cb19d614af8
Analyzer Verdict Alert quad9 Sinkholed
GET /ext/packages/ext-theme-neptune/build/resources/images/form/exclamation.png HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/ext/packages/ext-theme-neptune/build/resources/ext-theme-neptune-all.css
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:4a6"
CONTENT-LENGTH: 1190
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/baseProj/images/widget.png?20180815180249
200 OK 25 kB URL HTTP/1.1 109.104.198.139/baseProj/images/widget.png?20180815180249
IP
ASN #12436 Bergon Internet Ltd.
File type PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced\012- data
Hash 0bd6380b07c1939d021152efcd914c18
2c660000b72f504a58d9cf3c2bb8a5b2c11bc108
443a3e1b5b79639e1e248da98d10b7821185dcd334cefd2d54aaabe29513dbfd
Analyzer Verdict Alert quad9 Sinkholed
GET /baseProj/images/widget.png?20180815180249 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://109.104.198.139/baseProj/css/widgetui.css
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 25 Jan 2023 00:15:13 GMT
Last-Modified: Thu, 23 Aug 2018 10:47:07 GMT
Etag: "1535021227:609d"
CONTENT-LENGTH: 24733
P3P: CP=CAO PSA OUR
X-Frame-Options: SAMEORIGIN
CONTENT-TYPE: image/png
109.104.198.139/cap.js?_=1674598519016
200 OK 199 B URL HTTP/1.1 109.104.198.139/cap.js?_=1674598519016
IP
ASN #12436 Bergon Internet Ltd.
Hash 31626044b96af6bb0c8f498072cdd117
94e91bab68fc13daf4c75e19e122719d99ade445
8768dc58fbee3fb54c6bf95b42d39f1277c7617dce8ad7b75dc1af2f1afaa11a
Analyzer Verdict Alert quad9 Sinkholed
GET /cap.js?_=1674598519016 HTTP/1.1
Host: 109.104.198.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://109.104.198.139/
Cookie: curLanguage=English
HTTP/1.1 200 OK
CONTENT-LENGTH: 199
CONNECTION: keep-alive
Content-type: application/x-javascript;charset=utf-8
109.104.198.139
34.117.237.239
95.101.11.115