firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 20 Oct 2022 16:51:50 GMT
Expires: Thu, 20 Oct 2022 17:24:51 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OVZtPi-1ceEspBhE102WL51ED8l3tiqnYQXHX-GWswToN43AvPziZA==
Age: 2302
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 24a97183f836954e0f05c4dc794ff4d1
52778bbe39b9f736c16b5798575d1d96607ce9d0
01f6721f2674f54662fff590fdf7247cc8c58a3f84906cae75527fb7b6dd2436
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01F6721F2674F54662FFF590FDF7247CC8C58A3F84906CAE75527FB7B6DD2436"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21293
Expires: Thu, 20 Oct 2022 23:25:05 GMT
Date: Thu, 20 Oct 2022 17:30:12 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e41c85816a32bf30e54a8993fcd0406f
35013fb83966783145f1439eb7e949beefae4cf8
22dfbec34834914ffd13a3bee717dbf695450c05a44949bb691e39d254e39665
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DFBEC34834914FFD13A3BEE717DBF695450C05A44949BB691E39D254E39665"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5053
Expires: Thu, 20 Oct 2022 18:54:25 GMT
Date: Thu, 20 Oct 2022 17:30:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HVRNQHA8TnnqjSEdchqGqoF1MXnkGoI9uf1qV+dn5bVBE92pWAgO51ECBDaRomFP189OT521xXk=
x-amz-request-id: ACVP7E72279ZJ2AQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 20 Oct 2022 16:36:49 GMT
age: 3203
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 20 Oct 2022 17:30:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 20 Oct 2022 16:43:40 GMT
Expires: Thu, 20 Oct 2022 17:24:35 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: y5QZxtexiYVyjAf1OxjsNbD34gw599Las0JYYc5-24J2wfWHdufJJg==
Age: 2792
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a5dd4f71f4ddd5be9201466ed7a6c423
1d0832fb6e227d42137d319f728c8bc1414c816f
1edffa6a320210fccbd0e5fa6dbdaa45561678a75a66639985f02791c8283b40
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5511
Cache-Control: max-age=144505
Content-Type: application/ocsp-response
Date: Thu, 20 Oct 2022 17:30:12 GMT
Etag: "63510196-1d7"
Expires: Sat, 22 Oct 2022 09:38:37 GMT
Last-Modified: Thu, 20 Oct 2022 08:06:46 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.89.15.44101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.15.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8jaNQ+NmR6L4azuf/oxmIQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ef8ZcH3iQP9GEL1Zto3JZnuIpa4=
rbanglam.org/atu/aisnimuuq
38.242.147.221301 Moved Permanently 0 B URL HTTP/1.1 rbanglam.org/atu/aisnimuuq
IP 38.242.147.221:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /atu/aisnimuuq HTTP/1.1
Host: rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Thu, 20 Oct 2022 17:30:12 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Vary: Accept-Encoding
Location: https://www.rbanglam.org/atu/aisnimuuq
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21282
Expires: Thu, 20 Oct 2022 23:24:56 GMT
Date: Thu, 20 Oct 2022 17:30:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21282
Expires: Thu, 20 Oct 2022 23:24:56 GMT
Date: Thu, 20 Oct 2022 17:30:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21282
Expires: Thu, 20 Oct 2022 23:24:56 GMT
Date: Thu, 20 Oct 2022 17:30:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21282
Expires: Thu, 20 Oct 2022 23:24:56 GMT
Date: Thu, 20 Oct 2022 17:30:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5d17f5-6084-45a5-9677-8ae8646d6ee1.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5d17f5-6084-45a5-9677-8ae8646d6ee1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 81216ad70664e969888ae7b13871fda0
6b15c7d7abb9ff1cc040853401ad5a39f81c19a4
7294e93d890b4c8eeb8383a67aac0be8b88cac5e0882865c9f38ade713157799
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5d17f5-6084-45a5-9677-8ae8646d6ee1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9607
x-amzn-requestid: 590b20a6-039c-4c25-a61a-5f579c5b31f2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aRZj6HZ7oAMFsSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63506fb2-04b740c442ae735347b4e2c3;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: bL5fVog2SuW8ZNt9a0ECc8jwcAELUBVo63LXPovdnIRxCRnsMWVvvQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 19 Oct 2022 21:46:27 GMT
age: 71027
etag: "6b15c7d7abb9ff1cc040853401ad5a39f81c19a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1a95f4f-d066-4cb4-bb6a-392f3ed5c229.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1a95f4f-d066-4cb4-bb6a-392f3ed5c229.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e76755a16cf0bdb76d5e832c7b14af85
e008a1663c29616e83dccba105d7f6e2dbbb37dc
ab1d3690731963f85ede6cf6bedfb8b62ae1f93fafecc2cf343ea07bd4f2afce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1a95f4f-d066-4cb4-bb6a-392f3ed5c229.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13101
x-amzn-requestid: e10df8ba-d8f2-44c8-ad0f-bbda32020e0f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aRYBYF6noAMFthg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63506d3b-56538b97541830784f01f61f;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 21:33:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9R7vli3BwVLfleTf2jeZc5YNDMDxM024T7nyXcIpE2-o8Ddff57Jmg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 19 Oct 2022 21:44:56 GMT
age: 71118
etag: "e008a1663c29616e83dccba105d7f6e2dbbb37dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F638eac9f-fba9-43ad-a54e-d70a9233253b.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F638eac9f-fba9-43ad-a54e-d70a9233253b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b38fcf82dcb60f48ee2b0df158d2eb6
14207b4845fc4c2c72a18a77cbcbe5f50aa9056e
4cff326ed72c61a05f1150ac1a5423b006915bbb25dfaa11dadab2c24e71de1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F638eac9f-fba9-43ad-a54e-d70a9233253b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5566
x-amzn-requestid: 0eb4a0a4-9659-4c49-81d4-cd605eceed66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aRZKGEwzIAMFVbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63506f0d-0bc0a25f4f5b1e893f448ae2;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 21:41:33 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HJ79GtM4BktNGSt8djSSWbAKtnICVZBOrIzKUg1mrJpV1j_xQqAMxQ==
via: 1.1 c07670802688417c8b871124c547eb0a.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 19 Oct 2022 21:54:06 GMT
age: 70568
etag: "14207b4845fc4c2c72a18a77cbcbe5f50aa9056e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1c50c7d-8321-4dac-aa20-04a81680db07.png
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1c50c7d-8321-4dac-aa20-04a81680db07.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ee7bd4412c0b0eb678b9d53b07bdd9a
a8ba1a075a9c5501d043b9b14c45ed6bcd684e68
2499b2c4414108ed742986b90ca2a1b60c3fd65a82a78322031263650e935c7e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1c50c7d-8321-4dac-aa20-04a81680db07.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10554
x-amzn-requestid: 343fc462-3654-48cb-bb4f-0d0d54c07b58
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aRX9REoMoAMF21g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63506d21-152a7b145b9fcb0e0a97db57;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 21:33:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4b3RT-THlt6W7NHL9Tu35gWrOeJ1aNALztrgXSkSwdT-14ccmz7gtg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 19 Oct 2022 21:49:35 GMT
age: 70839
etag: "a8ba1a075a9c5501d043b9b14c45ed6bcd684e68"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 440811a19987ddee099df289d9b61e79
ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1
1309e9dcb36858de70ef82900ec1ad429fbb795ddb9823fd1c290b18f4e2c1a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9623
x-amzn-requestid: b3d5bd8d-111b-4d50-9720-71f72c62f860
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7Q8oFLRIAMFrEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347951d-613e5e810f420e4c0ba3e6f6;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 04:33:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OA9iHADyiam26eo88jYDECifkqeBaTjsuoeHD2YOy0aZJZEGhG-xow==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 13:19:23 GMT
age: 15051
etag: "ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87514736-0d8f-4476-92ba-b15762c98332.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87514736-0d8f-4476-92ba-b15762c98332.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7cf86d59e28da601117810faf66d57c4
7ea3dc5cec73e3003430fd4ecfd0b5eb58a4d513
2dc2bfcbd1ae97396ee2f95c436d48b27b056a2922b9415329e34144a5950472
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87514736-0d8f-4476-92ba-b15762c98332.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8696
x-amzn-requestid: 8a14fadf-4f6f-4dca-9d39-75d89cbf9a4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z1CmlEKeIAMFUWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634517c3-6d1f242d2dd574235f570b87;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 07:14:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: t6Cm2GB6lYmEjncGp0YA6rSo7k0SToeCOoZNmmSQ7T1HTDCkJGX9fQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 09:33:30 GMT
age: 28604
etag: "7ea3dc5cec73e3003430fd4ecfd0b5eb58a4d513"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.rbanglam.org/atu/aisnimuuq
38.242.147.221404 Not Found 12 kB URL HTTP/1.1 www.rbanglam.org/atu/aisnimuuq
IP 38.242.147.221:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3624), with CRLF, LF line terminators
Hash a10c96dfca233ca38ddd5c3ad5081f23
86eb10f0892ba67d467ffc65c38a3f9ddd0db1ec
f2dde5509945171dcdad062efcb25d7914ba258e467d7335c320ce9d99ebb409
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /atu/aisnimuuq HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Thu, 20 Oct 2022 17:30:14 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.rbanglam.org/rbm/wp-json/>; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://www.rbanglam.org/rbm/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://www.rbanglam.org/rbm
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11914
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
www.rbanglam.org/rbm/wp-content/plugins/the-events-calendar/common/src/resources/css/common-skeleton.min.css?ver=4.12.18
38.242.147.221200 OK 2.3 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/the-events-calendar/common/src/resources/css/common-skeleton.min.css?ver=4.12.18
IP 38.242.147.221:0
File type ASCII text, with very long lines (12612), with no line terminators
Hash 7a838cc66a87e04d2c2a446b891882c8
e1499905602be9355b4df4ec9ade31f8eaac1041
f7eb303bb7839688e4f249c0d852cee9c412df1fe398be5bd91d83f88b254a98
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/the-events-calendar/common/src/resources/css/common-skeleton.min.css?ver=4.12.18 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:36:07 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 2305
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ce5a724c887b90439ec9d074950fd2b7
e03985e47a91bc6ca7963303c67321173466c10f
ca91439f4fa5aeceb823f71e4566587f91f107a9361f3b11da02f1aef04b06de
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 405
Cache-Control: max-age=111346
Content-Type: application/ocsp-response
Date: Thu, 20 Oct 2022 17:30:17 GMT
Etag: "63509406-1d7"
Expires: Sat, 22 Oct 2022 00:26:03 GMT
Last-Modified: Thu, 20 Oct 2022 00:19:18 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.rbanglam.org/rbm/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3
38.242.147.221200 OK 13 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3
IP 38.242.147.221:0
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash e932eb2f326408993c246cd224404c51
d03dd809e867b675c7c587e107b1749344e8a68f
88bc6bf280b0dec362fcd08e1a3043d1b67b765fcffc93811b9e24a7a7cd4efa
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 16:48:32 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 12676
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/the-events-calendar/common/src/resources/css/tooltip.min.css?ver=4.12.18
38.242.147.221200 OK 579 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/the-events-calendar/common/src/resources/css/tooltip.min.css?ver=4.12.18
IP 38.242.147.221:0
File type ASCII text, with very long lines (1634), with no line terminators
Hash be4e7c39e21708aea076a259a54581e7
c4f5928db4c172cb152585d75a50d4c0f94586c2
ce6b7e871f79be603a5df91cf989bf82eabb935e6c5d3e38e7531943fdc0e18a
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/the-events-calendar/common/src/resources/css/tooltip.min.css?ver=4.12.18 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:36:07 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 579
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
38.242.147.221200 OK 14 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
IP 38.242.147.221:0
File type Web Open Font Format (Version 2), TrueType, length 13584, version 331.-31458\012- data
Hash 26636261aaf0d1ef6e9517fc5bf60c19
bd4460084be0826b1503d75122bff2a4d135b836
068d01d0631f14b77f9079c558a51ccfe79dc92e8052936f83e3a24b7c851dbf
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:08 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 13607
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff2
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
38.242.147.221200 OK 13 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
IP 38.242.147.221:0
File type Web Open Font Format, TrueType, length 20908, version 1.0\012- data
Hash 348fd2eb5e643ab55b941c5856bb91de
2a9f09f23744409d2b7e91e84de0cf64472319e9
896537956a829c4e7d97c3f4da555ad9b712cd75fca2e110b1879f5567255dec
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 12806
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff
www.rbanglam.org/rbm/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
38.242.147.221200 OK 4.2 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 38.242.147.221:0
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 09 Dec 2020 19:06:49 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 4169
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
38.242.147.221200 OK 80 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
IP 38.242.147.221:0
File type Web Open Font Format (Version 2), TrueType, length 80272, version 331.-31458\012- data
Hash 6434235ca688e29fa144bc22ca543290
7fe820316cbba9a58a71d12b918a761339ba71a8
5000e997aafb649dc01659c729bf11064388083306fe89a39056ec95e33c9678
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:10 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:17 GMT
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: font/woff2
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
38.242.147.221200 OK 79 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
IP 38.242.147.221:0
File type Web Open Font Format (Version 2), TrueType, length 78532, version 331.-31458\012- data
Hash e55e914a1c520c05ec67f48a24a8a35b
b601363aead28defb92f480f28b8a19610cc179c
6d824baa6146d5bcc2f774564713bde87d8aba6d4e3a64c9423811010804c264
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:10 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:17 GMT
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: font/woff2
www.paypal.com/en_US/i/scr/pixel.gif
151.101.1.21301 Moved Permanently 0 B URL HTTP/2 www.paypal.com/en_US/i/scr/pixel.gif
IP 151.101.1.21:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_US/i/scr/pixel.gif HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: max-age=0, no-cache, no-store, must-revalidate
location: https://www.paypalobjects.com/en_US/i/scr/pixel.gif
paypal-debug-id: f796516eac05a
set-cookie: ts=vreXpYrS%3D1760981417%26vteXpYrS%3D1666288817%26vr%3Df6721f2d1830a7885a109eecfb7c1220%26vt%3Df6721f2d1830a7885a109eecfb7c121f%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 19 Oct 2025 17:30:17 GMT; HttpOnly; Secure
ts_c=vr%3Df6721f2d1830a7885a109eecfb7c1220%26vt%3Df6721f2d1830a7885a109eecfb7c121f; Path=/; Domain=paypal.com; Expires=Sun, 19 Oct 2025 17:30:17 GMT; Secure
traceparent: 00-0000000000000000000f796516eac05a-9735f44f6e661866-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Thu, 20 Oct 2022 17:30:17 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4051-HHN, cache-bma1670-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1666287018.688722,VS0,VE161
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
content-length: 0
X-Firefox-Spdy: h2
www.rbanglam.org/rbm/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
38.242.147.221200 OK 31 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (65451)
Hash b50f63138863c21ee4dd2fd747d0eaee
24e2e53e39b5980f3021ad881f477387610fbfb6
a3810469de465100b039f38a6e39a83c11a1de3b4259b3028b2b85338770100c
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 09 Dec 2020 19:06:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 30916
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/team-showcase-supreme/assets/js/ajaxdata.js?ver=5.6.10
38.242.147.221200 OK 1.3 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/team-showcase-supreme/assets/js/ajaxdata.js?ver=5.6.10
IP 38.242.147.221:0
File type ASCII text, with CRLF line terminators
Hash b98842cdf60cb0a09211cdb6f6aef2ca
4ca907cf8dc7874faab782a65d7b419bc93afc28
5e4f913298c35ac8c429a2ddafec64adbae8b6bfad587db0b6f237596afc646b
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/plugins/team-showcase-supreme/assets/js/ajaxdata.js?ver=5.6.10 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:35:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 1273
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-includes/js/wp-embed.min.js?ver=5.6.10
38.242.147.221200 OK 765 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-includes/js/wp-embed.min.js?ver=5.6.10
IP 38.242.147.221:0
File type ASCII text, with very long lines (1391)
Hash fe875afb236ee8f0d50040fe58d848d4
e6b1b67093b429c95d5b9db07a7eba39e02cf0e5
328a6a072b91134f2802ae25e070f38ff156ceee2c6ec6a6253ae4b27af73b49
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-includes/js/wp-embed.min.js?ver=5.6.10 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 04 Feb 2021 04:08:58 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 765
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.paypalobjects.com/en_US/i/scr/pixel.gif
192.229.221.25200 OK 43 B URL HTTP/2 www.paypalobjects.com/en_US/i/scr/pixel.gif
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /en_US/i/scr/pixel.gif HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rbanglam.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/gif
date: Thu, 20 Oct 2022 17:30:17 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "5d5637be-2b"
expires: Thu, 20 Oct 2022 18:30:17 GMT
last-modified: Fri, 16 Aug 2019 04:57:34 GMT
paypal-debug-id: 81b5359302d60
server: ECAcc (ska/F6E2)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 43
X-Firefox-Spdy: h2
www.rbanglam.org/rbm/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3
38.242.147.221200 OK 46 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3
IP 38.242.147.221:0
File type ASCII text, with very long lines (42889)
Hash a05d97e9567b08edb5a23df1f0e3bae1
f38aa96185296038a335643361166fece5c695a1
ae9a9f6f099e9ca0d593d54615315e2e43fa0e31ff25f65d9e39f283a088c432
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 16:48:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 46106
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1
38.242.147.221200 OK 5.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (12991), with no line terminators
Hash a0d8e61a86acfd34c823df6c4badc5a3
fb00037bab11581b913967e55d28ae943f507d61
c95bdcc03231c08f282387f7616ba2975ce8294c06bea93aa3d756397b2cc2e5
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 5086
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3
38.242.147.221200 OK 85 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3
IP 38.242.147.221:0
File type ASCII text, with very long lines (64270)
Hash db026b794134a16f24fdb144d5fc7238
570ad90e963c69ae26bd3bb17bb3386fa6f13a30
902a5688795408d6624a37d42bca2efcf28d846bf585c84c0a652efde8bbe842
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 16:48:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28
38.242.147.221200 OK 1.5 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28
IP 38.242.147.221:0
File type ASCII text, with very long lines (3344), with no line terminators
Hash 37fc75887c0fa5d78ce3b556e51120bf
a44495eb12fd0b174282a810266fc92075fbe1a8
68ed74321bad917a33ef6e0c273d716a023f02b300a7d34bcaa67765df812104
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1498
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.waypoints.js?ver=2.0.3
38.242.147.221200 OK 2.6 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.waypoints.js?ver=2.0.3
IP 38.242.147.221:0
File type ASCII text, with very long lines (8833), with no line terminators
Hash 8eae25fc5fbc596cab180abd12f4c420
0318f249782999532a4f8a06444a0834b3f64499
c4ade84946f1c24693bd3e9e2f2307220e828659860313644a78523ee2d22dc0
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.waypoints.js?ver=2.0.3 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 2606
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=1
38.242.147.221200 OK 618 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (1642), with no line terminators
Hash ee087406aba447ef88bae99d18e6d27b
0d2873107dee8c8164b66bb77fe38fb29ced85e7
f987636d6d18fc3f9e6b228d2d822fae732291940901fb3e3a3fe26906ba2000
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 16:46:21 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 618
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-waypoints.js?ver=1
38.242.147.221200 OK 287 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-waypoints.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (503), with no line terminators
Hash d5a59d9450726bd9edb3004de1165297
ce23f627b63ab58ed0829e1bf8b65212a2a49c43
e5cc54a01129bb2e30a97c520842f5e7386b9fb60f31e5bb9b78c5e7062c5f30
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-waypoints.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 287
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion.js?ver=3.2.1
38.242.147.221200 OK 1.3 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion.js?ver=3.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (3506), with no line terminators
Hash ba4236ebb3b3a8795143debc912af89e
62ceca9201795e7986452f1ac3c1f4e5b40a8772
7a21685b85b56db176473224631c51c6f46df85dd1e73b98fd746c4c96e9a460
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion.js?ver=3.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1293
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/packery.js?ver=2.0.0
38.242.147.221200 OK 4.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/packery.js?ver=2.0.0
IP 38.242.147.221:0
File type ASCII text, with very long lines (13723), with no line terminators
Hash 3e390e9e9125b1813278f3664c417caa
f5a36c8af53cc055321e44032e311d4685866672
8ac747a3636de6d1fe854767f0890551a4054f221c23c383aff3d2b916011324
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/packery.js?ver=2.0.0 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 4124
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5
38.242.147.221200 OK 3.8 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5
IP 38.242.147.221:0
File type ASCII text, with very long lines (10862), with no line terminators
Hash 2b897ffb697e54a3d3adf6967bf2e0dc
9b02310f51341d49ef8bdcb8adfac2b8d6e73dff
865b8edbeee4d1a431c3a502ca53c4bb42aaf59a9b95071539524788e3de5f37
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 3831
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/isotope.js?ver=3.0.4
38.242.147.221200 OK 9.6 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/isotope.js?ver=3.0.4
IP 38.242.147.221:0
File type ASCII text, with very long lines (34773), with no line terminators
Hash d786294b466e80ea34a60068379abcd9
815c44cb540efb5ebe66dd345b61fbb4f1c12859
238c1ebae671faf078c795440464377b2c7f81e2386f3507fd0dd5857cd14f03
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/isotope.js?ver=3.0.4 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 9619
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/css/wpforms-full.min.css?ver=1.6.5
38.242.147.221200 OK 5.3 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/css/wpforms-full.min.css?ver=1.6.5
IP 38.242.147.221:0
File type ASCII text, with very long lines (38860)
Hash bd7034c9f6d36ccb543ecd1b6270904e
45cad1ae1163fe4a1362deb0ad670cd2372e78ab
da199778d96d51ebd44a7d72c57bd8e8658cf4b7825e04f1445eaba04cf792c8
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/wpforms-lite/assets/css/wpforms-full.min.css?ver=1.6.5 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:36:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Content-Length: 5305
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1
38.242.147.221200 OK 788 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1
IP 38.242.147.221:0
File type HTML document, ASCII text, with very long lines (1767), with no line terminators
Hash 61e085fb4a40dda6cda2cd15601ef142
7f7c36950941466dbc383f212c6b24a93c6018e2
54f1cab04979429b6eaa68c9cdfaad72ab3a876c726093ff69b441e7d4f72504
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 788
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.7.2
38.242.147.221200 OK 6.4 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.7.2
IP 38.242.147.221:0
File type ASCII text, with very long lines (22335), with no line terminators
Hash 7581a1db914684859b8debe4888f5391
a6e574d59d603226935ce6ea24ab59ff0a29412d
bef0fe78c9dc6667e6d3ddaebf785017b363be121ae73663608f1a69f09deffc
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.7.2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 6398
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
38.242.147.221200 OK 750 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
IP 38.242.147.221:0
File type ASCII text, with very long lines (2283), with no line terminators
Hash ec119155ac6f07ffa465e09b7d1470cd
fef5d19b11a9b3693dd3202681b7cc393081fb99
2edee4e6a84e0b13d90ee6882cf7071f8b6d42f5718a10c8f186c2397f2901b1
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 750
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.hoverflow.js?ver=1
38.242.147.221200 OK 334 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.hoverflow.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (647), with no line terminators
Hash d149404863e3dff58424f3f020ae6ace
869cc5667a9c403ceca871820efb16bd194251d6
bbf79d290f98746420dc076d71132d409a2f9dc4132f7d06669b615097fcfb8f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.hoverflow.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 334
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.hoverintent.js?ver=1
38.242.147.221200 OK 455 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.hoverintent.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (1098), with no line terminators
Hash 97be25d41a014510ed835c93ae9bf00c
241fe04678061088d24d67750824982cbc403d04
ca8aae7fae9d35c489bd8311931bdab26df4d83e0990b08b6409be8e7dcfd2a0
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.hoverintent.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 455
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3
38.242.147.221200 OK 25 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3
IP 38.242.147.221:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3de5fc2f0c59261562434b26b246ce45
710573c6be63051b91773da8d1c4dbf853b48520
dce7d7cb0ad86f3d5a421d2faa3a062fbd5181c021e6a6f6675414859c8a177f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 25165
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6
38.242.147.221200 OK 1.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6
IP 38.242.147.221:0
File type ASCII text, with very long lines (2604), with no line terminators
Hash 5ae90f2b135740cf6a0b1815059797b5
3bba4fb3bb2fd84eae701ade789253b1168146dc
7f51931d14697dc28a2457d8c8c356f15784804abb4d06b3f287b5ff271c54b7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1128
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/imagesLoaded.js?ver=3.1.8
38.242.147.221200 OK 2.2 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/imagesLoaded.js?ver=3.1.8
IP 38.242.147.221:0
File type ASCII text, with very long lines (6785), with no line terminators
Hash 5e1c080a1516f44b73b474d3f1315040
d517bbe1df2a3ed633ad5d03adda7b4638596b58
4457b905261c66e7cbfbc89e6d25a435ade8b103ebc2e53453155e3df9544b2a
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/imagesLoaded.js?ver=3.1.8 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 2221
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.infinitescroll.js?ver=2.1
38.242.147.221200 OK 12 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.infinitescroll.js?ver=2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (20999), with no line terminators
Hash 3dd2315d7760fc6a039efeee6ce27c1d
c01414f192113355458779aa0828a9ccae3fb2e8
c129cb9d6474382bbe2046795ac8de4183e68447ad7124c25acc7e4a763884d3
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.infinitescroll.js?ver=2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 11992
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/the-events-calendar/vendor/jquery-placeholder/jquery.placeholder.min.js?ver=5.4.0.1
38.242.147.221200 OK 1.3 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/the-events-calendar/vendor/jquery-placeholder/jquery.placeholder.min.js?ver=5.4.0.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (3172)
Hash 155f209ff787198f50a584e0faad095c
5bcbf41e935935b2a15fd235dcbff6a1d80d2ca6
9f9b00e54d7389721d579c757e30645ab7f27ec49035dd73ca7b52896d16859a
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/the-events-calendar/vendor/jquery-placeholder/jquery.placeholder.min.js?ver=5.4.0.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:36:31 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1298
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1
38.242.147.221200 OK 2.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (7279), with no line terminators
Hash 9c8f3ffa22461723f0bbc683dd096478
9b33e826fdf2bafedebfc63ddb2546a9e71c69df
e20d81453911095276254c0fef3c4826e94e61f3e9885e2fcf49053925ef91da
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 2117
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1
38.242.147.221200 OK 2.0 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (6803), with no line terminators
Hash 447896c8db1d6562ecb0bb525fa9e146
1b196c21513102aac759de7eb419a6dc194fe514
0d8a121b88f25f73506c24a106f1be124fc72eab1b3eba13b9b8f5f87e39c47f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1972
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=1
38.242.147.221200 OK 1.3 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (5834), with no line terminators
Hash 0c73bfa5503f1df157d29506eff18662
092a591e9be00fcc5316e9f9797a11ced3120b80
f1223d283d6889fa1e30f2cb8763d8b05f79857e91d7d681a9513f4f62855a8c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1306
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1
38.242.147.221200 OK 493 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (1707), with no line terminators
Hash 57c3257ed4c7382068ceb34eebc35c2d
22f175f1dbd120faff6b32e352fb27d69ca0d82d
882c93c126056b11b0e6521ee9ef2d595138b6a504888a0d06d0a8f9a331c64a
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 493
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1
38.242.147.221200 OK 621 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (1417), with no line terminators
Hash 9aef2dd466ce9c265becfbae916a8ad7
dfdd83790d7c5b4ef1c360c5f54c0aeaacdbcf04
c204e8c09a4e032a99a422a93040537397a4e3f1f690b1eee1dbd5bcb647be55
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 621
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1
38.242.147.221200 OK 347 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (920), with no line terminators
Hash 51abcdc9af041208b34015b853c5bf10
250af371d384b06d49bf20919f4b08520589da8f
3984c874ebd9096044e918e5130505a65e19be6a32a143023d7c55e14eb9076a
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 347
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.sticky-kit.js?ver=1.1.2
38.242.147.221200 OK 1.9 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.sticky-kit.js?ver=1.1.2
IP 38.242.147.221:0
File type ASCII text, with very long lines (5806), with no line terminators
Hash 859b5da3ddec30730ea5ba2789918e20
425f6918fb1c70447e3f9b3984563890c886a6d4
596e4f4e65425e4ee0eee68e848d0574f76fa332054b60d0981f8f33fa15e762
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.sticky-kit.js?ver=1.1.2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1947
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/vimeoPlayer.js?ver=2.2.1
38.242.147.221200 OK 5.3 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/vimeoPlayer.js?ver=2.2.1
IP 38.242.147.221:0
File type Unicode text, UTF-8 text, with very long lines (16292)
Hash 1afce9330bd32008d443e1e6e75c2b8f
b5fb6d07870e9f11950adb3a0d651044a90b68a1
70f2980f14fec6a9bbf9c6e29ae1b255843fa12e3d5e51b64421fe0a7a92891b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/library/vimeoPlayer.js?ver=2.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 5319
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-skip-link-focus-fix.js?ver=7.2.1
38.242.147.221200 OK 242 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-skip-link-focus-fix.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (325), with no line terminators
Hash 08d2bf4a763267afc84beb93b7c39f88
2221be913b0428a1bafe766ec95a841b488318bc
2902a191ee6ba196d11c1606d3d05bcc3e9ed69a71e101ea4ab3735f6aa81105
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-skip-link-focus-fix.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 242
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1
38.242.147.221200 OK 161 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (44316)
Size 161 kB (161395 bytes)
Hash 2eadab9cda4b70fd0aeaf749aebd9df4
e1ba1e090a8f5f57cc34e03c5e720ce559dd6e59
3f348396c8dec5333137bcd5164a6ade617ae78dc84685c41d78701ed88f67cc
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:17 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 20 Oct 2022 15:09:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:17 GMT
Content-Encoding: gzip
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-quantity.js?ver=7.2.1
38.242.147.221200 OK 762 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-quantity.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (1848), with no line terminators
Hash ba777c6fe8ccf511617e101546b3de6d
6979f0d13a0fe22e5616e5ea2d80f6ea50ac4ba7
7b38e33992eb537f09b640317ea65fac2f9939e2bbd92e2986dad6cb141bc84e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-quantity.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 762
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-general-footer.js?ver=7.2.1
38.242.147.221200 OK 218 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-general-footer.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (413), with no line terminators
Hash 23f2f1c5d7ea17a286f0786a6e140c57
07747eb896e632ae0be9434bd6f72f23bfd5deba
37ec369020564a393ed54f305a9405de87340872e44669cc0a5d4f93b579715f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-general-footer.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 218
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-select.js?ver=7.2.1
38.242.147.221200 OK 312 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-select.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (682), with no line terminators
Hash d415d41e63e5c51c245c11e2a0ad0c78
16cb754df45e0d8b0615122fbe0a5a032e295f93
3e415e09a764117401010f6365bfedb5568b644804b0166718e3fe038c04f3ab
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-select.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 312
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2
38.242.147.221200 OK 1.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2
IP 38.242.147.221:0
File type ASCII text, with very long lines (2709), with no line terminators
Hash 0de465ca8f3ad7dfce8d525142a9175c
d625ba3a097c57095adb40bcd552b58920ee0b31
ffe030d163984f932f9a7aee51724d9e016baf3cff4bd96650198cc90ea05094
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1065
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-rev-styles.js?ver=7.2.1
38.242.147.221200 OK 612 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-rev-styles.js?ver=7.2.1
IP 38.242.147.221:0
File type HTML document, ASCII text, with very long lines (2774), with no line terminators
Hash 097c2e260afbf3484166dda09e369911
36b67a6a92d6eea470126e3f3e8e86b9e676ef70
9d1c0dae4745147702c71abe73f2439f73a99d7e578634803eac2851d4343367
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-rev-styles.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 612
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-events.js?ver=7.2.1
38.242.147.221200 OK 842 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-events.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (2679), with no line terminators
Hash 73400825b30c661f8533ecb6e55cca58
27fbccfaae7c5c020680b6d58da5d91d9a689078
5964efd59d722d0fdbb244d48800a54ba4f3b684e0fd0fa1b1db2f249e9772d2
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-events.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 842
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-alert.js?ver=5.6.10
38.242.147.221200 OK 195 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-alert.js?ver=5.6.10
IP 38.242.147.221:0
File type ASCII text, with no line terminators
Hash 035163682275e8f6a212787443a5bec6
030d18ea4df0e92fc24075a087a5d9348ac9ec05
a8c8562166bc6c2f9865bcd3ce89dd0e9d5e49cb6583bcb7d4579e173a882f60
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-alert.js?ver=5.6.10 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 195
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-live-search.js?ver=7.2.1
38.242.147.221200 OK 1.0 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-live-search.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (3062), with no line terminators
Hash 09b7956e3e892c1fb9e03bea223e6284
96a6e9d09940dc08b73238aacad34ae2fddebd5c
5c74f52179c53d83d6fc98603c0acb6ae3864e8640ec2ff740bb6f05f0aa6f30
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-live-search.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1039
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-blog.js?ver=5.6.10
38.242.147.221200 OK 2.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-blog.js?ver=5.6.10
IP 38.242.147.221:0
File type ASCII text, with very long lines (7697), with no line terminators
Hash 3b785197f057e902f99707586762e58f
db9c802b5e3ed78caa9c511375cb4204224e621b
f95f88a2492a1384c55208d71350157812ed74287bcab2caf09641b804906b83
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-blog.js?ver=5.6.10 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 2079
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-tabs-widget.js?ver=7.2.1
38.242.147.221200 OK 259 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-tabs-widget.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (498), with no line terminators
Hash dae7e5f077e7abb1818b9bb20a87cc1a
a9a08e03abe8c8fd04196c143a008d5ba10ccc4e
716a1824c0b23045a62191926cbfd6baacd79bd1004b541668930fe492281841
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-tabs-widget.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 259
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-drop-down.js?ver=7.2.1
38.242.147.221200 OK 1.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-drop-down.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (5839), with no line terminators
Hash 45f59ab37072f6d3ecba05e1bd0a7c5d
652f98b802256d5511f11b9ac5d12fd7684a77ee
efb2e971aa484bbdd2b9a9c3204f72fc97f81e43d1880f0b849c57faaeadf43c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-drop-down.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1107
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-scrollspy.js?ver=7.2.1
38.242.147.221200 OK 331 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-scrollspy.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (761), with no line terminators
Hash 23f44935192d6700820ccbb499e217ff
1a0df8aae68cef2f7046b3db9ab37e457b856153
7ff3a2a48c48f952369cd8e286aa3a4dc0f2cb300c6904a5b2b6b504e7c2c58b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-scrollspy.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 331
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=7.2.1
38.242.147.221200 OK 6.9 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (40017), with no line terminators
Hash c7eea518844a024334f8aff1dd042cf2
95c6b3fab30efd9772060e8cbb7e00373994bb3f
5919ec0516cc60b4b699daaa60466efff0a8021c9c999dc77e8896a2bb3db908
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 6856
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-to-top.js?ver=7.2.1
38.242.147.221200 OK 460 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-to-top.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (1012), with no line terminators
Hash 47edf7190d27082d7e08dbd5f485853e
1ad4d4d95a737cde6ee59a951e6446a460244734
eae407a9ed6926f3a401505e1e69357d3e5d51e9709a68de971ee4d44150954c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-to-top.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 460
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.paypalobjects.com/en_US/i/btn/btn_donateCC_LG.gif
192.229.221.25200 OK 3.1 kB URL HTTP/2 www.paypalobjects.com/en_US/i/btn/btn_donateCC_LG.gif
IP 192.229.221.25:0
File type GIF image data, version 89a, 147 x 47\012- data
Hash 3ed0eaf21fb245cd89456c2756889741
7f7727028800623e8d82f346ca1752b56b7edcbb
33a91bd6d378215fcd413c279aa88d48bda6c8b2ef7695892777c87de37de256
GET /en_US/i/btn/btn_donateCC_LG.gif HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/gif
date: Thu, 20 Oct 2022 17:30:18 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60afaa97-c1b"
expires: Thu, 20 Oct 2022 18:30:18 GMT
last-modified: Thu, 27 May 2021 14:20:07 GMT
paypal-debug-id: 2b4c172ba8a6d
server: ECAcc (ska/F6EC)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 3099
X-Firefox-Spdy: h2
avada.theme-fusion.com/church/wp-content/uploads/sites/35/2015/09/church_bkgd3-compressor.jpg
104.22.61.189301 Moved Permanently 0 B URL HTTP/1.1 avada.theme-fusion.com/church/wp-content/uploads/sites/35/2015/09/church_bkgd3-compressor.jpg
IP 104.22.61.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /church/wp-content/uploads/sites/35/2015/09/church_bkgd3-compressor.jpg HTTP/1.1
Host: avada.theme-fusion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 20 Oct 2022 17:30:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 20 Oct 2022 18:30:18 GMT
Location: https://avada.theme-fusion.com/church/wp-content/uploads/sites/35/2015/09/church_bkgd3-compressor.jpg
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75d37b0bbe48b4fd-OSL
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-sidebars.js?ver=7.2.1
38.242.147.221200 OK 831 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-sidebars.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (3569), with no line terminators
Hash feede19db1ff6d66e7611c151080ba78
27b5af0d4354987955343045a92d898fe4683e50
f9312acfe4a2d7aa3915c2db470af0acce219314206bf2b8422503a95d34c1dc
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-sidebars.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 831
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1
38.242.147.221200 OK 245 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (483), with no line terminators
Hash 4001b77cd3b0c975837e565ac678502a
044aa2eddb3c3f51fb12a4d2a28e251c80878202
040c6f4cd99e486f79e06fffdc110d3a554dd72a8d76ac025cf9a6c7110518ca
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 245
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1
38.242.147.221200 OK 1.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (3575), with no line terminators
Hash 362c505132be35e91689b992dd43700f
87ec7277f10693dfa2fd657f0898e543262a390b
034d91f636a76931100306dcdb9c90a9eb57702ae4ed82bbbee11f1ea5240622
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1068
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1
38.242.147.221200 OK 1.7 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (5512), with no line terminators
Hash c1c49ff3587c1ae434e3137369d31f39
bfd30d6c0689e3fee6eb3858dd4e1d6320452c46
a76772acd19ffe787b9070b93371a2757d953868c471fb890c719528d6827a81
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1722
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1
38.242.147.221200 OK 675 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (2069), with no line terminators
Hash b97f92b47d360b9d94636d8afbf305fd
e1f9cc5abcf5ae59ea3a74efa17309363707d811
8242a3995bf277eaaa72deb3abe069ce495d8618fa455906fcf24684251f0676
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 16:46:21 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 675
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=7.2.1
38.242.147.221200 OK 4.1 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=7.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (33211), with no line terminators
Hash 7474798c16ebd038ce0717939f810871
6b20662f0c986ea08ca54a3255b8ec22042e7d65
b43e216b17047c178d1b74b3f7feb487bbd9a9491cdec0150ecace3285281b99
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=7.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 02:11:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 4113
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=5.2.1
38.242.147.221200 OK 461 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=5.2.1
IP 38.242.147.221:0
File type ASCII text, with very long lines (1887), with no line terminators
Hash 9cc19293a40d35fcc8a3445fd1b0c646
372a64f473c7869f3c6534732f0d1b6951113fe2
12d77d43b3baa7b1dbc49d8ee870ad55edb617a8e3058bf821cc02d91d944c43
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=5.2.1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 16:45:05 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 461
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1
38.242.147.221200 OK 922 B URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1
IP 38.242.147.221:0
File type ASCII text, with very long lines (5069), with no line terminators
Hash 513b2d008c2cc515e44aff388b9ee54a
35f480533c38a900008022500acc875b399afcac
16eabd4930502fa03ec878df81979d8f9aac532291b82841eb859c2effa51fc4
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 30 Dec 2020 16:46:21 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 922
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/js/jquery.validate.min.js?ver=1.19.0
38.242.147.221200 OK 7.8 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/js/jquery.validate.min.js?ver=1.19.0
IP 38.242.147.221:0
File type Unicode text, UTF-8 text, with very long lines (24228)
Hash 4caa78079520fab58e3615f81274ec29
685e548ace99ea299bcf7a959a8f1004dc96daf8
1cb6aa8a7eeec4bdbdf94d00ea890f7409b9f36b22ca9b3eee42547a1116eef7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/wpforms-lite/assets/js/jquery.validate.min.js?ver=1.19.0 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:37:00 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 7815
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/js/mailcheck.min.js?ver=1.1.2
38.242.147.221200 OK 1.7 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/js/mailcheck.min.js?ver=1.1.2
IP 38.242.147.221:0
File type C source, ASCII text, with very long lines (4014), with no line terminators
Hash 378928a458b9a32d539470fb4bcaf34e
e9a05c4b7e7e2b0d73263fde1293d4d35322b3d7
2bb2847ddf8e0657812fb17dc13b557139710483131d346c5b543876558b1e68
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/wpforms-lite/assets/js/mailcheck.min.js?ver=1.1.2 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:37:00 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 1682
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/js/wpforms.js?ver=1.6.5
38.242.147.221200 OK 16 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/plugins/wpforms-lite/assets/js/wpforms.js?ver=1.6.5
IP 38.242.147.221:0
Hash 98b2f2dd1078073eb18b4f52b26668f4
c2b7e35a08b28a466a0c02e1068bf57dedf6da5c
4505e5fe1d5af18c1564ae69f62c9ba89e56c81aa0a21c0b0d3861161ef41b64
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/plugins/wpforms-lite/assets/js/wpforms.js?ver=1.6.5 HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Sat, 06 Mar 2021 17:37:00 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public, public
Expires: Fri, 20 Oct 2023 17:30:18 GMT
Content-Encoding: gzip
Content-Length: 15637
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQUwaEQXjM.woff
38.242.147.221200 OK 15 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQUwaEQXjM.woff
IP 38.242.147.221:0
File type Web Open Font Format, TrueType, length 15088, version 1.1\012- data
Hash e4ad92e1aadc65135d0165f0ed4a7411
4f3b862a60d24e4038937871b4c536db58ba8521
8030191fd7607b2f92fed97d2a7ad89f0f21a2e308734c0e12e5d1147ae8ff56
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/uploads/fusion-gfonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQUwaEQXjM.woff HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.rbanglam.org/rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2022 15:08:05 GMT
Accept-Ranges: bytes
Content-Length: 15088
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:18 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: font/woff
www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrcVIT9d4cw.woff
38.242.147.221200 OK 21 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrcVIT9d4cw.woff
IP 38.242.147.221:0
File type Web Open Font Format, TrueType, length 21248, version 1.1\012- data
Hash b888fc0fe6f057e2160ab92c5fd47459
6209c752b3c69fdea84c3c58dc26bc5e1548bc81
f3c347cf4f32fae89500b4f086622d0bc20957393fc62fa13d0967b62828851b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrcVIT9d4cw.woff HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.rbanglam.org/rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2022 15:08:06 GMT
Accept-Ranges: bytes
Content-Length: 21248
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:18 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: font/woff
www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVuEorCIPrcVIT9d4cw.woff
38.242.147.221200 OK 21 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVuEorCIPrcVIT9d4cw.woff
IP 38.242.147.221:0
File type Web Open Font Format, TrueType, length 20864, version 1.1\012- data
Hash d872d08bbb5a11b339c5c14eda86f4de
858a15f9f63acd7c67741fe86f897477290306f1
d34f1dad21494ea58feed91aaef8cd744d0797f0fe60154d2c9856939f2be994
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVuEorCIPrcVIT9d4cw.woff HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.rbanglam.org/rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:18 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2022 15:08:06 GMT
Accept-Ranges: bytes
Content-Length: 20864
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:18 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: font/woff
www.rbanglam.org/rbm/wp-content/uploads/2020/12/Logo.png
38.242.147.221200 OK 41 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/2020/12/Logo.png
IP 38.242.147.221:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 499e5510f07bc98c05cb2a4f8df74a28
f9fffcbbeb66404b3e1236be031271c9502f7177
27730940c6f750d0df8eaeac4ce191009f7fd0b951f800adbd3bd3a9f566c79f
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/uploads/2020/12/Logo.png HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:19 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Fri, 04 Dec 2020 17:43:14 GMT
Accept-Ranges: bytes
Content-Length: 41170
Cache-Control: max-age=10368000, public, public
Expires: Fri, 17 Feb 2023 17:30:19 GMT
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVQUwaEQXjM.woff
38.242.147.221200 OK 15 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVQUwaEQXjM.woff
IP 38.242.147.221:0
File type Web Open Font Format, TrueType, length 14568, version 1.1\012- data
Hash b450cf4acba95e890b284a45403d174c
2b9e5c306370bae1487cd09bab89a89a34e8c63c
337d3642469113b35ad9d28f34de6b707b936a5d3a8b3174f4f514b6ce1006ca
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/uploads/fusion-gfonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVQUwaEQXjM.woff HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.rbanglam.org/rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:19 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2022 15:08:05 GMT
Accept-Ranges: bytes
Content-Length: 14568
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:19 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: font/woff
www.rbanglam.org/rbm/wp-content/uploads/2020/12/ph0-66x66.png
38.242.147.221200 OK 2.8 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/2020/12/ph0-66x66.png
IP 38.242.147.221:0
File type PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 332f677da5e22ff113f2d8ce2062093b
7931f5d8afea089e3ed3556e275ead6b52938155
fa8b2efc4ddbdb1a3e13d1f4976a6586849a04d215fc9f855f1afa36b8fba703
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/uploads/2020/12/ph0-66x66.png HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:19 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Fri, 11 Dec 2020 08:50:28 GMT
Accept-Ranges: bytes
Content-Length: 2811
Cache-Control: max-age=10368000, public, public
Expires: Fri, 17 Feb 2023 17:30:19 GMT
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff
38.242.147.221200 OK 21 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff
IP 38.242.147.221:0
File type Web Open Font Format, TrueType, length 20972, version 1.1\012- data
Hash a326c47c3038ee95e834af4137354081
328ed7688bb9083e97c264b52d3068a6cf320a53
7b39693e5b25e6747c407920eaf32ace22b70c5753dc45b33e9a2885d297cfb9
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /rbm/wp-content/uploads/fusion-gfonts/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.rbanglam.org/rbm/wp-content/uploads/fusion-styles/560a24eb32fb84ba4077babc29ff1a79.min.css?ver=3.2.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:19 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2022 15:08:06 GMT
Accept-Ranges: bytes
Content-Length: 20972
Cache-Control: max-age=10368000
Expires: Fri, 17 Feb 2023 17:30:19 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: font/woff
www.rbanglam.org/rbm/wp-content/uploads/2020/12/location-66x66.png
38.242.147.221200 OK 1.7 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/2020/12/location-66x66.png
IP 38.242.147.221:0
File type PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 699a22f4e9e7500755f1346a3e26c844
fd8b131724ca8cb9394741a60a0d5807f15ea1f2
bf3e7c2ee45bcddc84916ee4d52034c80a2d6d5a749927b7afa725b22290f743
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/uploads/2020/12/location-66x66.png HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:19 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Fri, 11 Dec 2020 07:44:50 GMT
Accept-Ranges: bytes
Content-Length: 1749
Cache-Control: max-age=10368000, public, public
Expires: Fri, 17 Feb 2023 17:30:19 GMT
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
www.rbanglam.org/rbm/wp-content/uploads/2020/12/em-66x66.png
38.242.147.221200 OK 3.5 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/2020/12/em-66x66.png
IP 38.242.147.221:0
File type PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash ea2bed36a9e094fe57c66fa668ff386f
5fb7c86666cc0a9240d3274a87bc50e6a399ca05
35b093d9ca6e3fe01082b2168ed0e0e933054b5373fe301468a351b038894cb0
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/uploads/2020/12/em-66x66.png HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:19 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Fri, 11 Dec 2020 08:42:18 GMT
Accept-Ranges: bytes
Content-Length: 3547
Cache-Control: max-age=10368000, public, public
Expires: Fri, 17 Feb 2023 17:30:19 GMT
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
www.rbanglam.org/rbm/wp-content/uploads/2021/02/QR-Code.png
38.242.147.221200 OK 2.2 kB URL HTTP/1.1 www.rbanglam.org/rbm/wp-content/uploads/2021/02/QR-Code.png
IP 38.242.147.221:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash fb97b1da7699018431d45b0f43b25858
7f263f900b08c91f4bcc7893eb9c2daf477ce7ad
425cb9e4338976978ccef9d7605c67931a474844d8012d9c8fed7f4bf94802b0
Analyzer Verdict Alert quad9 Sinkholed
GET /rbm/wp-content/uploads/2021/02/QR-Code.png HTTP/1.1
Host: www.rbanglam.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rbanglam.org/atu/aisnimuuq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 20 Oct 2022 17:30:19 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 04 Feb 2021 21:34:41 GMT
Accept-Ranges: bytes
Content-Length: 2180
Cache-Control: max-age=10368000, public, public
Expires: Fri, 17 Feb 2023 17:30:19 GMT
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
avada.theme-fusion.com/church/wp-content/uploads/sites/35/2015/09/church_bkgd3-compressor.jpg
104.22.61.189200 OK 87 kB URL HTTP/2 avada.theme-fusion.com/church/wp-content/uploads/sites/35/2015/09/church_bkgd3-compressor.jpg
IP 104.22.61.189:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1950x1279, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ae1bcc08410d392e4770e28929609f74
0200b8c0510394d56b18feedb792d170dc19d807
3f1d2bb90276907c8410a891e591352511b650ca494e08cbf9baf03bb8c55805
GET /church/wp-content/uploads/sites/35/2015/09/church_bkgd3-compressor.jpg HTTP/1.1
Host: avada.theme-fusion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 20 Oct 2022 17:30:19 GMT
content-type: image/webp
content-length: 87228
cache-control: public, max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=138173
content-disposition: inline; filename="church_bkgd3-compressor.webp"
access-control-allow-origin: *
etag: "5d3fca89-21bbd"
last-modified: Tue, 30 Jul 2019 04:41:45 GMT
vary: Accept
cf-cache-status: HIT
age: 273132
accept-ranges: bytes
server: cloudflare
cf-ray: 75d37b0defc50b61-OSL
X-Firefox-Spdy: h2