edunews.tg/
301 Moved Permanently 227 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 967be97cfb1a04cf6e8251e068d19043
8814773b4cfbb08538677707ef615cc0f7338d26
171070e67369ae90bf1b533e071c621dbd453c95655a4754311072a0e84ceb4d
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 04:45:44 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 227
Connection: keep-alive
server: fastestcache
fc-cache-engine: varnish
fc-request-id: bcdf0e2ca4ceeea0ea45ecbd08719ad2
Location: https://edunews.tg/
Age: 0
Via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
X-Request-Id: bcdf0e2ca4ceeea0ea45ecbd08719ad2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6726
Expires: Tue, 15 Nov 2022 06:37:50 GMT
Date: Tue, 15 Nov 2022 04:45:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6073
Cache-Control: max-age=113206
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 04:45:44 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 12:12:30 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 15 Nov 2022 04:44:22 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 82
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c88bc06741ab9fb81c2544acfcc34aa2
362cab19cff5aba27f472cc00071d5dfa38192e4
314ba27975f458e13917b2be91c9d5989a3e57c9e94b5a84dd52d0e21d27ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "314BA27975F458E13917B2BE91C9D5989A3E57C9E94B5A84DD52D0E21D27AE7F"
Last-Modified: Mon, 14 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5276
Expires: Tue, 15 Nov 2022 06:13:40 GMT
Date: Tue, 15 Nov 2022 04:45:44 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TUTJA8LEiyOeG3QuJ0zOzuB52mB8XyLFwoxYr9VmNl9BnIH6REuJC58YWtJ9WZFwwfH1SYEoSVE=
x-amz-request-id: 1XPYRHRHYM19D2RS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 15 Nov 2022 03:51:24 GMT
age: 3260
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 471 B IP
Hash 4c752c2b13a282db3f69396f768eb411
ac9c95cb9850204ba98aa072401441db9d9e2dcc
45d3a50497b224aab3e8ecf6fc92531130f63de56bea368ec1860468d3916238
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 04:45:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2022 10:31:46 GMT
Expires: Sat, 19 Nov 2022 10:31:45 GMT
Etag: "ac9c95cb9850204ba98aa072401441db9d9e2dcc"
Cache-Control: max-age=404080,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a556d1dc2cb4ed-OSL
a.mailmunch.co/app/v1/site.js
200 OK 8.4 kB URL HTTP/2 a.mailmunch.co/app/v1/site.js
IP
File type ASCII text, with very long lines (26082), with no line terminators
Hash a50e3c53b4f79a9890ab4a3432c463cb
d53733eda39cbd0177c883f6b62a67efd789b0b0
4efb8ca87c34d0c3c4c698a4fc6d4504b3bdd28bfeba38180bdbec4f4381cc28
GET /app/v1/site.js HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 8433
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, POST, PUT, DELETE
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Fri, 11 Nov 2022 12:28:39 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sun, 13 Nov 2022 12:31:16 GMT
cache-control: max-age=172800
etag: "a50e3c53b4f79a9890ab4a3432c463cb"
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 70rkNiScR9XFM1JINK3jsSAgNG9a_kZNcR6XJNn05drIaFYwBDbxTw==
age: 144869
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 04:45:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 04:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 15 Nov 2022 04:25:01 GMT
cache-control: public,max-age=3600
age: 1244
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1
200 OK 129 B URL HTTP/2 edunews.tg/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1
IP
File type ASCII text, with no line terminators
Hash 5ef26b5e47e6951f43ecf2b1fc645222
081afb52577f6f3bb044fdea6d34a632c3cce7e8
50679e0e3933c945348a2db0cc128bb14b57a60a74fabf8cae13acc14efbb2e1
GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
content-length: 129
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 6ea37aae9c7ebcf09af546277e1fbb66
last-modified: Sat, 06 Aug 2022 09:43:39 GMT
vary: Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
accept-ranges: bytes
fc-cache-status: MISS
x-request-id: 6ea37aae9c7ebcf09af546277e1fbb66
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 04:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://edunews.tg
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 18:51:51 GMT
expires: Thu, 09 Nov 2023 18:51:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
age: 467634
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 04:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://edunews.tg
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 08 Nov 2022 22:17:42 GMT
expires: Wed, 08 Nov 2023 22:17:42 GMT
cache-control: public, max-age=31536000
age: 541683
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 04:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3972
Cache-Control: max-age=106048
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 04:45:45 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 10:13:13 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
edunews.tg/wp-content/themes/mag-lite/assest/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://edunews.tg/wp-content/themes/mag-lite/assest/css/font-awesome.min.css?ver=4.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: font/woff2
content-length: 77160
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 58ade8c6039be1d9bb490a0e9df6767a
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
accept-ranges: bytes
fc-cache-status: MISS
x-request-id: 58ade8c6039be1d9bb490a0e9df6767a
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AGxcSKKS1CzCKh5v8495XA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RFNvx+Kwl/EKGPPHNiUmxCdjmZk=
edunews.tg/wp-content/uploads/2022/11/download-12.jpg
200 OK 10 kB URL HTTP/2 edunews.tg/wp-content/uploads/2022/11/download-12.jpg
IP
Hash a8ff4a691cd242a2fe414deaf117f3e6
8d6467a555e6bd284b9336b5050993bde9d7f6ca
5e404776077c12a800fdfb60603bc25f62d87a0fb0bd524ed703f9cb30828cfd
GET /wp-content/uploads/2022/11/download-12.jpg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: d0c020773eb933ed5a3262d03f4cf693
last-modified: Tue, 08 Nov 2022 16:28:27 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: d0c020773eb933ed5a3262d03f4cf693
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2022/11/IMG-20221106-WA0026-360x241.jpg
200 OK 12 kB URL HTTP/2 edunews.tg/wp-content/uploads/2022/11/IMG-20221106-WA0026-360x241.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 360x241, components 3\012- data
Hash 4d6f2cabd4098fc5cd57cbf2f897c48f
775e7fe811e4e7300d9b1f9033cf69646c2aafbb
9c402623cee8c23eef482d2fdd7b6f8b42a6a24965b0869943af894cde129c62
GET /wp-content/uploads/2022/11/IMG-20221106-WA0026-360x241.jpg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: d430b33e2c3e7464231fd04c76d48349
last-modified: Mon, 07 Nov 2022 13:21:45 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: d430b33e2c3e7464231fd04c76d48349
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2022/09/B-e1663928152796.jpeg
200 OK 63 kB URL HTTP/2 edunews.tg/wp-content/uploads/2022/09/B-e1663928152796.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 600x184, components 3\012- data
Hash f4b1ffc238950e9c46159cade0fd01d3
390daa105f5c5e5e5d601af2f2e83a97929fb445
1dbf2b592a9a64ca6b7e21d2eaebf73fc4c87dc93d57d2728c5dfff31077a926
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/09/B-e1663928152796.jpeg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 2c81deccf8cef8667f90cde8127c3f4a
last-modified: Fri, 23 Sep 2022 10:15:52 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 2c81deccf8cef8667f90cde8127c3f4a
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2-1-32x32.png
200 OK 1.8 kB URL HTTP/2 edunews.tg/wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2-1-32x32.png
IP
Hash 1cde46048848fdc8b6f8d0a3c23d1561
2f3b5ee9f9e8b0e35ff7dbcc790d00a3897d3526
20953318a7abaf242b34a1e893ee945a407574108b90d580c544e0bbe8a99b5d
GET /wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2-1-32x32.png HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Cookie: _wsm_id_1_17ce=4882beb9f6962a0a.1668487545.1.1668487545.1668487545; _wsm_ses_1_17ce=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:46 GMT
content-type: image/png
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 2ebe0f6272862ef86370a6a5dbd1af46
last-modified: Wed, 23 Sep 2020 13:28:37 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 2ebe0f6272862ef86370a6a5dbd1af46
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2-1-192x192.png
200 OK 18 kB URL HTTP/2 edunews.tg/wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2-1-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash ad1f226396de7313ebd245f70ffc2b17
21eb9e2feec87130b7e6ef394d5a404d3437c7a4
3a8fefae1c5adb1bb1d28d03e7b4db18905d02a1d7bf5b6df810d4f6781b39f5
GET /wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2-1-192x192.png HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Cookie: _wsm_id_1_17ce=4882beb9f6962a0a.1668487545.1.1668487545.1668487545; _wsm_ses_1_17ce=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:46 GMT
content-type: image/png
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 884dd11cf56e56f54df0196f21e85577
last-modified: Wed, 23 Sep 2020 13:28:37 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 884dd11cf56e56f54df0196f21e85577
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2022/09/A.jpeg
200 OK 122 kB URL HTTP/2 edunews.tg/wp-content/uploads/2022/09/A.jpeg
IP
Size 122 kB (122062 bytes)
Hash 91663ff29de82ce4e05968b80157f32e
6818eafb20af74d9082e645fda625e1bed32aa17
cae2ee8cfb01053fb3caaf01500b54a926c8ac42349b099d54bb8579b613563c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/09/A.jpeg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 8df1206202f036c46668c52c4dd1fe6a
last-modified: Fri, 23 Sep 2022 10:17:45 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 8df1206202f036c46668c52c4dd1fe6a
content-encoding: gzip
X-Firefox-Spdy: h2
connect.facebook.net/fr_FR/sdk.js?hash=07c1f3208247fe168adda8d4915541a0
200 OK 87 kB URL HTTP/2 connect.facebook.net/fr_FR/sdk.js?hash=07c1f3208247fe168adda8d4915541a0
IP
File type ASCII text, with very long lines (13192)
Hash 4d3c5b688ea3222c3b9715693d8a2d94
9a525fefa93404eb5069f3b5aef522c8b080dbe1
0a64e2eee7f8d82ec0cda9570698776617331ef8bf41b3da0e4019e7f878d0a9
GET /fr_FR/sdk.js?hash=07c1f3208247fe168adda8d4915541a0 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://edunews.tg
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: d05c70bf83c579c13ac81a567a548c4c
etag: "983690caa1ebcb23a42feb060c9fc644"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 15 Nov 2023 02:16:19 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: TTxbaI6jIiw7lxVpPYotlA==
x-fb-debug: PGbMEuZBuez+C82xcWhwDWurAUT5cj7QNIyU34CvSz8DcwX7RT6wjTkP8d23BahGdNbWKgZ2bLTAtGyQfgjKaQ==
priority: u=3,i
content-length: 86961
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
forms.mailmunch.co/sites/834384
200 OK 130 B URL HTTP/1.1 forms.mailmunch.co/sites/834384
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f96ea3d112d66cd7374255e4d55e10e3
51f7fc9f893b2d730e8a44edd3b1309d39469f29
ffc2c14c0109e73e8f26e2457fe52e473a88a061ba6601bb610891f014eb0f8e
GET /sites/834384 HTTP/1.1
Host: forms.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://edunews.tg
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-MM-Form-Tool, X-MM-Coupons
Access-Control-Expose-Headers: X-MM-Comp-Tracking, X-MM-EU-Continent, X-MM-T
Content-Type: application/json; charset=utf-8
Content-Length: 130
Etag: W/"82-Uff8n4k7LXMOikTt07EwnTlGnyk"
Vary: Accept-Encoding
Date: Tue, 15 Nov 2022 04:45:46 GMT
Via: 1.1 vegur
edunews.tg/?wmcAction=wmcTrack&action_name=Edunews%20-%20Bimensuel%20Togolais%20d%27informations%20sur%20l%27education&siteId=1&rec=1&rand=787827&h=4&m=45&s=45&url=https%3A%2F%2Fedunews.tg%2F&uid=0&pid=0&visitorId=4882beb9f6962a0a&fvts=1668487545&vc=1&idn=0&refts=0&lvts=1668487545&fullRef=edunews.tg&send_image=1&cookie=1&res=1280x1024>ms=83&pvId=pDegSJ&browser=Firefox_105&os=Windows_10&device=Desktop
200 OK 16 B URL HTTP/2 edunews.tg/?wmcAction=wmcTrack&action_name=Edunews%20-%20Bimensuel%20Togolais%20d%27informations%20sur%20l%27education&siteId=1&rec=1&rand=787827&h=4&m=45&s=45&url=https%3A%2F%2Fedunews.tg%2F&uid=0&pid=0&visitorId=4882beb9f6962a0a&fvts=1668487545&vc=1&idn=0&refts=0&lvts=1668487545&fullRef=edunews.tg&send_image=1&cookie=1&res=1280x1024>ms=83&pvId=pDegSJ&browser=Firefox_105&os=Windows_10&device=Desktop
IP
File type ASCII text, with no line terminators
Hash 25b6d0e16ec5f2d3a9b7840983b770e7
f168dc53956eb855896a5de77d9f76c5dd0deade
b9f52a726979ca1b4f89fbfc817b20986a074e4b2d7dd52b3a4fe4e1059e0024
GET /?wmcAction=wmcTrack&action_name=Edunews%20-%20Bimensuel%20Togolais%20d%27informations%20sur%20l%27education&siteId=1&rec=1&rand=787827&h=4&m=45&s=45&url=https%3A%2F%2Fedunews.tg%2F&uid=0&pid=0&visitorId=4882beb9f6962a0a&fvts=1668487545&vc=1&idn=0&refts=0&lvts=1668487545&fullRef=edunews.tg&send_image=1&cookie=1&res=1280x1024>ms=83&pvId=pDegSJ&browser=Firefox_105&os=Windows_10&device=Desktop HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Cookie: _wsm_id_1_17ce=4882beb9f6962a0a.1668487545.1.1668487545.1668487545; _wsm_ses_1_17ce=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:46 GMT
content-type: text/html; charset=UTF-8
content-length: 16
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 5e1a673831868fa2f5906875f0659fe4
vary: Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
accept-ranges: bytes
fc-cache-status: MISS
x-request-id: 5e1a673831868fa2f5906875f0659fe4
X-Firefox-Spdy: h2
a.mailmunch.co/app/v1/scrollbox.js
200 OK 1.1 kB URL HTTP/2 a.mailmunch.co/app/v1/scrollbox.js
IP
File type ASCII text, with very long lines (3766), with no line terminators
Hash 0aa9a057ee081482214fdc27c28c4c0a
c8b455332ca4e503885ff59727e29494185ab615
f3c5814895717915d03c3cb15dbdff411e53fbdea9005d2b0b5287b66128bbd5
GET /app/v1/scrollbox.js HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 1137
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, POST, PUT, DELETE
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Fri, 11 Nov 2022 12:28:41 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sun, 13 Nov 2022 12:31:18 GMT
cache-control: max-age=172800
etag: "0aa9a057ee081482214fdc27c28c4c0a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oQb8kkB-PvJhjWu9Iadd4nYsC6mv6d1ujYBzASuTv_MyCp20ob1c6w==
age: 144869
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5629
Expires: Tue, 15 Nov 2022 06:19:35 GMT
Date: Tue, 15 Nov 2022 04:45:46 GMT
Connection: keep-alive
edunews.tg/wp-content/uploads/2022/09/IMG-20220926-WA0041-360x241.jpg
200 OK 32 kB URL HTTP/2 edunews.tg/wp-content/uploads/2022/09/IMG-20220926-WA0041-360x241.jpg
IP
Hash d5dc195b13830faa60377abc6ec4b322
4357c72d2dec5ffb20725327f26a54d01ab0c314
180cf035752e03b0a86d481c0d98b10ad31a5781024027847a4f1e0fdb6ba132
GET /wp-content/uploads/2022/09/IMG-20220926-WA0041-360x241.jpg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: fc325dba83a2c5f7639b457527370f6d
last-modified: Mon, 26 Sep 2022 14:44:15 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: fc325dba83a2c5f7639b457527370f6d
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/owl.carousel.js?ver=v2.2.1
200 OK 19 kB URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/owl.carousel.js?ver=v2.2.1
IP
Hash 3e5c8ae7d000277c035b51975475be54
17bb5ccd4cbd40ce8edcd0983f04a70ad8dae791
712aa3033584916792f602ffa2575f9d7306e69a91a46dfc1b0c9dae841bd18b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/owl.carousel.js?ver=v2.2.1 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 8be9f0a2cf01bcc215db79a872c12240
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 8be9f0a2cf01bcc215db79a872c12240
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
200 OK 42 kB URL HTTP/2 edunews.tg/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
Hash 740ffa23791ae7f70344ab531cb8b227
9739a8b9a034525eace715374f84f61ec4cc4a1e
939d5f765aa9ce4e174c0f04ac4052215b387c0d24cd3d910e1b1338b4056080
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 5b91fe5cc36c4a4009755df513bd93bd
last-modified: Fri, 23 Sep 2022 09:52:32 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 5b91fe5cc36c4a4009755df513bd93bd
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/custom.js?ver=20170905
200 OK 14 kB URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/custom.js?ver=20170905
IP
Hash 3d2832394effd1639d7db310d9282eb3
a312c4ec5d2308079bcafc979639b51d7913ee6a
bf2f9f4267f0c1e84499368673f8fb23ad9914b55cbc5c27bbd87ebd8fc210ab
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/custom.js?ver=20170905 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 76613dbd94d0522e1b87e1065992a3b4
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 76613dbd94d0522e1b87e1065992a3b4
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b891dd714ee24b92f59f0697dd45c2b4
8b54f502df3eb318b87ff8a3313007876752e181
d50396bc97a46452ed3af30dbfffc9fe75cf7d4ec347c0a8460d99a6affd1fb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5856
x-amzn-requestid: b6972c46-67c1-4928-85d3-f8fe5f086449
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhQaYHsHoAMF30A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6370610f-4ad4de3440d05bce46b54ebd;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 03:14:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Rd662WbccpmBSTlfWbSNYkXLKRCTr3-HGg9m4S_CNQ5kqcnPalr41w==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 03:23:46 GMT
age: 4920
etag: "8b54f502df3eb318b87ff8a3313007876752e181"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c5f45accbd2d3551103631fa77deee8f
7295ef4c52bcea1be24b963d7ff170ef5bacf713
495e2cef9d9ebec66f1ddcf478512af7e37a301b562d7b75e5d28bb7753d2290
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9311
x-amzn-requestid: ccbd88f7-a72f-4f7c-868d-907b2dbea1ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ9_UEQ4IAMFmzQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d76c8-4c0b800d7bf5064346932e15;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 22:10:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bJa_vwFYVNizWkPP2aLO8cOJiMqMfZmD34-hAnOlmJ0K2OO3dghWvw==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 22:09:42 GMT
age: 23764
etag: "7295ef4c52bcea1be24b963d7ff170ef5bacf713"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94c82cd0e4204ea23b9bd86a3f576fa8
1651325ad361d1c86a4b81edb6b75af27f490a39
0173a565be87e87b2a8fccb3bfe4f237ddd9fdafa5711e79f0c4381882238886
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8025
x-amzn-requestid: e7f9048b-7b8a-4e69-954f-31a7be2548e7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bRUl5HvRoAMFy0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636a0158-063e221d1d6a4dac5f42ec48;Sampled=0
x-amzn-remapped-date: Tue, 08 Nov 2022 07:12:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Fu14fmRDqxHs_RHrfXZRez5LnYW6HNuD-AvFDdzQwsxa1BPBFEqh-A==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 03:35:56 GMT
age: 4190
etag: "1651325ad361d1c86a4b81edb6b75af27f490a39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9b23464-6c45-4e45-acd1-ac75bde164c7.jpeg
200 OK 34 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9b23464-6c45-4e45-acd1-ac75bde164c7.jpeg
IP
Hash 443ea7c8d4cd58ad0df5623641351d70
b0ee5da9ca6ea798e6407fd589190d4cfdbf4cb1
9b389108361ae4675dee52ae512d1cd65256494072dba0dd705570bfb877b408
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9b23464-6c45-4e45-acd1-ac75bde164c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7982
x-amzn-requestid: 35753773-2e2d-4def-a9ef-6224343d62e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bklm8E9qoAMFQgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371b62c-46372f151eb5ba9f0f5ec3a0;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 03:29:48 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T8ocx27r2N_V74-jyk23ATbGtw9TJBqSRB0MK0Kahre8ESS5kM_9lQ==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:47:22 GMT
age: 25104
etag: "0d61ccdb959e45368a9f6ada26679974374d81a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/navigation.js?ver=20151215
200 OK 13 kB URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/navigation.js?ver=20151215
IP
Hash 21916182057537656746d897fa915501
11171964361ae2da3dc533b90d550673a235089e
de96c0b39553709c53acdb1a9816cc5ca83f9e2f0bd9fd3b359d068231f9078b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/navigation.js?ver=20151215 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: a311005751c587a0d51bb04cd2120fb0
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: a311005751c587a0d51bb04cd2120fb0
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://edunews.tg
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 428575
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y8/l/0,cross/I25-2d8evgh.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y8/l/0,cross/I25-2d8evgh.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash a6aaf3625a4ea71fefe5acbc591b8114
7a9a1d0339ef6bf94586964aff811649dad143c2
df8f88c942eae50212a9c8f891d25e07cd8f390093f855c0ba17422343e1b060
GET /rsrc.php/v3/y8/l/0,cross/I25-2d8evgh.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 17:21:22 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-fb-rlafr: 0
content-md5: pqrzYlpOpx/v5ay8WRuBFA==
x-fb-debug: tb4PEjxyHVw5arWggnS7pC1Us4RrVYOXZDn1RKZsQEhqUVjcq/bLyKYYnzjh6xEJRa5YoNb058eT28mMWZp5Lg==
priority: u=2
content-length: 5321
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 03 Nov 2023 20:06:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: U8RJgKUtHGLUiQk9HHpA+IRcULT5qX+DuwPkFrA1TVl4/mz6+76fzZ9YDejeZlR7UxuiL1amRZ0p3hU19KekzQ==
priority: u=3,i
content-length: 827
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz
200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18622)
Hash e939eadda5d7c9dd60450eb6fd816eb0
fd1b642357823cb1b21ae46e5c61a7488e203c1c
4c96ac797fe700732ccba8775a5a630eaafa1f03d81b2a2d48700fb29c3083a6
GET /rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:37:43 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 6Tnq3aXXyd1gRQ62/YFusA==
x-fb-debug: 7TdI8jhhqQoVsxciNzMu80GSUmNc/uvyt9Jz+UPwyzqFdzFE9DtXJYN/i0lg53jxBZaciWxa5a64NOC1wB03jQ==
content-length: 91128
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash 16f083b23b565db9d2f20d1ad75933c1
6d74ad139c96b1e3fc9d541419788b5b4893ec9a
36b909cd9132a8996a1bbb221d05217c31506a6951bb408deeea6aa612dc4200
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 07 Nov 2023 21:29:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FvCDsjtWXbnS8g0a11kzwQ==
x-fb-debug: 8wfJHm/OTmUimpYLHqmFx0zK7zZKmbhmdxKPRe0Ddb/jB3DBuwry5M4WAMCosSl33thx2iA5vMezBbW00qquSw==
priority: u=3,i
content-length: 1657
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5542)
Hash 0765d76d746716156d53d36ee6f80836
17e1546f87cc6417615caa10dcbbcb699c59471a
f1e6af63ae9ff0385126b72a492b0d34709514dd4c00074a1be28272c253d4f8
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:45:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: B2XXbXRnFhVtU9Nu5vgINg==
x-fb-debug: 01HAuQilrQz1l0sulnsK+0BR8ONViIeLDTMAqQ3wAdlNmPG4zBCSQLPEDqUoARlbnYccIanwdU3Xn2LwA9VHBA==
content-length: 12369
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (8741)
Hash dfb29285817fca7b068ba0ec98aa2392
78cd49585da28a245a096781c8e0fada59cf2b72
2c4a3a46d7dfaf97bbc16a2b93470d1b3382c0da3f44dca0c987a3384cee43d3
GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 02:57:59 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 37KShYF/ynsGi6DsmKojkg==
x-fb-debug: GakA1on10sZv/vI570cDWRoCTRk0vhEhCfCyIfapwaDY9o9pk6hD8KELdFrMhWpn58zJQy4DikSmcD/8xHjBUA==
priority: u=3,i
content-length: 16262
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iek84/yG/l/fr_FR/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
200 OK 8.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iek84/yG/l/fr_FR/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (2905)
Hash b72d028e7fa171a50d4fa91405568caf
139a0e7b045e023b3e576aef7fca3c488a92e1a0
b007eb95bb256b4b18e7769b115d9f526fe4e669bb5f442b1cf049b0a25ad055
GET /rsrc.php/v3iek84/yG/l/fr_FR/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:38:25 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: ty0Cjn+hcaUNT6kUBVaMrw==
x-fb-debug: sOn/YceJJcYAHgCxQAAbTpAAVhUrHm84Nb/4gfqQv/B0t8L2McN/hpOrlCXSEY7LpK/i+v1p6aDaChgNAW1DbQ==
priority: u=3,i
content-length: 8364
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
200 OK 338 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (327)
Hash 76f593e842677f73cd0a06232874b2c3
25a13f79478d5a0e286a2299dca2f3b296463079
74dcbe026002f10b703960a500b50dabe518862e568a9e689dec7afa243fa44d
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 09 Nov 2023 00:23:00 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dvWT6EJnf3PNCgYjKHSyww==
x-fb-debug: VhNvMqq/a2luBaPuhJG8Dzm4AEhba5Hu9VZqhpiyqsgK6QT56eyQYxgyUGYTFMgqEqcwBYmGxlsdY6Hv+MZEow==
priority: u=3,i
content-length: 338
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iZPf4/yC/l/fr_FR/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iZPf4/yC/l/fr_FR/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (42193)
Hash 351320babcbac786ca31638935e747b0
fdf9f417234e2637b05e57d7d66b736840d6f1c1
d86881525919202d201912ff82fdfb056b2ec48a02b862c91290c39fa82970da
GET /rsrc.php/v3iZPf4/yC/l/fr_FR/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:04:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: NRMgury6x4bKMWOJNedHsA==
x-fb-debug: RtrJPWXIRVP26BEpXK8CxCQlf1w4fCZqG6X27/b3dAFNiiF9DPaFwIx3Wfz+vUGu3H7jgsQRI7OrXUVt4vRABQ==
content-length: 23535
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4057)
Hash 571700b5a1e8db88d5d79007a910b962
07102cc5f2b19f190830664e1ec6718efb33c011
ecccefedaf39e094079b22880aba987993015fbf1b70fd3c63bc57dc10685f11
GET /rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 09 Nov 2023 00:24:14 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: VxcAtaHo24jV15AHqRC5Yg==
x-fb-debug: 5o6bz8DuImvCRNUX7IwjMoQrxWhOr0DrHzfF08Q4dm0sqWDtQOQH9lYFqVJyeAfuGvLDS0dd3FPWxxm3RP5zQw==
priority: u=3,i
content-length: 7238
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 602 B IP
ASN #20940 Akamai International B.V.
Hash f245c40f903b17254495a73a6d7c3af2
fa3b6cb11e4426dc06e029f909cc5a7f114936a0
772d4d3f30267aae0526ae1b4e086370157bda629005abf52fa4c427317a5902
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B27C02FD1CD2153ECD80D59D280462D3F6858F58B0E37E07F5E8EB7D729BB3E2"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6430
Expires: Tue, 15 Nov 2022 06:32:57 GMT
Date: Tue, 15 Nov 2022 04:45:47 GMT
Connection: keep-alive
analytics.mailmunch.co/event/?site_id=834384&widget_id=951255&event_name=views&cache=1668487547088&referrer=https%3A%2F%2Fedunews.tg%2F&visitor_id=1d5bef8b-38a2-485c-97d7-0a9f712875a2
200 OK 35 B URL HTTP/1.1 analytics.mailmunch.co/event/?site_id=834384&widget_id=951255&event_name=views&cache=1668487547088&referrer=https%3A%2F%2Fedunews.tg%2F&visitor_id=1d5bef8b-38a2-485c-97d7-0a9f712875a2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /event/?site_id=834384&widget_id=951255&event_name=views&cache=1668487547088&referrer=https%3A%2F%2Fedunews.tg%2F&visitor_id=1d5bef8b-38a2-485c-97d7-0a9f712875a2 HTTP/1.1
Host: analytics.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Content-Type: image/gif
Date: Tue, 15 Nov 2022 04:45:47 GMT
Transfer-Encoding: chunked
Via: 1.1 vegur
static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
200 OK 30 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b5b5c1a25995a9e0d28ff1d31dafb865
092cfdac39d9e0abf1043615aeb3f12eea7c61e1
3d1c5e30dd374af24d3dac41a4b074cd11fa0c6cf5906013a0fb817578c4a2b7
GET /rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 05:04:43 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: cejpO15V8gEAE7CBT0465Q==
x-fb-debug: C/EC5sZQT7XV5BDFunWE5HcD8G7fTnWFrFwWQ/rGHeSNO5XkK706ORQBk10xOa7Ow+oKSIdFxS6Ia8i534VOUA==
priority: u=3,i
content-length: 8748
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-1/295671499_395494636010870_3860376794070377059_n.jpg?stp=c50.0.50.50a_cp0_dst-jpg_p50x50&_nc_cat=100&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=W6bSddu3bjoAX_qsDRX&_nc_oc=AQnMcYHHVgprmn36dpvNc4BTpp6UmV0CeKNMg4yH1JVDWYtnN7ZUWRYoBQYLafv1hN4&_nc_ht=scontent-arn2-2.xx&oh=00_AfA1Bjyh9XwbKEMD5O4kHg7vibzY8jKmfBx00PM-FppD-w&oe=6378EB35
200 OK 1.9 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-1/295671499_395494636010870_3860376794070377059_n.jpg?stp=c50.0.50.50a_cp0_dst-jpg_p50x50&_nc_cat=100&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=W6bSddu3bjoAX_qsDRX&_nc_oc=AQnMcYHHVgprmn36dpvNc4BTpp6UmV0CeKNMg4yH1JVDWYtnN7ZUWRYoBQYLafv1hN4&_nc_ht=scontent-arn2-2.xx&oh=00_AfA1Bjyh9XwbKEMD5O4kHg7vibzY8jKmfBx00PM-FppD-w&oe=6378EB35
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash bbb13618900b992a9652eb9d94ad009a
074261572c7560547ffac3b082fb15aa4a7f9d21
920e5e48e2b7d141812d658db7cb26167b53d9217635435731ea0d7c25d9fa39
GET /v/t39.30808-1/295671499_395494636010870_3860376794070377059_n.jpg?stp=c50.0.50.50a_cp0_dst-jpg_p50x50&_nc_cat=100&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=W6bSddu3bjoAX_qsDRX&_nc_oc=AQnMcYHHVgprmn36dpvNc4BTpp6UmV0CeKNMg4yH1JVDWYtnN7ZUWRYoBQYLafv1hN4&_nc_ht=scontent-arn2-2.xx&oh=00_AfA1Bjyh9XwbKEMD5O4kHg7vibzY8jKmfBx00PM-FppD-w&oe=6378EB35 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 25 Jul 2022 13:42:26 GMT
x-haystack-needlechecksum: 2229345085
x-needle-checksum: 3896433934
content-type: image/jpeg
content-digest: adler32=641505996
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 1864
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 04:45:47 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.mailmunch.co/forms-cache/834384/settings-1668425390.json
200 OK 40 kB URL HTTP/2 a.mailmunch.co/forms-cache/834384/settings-1668425390.json
IP
Hash e40bebdc676601d1f81391f8bed1c65b
3d7cb8ca3c6c38cd71703dea3131cc6cccf3d08a
25c630dca5cee7f1b849a5c9e23cb2398eeb566063ff3bc54984f7166ae0c3cf
GET /forms-cache/834384/settings-1668425390.json HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://edunews.tg
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Mon, 14 Nov 2022 12:44:32 GMT
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, POST, PUT, DELETE
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 11:29:59 GMT
etag: W/"824d575efa081a23016ed7a700de0461"
cache-control: max-age=31556952
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eMqKcaXK-XAfaEpBRzM5vNBFJNA8lYYltMuTI77KMPnVSRfkIYn5Vw==
age: 57675
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/jquery.meanmenu.js?ver=v2.0.8
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/jquery.meanmenu.js?ver=v2.0.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/jquery.meanmenu.js?ver=v2.0.8 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 80a51c57ca840a2bb5aebdbf3dbdf490
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 80a51c57ca840a2bb5aebdbf3dbdf490
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2022/09/c.jpeg
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/uploads/2022/09/c.jpeg
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/09/c.jpeg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: dd3f99020c00df175d38ddd437ffd4bf
last-modified: Fri, 23 Sep 2022 12:34:40 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: dd3f99020c00df175d38ddd437ffd4bf
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2022/09/IMG-20220926-WA0041-150x150.jpg
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/uploads/2022/09/IMG-20220926-WA0041-150x150.jpg
IP
GET /wp-content/uploads/2022/09/IMG-20220926-WA0041-150x150.jpg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 64c3bbb04302d938b386d99934d6d4a5
last-modified: Mon, 26 Sep 2022 14:44:15 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 64c3bbb04302d938b386d99934d6d4a5
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2022/10/download-282-150x150.jpg
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/uploads/2022/10/download-282-150x150.jpg
IP
GET /wp-content/uploads/2022/10/download-282-150x150.jpg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 7a330930bd5c03a8816ce9ebb521bfc7
last-modified: Tue, 11 Oct 2022 13:58:55 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 7a330930bd5c03a8816ce9ebb521bfc7
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto+Condensed%3A300%2C400%2C500%2C600%2C700&subset=latin%2Clatin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed%3A300%2C400%2C500%2C600%2C700&subset=latin%2Clatin-ext
IP
GET /css?family=Roboto+Condensed%3A300%2C400%2C500%2C600%2C700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 15 Nov 2022 04:45:44 GMT
date: Tue, 15 Nov 2022 04:45:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/smart-recent-posts-widget/assets/css/srpw-frontend.css?ver=6.0.3
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/plugins/smart-recent-posts-widget/assets/css/srpw-frontend.css?ver=6.0.3
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/smart-recent-posts-widget/assets/css/srpw-frontend.css?ver=6.0.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: aee3bbfb4bf1a4e456cd37c616fb0269
last-modified: Sun, 31 Oct 2021 20:58:33 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: aee3bbfb4bf1a4e456cd37c616fb0269
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 0 B URL HTTP/2 edunews.tg/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: fbd037d1fc12db553a0b834e95fce7d9
last-modified: Sat, 22 May 2021 01:35:05 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: fbd037d1fc12db553a0b834e95fce7d9
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: a7c87c110d74503a90e609f8530fb8d7
last-modified: Fri, 23 Sep 2022 09:52:32 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: a7c87c110d74503a90e609f8530fb8d7
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/jquery.nicescroll.js?ver=3.6.8
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/jquery.nicescroll.js?ver=3.6.8
IP
GET /wp-content/themes/mag-lite/assest/js/jquery.nicescroll.js?ver=3.6.8 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 969573168c0142e7aa98d8e45862a80b
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 969573168c0142e7aa98d8e45862a80b
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/skip-link-focus-fix.js?ver=20151215
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/skip-link-focus-fix.js?ver=20151215
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: afef0ad0c52bd0cca4a43758f8a53f5e
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: afef0ad0c52bd0cca4a43758f8a53f5e
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/wp-stats-manager/css/style.css?ver=1.2
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/plugins/wp-stats-manager/css/style.css?ver=1.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-stats-manager/css/style.css?ver=1.2 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: be62517c37a976b470487fe5b74b0dd7
last-modified: Sat, 27 Aug 2022 13:27:56 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: be62517c37a976b470487fe5b74b0dd7
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/css/meanmenu.css?ver=2.0.7
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/css/meanmenu.css?ver=2.0.7
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/css/meanmenu.css?ver=2.0.7 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 09eaf1e9ac9c067373104bab93dc6036
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 09eaf1e9ac9c067373104bab93dc6036
content-encoding: gzip
X-Firefox-Spdy: h2
w.likebtn.com/js/w/widget.js
200 OK 0 B URL HTTP/2 w.likebtn.com/js/w/widget.js
IP
GET /js/w/widget.js HTTP/1.1
Host: w.likebtn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=691200, s-maxage=57600
cf-bgj: minify
cf-polished: origSize=254143
vary: Accept-Encoding
x-powered-by: HHVM/3.15.4
last-modified: Mon, 14 Nov 2022 06:27:59 GMT
cf-cache-status: HIT
age: 43278
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z5wWGZjvyJVvUhaisX%2FmnnOOSeBqb9ni66wPJ5FSfK7WMzY7mQV6ypgEn5srTe191Gis9ZH%2F3mpyep2ga9E3OEnhXNZPoDXrCImMzARCWjM6ImtCFDP74PjlVbCNK7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a556d58c80b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2.png
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2.png
IP
GET /wp-content/uploads/2020/09/cropped-Screenshot_2020-09-23-Mise-en-page-1-PDF-N%C2%B0-8-corrige-pdf2.png HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/png
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 0d9e0948f63b356d25012469650553b3
last-modified: Wed, 23 Sep 2020 13:28:00 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 0d9e0948f63b356d25012469650553b3
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/keyboard-navigation.js?ver=20151215
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/keyboard-navigation.js?ver=20151215
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/keyboard-navigation.js?ver=20151215 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: b7336040c013d39fb2dd603736f04ded
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: b7336040c013d39fb2dd603736f04ded
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/uploads/2022/10/download-282.jpg
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/uploads/2022/10/download-282.jpg
IP
GET /wp-content/uploads/2022/10/download-282.jpg HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: image/jpeg
vary: Accept-Encoding
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 2a5d5eef722403c63d1809a7f6abe1e3
last-modified: Tue, 11 Oct 2022 13:58:53 GMT
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 2a5d5eef722403c63d1809a7f6abe1e3
content-encoding: gzip
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/page.js
IP
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 101705
etag: W/"bb9-5ec71e264ddf8"
last-modified: Wed, 02 Nov 2022 00:25:57 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76a556d38b04b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/theia-sticky-sidebar.js?ver=v1.7.0
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/theia-sticky-sidebar.js?ver=v1.7.0
IP
GET /wp-content/themes/mag-lite/assest/js/theia-sticky-sidebar.js?ver=v1.7.0 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: ed1d91fe3391b249a605bc3cf3cb2f00
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: ed1d91fe3391b249a605bc3cf3cb2f00
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/ResizeSensor.js?ver=20182301
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/ResizeSensor.js?ver=20182301
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/ResizeSensor.js?ver=20182301 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 335673a02f286f75a3918ed50efac35b
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 335673a02f286f75a3918ed50efac35b
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/wp-stats-manager/js/wsm_new.js
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/plugins/wp-stats-manager/js/wsm_new.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-stats-manager/js/wsm_new.js HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: e3c775a29d3ad67f6e123a6654fbefd4
last-modified: Sat, 27 Aug 2022 13:27:57 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: e3c775a29d3ad67f6e123a6654fbefd4
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/likebtn-like-button/public/css/style.css?ver=6.0.3
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/plugins/likebtn-like-button/public/css/style.css?ver=6.0.3
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/likebtn-like-button/public/css/style.css?ver=6.0.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: aba1670490882c7427628b4595ce1a8a
last-modified: Sat, 06 Aug 2022 09:43:47 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: aba1670490882c7427628b4595ce1a8a
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/css/owl.carousel.css?ver=v2.2.0
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/css/owl.carousel.css?ver=v2.2.0
IP
GET /wp-content/themes/mag-lite/assest/css/owl.carousel.css?ver=v2.2.0 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 4a65cd57c2e62b775a7fcce785cc3ad2
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 4a65cd57c2e62b775a7fcce785cc3ad2
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/css/owl.theme.css?ver=v2.2.0
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/css/owl.theme.css?ver=v2.2.0
IP
GET /wp-content/themes/mag-lite/assest/css/owl.theme.css?ver=v2.2.0 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: e0ea3a01b116d436010cfbbc8d0cc456
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: e0ea3a01b116d436010cfbbc8d0cc456
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/stellar.js?ver=v0.6.2
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/stellar.js?ver=v0.6.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/js/stellar.js?ver=v0.6.2 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 1fcd649bdc1d14e767d2d34318d52650
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 1fcd649bdc1d14e767d2d34318d52650
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/css/font-awesome.min.css?ver=4.7.0
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/css/font-awesome.min.css?ver=4.7.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mag-lite/assest/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 853275e853280e7cedbd01643a1be561
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 853275e853280e7cedbd01643a1be561
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/style.css?ver=6.0.3
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/style.css?ver=6.0.3
IP
GET /wp-content/themes/mag-lite/style.css?ver=6.0.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: ba689c706ded821d536af76bba178a8c
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: ba689c706ded821d536af76bba178a8c
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 edunews.tg/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 4024155cec215049fd46a663cc3b9c8f
last-modified: Sat, 28 Aug 2021 20:19:08 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 4024155cec215049fd46a663cc3b9c8f
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/html; charset=UTF-8
server: fastestcache
fc-cache-engine: varnish
fc-request-id: dfe07b849cb9c7a4283d3977bc6ceb0b
link: <https://edunews.tg/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding, Accept-Encoding
age: 5
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: HIT
x-request-id: dfe07b849cb9c7a4283d3977bc6ceb0b
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/themes/mag-lite/assest/js/jquery.newsTicker.js?ver=20151215
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/themes/mag-lite/assest/js/jquery.newsTicker.js?ver=20151215
IP
GET /wp-content/themes/mag-lite/assest/js/jquery.newsTicker.js?ver=20151215 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: a6176b56a28cabf5dcbb680e555cbccf
last-modified: Mon, 09 May 2022 11:01:28 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: a6176b56a28cabf5dcbb680e555cbccf
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
200 OK 0 B URL HTTP/2 edunews.tg/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 838a67adf9da9c3686a4a2a539736c93
last-modified: Sat, 06 Aug 2022 09:45:59 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 838a67adf9da9c3686a4a2a539736c93
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:44 GMT
content-type: text/css
server: fastestcache
fc-cache-engine: varnish
fc-request-id: f705e82f230d5424d84d6db7257a8604
last-modified: Sat, 06 Aug 2022 09:43:39 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: f705e82f230d5424d84d6db7257a8604
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-content/plugins/likebtn-like-button/public/js/frontend.js?ver=6.0.3
200 OK 0 B URL HTTP/2 edunews.tg/wp-content/plugins/likebtn-like-button/public/js/frontend.js?ver=6.0.3
IP
GET /wp-content/plugins/likebtn-like-button/public/js/frontend.js?ver=6.0.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: d7ce05676d9eec49ddeed25cf3ae313b
last-modified: Sat, 06 Aug 2022 09:43:47 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: d7ce05676d9eec49ddeed25cf3ae313b
content-encoding: gzip
X-Firefox-Spdy: h2
edunews.tg/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 0 B URL HTTP/2 edunews.tg/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: edunews.tg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://edunews.tg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 04:45:45 GMT
content-type: application/javascript
server: fastestcache
fc-cache-engine: varnish
fc-request-id: 6dab1bb71e4f3e28be13cfb3725ad491
last-modified: Sat, 06 Aug 2022 09:46:04 GMT
vary: Accept-Encoding, Accept-Encoding
age: 0
via: 1.1 varnish (Varnish/7.1)
fc-cache-status: MISS
x-request-id: 6dab1bb71e4f3e28be13cfb3725ad491
content-encoding: gzip
X-Firefox-Spdy: h2
91.234.195.123
93.184.220.29
34.102.187.140
23.36.76.226
31.13.72.12
0.0.0.0