GET 138.124.15.122/assets/otters/Montserrat-Light-8240771fea69c9be9d24b4a01ab9109cf888127cceddee04eb0489b3a8cc5d69.woff
138.124.15.122200 OK 23 kB URL GET 138.124.15.122/assets/otters/Montserrat-Light-8240771fea69c9be9d24b4a01ab9109cf888127cceddee04eb0489b3a8cc5d69.woff
IP 138.124.15.122:80
File type Web Open Font Format, CFF, length 22964, version 0.0
Hash 3c68a597a14a28f907c0c01a39e06e21
b905af2e22459d1763deb45bbabf9cb5e62842d8
263fdab8f1737fc885f6c9335f83c2c4b6babf21029fa8b32882b4e5245841f8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/otters/Montserrat-Light-8240771fea69c9be9d24b4a01ab9109cf888127cceddee04eb0489b3a8cc5d69.woff HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://138.124.15.122/assets/application-96002dbb13a5ce0fc78f889eb07ad096d71e657e7ac14564f01b93749c962afb.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/font-woff
Content-Length: 22964
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 62105
X-Served-By: cache-fra-etou8220090-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.133423,VS0,VE1
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/application/tables-0e498d2dd4045692200ac0de23c69412e258d5de9c85487da8fa1110f5cd311b.js
138.124.15.122200 OK 1.8 kB URL GET 138.124.15.122/assets/application/tables-0e498d2dd4045692200ac0de23c69412e258d5de9c85487da8fa1110f5cd311b.js
IP 138.124.15.122:80
File type JavaScript source, ASCII text
Hash 3f6a0942ff2b7ec49789ffa58e308e0b
c18008f75503fb8c2a92efe16e9d7f12c088279c
e1effe8c592854bb427c744989b4aa2eb8db0838968622085f6519584527ebd6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/application/tables-0e498d2dd4045692200ac0de23c69412e258d5de9c85487da8fa1110f5cd311b.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 771
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 82828
X-Served-By: cache-fra-etou8220129-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.104975,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
138.124.15.122200 OK 15 kB IP 138.124.15.122:80
File type HTML document, Unicode text, UTF-8 text, with very long lines (635)
Hash f5a2d582f61a923edd83f558ba6fe43c
ccde4c7faf7039d2e1abec3cbea4ae4050483385
5e3dfcf3eda60f519e3de4ca6cf66bf72f08b774b444abc71ad99e24d6e4904e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4386
Connection: keep-alive
Cache-Control: max-age=300, public, stale-while-revalidate=30
Etag: W/"9e32f52af0226e4417525b369560c1c0"
Last-Modified: Fri, 20 Sep 2024 20:17:19 GMT
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 21465e7c-5a58-4b26-9905-7e4bf6bbbe48
X-Runtime: 0.039520
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 10
X-Served-By: cache-fra-etou8220133-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713381.443413,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/application-96002dbb13a5ce0fc78f889eb07ad096d71e657e7ac14564f01b93749c962afb.css
138.124.15.122200 OK 79 kB URL GET 138.124.15.122/assets/application-96002dbb13a5ce0fc78f889eb07ad096d71e657e7ac14564f01b93749c962afb.css
IP 138.124.15.122:80
File type ASCII text, with very long lines (39867)
Hash 571634e21a4978f290060b876373d2c8
e802fea514e9dc1284070d8ee49cbb04604ad4cd
e30869f5346b7593501c1b4798fe94d258b9f3b3983466066aa750a135d04998
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/application-96002dbb13a5ce0fc78f889eb07ad096d71e657e7ac14564f01b93749c962afb.css HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: text/css
Content-Length: 15960
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 6398
X-Served-By: cache-fra-etou8220075-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.686098,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/logo-full-transparent-7ad1233fd7d9f9739e278333d02803322375aa81da6ebcc4bd4c9c77eafe7a9d.png
138.124.15.122200 OK 8.5 kB URL GET 138.124.15.122/assets/logo-full-transparent-7ad1233fd7d9f9739e278333d02803322375aa81da6ebcc4bd4c9c77eafe7a9d.png
IP 138.124.15.122:80
File type PNG image data, 870 x 358, 8-bit/color RGBA, non-interlaced
Hash 990d2bef12abc8cc8b139f8a6c3a49e7
75f4190398cbee4ac334a7dbb2f5f237998d3ff9
1c7dac2bb74e570666d339044073538ace0a8a0bdb356f71d35708dc25adc095
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/logo-full-transparent-7ad1233fd7d9f9739e278333d02803322375aa81da6ebcc4bd4c9c77eafe7a9d.png HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: image/png
Content-Length: 8468
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 62104
X-Served-By: cache-fra-etou8220157-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.854680,VS0,VE1
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/efforg/application-6347e50049948c3366032b3a4d0029ac2ebd1cb3db9eddca94662bfecd86eabc.js
138.124.15.122200 OK 510 B URL GET 138.124.15.122/assets/efforg/application-6347e50049948c3366032b3a4d0029ac2ebd1cb3db9eddca94662bfecd86eabc.js
IP 138.124.15.122:80
File type JavaScript source, ASCII text
Hash 2727d9e9d10b0dc567a81914d9348221
5d1b5252f7ee950d3b7b4ba9a580d03d39edd617
e3817ab914991476e6a96c077c84cf0c95b1f312777d62b057dea8ae7a7efd91
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/efforg/application-6347e50049948c3366032b3a4d0029ac2ebd1cb3db9eddca94662bfecd86eabc.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: application/javascript
Content-Length: 281
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 36468
X-Served-By: cache-fra-etou8220092-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.977898,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/select2/select2-f79333530e65fc28b0339227e71cfc769d0229c39d7b2955c6045ad5e4f15f65.js
138.124.15.122200 OK 157 kB URL GET 138.124.15.122/assets/select2/select2-f79333530e65fc28b0339227e71cfc769d0229c39d7b2955c6045ad5e4f15f65.js
IP 138.124.15.122:80
File type JavaScript source, ASCII text
Size 157 kB (156985 bytes)
Hash 7084ff2eb3deef55bb32da7d2f112065
01f96abb3a8f874afbb6dd253e8c476cd7826246
03bf3337900c1349257f075c39a01d174113e09e544a19579b8ef82a708cbbeb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/select2/select2-f79333530e65fc28b0339227e71cfc769d0229c39d7b2955c6045ad5e4f15f65.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 33834
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 41551
X-Served-By: cache-fra-etou8220101-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.991135,VS0,VE2
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/application/search-f570787ccb4920abd6cfd598648b553eeaf3129b23df16c60567579c5ab8b954.js
138.124.15.122200 OK 2.2 kB URL GET 138.124.15.122/assets/application/search-f570787ccb4920abd6cfd598648b553eeaf3129b23df16c60567579c5ab8b954.js
IP 138.124.15.122:80
File type JavaScript source, ASCII text
Hash caffa3e941ddd8955ebd1e36980bf205
afc19c4248842b5cb11bf5b00f931cdbc6ec4c85
f78ef057f3681e2975c8f9da7ab190540eed5228f66581e290c959c3c8c61d8a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/application/search-f570787ccb4920abd6cfd598648b553eeaf3129b23df16c60567579c5ab8b954.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 821
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 41551
X-Served-By: cache-fra-etou8220169-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.033116,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/otters/Montserrat-Regular-2e7b428310d50f8aa8f93c808897933b058348bbc381a2161f3bc8596d995781.woff
138.124.15.122200 OK 23 kB URL GET 138.124.15.122/assets/otters/Montserrat-Regular-2e7b428310d50f8aa8f93c808897933b058348bbc381a2161f3bc8596d995781.woff
IP 138.124.15.122:80
File type Web Open Font Format, CFF, length 23148, version 0.0
Hash 69313ade3e1d5a011cc6c6b034fcbb9d
23f20830659fd2c6671643b022a0105662745b7a
8a0535c1c807198ae36f548da42ac7ccfe6639fd4ecc92cd84e06a02fdb28b4e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/otters/Montserrat-Regular-2e7b428310d50f8aa8f93c808897933b058348bbc381a2161f3bc8596d995781.woff HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://138.124.15.122/assets/application-96002dbb13a5ce0fc78f889eb07ad096d71e657e7ac14564f01b93749c962afb.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/font-woff
Content-Length: 23148
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 78073
X-Served-By: cache-fra-etou8220074-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.187944,VS0,VE2
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/jquery-dffa084d8915bf507ac4c876f4dedea0cab68baacd9266ff82a66706ef56f264.js
138.124.15.122200 OK 102 kB URL GET 138.124.15.122/assets/jquery-dffa084d8915bf507ac4c876f4dedea0cab68baacd9266ff82a66706ef56f264.js
IP 138.124.15.122:80
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38649)
Size 102 kB (102300 bytes)
Hash 87309ef06ba22c4322c46d329b95f1da
45753aca4ee116a5917c7bc71d7a27b2f89f9675
ad88ed9ffdcf79d43065d3e0138d839d34c5ad9312b6d555fff8c00bbb9239aa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/jquery-dffa084d8915bf507ac4c876f4dedea0cab68baacd9266ff82a66706ef56f264.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/efforg/application-6347e50049948c3366032b3a4d0029ac2ebd1cb3db9eddca94662bfecd86eabc.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 33216
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 33047
X-Served-By: cache-fra-etou8220059-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.184205,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/logo-narrow-c72b0c310f9b60ffbc945fdee2553035ff1881658364a256fad46fe07816d171.png
138.124.15.122200 OK 5.6 kB URL GET 138.124.15.122/assets/logo-narrow-c72b0c310f9b60ffbc945fdee2553035ff1881658364a256fad46fe07816d171.png
IP 138.124.15.122:80
File type PNG image data, 548 x 66, 8-bit/color RGBA, non-interlaced
Hash b9cef4a043040cb842e8ad3df6ac74be
519d1fdb39469790cc072664d5c379da6a18d348
06979b741afe05662d996b0d6a956d0666839e7177ebeeee237b60fbfbcce85f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/logo-narrow-c72b0c310f9b60ffbc945fdee2553035ff1881658364a256fad46fe07816d171.png HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: image/png
Content-Length: 5606
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 78073
X-Served-By: cache-fra-etou8220053-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.854399,VS0,VE1
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/eff-lockup-41c5a4c5471a907c30847ebd87311553c04b0b49df5f0377fe45de5fddab0da6.png
138.124.15.122200 OK 2.2 kB URL GET 138.124.15.122/assets/eff-lockup-41c5a4c5471a907c30847ebd87311553c04b0b49df5f0377fe45de5fddab0da6.png
IP 138.124.15.122:80
File type PNG image data, 800 x 154, 8-bit/color RGBA, non-interlaced
Hash df966c6e76e1e40d40f2c10bb4bfe325
ffd33fc0bf6db452963b8f7edc1ba144dd4778ef
f567e0b8f68cf916eb3e7f8e564aa5ee4a1b018116d2f8ee653929964e353d82
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/eff-lockup-41c5a4c5471a907c30847ebd87311553c04b0b49df5f0377fe45de5fddab0da6.png HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: image/png
Content-Length: 2198
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 62104
X-Served-By: cache-fra-etou8220048-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.856113,VS0,VE1
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/otters/Montserrat-SemiBold-694f5f2f4668f7718c56a3a89461473a36dfa9f89a80f200773b28efe30be03b.woff
138.124.15.122200 OK 31 kB URL GET 138.124.15.122/assets/otters/Montserrat-SemiBold-694f5f2f4668f7718c56a3a89461473a36dfa9f89a80f200773b28efe30be03b.woff
IP 138.124.15.122:80
File type Web Open Font Format, CFF, length 31232, version 0.0
Hash df0d4a31c0427a933f0a90faa9507fd2
1207d766f9d759b88396a82079a7d7daef8ffa21
ac6a49550c1f39861772c79f9f867e79f3f6b59c633772d1a05cc5abec7619c9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/otters/Montserrat-SemiBold-694f5f2f4668f7718c56a3a89461473a36dfa9f89a80f200773b28efe30be03b.woff HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://138.124.15.122/assets/application-96002dbb13a5ce0fc78f889eb07ad096d71e657e7ac14564f01b93749c962afb.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/font-woff
Content-Length: 31232
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 26887
X-Served-By: cache-fra-etou8220065-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.178525,VS0,VE4
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/jquery-ui/jquery-ui-0507eea9215b37aa68aced7033f3f0919a5f17b9a8c1ac7308e0fba7fd11e3bd.js
138.124.15.122200 OK 521 kB URL GET 138.124.15.122/assets/jquery-ui/jquery-ui-0507eea9215b37aa68aced7033f3f0919a5f17b9a8c1ac7308e0fba7fd11e3bd.js
IP 138.124.15.122:80
File type JavaScript source, ASCII text, with very long lines (1002)
Size 521 kB (520742 bytes)
Hash d8a34c39f2993504f233ee19105d96f8
c0c01699ee4b40bee9bc0503209927a61f985ed0
a1e0a60be150e347dc141e6b557d660d89651b4f2211b1bc7029729f1d97328f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/jquery-ui/jquery-ui-0507eea9215b37aa68aced7033f3f0919a5f17b9a8c1ac7308e0fba7fd11e3bd.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/application/search-f570787ccb4920abd6cfd598648b553eeaf3129b23df16c60567579c5ab8b954.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 124444
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 41551
X-Served-By: cache-fra-etou8220057-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.207946,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
POST anon-stats.eff.org/matomo.php?action_name=Atlas%20of%20Surveillance&idsite=1&rec=1&r=272888&h=21&m=16&s=23&url=http%3A%2F%2F138.124.15.122%2F&_id=2cf637fcd70ed639&_idn=1&send_image=0&_refts=0&pv_id=ld9OMq&pf_net=32&pf_srv=125&pf_tfr=0&pf_dm1=293&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024
173.239.79.196204 No Response 0 B URL POST anon-stats.eff.org/matomo.php?action_name=Atlas%20of%20Surveillance&idsite=1&rec=1&r=272888&h=21&m=16&s=23&url=http%3A%2F%2F138.124.15.122%2F&_id=2cf637fcd70ed639&_idn=1&send_image=0&_refts=0&pv_id=ld9OMq&pf_net=32&pf_srv=125&pf_tfr=0&pf_dm1=293&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024
IP 173.239.79.196:443
Certificate IssuerLet's Encrypt
Subjectanon-stats.eff.org
FingerprintF6:62:B1:57:B0:E6:5A:81:A3:40:58:8C:94:DA:D0:B4:BC:CD:95:5F
ValidityThu, 01 May 2025 18:32:42 GMT - Wed, 30 Jul 2025 18:32:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=Atlas%20of%20Surveillance&idsite=1&rec=1&r=272888&h=21&m=16&s=23&url=http%3A%2F%2F138.124.15.122%2F&_id=2cf637fcd70ed639&_idn=1&send_image=0&_refts=0&pv_id=ld9OMq&pf_net=32&pf_srv=125&pf_tfr=0&pf_dm1=293&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1
Host: anon-stats.eff.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://138.124.15.122/
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: http://138.124.15.122
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Response
Server: nginx
Date: Mon, 23 Jun 2025 21:16:23 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Access-Control-Allow-Origin: http://138.124.15.122
Access-Control-Allow-Credentials: true
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET 138.124.15.122/assets/eff-monogram-d6391294e160355da18d30ca418bf22be6a022bcf429ada46a5aa6fd81119ddd.png
138.124.15.122200 OK 1.0 kB URL GET 138.124.15.122/assets/eff-monogram-d6391294e160355da18d30ca418bf22be6a022bcf429ada46a5aa6fd81119ddd.png
IP 138.124.15.122:80
File type PNG image data, 250 x 61, 8-bit/color RGBA, non-interlaced
Hash 0d41c2d3ef98400f7c3683aeb6605c03
7be46017e881a05771e33bcd2a40a30e29667a24
1216ca18bfabd19e9335503fa659d73d775699a4b4a144d8ca21349a6f82f975
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/eff-monogram-d6391294e160355da18d30ca418bf22be6a022bcf429ada46a5aa6fd81119ddd.png HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: image/png
Content-Length: 1006
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 62104
X-Served-By: cache-fra-etou8220135-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.879743,VS0,VE1
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/atlas/large-map-54a1d9aaebd67802f6e51aad3dbe7ff2aecc6b98c132ed111dac804da53e448b.png
138.124.15.122200 OK 267 kB URL GET 138.124.15.122/assets/atlas/large-map-54a1d9aaebd67802f6e51aad3dbe7ff2aecc6b98c132ed111dac804da53e448b.png
IP 138.124.15.122:80
File type PNG image data, 1247 x 577, 8-bit/color RGBA, non-interlaced
Size 267 kB (266866 bytes)
Hash c6b326e18d4da839472dbb62d7c1e282
c09f9528f2902728b45b1e634223a087de70bd09
1af52c8e9d09a65575f9ca1299b1aa00df6072d9dfb1bd4d08ee6bdb54f92044
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/atlas/large-map-54a1d9aaebd67802f6e51aad3dbe7ff2aecc6b98c132ed111dac804da53e448b.png HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: image/png
Content-Length: 266866
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 32620
X-Served-By: cache-fra-etou8220025-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.856585,VS0,VE2
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET anon-stats.eff.org/matomo.js
173.239.79.196200 OK 68 kB URL GET anon-stats.eff.org/matomo.js
IP 173.239.79.196:443
Certificate IssuerLet's Encrypt
Subjectanon-stats.eff.org
FingerprintF6:62:B1:57:B0:E6:5A:81:A3:40:58:8C:94:DA:D0:B4:BC:CD:95:5F
ValidityThu, 01 May 2025 18:32:42 GMT - Wed, 30 Jul 2025 18:32:41 GMT
File type JavaScript source, ASCII text, with very long lines (2878)
Hash 97d28a3aefbae803f17013706da83e1b
2aad8740afe4a5d49c2de29a52b886b2be5bc94c
89e35b18e2ddd93f040839eb32f71a22a7781f27fca6e294f9405d5fb0ea2cc3
GET /matomo.js HTTP/1.1
Host: anon-stats.eff.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 67498
Connection: keep-alive
Last-Modified: Thu, 13 Mar 2025 14:05:11 GMT
ETag: "67d2e617-107aa"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET 138.124.15.122/favicon.ico
138.124.15.122200 OK 15 kB URL GET 138.124.15.122/favicon.ico
IP 138.124.15.122:80
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 7cae3f6d57b63b43184ce5b28c2cd466
4ea30dbe87fde48418e949803c39cfa18cab7a81
f7381d71da34cd6d5f47de0a7e120a3df4ad3f513d8164abedff6c58bebfda97
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 2261
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Fri, 28 Feb 2025 21:32:01 GMT
Content-Encoding: gzip
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 78072
X-Served-By: cache-fra-etou8220117-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713383.672271,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
0.0.0.0 0 B IP 0.0.0.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET 138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
138.124.15.122200 OK 727 B URL GET 138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
IP 138.124.15.122:80
File type JavaScript source, ASCII text
Hash a1d115c2948df34c9fecbf84002597e2
fd8f06121482b39219a96d6cffb0bb08919c46ac
ffe44e3d016a797b98c46d789974d605250e17a8ba06381590208246ffcc0a7e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: application/javascript
Content-Length: 370
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 67616
X-Served-By: cache-fra-etou8220120-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.707990,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/unr-reynolds-b6e02632aee8a529482728d8c574b41207d3ca05e3a70e40d9411c6c4b19f46e.png
138.124.15.122200 OK 18 kB URL GET 138.124.15.122/assets/unr-reynolds-b6e02632aee8a529482728d8c574b41207d3ca05e3a70e40d9411c6c4b19f46e.png
IP 138.124.15.122:80
File type PNG image data, 1189 x 370, 8-bit/color RGBA, non-interlaced
Hash 938a62a91f9cdc7a990119a7aa080936
ec938a70dce4e92585d474207a988613b5053e40
45fefaf02d8c5381b80fbc43722a7b78c94e7fd6903ba5ecb3c4b093f997e563
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/unr-reynolds-b6e02632aee8a529482728d8c574b41207d3ca05e3a70e40d9411c6c4b19f46e.png HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:21 GMT
Content-Type: image/png
Content-Length: 17831
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 78073
X-Served-By: cache-fra-etou8220139-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.856466,VS0,VE4
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/application/layout-b98fe5d919adaf6d448cc3ab356d58babc15931283fc8040963de52e4aa762d6.js
138.124.15.122200 OK 126 B URL GET 138.124.15.122/assets/application/layout-b98fe5d919adaf6d448cc3ab356d58babc15931283fc8040963de52e4aa762d6.js
IP 138.124.15.122:80
Hash 17d63905c8d608b15d8f7910c1216144
057e8d82043aaddc088165fb6581d5d956d506f8
d130c8403a4e09568efa2aee3dd3fc8a8d61f94283dc13d3f0c786e245b9ef77
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/application/layout-b98fe5d919adaf6d448cc3ab356d58babc15931283fc8040963de52e4aa762d6.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 128
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 30862
X-Served-By: cache-fra-etou8220162-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.008399,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 138.124.15.122/assets/application/maps-c8a9bbbe292c703aa03d26e950dbdef44fca003a7aa0112a29a84e3fd19ff43f.js
138.124.15.122200 OK 672 B URL GET 138.124.15.122/assets/application/maps-c8a9bbbe292c703aa03d26e950dbdef44fca003a7aa0112a29a84e3fd19ff43f.js
IP 138.124.15.122:80
Hash 6160f1040852fcf9e01832a26514daa7
971ec65d0b347faa175681fb95c6bb52ff2851bc
70f16e203af35cab40665532367a9a2f71e0142b876853544aadcfcbbd3748bc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/application/maps-c8a9bbbe292c703aa03d26e950dbdef44fca003a7aa0112a29a84e3fd19ff43f.js HTTP/1.1
Host: 138.124.15.122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://138.124.15.122/assets/application-25cae4ff702112a9e64a2063a56edcbba3aa21989a8c189a06819418ab4f6469.js
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Jun 2025 21:16:22 GMT
Content-Type: application/javascript
Content-Length: 340
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 28 Apr 2025 19:50:54 GMT
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 41550
X-Served-By: cache-fra-etou8220134-FRA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1750713382.011591,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400