igmg.site/
301 Moved Permanently 162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 17 Mar 2023 16:01:53 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://igmg.site/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3396075e8f2d9ceae3bd11f94111fed8
98ba4ccf6b0e38a91c69b76ac1dc07313773ed1d
e533d6bd6a8080facdff772bcbf359373dab2d5a6fe5eabe64f95e68a8cd23aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E533D6BD6A8080FACDFF772BCBF359373DAB2D5A6FE5EABE64F95E68A8CD23AA"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8378
Expires: Fri, 17 Mar 2023 18:21:31 GMT
Date: Fri, 17 Mar 2023 16:01:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1424d2734290cfd767b86da0ee0da3bc
875b1243bca41177411ac6af710d2bb96f45a0ac
70b5bb76774526a0cf131445ae2f8639085c3449812497df457f4bc78089917b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70B5BB76774526A0CF131445AE2F8639085C3449812497DF457F4BC78089917B"
Last-Modified: Wed, 15 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10512
Expires: Fri, 17 Mar 2023 18:57:05 GMT
Date: Fri, 17 Mar 2023 16:01:53 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 17 Mar 2023 15:26:43 GMT
content-type: application/json
age: 2110
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12cdbcb1b0785dc0423386448ac68c9c
08cff6b76fd708f0cef3c5bdb8fc72570c4536bd
bb7622a85d32cbff40abd2995055e03dbac05dd841b9a84d9023a5510d89e534
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB7622A85D32CBFF40ABD2995055E03DBAC05DD841B9A84D9023A5510D89E534"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11975
Expires: Fri, 17 Mar 2023 19:21:28 GMT
Date: Fri, 17 Mar 2023 16:01:53 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qLFt/S8h/SygIplC+clMlclbp/gHpcOjK3ATZ9gGSUyMhEXcdlCpfxP7XUcioghtaxkDJ05STp4=
x-amz-request-id: HMSAJRWZAQ48ZEDH
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 17 Mar 2023 15:48:10 GMT
age: 823
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84adccab6a410d1c3536e16a32f7a572
25ee9c10684fd2f81016e3c882e5061879da39dd
30c23f63b732f6f8f5075a980bb79c61596dc3c7614cc4453371cd13777572e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30C23F63B732F6F8F5075A980BB79C61596DC3C7614CC4453371CD13777572E0"
Last-Modified: Fri, 17 Mar 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21578
Expires: Fri, 17 Mar 2023 22:01:32 GMT
Date: Fri, 17 Mar 2023 16:01:54 GMT
Connection: keep-alive
igmg.site/system
301 Moved Permanently 233 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 84565f4bd848790acc0d97cbfad343dc
d5d36eac47d960d695b06ab6bbdda0350729c3f6
faa4c981c4c96a0ec17ad1a519c05efdafae7e67fe7205681d3fb53565d91a9c
Analyzer Verdict Alert fortinet Malware
GET /system HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/html; charset=iso-8859-1
content-length: 233
location: https://igmg.site/system/
x-cache-status: MISS
x-powered-by: PleskLin
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/dropzone/5.4.0/dropzone.css
200 OK 1.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/dropzone/5.4.0/dropzone.css
IP
Hash 593403dc4ce9adcdf7d8b44f18513be3
ab9859e2e1e1440884c15e707e9c2eb655c60711
8dfffecd68c0f0dec371039f73aeb8d4d8551e350b42cca7da50e2d7df142263
GET /ajax/libs/dropzone/5.4.0/dropzone.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css; charset=utf-8
content-length: 1464
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e3e-312b"
last-modified: Mon, 04 May 2020 16:09:34 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 276117
expires: Wed, 06 Mar 2024 16:01:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q9Kru0sUweBn4%2FXTMHWN7%2Byq0W%2FW6dTLCMPX9zsFRqbxkj8cRYNKff3d7o91m2uWghfznhmw349D%2BCt%2FmLa7qaNu65msNiBQKnJJwhmgWJGcdc7OxCp1h3NqYaoiPiHSyKLIwHN5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7a96750b8912b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b8674f96ca43579ce968f4769e900fb
51d298ab96af7338da6e3f897e6d8e3379dd650c
46f546e150bf5a1a2b1fa1f5e63aa258f416518b71b9f2721ddf7513027650a7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 16:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
igmg.site/system/images/program5.png?r=235604543
200 OK 34 kB URL HTTP/2 igmg.site/system/images/program5.png?r=235604543
IP
File type PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced\012- data
Hash 10df1fbe515007849e1dce800a69b332
3476224effecaa7c050cdebba17da09699e356c5
f914c7f0a5075be27429eae01730847ab78864d092d6e3cfdedcc9f08d95ea74
Analyzer Verdict Alert fortinet Malware
GET /system/images/program5.png?r=235604543 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: image/png
content-length: 34008
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "628516a9-84d8"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/images/igmg_os_logo.png
200 OK 4.9 kB URL HTTP/2 igmg.site/system/images/igmg_os_logo.png
IP
File type PNG image data, 400 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash bb5bd0155bb30ba44c129be28c0e3428
885a119b71895fa9699bb1afff6f5d503364744a
3347cf02ef082e471361b37cdc867dea84e44c7ce138502c13e8284855d2d4a1
GET /system/images/igmg_os_logo.png HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: image/png
content-length: 4912
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "628516a9-1330"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 17 Mar 2023 15:14:32 GMT
age: 2842
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
igmg.site/system/images/program4.png?r=697682941
200 OK 2.4 kB URL HTTP/2 igmg.site/system/images/program4.png?r=697682941
IP
File type PNG image data, 77 x 83, 8-bit/color RGBA, non-interlaced\012- data
Hash 7385f9e6996f26e048e0656af1a63b55
da3e1b9166f1a8171a7b3b0ecdd0fcad8d7fe1ec
c4e1e74d6ad27c277320efec9e1bd55897e424be35b22abf1fcb5ef015984e79
Analyzer Verdict Alert fortinet Malware
GET /system/images/program4.png?r=697682941 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: image/png
content-length: 2363
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "628516a9-93b"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/images/program7.png?r=2012206906
200 OK 17 kB URL HTTP/2 igmg.site/system/images/program7.png?r=2012206906
IP
File type PNG image data, 143 x 132, 8-bit/color RGB, non-interlaced\012- data
Hash eeb2d5fe356d71a3128c903cb041b306
a9b1c3099a347e38a886a075a6a75737631c9667
314f0cf28a9f6341b3c47f96c0ecf06a7c929b495b502907a987afed8fa7feed
Analyzer Verdict Alert fortinet Malware
GET /system/images/program7.png?r=2012206906 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: image/png
content-length: 16669
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "628516a9-411d"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/images/program4.png?r=556748281
200 OK 2.4 kB URL HTTP/2 igmg.site/system/images/program4.png?r=556748281
IP
File type PNG image data, 77 x 83, 8-bit/color RGBA, non-interlaced\012- data
Hash 7385f9e6996f26e048e0656af1a63b55
da3e1b9166f1a8171a7b3b0ecdd0fcad8d7fe1ec
c4e1e74d6ad27c277320efec9e1bd55897e424be35b22abf1fcb5ef015984e79
Analyzer Verdict Alert fortinet Malware
GET /system/images/program4.png?r=556748281 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: image/png
content-length: 2363
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "628516a9-93b"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/images/program3.png?r=1577136616
200 OK 2.4 kB URL HTTP/2 igmg.site/system/images/program3.png?r=1577136616
IP
File type PNG image data, 92 x 83, 8-bit/color RGBA, non-interlaced\012- data
Hash 00ac55dafb6bed7c22fa6f79e268bffa
e3a16f6fa4b23db5ac1567a7f7a25ee8b30176cd
2fd5cbee7816a3a0ac5863064f0e7836fc5f2e9e53174984139aaa02a108f31c
Analyzer Verdict Alert fortinet Malware
GET /system/images/program3.png?r=1577136616 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: image/png
content-length: 2358
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "628516a9-936"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/images/program2.png?r=1202759453
200 OK 2.7 kB URL HTTP/2 igmg.site/system/images/program2.png?r=1202759453
IP
File type PNG image data, 200 x 133, 8-bit colormap, non-interlaced\012- data
Hash 8a8445dbaf9c9daba257bd6142958234
7fbf1239846097347b75409cb833ec003e712965
e6ad65ffc98707290032a8b8a7711f732a47b130098f7df9e76d59171b06bb0f
Analyzer Verdict Alert fortinet Malware
GET /system/images/program2.png?r=1202759453 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: image/png
content-length: 2699
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "628516a9-a8b"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/assets/js/js.cookie.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/js.cookie.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/js.cookie.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
content-length: 0
x-accel-version: 0.01
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "0-5df4b45069287"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.sparkline.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.sparkline.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.sparkline.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
content-length: 0
x-accel-version: 0.01
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: "0-5df4b450682e7"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
igmg.site/system/assets/js/login.min.js
200 OK 1.3 kB URL HTTP/2 igmg.site/system/assets/js/login.min.js
IP
File type ASCII text, with very long lines (3356), with no line terminators
Hash ab0d361901906d07fb70b0b60c935300
6c1820f04348745028da11350751cf52924b1da3
f4a80203541865cd3b3d825be610b193c736867c5d22fd689fc86dd18d5af461
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/login.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-d1c"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/xlsx@0.18.5/dist/shim.min.js
200 OK 2.6 kB URL HTTP/2 unpkg.com/xlsx@0.18.5/dist/shim.min.js
IP
File type HTML document, ASCII text, with very long lines (5589)
Hash f5e3a35285899a06ae1cf4b281303626
a7618b87da95f13d5c71fd2f5405a16847ff5cc8
f9e3c2ec604638eac4eafee6b5eb56e6e175a720936638f8f8450723cf90009a
GET /xlsx@0.18.5/dist/shim.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://igmg.site/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1613-Z7IllA0NQSPoxrSE6c9Sl7PgwjA"
via: 1.1 fly.io
fly-request-id: 01FYY5CX0AG90XNXEV43KMCVSJ-fra
cf-cache-status: HIT
age: 30936663
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a96750c2cf3b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/amcharts/export.min.js
200 OK 25 kB URL HTTP/2 igmg.site/system/assets/amcharts/export.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (62376), with no line terminators
Hash b9afa02a291371429fcc23db606e2ca9
74efd5dbc3d1082d6d1ef41c06be8f8008ef1ed8
ca2738d30956c8f741688c34f99e6f1c63bbbaad23ea7751fbd7f8e2c8a87831
Analyzer Verdict Alert fortinet Malware
GET /system/assets/amcharts/export.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-f3b9"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TbyccEI/x5ezB8CvOBV3Zg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Kj/Av07oGq/T4OdQ01zB3MIxxzo=
igmg.site/system/assets/amcharts/export.css?277889350
200 OK 4.9 kB URL HTTP/2 igmg.site/system/assets/amcharts/export.css?277889350
IP
File type ASCII text, with very long lines (33687), with no line terminators
Hash d08f4f155077a9850e596d576be60c10
833898a35ed52d0fb3917dc705d90abd3d025a60
6b5369423439d71e0fe68f093352a290c19835d843919a5da1a50e56222d79ce
Analyzer Verdict Alert fortinet Malware
GET /system/assets/amcharts/export.css?277889350 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-8397"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/?act=js_translates
200 OK 523 B URL HTTP/2 igmg.site/system/?act=js_translates
IP
File type ASCII text, with no line terminators
Hash 0cb3c1eaaa429c1f567323f5caa54bc6
0e6995b713346a7e56b4c4e2bd31149f30bfbed2
497ba4378d126d0a594c0fd87cc1ddca295a131f9fe281218ae8fcffda354b3c
GET /system/?act=js_translates HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-cache-status: BYPASS
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/dropzone/dropzone.js
200 OK 29 kB URL HTTP/2 igmg.site/system/assets/dropzone/dropzone.js
IP
File type Unicode text, UTF-8 text, with very long lines (3302)
Hash d2e597463e5cde0724e1495020f8ecff
01dee64230cfdf711994bb7245803e858e1d9296
575af27ca2968e31816e983c2c4aca1010c4bfae886fd7ed7b30a2935e470cc7
Analyzer Verdict Alert fortinet Malware
GET /system/assets/dropzone/dropzone.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-22feb"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 845dc57b777433830ae9d64a4602a480
167889d8b7479e54619c1b14957f87537d8873a4
d301be6b0fa0700457258218bd1f39f2613c2a20ba428d16a7079f7a87c86447
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 16:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8d1798f7185e7e9a6edb6e784c4dd0ac
3fc0d7f5b040854010ecedf7f769ddd5cf4e481e
a78e26acd5c3781bcfeec734ad839d973f1976d2a3d73d21bd1da3771831dac4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 16:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://igmg.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Mar 2023 18:52:41 GMT
expires: Tue, 12 Mar 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 335354
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.min.js
200 OK 64 kB URL HTTP/2 igmg.site/system/assets/js/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash 95d8bb4ea0394589dc4af639736f1901
db8bac75c7624183dba64d33bc989904b80cea2e
6c33a5faf84f9d9e77531c91e43cc90351c6feb6f4a7bbb106d2d13c61258069
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-17b8a"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/login.min.css?592647006
200 OK 62 kB URL HTTP/2 igmg.site/system/assets/css/login.min.css?592647006
IP
File type ASCII text, with very long lines (3443), with CRLF line terminators
Hash 4d23547a75a87555fdd5b8b004f379d3
e931a94e94d7727939245ae1ac5e7b88038cdf08
9cca3008136a9f966058b45cd242a66c7cbb40668decf6b92420a395cce0f5e3
GET /system/assets/css/login.min.css?592647006 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-e55"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/select2/select2.min.js
200 OK 18 kB URL HTTP/2 igmg.site/system/assets/select2/select2.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (64217), with no line terminators
Hash 8566e943a716c3cda7096f8defcb04d2
3147fbf13b6c93cd10d7abee3205e89e0a73e432
adbad2b9d7ae66841786f1887a88afe76ea4b49f7b647104e92c512fced79258
Analyzer Verdict Alert fortinet Malware
GET /system/assets/select2/select2.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-1042e"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7921
Expires: Fri, 17 Mar 2023 18:13:57 GMT
Date: Fri, 17 Mar 2023 16:01:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7921
Expires: Fri, 17 Mar 2023 18:13:57 GMT
Date: Fri, 17 Mar 2023 16:01:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7921
Expires: Fri, 17 Mar 2023 18:13:57 GMT
Date: Fri, 17 Mar 2023 16:01:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32661b66-c29d-4fb2-8a6d-e8d32af65c0c.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32661b66-c29d-4fb2-8a6d-e8d32af65c0c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b237b4b09287ed50ed4b41b5a4bfb339
5114fb56e5d9847562d2c493dbe684ee1057ffba
a78555499f140649e47a5c0a561f36a8002abbceb2ab13189e91faefa6dd298c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32661b66-c29d-4fb2-8a6d-e8d32af65c0c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6291
x-amzn-requestid: 862f541b-8662-40fd-948b-81f454101a06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BuAzzFL6oAMFuZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f14e4-337ab28f5f932a4c050a691d;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 12:19:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: -r-kQBuxzGLlPe15PBUIOxhCSiYdWXVxK_nFS3wEr08Sy72W02ohsQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 22:36:10 GMT
age: 62746
etag: "5114fb56e5d9847562d2c493dbe684ee1057ffba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
igmg.site/system/assets/css/jqvmap.css?781704496
200 OK 9.3 kB URL HTTP/2 igmg.site/system/assets/css/jqvmap.css?781704496
IP
Hash 381b9787b99e2e7855c3b14ff1e0543a
edf09007c64e44bedfbc010bb7b96973598d20d0
8abce81a8f73c52a1f786ade36bb589dcca226e04eb44fa54a49dfbc8ccc321b
GET /system/assets/css/jqvmap.css?781704496 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"38b-5df4b450634c7"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/amcharts/serial.js
200 OK 20 kB URL HTTP/2 igmg.site/system/assets/amcharts/serial.js
IP
File type ASCII text, with very long lines (12365)
Hash ba55c67ba6d2abb7c96199bd64cbcfd7
cb38539758ebec3b7e4ddbbe1cd9d60f7a9fe59c
12231197b6804494d15bbc041960d8e1ae0648b94d56a3d7f20368b8a8668721
Analyzer Verdict Alert fortinet Malware
GET /system/assets/amcharts/serial.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-c01f"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/plugins.min.css?578158436
200 OK 18 kB URL HTTP/2 igmg.site/system/assets/css/plugins.min.css?578158436
IP
File type Unicode text, UTF-8 text, with very long lines (33012)
Hash 90551192f296c7a9c8e0c7832455eb66
2535a6ac1985f6a0ab16659f0c667a8efb7fae47
24719e4e48520d4765c5c516b091f82dd802bdf53d363765ce416a219bc7a05c
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/plugins.min.css?578158436 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-a4bb"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6272d07-0ccd-41ba-a86f-72932f0783bd.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6272d07-0ccd-41ba-a86f-72932f0783bd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05b82ec8d7e99e9499e8b5a980008c60
280fe711e384d60749c6225ddcc7f57c48845719
305b82d6aa40f5af58100de5007ac484c73c0a49ab7c5715b8ab6e83e10270f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6272d07-0ccd-41ba-a86f-72932f0783bd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5828
x-amzn-requestid: d366481c-e7c3-4cc5-b3da-c7c4b22f320a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B5KlrFegIAMFa8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64138af0-1c7c39d05a6b31ed1ddcb409;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 21:32:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: WWj5PE-SRteLqD_zUeyBBarnrGodgVs_FuEh3pqlu8NmuSXEKbtJiA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 21:49:59 GMT
etag: "280fe711e384d60749c6225ddcc7f57c48845719"
content-type: image/jpeg
age: 65517
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafa24301-1030-4c4f-989c-e2b17d183b89.webp
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafa24301-1030-4c4f-989c-e2b17d183b89.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 558d071f9fca9b78c603772983479a2e
d3e35ffefb1fb7463f0f4eedd6a83577dc73523a
03a98d89ba218aead77e6c2470bc74840b05515e9e6c14cad12ae952974a845d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafa24301-1030-4c4f-989c-e2b17d183b89.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5823
x-amzn-requestid: e80767f3-f9d5-4617-841c-0ff537e127f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B2oz2EdsIAMFVIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64128818-1ac71964287b5c9431cb9264;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 03:08:08 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: MnNSoeWgZ3xQgnZq7b579WZ6wD61BPS_JEOkfjxfk0DHifilHeYveQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 04:48:01 GMT
age: 40435
etag: "d3e35ffefb1fb7463f0f4eedd6a83577dc73523a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.flot.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.flot.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.flot.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-cee6"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/file-saver@1.3.3/FileSaver.js
200 OK 0 B URL HTTP/2 unpkg.com/file-saver@1.3.3/FileSaver.js
IP
GET /file-saver@1.3.3/FileSaver.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Wed, 05 Oct 2016 10:43:25 GMT
etag: W/"174d-ppV+tNTWNc2klmEzFicm/vyFuQM"
via: 1.1 fly.io
fly-request-id: 01GV5ABR5RJXCM64Z941AVS2ZF-ams
cf-cache-status: HIT
age: 631800
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a96750bfc9eb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/ekurs.css?135914908
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/ekurs.css?135914908
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/ekurs.css?135914908 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-62b5"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.dataTables.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.dataTables.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.dataTables.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-13ff2"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery-ui.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery-ui.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery-ui.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-3dee5"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.number.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.number.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.number.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-185f"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/daterangepicker.min.css?483516339
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/daterangepicker.min.css?483516339
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/daterangepicker.min.css?483516339 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-15ea"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/fullcalendar/lib/locales-all.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/fullcalendar/lib/locales-all.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/fullcalendar/lib/locales-all.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-47e2"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.flot.categories.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.flot.categories.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.flot.categories.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-a26"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/demo.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/demo.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/demo.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-10a6"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/colorbox.css?293460651
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/colorbox.css?293460651
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/colorbox.css?293460651 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-114f"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/jquery-ui.css?2142061390
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/jquery-ui.css?2142061390
IP
GET /system/assets/css/jquery-ui.css?2142061390 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-91ce"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/xlsx@0.18.5/dist/xlsx.full.min.js
200 OK 0 B URL HTTP/2 unpkg.com/xlsx@0.18.5/dist/xlsx.full.min.js
IP
GET /xlsx@0.18.5/dist/xlsx.full.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://igmg.site/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"d743f-f3SfgaRaUyKRNsbB8dUNyxbdwjM"
via: 1.1 fly.io
fly-request-id: 01G754ETJDY0FY3YHJ5RCQMFCX-fra
cf-cache-status: HIT
age: 22112823
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a96750c0cd0b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/pwstrength.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/pwstrength.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/pwstrength.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-9785"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.flot.resize.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.flot.resize.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.flot.resize.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-928"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.vmap.world.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.vmap.world.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.vmap.world.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-ecb8"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/select2.full.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/select2.full.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/select2.full.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-124fd"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/dashboard.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/dashboard.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/dashboard.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-530d"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Malware
GET /system/ HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://igmg.site/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9; expires=Sun, 25-Jun-2023 16:01:54 GMT; Max-Age=8640000; path=/
x-cache-status: MISS
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/select2/tr.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/select2/tr.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/select2/tr.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"305-5df4b4506a227"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/popper.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/popper.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/popper.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-52ce"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.2/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.7.2/css/all.css
IP
GET /releases/v5.7.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://igmg.site
Connection: keep-alive
Referer: https://igmg.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
x-amz-id-2: srwjujWmU3PFDTGGNgqi26+BF9fw2+gzTW0z898jRX/08YtP+s8k6vOkWoWpaOiwsf2TZE+IdyQ=
x-amz-request-id: 1C37J382J3VT8RT5
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:57 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a1ktp%2BTIKB%2BRX6sf8kotlaGa%2F0kUlmR9iuQyBg%2Bo7aj5nHMFppEdP5x0XEQeZ5NHZNg%2FwtDJ9VNQ2r1%2B%2Fke2ZlURAWgqGfmZ9A3hJztJ4b5BO38VhCJdAu3U81r6nG9dY50x1YHC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a96750c4b8948b3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
igmg.site/system/assets/amcharts/light.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/amcharts/light.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/amcharts/light.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-b62"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/colorbox/jquery.colorbox-min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/colorbox/jquery.colorbox-min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/colorbox/jquery.colorbox-min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-2eb8"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.blockui.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.blockui.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.blockui.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-2554"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.easypiechart.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.easypiechart.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.easypiechart.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-f4e"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/quick-sidebar.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/quick-sidebar.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/quick-sidebar.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-ae3"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/fullcalendar/lib/main.min.css?556005233
200 OK 0 B URL HTTP/2 igmg.site/system/assets/fullcalendar/lib/main.min.css?556005233
IP
GET /system/assets/fullcalendar/lib/main.min.css?556005233 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-616b"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/fullcalendar/lib/main.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/fullcalendar/lib/main.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/fullcalendar/lib/main.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-3c681"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/xlsx/dist/shim.min.js
302 Found 0 B URL HTTP/2 unpkg.com/xlsx/dist/shim.min.js
IP
GET /xlsx/dist/shim.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /xlsx@0.18.5/dist/shim.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GVR4RHTP8RHNV50MNGVXWTWG-fra
cf-cache-status: HIT
age: 138
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a96750bfcabb524-OSL
X-Firefox-Spdy: h2
igmg.site/system/assets/js/ekurs.js?1193983119
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/ekurs.js?1193983119
IP
GET /system/assets/js/ekurs.js?1193983119 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Sat, 04 Mar 2023 09:56:51 GMT
etag: W/"640315e3-6383"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/bootbox.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/bootbox.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/bootbox.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-4543"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/bootstrap.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/bootstrap.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-ea47"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/raphael-min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/raphael-min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/raphael-min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-16555"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/amcharts/dataloader.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/amcharts/dataloader.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/amcharts/dataloader.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-1a8b"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.vmap.russia.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.vmap.russia.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.vmap.russia.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-267d3"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.vmap.germany.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.vmap.germany.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.vmap.germany.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-d893"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.vmap.usa.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.vmap.usa.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.vmap.usa.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-ba04"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/bootstrap-switch.min.css?1274947606
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/bootstrap-switch.min.css?1274947606
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/bootstrap-switch.min.css?1274947606 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-1939"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/default.min.css?501572490
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/default.min.css?501572490
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/default.min.css?501572490 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-5a7f"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/bayrakfont.css?757233112
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/bayrakfont.css?757233112
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/bayrakfont.css?757233112 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-3361"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/xlsx/dist/xlsx.full.min.js
302 Found 0 B URL HTTP/2 unpkg.com/xlsx/dist/xlsx.full.min.js
IP
GET /xlsx/dist/xlsx.full.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /xlsx@0.18.5/dist/xlsx.full.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GVR4F97BDG7Q4MTTQRJ7FGPC-fra
cf-cache-status: HIT
age: 442
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a96750bec9ab524-OSL
X-Firefox-Spdy: h2
igmg.site/system/assets/css/igmgfont.css?1799332251
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/igmgfont.css?1799332251
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/igmgfont.css?1799332251 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-6c5"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/bootstrap.min.css?1427255605
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/bootstrap.min.css?1427255605
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/bootstrap.min.css?1427255605 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-1cc99"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/dataTables.min.css?1729587443
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/dataTables.min.css?1729587443
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/dataTables.min.css?1729587443 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-342b"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/morris.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/morris.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/morris.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-8b44"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/morris.css?611338016
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/morris.css?611338016
IP
GET /system/assets/css/morris.css?611338016 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"1b0-5df4b450634c7"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/additional-methods.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/additional-methods.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/additional-methods.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-433a"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/layout.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/layout.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/layout.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-11c0"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,300,600,700&subset=all
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,300,600,700&subset=all
IP
GET /css?family=Open+Sans:400,300,600,700&subset=all HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 17 Mar 2023 16:01:54 GMT
date: Fri, 17 Mar 2023 16:01:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
igmg.site/system/assets/js/bootstrap-switch.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/bootstrap-switch.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/bootstrap-switch.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-3a37"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.validate.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.validate.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.validate.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-5262"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/moment-with-locales.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/moment-with-locales.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/moment-with-locales.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-9721a"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/daterangepicker.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/daterangepicker.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/daterangepicker.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-7b6a"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.counterup.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.counterup.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.counterup.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-42d"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/fullcalendar.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/fullcalendar.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/fullcalendar.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-180ab"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/components.min.css?148843212
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/components.min.css?148843212
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/components.min.css?148843212 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-a0436"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/css/layout.min.css?1030557854
200 OK 0 B URL HTTP/2 igmg.site/system/assets/css/layout.min.css?1030557854
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/css/layout.min.css?1030557854 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-ec89"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.vmap.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.vmap.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.vmap.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-6ba2"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.vmap.europe.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.vmap.europe.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.vmap.europe.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-17d75"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/app.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/app.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/app.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-3c77"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/amcharts/amcharts.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/amcharts/amcharts.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/amcharts/amcharts.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-3314a"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.slimscroll.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.slimscroll.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.slimscroll.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-1437"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.vmap.sampledata.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.vmap.sampledata.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.vmap.sampledata.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-952"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/quick-nav.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/quick-nav.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/quick-nav.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"19f-5df4b45069a57"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/
200 OK 0 B IP
GET / HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/html
x-accel-version: 0.01
last-modified: Wed, 29 Jun 2022 10:49:44 GMT
etag: W/"28-5e293e94074cd"
x-cache-status: STALE
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/select2/select2.min.css?1646359175
200 OK 0 B URL HTTP/2 igmg.site/system/assets/select2/select2.min.css?1646359175
IP
GET /system/assets/select2/select2.min.css?1646359175 HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: text/css
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-7c8b"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/tinymce/tinymce.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/tinymce/tinymce.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/tinymce/tinymce.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-72a93"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/amcharts/pie.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/amcharts/pie.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/amcharts/pie.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-394d"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
igmg.site/system/assets/js/jquery.waypoints.min.js
200 OK 0 B URL HTTP/2 igmg.site/system/assets/js/jquery.waypoints.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /system/assets/js/jquery.waypoints.min.js HTTP/1.1
Host: igmg.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igmg.site/system/
Cookie: PHPSESSID=0keijrcv6dmkg89pnff9jeemk9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 16:01:54 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 15:54:17 GMT
etag: W/"628516a9-1f6c"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
51.195.6.66
23.36.76.226
35.241.9.150
104.17.25.14