fonts.googleapis.com/css?family=Open+Sans:300,400,600,700
200 OK 759 B URL GET HTTP/1.1 fonts.googleapis.com/css?family=Open+Sans:300,400,600,700
IP
Hash 66a9ca8b0ece6f4e4c26e7698c44b93f
aa4016a0f88f822f5bceb251ef4d44a2070bc42f
e51ad7199e9e3f5f57fea10eda63e260e1aa75b7931ce146231485340509c76a
GET /css?family=Open+Sans:300,400,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 16 Nov 2023 18:09:00 GMT
Date: Thu, 16 Nov 2023 18:09:00 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
200 OK 39 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (818)
Hash a806d2f85b243bb8d787d0b2e50e12d7
ac206fa161a6de751a0d4b8119157eface4cc6bf
263e429b19eb1b9ef4071e3782328046f3db4d3fbe51c28ff32d7d27164c35ca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:08:59 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
15.235.137.79/app/assets/plugins/pace/pace.min.js
200 OK 12 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/pace/pace.min.js
IP
File type ASCII text, with very long lines (12313)
Hash 0131660a2d02706fa5075e150fa59803
81791e8934a75912a9f44b35e49fd73e0a23ef8b
f14e461be37b99246828ebf6b3cb02f3f3087e5ca4a166b26772127e8ba0a3b6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/pace/pace.min.js HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:00 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:25:58 GMT
ETag: "302b-5cdf2fadb2980"
Accept-Ranges: bytes
Content-Length: 12331
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
15.235.137.79/app/assets/css/theme/default.css
200 OK 1.8 kB URL GET HTTP/1.1 15.235.137.79/app/assets/css/theme/default.css
IP
File type assembler source, ASCII text
Hash 034b71d3e1c630d4f483b35058332109
daf6eb177a376d85ac16dd16f576febb4bf6a0a6
8e5e4b2e9cb56588bf9470c01333b0dea77283fb1c34df60e2eec3eb36fb6b99
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/css/theme/default.css HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:00 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:31 GMT
ETag: "737-5cdf300663ac0"
Accept-Ranges: bytes
Content-Length: 1847
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
15.235.137.79/app/assets/css/style-responsive.min.css
200 OK 2.2 kB URL GET HTTP/1.1 15.235.137.79/app/assets/css/style-responsive.min.css
IP
File type ASCII text, with very long lines (2018)
Hash df0036acd2d7ac23e0685cafe9a0b17a
8c1173b0ec99e50b4f5f68112483ed1836083ef9
2b331ca0125f6d053183ef95b9ae2621d8ac63cc22c2d0c9925ae22078dde146
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/css/style-responsive.min.css HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:00 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:32 GMT
ETag: "8a9-5cdf300757d00"
Accept-Ranges: bytes
Content-Length: 2217
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
15.235.137.79/app/assets/plugins/jquery/jquery-1.9.1.min.js
200 OK 93 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/jquery/jquery-1.9.1.min.js
IP
File type ASCII text, with very long lines (32089)
Hash 397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/jquery/jquery-1.9.1.min.js HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:00 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:04 GMT
ETag: "169d5-5cdf2fb36b700"
Accept-Ranges: bytes
Content-Length: 92629
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
15.235.137.79/app/assets/plugins/font-awesome/css/font-awesome.min.css
200 OK 24 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (23577)
Hash 04425bbdc6243fc6e54bf8984fe50330
8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5
541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:18 GMT
ETag: "5cbb-5cdf2fc0c5680"
Accept-Ranges: bytes
Content-Length: 23739
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
15.235.137.79/app/assets/css/style.min.css
200 OK 50 kB URL GET HTTP/1.1 15.235.137.79/app/assets/css/style.min.css
IP
File type ASCII text, with very long lines (50170)
Hash fbea5871a62f73cc0bc7c40e2ed04e56
1868da487f5f0fb4d77ec4b5f3f917a10207fdf2
73b29c65f32ff0339b2a0589616213c05f588a4e25c88668207dd162d171e1a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/css/style.min.css HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:00 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:31 GMT
ETag: "c4c1-5cdf300663ac0"
Accept-Ranges: bytes
Content-Length: 50369
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
15.235.137.79/app/assets/plugins/jquery/jquery-migrate-1.1.0.min.js
200 OK 7.0 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/jquery/jquery-migrate-1.1.0.min.js
IP
File type ASCII text, with very long lines (6805)
Hash dc0102c151c491b8a0f65a520e26e083
719a9ae85f05823cb227a61036a155fa78c32241
78c059bc96d22f347342363fbf53cfe9ffc2ff49c9d04f9dbe760c87f276c5ce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/jquery/jquery-migrate-1.1.0.min.js HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:03 GMT
ETag: "1b38-5cdf2fb2774c0"
Accept-Ranges: bytes
Content-Length: 6968
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
15.235.137.79/app/assets/plugins/scrollMonitor/scrollMonitor.js
200 OK 10 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/scrollMonitor/scrollMonitor.js
IP
Hash fed6774714c219a43e9c231ff4601b72
f25243f2b361d56e30634f8bc4622c78c12a22d1
bb770831a39498bfead4e0ffda99d39acb0eca1d7a4063302e6ba7f68c082559
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/scrollMonitor/scrollMonitor.js HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:25:16 GMT
ETag: "275b-5cdf2f85a4b00"
Accept-Ranges: bytes
Content-Length: 10075
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
15.235.137.79/app/assets/css/animate.min.css
200 OK 48 kB URL GET HTTP/1.1 15.235.137.79/app/assets/css/animate.min.css
IP
File type ASCII text, with very long lines (46462)
Hash 62a654af05696d79d7b53559ac99182d
16d973508687e2348738d5532790c6ba442e49d2
0d3e5c7aded50cd8c5932bbb785ad5471ced3f45b868b6fed763e49e2d0e9507
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/css/animate.min.css HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:35 GMT
ETag: "b9fc-5cdf300a343c0"
Accept-Ranges: bytes
Content-Length: 47612
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
15.235.137.79/app/assets/plugins/bootstrap/css/bootstrap.min.css
200 OK 122 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/bootstrap/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Size 122 kB (122540 bytes)
Hash 5d5357cb3704e1f43a1f5bfed2aebf42
08df9a96752852f2cbd310c30facd934e348c2c5
31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:00 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:21 GMT
ETag: "1deac-5cdf2fc3a1d40"
Accept-Ranges: bytes
Content-Length: 122540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
15.235.137.79/app/assets/plugins/jquery-cookie/jquery.cookie.js
200 OK 2.3 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/jquery-cookie/jquery.cookie.js
IP
Hash 4a9fad297b4542775269cc7f3f4228ba
d229c1b9c335e36f0af339f38c71678776b7e178
ba85cb0298f33d5140126570f36b6139c81a9277ef80bfba86a175ecefc69998
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/jquery-cookie/jquery.cookie.js HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:03 GMT
ETag: "90f-5cdf2fb2774c0"
Accept-Ranges: bytes
Content-Length: 2319
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
15.235.137.79/app/assets/js/apps.min.js
200 OK 3.2 kB URL GET HTTP/1.1 15.235.137.79/app/assets/js/apps.min.js
IP
File type ASCII text, with very long lines (3011), with CRLF line terminators
Hash 6c6bc2c9ee8eb7fe4e791fababee2d28
7299d3ecd41e9f30bca3d69fae0015dd1b1e1e97
795e170a474fbac6171682e37114b9fc7ce744997df60a977f32e4ecce948eb8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/js/apps.min.js HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:59 GMT
ETag: "c8f-5cdf2fe7df2c0"
Accept-Ranges: bytes
Content-Length: 3215
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/1.1 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://15.235.137.79
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48432
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 13 Nov 2023 23:42:19 GMT
Expires: Tue, 12 Nov 2024 23:42:19 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Sep 2023 00:40:31 GMT
Content-Type: font/woff2
Age: 239202
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/1.1 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://15.235.137.79
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48432
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 13 Nov 2023 23:42:19 GMT
Expires: Tue, 12 Nov 2024 23:42:19 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Sep 2023 00:40:31 GMT
Content-Type: font/woff2
Age: 239202
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/1.1 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://15.235.137.79
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48432
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 13 Nov 2023 23:42:19 GMT
Expires: Tue, 12 Nov 2024 23:42:19 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Sep 2023 00:40:31 GMT
Content-Type: font/woff2
Age: 239202
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/1.1 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://15.235.137.79
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48432
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 13 Nov 2023 23:42:19 GMT
Expires: Tue, 12 Nov 2024 23:42:19 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Sep 2023 00:40:31 GMT
Content-Type: font/woff2
Age: 239202
15.235.137.79/app/assets/plugins/bootstrap/js/bootstrap.min.js
200 OK 37 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/bootstrap/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32034)
Hash 4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:19 GMT
ETag: "8fd0-5cdf2fc1b98c0"
Accept-Ranges: bytes
Content-Length: 36816
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
15.235.137.79/app/assets/img/user-3.jpg
200 OK 8.5 kB URL GET HTTP/1.1 15.235.137.79/app/assets/img/user-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Hash 745b63d646d25661dd8ae56de7bb3078
e29e1fbf0f8a05ff4e157a5cdda079760f372219
4d57f0dd9681afa915dc78cd72c747b7b1d460ea628e76a1eb897f6db7c0bdae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/user-3.jpg HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:02 GMT
ETag: "215d-5cdf2feabb980"
Accept-Ranges: bytes
Content-Length: 8541
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
15.235.137.79/app/assets/img/action-bg.jpg
200 OK 90 kB URL GET HTTP/1.1 15.235.137.79/app/assets/img/action-bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3\012- data
Hash fbbf7ff976f81328ca99e7c6c086171c
bdb238ae596ddbfa4a4e498a4efad6e95f6a8de3
10b78d5ebb120f9121392d18c08c298cd554ea38b6762fe6d80778cb71c76e1b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/action-bg.jpg HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:30 GMT
ETag: "15fe1-5cdf30056f880"
Accept-Ranges: bytes
Content-Length: 90081
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
15.235.137.79/app/assets/img/content-bg-cover.png
200 OK 957 B URL GET HTTP/1.1 15.235.137.79/app/assets/img/content-bg-cover.png
IP
File type PNG image data, 4 x 8, 8-bit/color RGBA, non-interlaced\012- data
Hash e703cb9818819e4bb99364ac16e83164
fdbf7df948a844493ec9c8873a7a72c4e769b793
9c3bc346c9f05a2bff4d0bf822ad9f287d648168b30d11a458fe83f3a07c29cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/content-bg-cover.png HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/app/assets/css/style.min.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:02 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:23 GMT
ETag: "3bd-5cdf2ffec28c0"
Accept-Ranges: bytes
Content-Length: 957
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
15.235.137.79/app/assets/img/quote-bg.jpg
200 OK 86 kB URL GET HTTP/1.1 15.235.137.79/app/assets/img/quote-bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3\012- data
Hash d84bcb7aa285ec5a214b06480fdff7d9
88ce80ebf82fc6ef37d9089a8a44894c90ca8583
6bd56ded9f0373b7960ee9e586fdc46c3f7e6db4b61fad489f2337b50cf91361
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/quote-bg.jpg HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:20 GMT
ETag: "1505d-5cdf2ffbe6200"
Accept-Ranges: bytes
Content-Length: 86109
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
15.235.137.79/app/assets/img/user-1.jpg
200 OK 11 kB URL GET HTTP/1.1 15.235.137.79/app/assets/img/user-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Hash 470358ef71443872c3b2c3d98035fb85
005346aa6e9f2c033a3d5ec107694e1495216b1e
a1d2271414e0895302eb81e9aca89c92eabca3cf58abfd55a7e4dcf4d4078e17
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/user-1.jpg HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:02 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:03 GMT
ETag: "2988-5cdf2febafbc0"
Accept-Ranges: bytes
Content-Length: 10632
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
15.235.137.79/app/assets/img/milestone-bg.jpg
200 OK 282 kB URL GET HTTP/1.1 15.235.137.79/app/assets/img/milestone-bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3\012- data
Size 282 kB (282384 bytes)
Hash badba6aca85aa9476c040ac48e2a01de
ea84eb8e489acafe278e080981e6125e9d79d0bb
114cece7c39589053d6c4aed310335ba7ba49d147af72e8d6fe79b24ec4f8c2b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/milestone-bg.jpg HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:02 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:21 GMT
ETag: "44f10-5cdf2ffcda440"
Accept-Ranges: bytes
Content-Length: 282384
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
15.235.137.79/app/assets/img/user-2.jpg
200 OK 4.4 kB URL GET HTTP/1.1 15.235.137.79/app/assets/img/user-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Hash dd2154d34b6fa5940e3feb19b64f369d
ae6a2e536a527936e4934094c1883a93f5039670
410da996db7e0c4e07e3e4ed0ea77915ac467706f18b17c24f92065ee3ecce76
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/user-2.jpg HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:02 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:02 GMT
ETag: "113a-5cdf2feabb980"
Accept-Ranges: bytes
Content-Length: 4410
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
15.235.137.79/app/assets/img/home-bg.jpg
200 OK 404 kB URL GET HTTP/1.1 15.235.137.79/app/assets/img/home-bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x1280, components 3\012- data
Size 404 kB (403555 bytes)
Hash e0d2870baa0e254fa28790addc13bf4d
b2026d2241e7fb2d9248bb540800de6e64bef1ad
363ef6e2cf911333be82a1192720fbd6852f48d87ae4dac5ab765ec765f104f0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/img/home-bg.jpg HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:01 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:27:23 GMT
ETag: "62863-5cdf2ffec28c0"
Accept-Ranges: bytes
Content-Length: 403555
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
15.235.137.79/app/assets/plugins/font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0
200 OK 57 kB URL GET HTTP/1.1 15.235.137.79/app/assets/plugins/font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0
IP
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/assets/plugins/font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/app/assets/plugins/font-awesome/css/font-awesome.min.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 16 Nov 2023 18:09:02 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 09 Oct 2021 22:26:15 GMT
ETag: "ddcc-5cdf2fbde8fc0"
Accept-Ranges: bytes
Content-Length: 56780
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
15.235.137.79/favicon.ico
404 Not Found 956 B URL GET HTTP/1.1 15.235.137.79/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7bfcb06a8ce4644a267ebfe58eddffff
ad7530aefa10e75342f475da327817b1c2a23ceb
b03fe0c2c257425db4da85c19880a3141faa04c89e94e94676000947bf19b2fe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 15.235.137.79
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://15.235.137.79/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 16 Nov 2023 18:09:03 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
X-Powered-By: PHP/5.4.16
Content-Length: 956
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: ico
15.235.137.79
142.250.74.106