| 138.197.172.61/ |  138.197.172.61 | | 825 B |
IP138.197.172.61:0 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, ASCII text Hashfc476f2ee6875fcc3b8c12e3cf08ba98 7b6c117dc1449371d746f70f2ed7684d198e0ae5 dc569a40529133624a4ebea44b99b9a5df928e6f66bc29c90010f6c3d29d4865
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:47 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Mon, 18 Mar 2019 16:15:03 GMT
ETag: "887-58460b0eafc9f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 825
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
|
|
| 138.197.172.61/moodle/login/index.php | 138.197.172.61 | 200 OK | 6.0 kB |
URL User Request GET HTTP/1.1138.197.172.61/moodle/login/index.php IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, ASCII text, with very long lines (12379) Hashaeb001ca4c5f419a1adcb45f8973179f 13bd7edb78b764220302f3133d816c71cd031a12 fd8d39357431ba35ddc829bc48eefccedb5cfcc832ee5319fc6de961608577ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/login/index.php HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:47 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Set-Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2; path=/moodle/
Expires:
Cache-Control: private, pre-check=0, post-check=0, max-age=0, no-transform
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5995
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css |  104.18.10.207 | 200 OK | 5.6 kB |
URL GET HTTP/1.1maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css IP104.18.10.207:80
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeASCII text, with very long lines (21822) Hashfeda974a77ea5783b8be673f142b7c88 b71d1c7c315b67c614563382d1c2a868ac14d729 0fb1bbca73646e8e2b93c82e8d8b219647b13d4b440c48e338290b9a685b8de1
GET /font-awesome/4.2.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 14:35:42 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
CDN-EdgeStorageId: 601, 617, 617
Last-Modified: Mon, 25 Jan 2021 22:04:53 GMT
CDN-CachedAt: 2021-08-02 19:09:15
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
Cache-Control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
CDN-RequestId: a20f8f9fd039c143ec88748f1e9f7c9f
Content-Encoding: gzip
CDN-Status: 200
CDN-Cache: HIT
CF-Cache-Status: HIT
Age: 843825
Server: cloudflare
CF-RAY: 881aa846285d56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Open+Sans |  142.250.74.106 | 200 OK | 1.5 kB |
URL GET HTTP/1.1fonts.googleapis.com/css?family=Open+Sans IP142.250.74.106:80
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeASCII text, with very long lines (1572) Hash8494cb780c29806c002ddd96a62fb89f 60a75db7cd42b4f54484229e5f622f4e78bf3758 c042a5f128ea9d12107360aa8c1f4c5a8801d4907098715b04baa423349808cc
GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 10 May 2024 14:35:42 GMT
Date: Fri, 10 May 2024 14:35:42 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
|
|
| 138.197.172.61/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css | 138.197.172.61 | 200 OK | 1.0 kB |
URL GET HTTP/1.1138.197.172.61/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeASCII text, with very long lines (1979) Hash513a25e692b0f89326ceae1b1fd34b3f 413a14125fe60e21ae94a4b69dd5c8ae9c06c6cb 45b30b681ac946d1ef0352364b41a3908b8f351aa8613d87241a94489bf9fd8f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 08 Oct 2015 23:36:46 GMT
Expires: Mon, 05 May 2025 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=31104000
Accept-Ranges: none
Etag: "b9bc567c469e2872cf3bbb14603342a72de2509b"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1035
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 138.197.172.61/moodle/theme/javascript.php/aardvark/1576020232/footer | 138.197.172.61 | 200 OK | 547 B |
URL GET HTTP/1.1138.197.172.61/moodle/theme/javascript.php/aardvark/1576020232/footer IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeASCII text, with very long lines (1158) Hashcded10b0940ef1d668fd1e2177862b4c c1bd51a332b0714bf3b971523210ca94105174a1 48d4bea06744e584e0f6f9f83da4d5ddc958605f764b884ae46bb57c09b7a3cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/javascript.php/aardvark/1576020232/footer HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "e78fd3c7944fba47a141da17d36c8cf29fed1dea"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 10 Dec 2019 23:23:57 GMT
Expires: Tue, 09 Jul 2024 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=5184000
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 547
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
|
|
| 138.197.172.61/moodle/lib/javascript.php/1576020232/lib/requirejs/require.min.js | 138.197.172.61 | 200 OK | 6.1 kB |
URL GET HTTP/1.1138.197.172.61/moodle/lib/javascript.php/1576020232/lib/requirejs/require.min.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeJavaScript source, ASCII text, with very long lines (10947) Hashda9eabd3950c40f0dc456138863151ec 2a3ea3a771f7a7470827c6c85bae52e3e87addcf b2207419afc428eee5a28d9340931d28288c58538db40710bdd544201934f7f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/lib/javascript.php/1576020232/lib/requirejs/require.min.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "4c63bde5e85073a6fc14abc5c32ab95da9761bcf"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 10 Dec 2019 23:23:52 GMT
Expires: Tue, 09 Jul 2024 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=5184000
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6072
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
|
|
| 138.197.172.61/moodle/lib/javascript.php/1576020232/lib/javascript-static.js | 138.197.172.61 | 200 OK | 9.4 kB |
URL GET HTTP/1.1138.197.172.61/moodle/lib/javascript.php/1576020232/lib/javascript-static.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeJavaScript source, ASCII text, with very long lines (14571) Hashf5f78c9af4f064de976a9367afa8aa83 2d0f92607d16977a829f9add5b6c84c6fd553b55 b7a8269d4e7b7a9233cd7992a36e0ac10831973d6a21ce4ec28019d081a2f12b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/lib/javascript.php/1576020232/lib/javascript-static.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "29c6b16d98fef691e5ddce23a209f23fb96111aa"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 10 Dec 2019 23:23:57 GMT
Expires: Tue, 09 Jul 2024 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=5184000
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
|
|
| 138.197.172.61/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js&rollup/1576020232/mcore-min.js | 138.197.172.61 | 200 OK | 89 kB |
URL GET HTTP/1.1138.197.172.61/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js&rollup/1576020232/mcore-min.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeJavaScript source, ASCII text, with very long lines (6010) Hash604c5700c996341e30967db51d9e6fef f5d08a5d16d333d9dfae7207d464f765988090cf 131ffd4827b26252763d48149e4ef711be59909130ef4640f5a21f0f3211cb09
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js&rollup/1576020232/mcore-min.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 08 Oct 2015 23:36:46 GMT
Expires: Mon, 05 May 2025 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=31104000
Accept-Ranges: none
Etag: "25a696f2c3ed98588b92cbe73a859f04ce3d392e"
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
|
|
| 138.197.172.61/moodle/theme/styles.php/aardvark/1576020232/all | 138.197.172.61 | 200 OK | 94 kB |
URL GET HTTP/1.1138.197.172.61/moodle/theme/styles.php/aardvark/1576020232/all IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeUnicode text, UTF-8 text, with very long lines (911) Hash6e2a35ffa182e7462222a6fc20088c84 bd6ad18502e960ed0db91d303e866b745ce728df e57ea7db65571ebb3a81ab7c447325fa8f73d9b52f4377fa020cd6ef869e794a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/styles.php/aardvark/1576020232/all HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "aee413503baaed046266531db6835faebfe3be5a"
Content-Disposition: inline; filename="styles.php"
Last-Modified: Sun, 29 Mar 2020 17:46:14 GMT
Expires: Tue, 09 Jul 2024 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=5184000
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css; charset=utf-8
|
|
| 138.197.172.61/moodle/theme/image.php/aardvark/core/1576020232/help | 138.197.172.61 | 200 OK | 2.9 kB |
URL GET HTTP/1.1138.197.172.61/moodle/theme/image.php/aardvark/core/1576020232/help IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typePNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced Hash1204fb7fbeaa53761d418711e5fa4ab5 60d64b1c7c28d3a16037f029c4fdd100c7ab653b 86955265af64627d10e12b2d635b650639a26743b2e9951c3879079c1b561874
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/image.php/aardvark/core/1576020232/help HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "c069c27d1672fb4464a9d057d89a362f39047c60"
Content-Disposition: inline; filename="help.png"
Last-Modified: Tue, 10 Dec 2019 23:24:06 GMT
Expires: Tue, 09 Jul 2024 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=5184000, no-transform
Accept-Ranges: none
Content-Length: 2905
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
|
|
| fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 IP216.58.207.227:80
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeWeb Open Font Format (Version 2), TrueType, length 18668, version 1.0 Hash8655d20bbcc8cdbfab17b6be6cf55df3 90edbfa9a7dabb185487b4774076f82eb6412270 e7af9d60d875eb1c1b1037bbbfdec41fcb096d0ebcf98a48717ad8b07906ced6
GET /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://138.197.172.61
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 18668
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 09 May 2024 01:54:07 GMT
Expires: Fri, 09 May 2025 01:54:07 GMT
Cache-Control: public, max-age=31536000
Age: 132096
Last-Modified: Thu, 14 Dec 2023 02:00:39 GMT
Content-Type: font/woff2
|
|
| fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVIGxA.woff2 | 216.58.207.227 | 200 OK | 10 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVIGxA.woff2 IP216.58.207.227:80
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeWeb Open Font Format (Version 2), TrueType, length 10180, version 1.0 Hash31c3253c6146d2a15cedfcfbc975ef7d 11f185be446d870ddbaa7bfff3382e428dddf853 37c813e5c95a107d3992c300f1b03a488e70570166eb45687fedab8d1f3b6c7b
GET /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVIGxA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://138.197.172.61
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 10180
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 10 May 2024 07:52:25 GMT
Expires: Sat, 10 May 2025 07:52:25 GMT
Cache-Control: public, max-age=31536000
Age: 24198
Last-Modified: Thu, 14 Dec 2023 02:49:42 GMT
Content-Type: font/woff2
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0 | 104.18.10.207 | 200 OK | 66 kB |
URL GET HTTP/1.1maxcdn.bootstrapcdn.com/font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0 IP104.18.10.207:80
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeWeb Open Font Format, TrueType, length 65452, version 1.0 Hashd95d6f5d5ab7cfefd09651800b69bd54 7d65e0227d0d7cdc1718119cd2a7dce0638f151c 199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://138.197.172.61
DNT: 1
Connection: keep-alive
Referer: http://maxcdn.bootstrapcdn.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 14:35:43 GMT
Content-Type: font/woff
Content-Length: 65452
Connection: keep-alive
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31919000
ETag: "d95d6f5d5ab7cfefd09651800b69bd54"
Last-Modified: Mon, 25 Jan 2021 22:04:53 GMT
CDN-CachedAt: 10/31/2023 18:58:46
CDN-ProxyVer: 1.04
CDN-RequestPullCode: 200
CDN-RequestPullSuccess: True
CDN-EdgeStorageId: 1055
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
X-Content-Type-Options: nosniff
CDN-Status: 200
CDN-RequestId: a2dd54460ee16a99a979304b6d0194e2
CDN-Cache: HIT
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 881aa849fede56a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 138.197.172.61/moodle/theme/yui_combo.php?m/1576020232/core/event/event-min.js&m/1576020232/filter_mathjaxloader/loader/loader-min.js | 138.197.172.61 | 200 OK | 781 B |
URL GET HTTP/1.1138.197.172.61/moodle/theme/yui_combo.php?m/1576020232/core/event/event-min.js&m/1576020232/filter_mathjaxloader/loader/loader-min.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeJavaScript source, ASCII text, with very long lines (1374) Hash16a0db42fa9c83cd456cd36eb2efef1d 34fb3032412e0e2c66c4c9cfd53cf8d9a27f0744 bf50b02892936746d625d3ae9bca052b7adb1124c49970e69f27e7c05cbccf01
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/yui_combo.php?m/1576020232/core/event/event-min.js&m/1576020232/filter_mathjaxloader/loader/loader-min.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 08 Oct 2015 23:36:46 GMT
Expires: Mon, 05 May 2025 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=31104000
Accept-Ranges: none
Etag: "70a92dffd18bfd9bbaa907cee315f4273d983cd2"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 781
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 138.197.172.61/moodle/lib/requirejs.php/1576020232/core/first.js | 138.197.172.61 | 200 OK | 13 kB |
URL GET HTTP/1.1138.197.172.61/moodle/lib/requirejs.php/1576020232/core/first.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeJavaScript source, ASCII text, with very long lines (27884) Hash79165cf4757b53cc521b6da95d74ed9a d3940e0756cbdebdd7505ac521a0874501698034 0267c3b3aaa7ca1fcf5595136eb578644e9ee23e97463f867c9e2bd772a4df34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/lib/requirejs.php/1576020232/core/first.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "f8c80a93de8123e7dc3baa3b15d6f58ecc8bcddd"
Content-Disposition: inline; filename="requirejs.php"
Last-Modified: Tue, 10 Dec 2019 23:23:53 GMT
Expires: Tue, 09 Jul 2024 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=5184000
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
|
|
| canadiancollegeofeducators.ca/images/cce_logo_blue_gold_xsml.jpg |  188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/1.1canadiancollegeofeducators.ca/images/cce_logo_blue_gold_xsml.jpg IP188.114.96.1:80
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 339x80, components 3 Hash3c9fddf55a9de46a7896ad891c6f271f 820bad2d2381b3b03ce15c091f487a1ab3d2b1f1 ea3c187a721f067796c081af383385eacc805fe6b879b0c15e4bea2570f2505c
GET /images/cce_logo_blue_gold_xsml.jpg HTTP/1.1
Host: canadiancollegeofeducators.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 14:35:43 GMT
Content-Type: image/jpeg
Content-Length: 13353
Connection: keep-alive
Last-Modified: Sat, 11 Feb 2012 16:14:38 GMT
X-Cache-Info: caching
CF-Cache-Status: BYPASS
Set-Cookie: X-Mapping-oeigldoo=4F3717B46D9F9CE60C1F28403A52FDE1; path=/
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LuMf6%2FKQnh5qRluiwv86UR2dF8AOQN9xiS1XMRUH9yxylzsQVqD3cm%2BXufh6RFJa8YtchY0XaWp4etczrWbkbDn0tArezDm2moQC0lTz0WsQ66o5lQcv1zQMObmKseFPM4GdKjUgmYPfooYb4IRhhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 881aa848feca568d-OSL
alt-svc: h2=":443"; ma=60
|
|
| 138.197.172.61/moodle/theme/yui_combo.php?3.17.2/cssbutton/cssbutton-min.css | 138.197.172.61 | 200 OK | 1.1 kB |
URL GET HTTP/1.1138.197.172.61/moodle/theme/yui_combo.php?3.17.2/cssbutton/cssbutton-min.css IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeASCII text, with very long lines (5267) Hasha4987c5ff66d2c767838520e9394b527 844906b95defe7da93c71cbf11c1684c12aa62d3 c4cc4d14d94d940a82ceb24dc9c9ae9d4573a436e1369db31f2d9c2b1546fe18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/yui_combo.php?3.17.2/cssbutton/cssbutton-min.css HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:48 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 08 Oct 2015 23:36:46 GMT
Expires: Mon, 05 May 2025 13:24:48 GMT
Pragma:
Cache-Control: public, max-age=31104000
Accept-Ranges: none
Etag: "323202bec286f8abd417e82b36bf85c33dc46920"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1106
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 138.197.172.61/moodle/theme/image.php/aardvark/theme/1576020232/favicon | 138.197.172.61 | 200 OK | 1.4 kB |
URL GET HTTP/1.1138.197.172.61/moodle/theme/image.php/aardvark/theme/1576020232/favicon IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashfc36f9245a419d388a55e1520ac0c588 5df92eadc93715318873381559b439b54d51475a 0c7e9d4057e02ee237f2b7de40dd50224acce99b7507ebd5a433d9fce0097874
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/image.php/aardvark/theme/1576020232/favicon HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:49 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "e2138c9333901cab36f2ef398ed56147ab37504a"
Content-Disposition: inline; filename="favicon.ico"
Last-Modified: Tue, 10 Dec 2019 23:23:59 GMT
Expires: Tue, 09 Jul 2024 13:24:49 GMT
Pragma:
Cache-Control: public, max-age=5184000, no-transform
Accept-Ranges: none
Content-Length: 1409
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
|
|
| 138.197.172.61/moodle/theme/image.php/aardvark/theme/1576020232/apple-touch-icon | 138.197.172.61 | 200 OK | 7.3 kB |
URL GET HTTP/1.1138.197.172.61/moodle/theme/image.php/aardvark/theme/1576020232/apple-touch-icon IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typePNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced Hash89250388a3a3321cb6a78834c6a9d5dc db3aa9604b821242c0c83da21c0b158c0de7552a fe1ddf335fc2566504fa3971956a43b50d9999307a3bef4e050635539fe2dd28
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/image.php/aardvark/theme/1576020232/apple-touch-icon HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:49 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "3bdec53dd47f2eb01a4d991c6b39e8dcbbfde955"
Content-Disposition: inline; filename="apple-touch-icon.png"
Last-Modified: Tue, 10 Dec 2019 23:28:04 GMT
Expires: Tue, 09 Jul 2024 13:24:49 GMT
Pragma:
Cache-Control: public, max-age=5184000, no-transform
Accept-Ranges: none
Content-Length: 7330
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| 138.197.172.61/moodle/lib/javascript.php/1576020232/lib/requirejs/jquery-private.js | 138.197.172.61 | 200 OK | 77 B |
URL GET HTTP/1.1138.197.172.61/moodle/lib/javascript.php/1576020232/lib/requirejs/jquery-private.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeASCII text, with no line terminators Hash41386c0e0a69c3af2aa80a307029cee7 e84492ff15f9097d15b996cb8cbc9815f92a0eb8 be0aa8fccceaec2989338939fcec462a2714a9d7c7cdb808c6545c95c3f076fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/lib/javascript.php/1576020232/lib/requirejs/jquery-private.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:49 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "8271d68c2a090cccaa3c94450fbe7660097edd82"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 10 Dec 2019 23:23:53 GMT
Expires: Tue, 09 Jul 2024 13:24:49 GMT
Pragma:
Cache-Control: public, max-age=5184000
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 77
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
|
|
| 138.197.172.61/moodle/theme/yui_combo.php?3.17.2/plugin/plugin-min.js&m/1576020232/core/lockscroll/lockscroll-min.js | 138.197.172.61 | 200 OK | 990 B |
URL GET HTTP/1.1138.197.172.61/moodle/theme/yui_combo.php?3.17.2/plugin/plugin-min.js&m/1576020232/core/lockscroll/lockscroll-min.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeASCII text, with very long lines (1483) Hash65d0c324221eb14860646bb3a651b407 3a4245bff420bafd62e5f711e68bd9342806bf3c 65e7be118ae50f8849e6d6b6b6107b28ac0963d83c29aa5872b417a11419084c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/theme/yui_combo.php?3.17.2/plugin/plugin-min.js&m/1576020232/core/lockscroll/lockscroll-min.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:49 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 08 Oct 2015 23:36:46 GMT
Expires: Mon, 05 May 2025 13:24:49 GMT
Pragma:
Cache-Control: public, max-age=31104000
Accept-Ranges: none
Etag: "b9114142f6d15bad23d5c297a32da010d3d5e201"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 990
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 138.197.172.61/moodle/lib/javascript.php/1576020232/lib/jquery/jquery-1.11.2.min.js | 138.197.172.61 | 200 OK | 33 kB |
URL GET HTTP/1.1138.197.172.61/moodle/lib/javascript.php/1576020232/lib/jquery/jquery-1.11.2.min.js IP138.197.172.61:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://138.197.172.61/moodle/login/index.php
File typeJavaScript source, ASCII text, with very long lines (10758) Hash20ffa9219b402c8f9380b228ca1622dd 39e8248b106eeea44389c9cb7dac270eef300fda ba1c94cce73582cbcedfd46701a311a14ce2d24671f0ce36deaccfb449c915ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /moodle/lib/javascript.php/1576020232/lib/jquery/jquery-1.11.2.min.js HTTP/1.1
Host: 138.197.172.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://138.197.172.61/moodle/login/index.php
Cookie: MoodleSession=vh4068g0uadiml2ncaa1h05qc2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 13:24:49 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.26
Etag: "666a515ed5cbaed4b787ff3636f48a8e2ad24077"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 10 Dec 2019 23:23:53 GMT
Expires: Tue, 09 Jul 2024 13:24:49 GMT
Pragma:
Cache-Control: public, max-age=5184000
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
|
|