38.242.235.194/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
Location: http://38.242.235.194/auth/login.html
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9840
Expires: Sun, 27 Nov 2022 20:06:38 GMT
Date: Sun, 27 Nov 2022 17:22:38 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6379
Cache-Control: max-age=154494
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 17:22:38 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 12:17:32 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 17:19:23 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 195
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15457
Expires: Sun, 27 Nov 2022 21:40:15 GMT
Date: Sun, 27 Nov 2022 17:22:38 GMT
Connection: keep-alive
38.242.235.194/auth/login.html
200 OK 7.4 kB URL HTTP/1.1 38.242.235.194/auth/login.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (312), with CRLF, LF line terminators
Hash 893c19a70ed47aa8ce787a608023ca75
87ad5c4703b4d6253215cf7b0a7d5769f92b1d67
1ea6c93abac5260f0d3c416d3cf086b16ae436af44b030dff595b2d93583806f
Analyzer Verdict Alert quad9 Sinkholed
GET /auth/login.html HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
iresponse_session=f3mnocq2ntvpt40984h1j1o354; expires=Tue, 27-Dec-2022 17:22:38 GMT; Max-Age=2592000; path=/; domain=38.242.235.194; HttpOnly
Content-Length: 7359
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ASRW9HCCZSradJTbRT/X/NmdW7jC5AdQLeRKlR3sPA3G0KVmndktr8KWuS7PXAJI07T4rnkzTfYf1yroQLvPwA==
x-amz-request-id: 5YV0FXC9Q9E3JTF8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 16:41:42 GMT
age: 2456
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 17:22:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
38.242.235.194/plugins/font-awesome/css/font-awesome.min.css
200 OK 27 kB URL HTTP/1.1 38.242.235.194/plugins/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (26548)
Hash b0707c5cda60f769cfced7da684c0b83
a7b572fcadb21659a9f726e9fae70a808d052940
38594d7df2cb3a627ab8bc60bc8462d949a5b73d0b457202d0459a019db8401d
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "6857-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 26711
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/bootstrap-sweetalert/sweetalert.css
200 OK 14 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-sweetalert/sweetalert.css
IP
File type ASCII text, with CRLF line terminators
Hash 672dac9e51793035dee3e7dabfea125a
9bacb9c2449118aea6630fdb3fd5b4491c015140
c66d639147a4b35d2ba1144c9c9201dabd1c420bbbf628c664fbf6296a0c4772
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-sweetalert/sweetalert.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "35ab-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 13739
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/bootstrap-toastr/toastr.min.css
200 OK 5.6 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-toastr/toastr.min.css
IP
File type ASCII text, with very long lines (5619)
Hash 81889fa4c4664daa4f3f4ae924806bc3
d8830b2401c0210c510d336de57c66df8b3d10af
e0616ca2f0de8a5261acbb6c0a16c9bed36a3a8934cb1b53473cec7171063d2d
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-toastr/toastr.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "15f4-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 5620
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/simple-line-icons/simple-line-icons.min.css
200 OK 9.6 kB URL HTTP/1.1 38.242.235.194/plugins/simple-line-icons/simple-line-icons.min.css
IP
File type ASCII text, with very long lines (9503), with CRLF line terminators
Hash 6c977c35fbba185349bc72e0330a4046
befa20ea6b4311e2905f42b6c6550acbb9bb2a20
846e092e98b6069a43cd865bbd76d29535441bdb8fb27cef322d69bea1ac8367
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/simple-line-icons/simple-line-icons.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "255a-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 9562
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/bootstrap-switch/css/bootstrap-switch.min.css
200 OK 6.5 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-switch/css/bootstrap-switch.min.css
IP
File type ASCII text, with very long lines (5487)
Hash 3afd78c0db1fad3e544071dd006a8aad
2af4576315ea9c582fc16064e072577be38efb73
44d5e78058468311e175771d0e4572672c2809d02adeaf3563d8e577beaa3b29
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-switch/css/bootstrap-switch.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "1939-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 6457
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/widearea/widearea.css
200 OK 7.7 kB URL HTTP/1.1 38.242.235.194/plugins/widearea/widearea.css
IP
File type ASCII text, with very long lines (1672)
Hash 25a1753fd4592c9d18322065a745e1e9
33e7cbef2b7468a7f7a818ee2c31a2e303fc2010
d1ffe510a4c7540baec36b61c2b5b48f47b142db748f7e1b436cb1438fc744a8
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/widearea/widearea.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "1e39-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 7737
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/bootstrap-select/css/bootstrap-select.min.css
200 OK 6.7 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-select/css/bootstrap-select.min.css
IP
File type ASCII text, with very long lines (6432)
Hash 869322f14ef11735cbc3023614357cf1
f61310024845e8591da64936a791744d211e1a57
e2fd0c5c00a4aee4808ca0338d2c132f06fb3bd3ed1269097e704ef24cef32d6
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-select/css/bootstrap-select.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "19fa-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 6650
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/styles/custom.min.css
200 OK 6.2 kB URL HTTP/1.1 38.242.235.194/styles/custom.min.css
IP
File type ASCII text, with very long lines (6192), with no line terminators
Hash 2c9669ae3776f23d30a20fdfe296c67e
739ad277d3545ce0d7b9476e446858e7f9f8dbe5
ec49aadc5cc5cdcc9452b0d217ffd43971f95f74824024c83793b96617a28223
Analyzer Verdict Alert quad9 Sinkholed
GET /styles/custom.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "1830-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 6192
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/styles/pages/login.min.css
200 OK 2.6 kB URL HTTP/1.1 38.242.235.194/styles/pages/login.min.css
IP
File type ASCII text, with very long lines (2619), with no line terminators
Hash 2875b52545cac0751b4d6d00af3a168e
81f56cc16d7a816537e5bad2f717331b1db1abde
7526f5b49661fc139846ff12b3fff82ac70ff9e1018914bf0032f47ebb021172
Analyzer Verdict Alert quad9 Sinkholed
GET /styles/pages/login.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "a3b-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 2619
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/styles/plugins.min.css
200 OK 43 kB URL HTTP/1.1 38.242.235.194/styles/plugins.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (42756), with no line terminators
Hash 7e831b5751ee5354323fbdf5f8f8578e
29dfd0fa0fe0fd11d08246a8db8a61afab8fed06
b0dc4acfc842b0d7a8b3c08f3c27e33e5ae3a1418fc587ebe9690ae83d0d0f2a
Analyzer Verdict Alert quad9 Sinkholed
GET /styles/plugins.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "a715-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 42773
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/fontawesome5/css/all.min.css
200 OK 171 kB URL HTTP/1.1 38.242.235.194/plugins/fontawesome5/css/all.min.css
IP
File type ASCII text, with very long lines (65393)
Size 171 kB (170570 bytes)
Hash 81b2e00ad71a15f478a9def1e55ca743
b71f51da0c3fce0b6052a2b40909938b4e01fcab
a34e129ed3df3b2296abf74f041f034510a11a31b3243803164b86ffe83855d7
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/fontawesome5/css/all.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "29a4a-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 170570
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/bootstrap/css/bootstrap.min.css
200 OK 119 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Size 119 kB (119248 bytes)
Hash 559be2a2240c136c319c9f44be66ddb4
f60859a7c4640c937f0a28e432ab1f41f8fcbb63
f774b9adb50e02b5e7347ecbe06db1df3e45eccd55769270d8b45865a080b26f
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "1d1d0-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 119248
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194/plugins/js.cookie.min.js
200 OK 1.7 kB URL HTTP/1.1 38.242.235.194/plugins/js.cookie.min.js
IP
File type ASCII text, with very long lines (1572)
Hash 51e87c6871523b63a469e88b244f0429
c3a95779bcddbb0eff1aafece75a53295b01124e
7d97491a3d294629a353bacd88442498b5f4609aef01afbed6277da906b8ed7f
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/js.cookie.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "6ca-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 1738
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/jquery-slimscroll/jquery.slimscroll.min.js
200 OK 5.2 kB URL HTTP/1.1 38.242.235.194/plugins/jquery-slimscroll/jquery.slimscroll.min.js
IP
File type ASCII text, with very long lines (4889)
Hash a83ca7a332677203800b1d9b7d22eac0
b0d21f603aee7a1460bcbe559b1e5d010c38941e
6e13ca9248b431e3be16a43100185e8e3a3311001154d73c30ddbcce1a4d5d94
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/jquery-slimscroll/jquery.slimscroll.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "1437-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 5175
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/bootstrap/js/bootstrap.min.js
200 OK 37 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32034)
Hash 4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "8fd0-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 36816
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/jquery.blockui.min.js
200 OK 9.6 kB URL HTTP/1.1 38.242.235.194/plugins/jquery.blockui.min.js
IP
File type ASCII text, with very long lines (9162), with CRLF line terminators
Hash f35b3230007335b610a67fe27e9c19b5
4d1ff795d8ce96081c46af237b983b02f2b4536d
1562ef5e592b67d9a95a9a3f7c2a05442a7e0f7b492dd0a56e43fea9acefe627
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/jquery.blockui.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "2561-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 9569
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/bootstrap-switch/js/bootstrap-switch.min.js
200 OK 15 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-switch/js/bootstrap-switch.min.js
IP
File type ASCII text, with very long lines (13933)
Hash 12ce5d59f687e3c2a8d8395aee0c89b3
7e0725897d7b99c3c33b56915d202e2dde552ea9
b009172f00c548007f4b4f4908e591be7a0e9e11980eef55a8c9db08a0213332
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-switch/js/bootstrap-switch.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "3a37-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 14903
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/jquery.min.js
200 OK 96 kB URL HTTP/1.1 38.242.235.194/plugins/jquery.min.js
IP
File type ASCII text, with very long lines (32038), with CRLF line terminators
Hash 13c0a5055cca7b2463b2f73701960b9e
e6082a7b52db82604ac446d2e6a32cb5af263781
20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/jquery.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "176da-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 95962
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/bootstrap-sweetalert/sweetalert.min.js
200 OK 17 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-sweetalert/sweetalert.min.js
IP
File type ASCII text, with very long lines (16651), with no line terminators
Hash 0e2613ca4d17a624d7e9928acd07a7c6
b28faec55f0534a1b07a4be5aeb7bdd73418c395
262ad846a6dffaacdfa95b441381844f21e501b882a42d34e720536b8ae3eb18
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-sweetalert/sweetalert.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "410b-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 16651
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/bootstrap-hover-dropdown/bootstrap-hover-dropdown.min.js
200 OK 1.5 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-hover-dropdown/bootstrap-hover-dropdown.min.js
IP
File type ASCII text, with very long lines (1187)
Hash 37de75434657af5bfe94cf3f4450c80b
e59cc56383c3b79a91c23c9f6e8ac0389bfad115
412cf28cec5787f5a120e337814a31068e1f02df08d0ae323134eb7f75a34a26
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-hover-dropdown/bootstrap-hover-dropdown.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "603-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 1539
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/bootstrap-toastr/toastr.min.js
200 OK 3.7 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-toastr/toastr.min.js
IP
File type ASCII text, with very long lines (3695)
Hash ff17c837de44098153252a099c6f2179
590ef1bc6046a31847f913edcae17a9c28705541
b222c4d78e15f658da273327db335518a053b824e20bc16423922597d30ca4d2
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-toastr/toastr.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "e70-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 3696
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/bootstrap-select/js/bootstrap-select.min.js
200 OK 33 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-select/js/bootstrap-select.min.js
IP
File type ASCII text, with very long lines (31980)
Hash f7f690bbf905342027b167e459b8e742
8b6b9c94e68b141f51019a08bb10caca558110da
d705b3a9f50c89af172e18fe083ae91c99709b86b40376bec900ad18d1b6c71a
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-select/js/bootstrap-select.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "8187-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 33159
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/bootstrap-tabdrop/js/bootstrap-tabdrop.js
200 OK 3.3 kB URL HTTP/1.1 38.242.235.194/plugins/bootstrap-tabdrop/js/bootstrap-tabdrop.js
IP
File type ASCII text, with CRLF line terminators
Hash b6479b169d07a2d84f022ee8914e92ab
ad315a7f1885057956f2b48337cd2af945423121
fadfca2bb957da198a0f11e77156f9473845ca1e2b8bb0d89fecc71ab5e608fc
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/bootstrap-tabdrop/js/bootstrap-tabdrop.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "cd3-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 3283
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 17:22:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/webfont/1.6.16/webfont.js
200 OK 5.5 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/webfont/1.6.16/webfont.js
IP
File type ASCII text, with very long lines (2220)
Hash f72713534a64bf9c9aaee850092e823e
3ab0bb192e219d115b92f5fd590b43698d44d717
044da58d8894bb8f8464c19e34d3f4c454c222618f0c8f98aa705549c0215d97
GET /ajax/libs/webfont/1.6.16/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://38.242.235.194/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5480
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 19:14:09 GMT
expires: Sun, 26 Nov 2023 19:14:09 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 79709
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
38.242.235.194/plugins/jquery-inputmask/jquery.inputmask.bundle.min.js
200 OK 76 kB URL HTTP/1.1 38.242.235.194/plugins/jquery-inputmask/jquery.inputmask.bundle.min.js
IP
File type ASCII text, with very long lines (32016)
Hash af65c661edb28db1752a59725b0dcee6
2cfcaed5836efb1d0c85c93ae0769a2f9c44f30b
7fae7063ec1d5382cd082e6e07fa65aeefafbd7db59abf0b87a54584cf4e1ed6
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/jquery-inputmask/jquery.inputmask.bundle.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "127db-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 75739
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/plugins/widearea/widearea.js
200 OK 9.5 kB URL HTTP/1.1 38.242.235.194/plugins/widearea/widearea.js
IP
Hash dc5599e086d5bf00f95a12e37ee0f26a
02da567b8a306d119a5fa8defa6ea707e15bf9da
5e629e7b6f35204eb3550dd0ff46be585bb282372c818d53be91d84b4a5787d4
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/widearea/widearea.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "24f7-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 9463
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/scripts/global/iresponse.min.js
200 OK 29 kB URL HTTP/1.1 38.242.235.194/scripts/global/iresponse.min.js
IP
File type ASCII text, with very long lines (28714), with CRLF line terminators
Hash f45784538fa9df6bdf2135d9dfc0bcaa
09a177cc984adceb523d92a8e63fbe309ea344c8
5d8c665eeb5a21b1432418ca72621a21f8296f58d448e94ddfa45cc7669b4b7d
Analyzer Verdict Alert quad9 Sinkholed
GET /scripts/global/iresponse.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "70cf-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 28879
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/scripts/global/datatable.min.js
200 OK 4.7 kB URL HTTP/1.1 38.242.235.194/scripts/global/datatable.min.js
IP
File type ASCII text, with very long lines (4661), with no line terminators
Hash 8b6f95a4b0b8a592bc3c46fe271b129b
e00e35947bfc77d6a6fa5a78624400d6af3ac4d7
bcee611e988b573b91a746de5171731291a888ca70acf1880cc3646de917a53c
Analyzer Verdict Alert quad9 Sinkholed
GET /scripts/global/datatable.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "1235-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 4661
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
fonts.googleapis.com/css?family=Poppins:300,400,500,600,700%7CRoboto:300,400,500,600,700
200 OK 899 B URL HTTP/1.1 fonts.googleapis.com/css?family=Poppins:300,400,500,600,700%7CRoboto:300,400,500,600,700
IP
Hash ba0ac66b4337ef864d0247037e20b520
19a13a5bdaaac5cf64195f29bd1a45844857dda9
e7ecc29ccf22bc5be2dcd73a2770fd9ccffd5e6733269d195863ce45e82e2d45
GET /css?family=Poppins:300,400,500,600,700%7CRoboto:300,400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 27 Nov 2022 17:22:38 GMT
Date: Sun, 27 Nov 2022 17:22:38 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 17:08:54 GMT
cache-control: public,max-age=3600
age: 824
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 17:22:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
38.242.235.194/images/logos/iresponse_icon.ico
200 OK 37 kB URL HTTP/1.1 38.242.235.194/images/logos/iresponse_icon.ico
IP
File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 5fc2ba87deb690a1d385536ac4959faa
1ee17d3a0157eb6aaa92d796383bd4d561869cb0
fbf80f287aab831c4a8c14103b3afa97eef5aa9875b5c07d525d417cc5fb7677
Analyzer Verdict Alert quad9 Sinkholed
GET /images/logos/iresponse_icon.ico HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:39 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "9117-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 37143
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:39 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
38.242.235.194/plugins/fontawesome5/webfonts/fa-solid-900.woff2
200 OK 138 kB URL HTTP/1.1 38.242.235.194/plugins/fontawesome5/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 137704, version 330.-16253\012- data
Size 138 kB (137704 bytes)
Hash e245d7d62db89a9912e17b02bc23e256
48d7c4e403b41453d2df167450e7bcb8cfe4f7cb
68eb827a2fa6f035eab41392f863522ae5dc0d4c0c31d5245362a7f1a5aed46a
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/fontawesome5/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://38.242.235.194/plugins/fontawesome5/css/all.min.css
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:39 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:38 GMT
ETag: "219e8-5ad3f5e2b6380"
Accept-Ranges: bytes
Content-Length: 137704
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:39 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data
Hash 8d91ec1ca2d8b56640a47117e313a3e9
a9e9bafe64666f4595051a0e895b47a5fa39e67e
78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7840
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 05:40:21 GMT
Expires: Fri, 24 Nov 2023 05:40:21 GMT
Cache-Control: public, max-age=31536000
Age: 301338
Last-Modified: Wed, 27 Apr 2022 16:51:55 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7884
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 00:53:35 GMT
Expires: Fri, 24 Nov 2023 00:53:35 GMT
Cache-Control: public, max-age=31536000
Age: 318544
Last-Modified: Wed, 27 Apr 2022 17:03:52 GMT
Content-Type: font/woff2
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5021
Cache-Control: max-age=148074
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 17:22:39 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:30:33 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7748
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 01:23:16 GMT
Expires: Fri, 24 Nov 2023 01:23:16 GMT
Cache-Control: public, max-age=31536000
Age: 316763
Last-Modified: Wed, 27 Apr 2022 16:21:30 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 8000
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 22 Nov 2022 18:59:48 GMT
Expires: Wed, 22 Nov 2023 18:59:48 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 27 Apr 2022 16:59:07 GMT
Content-Type: font/woff2
Age: 426171
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7816
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 08:34:07 GMT
Expires: Thu, 23 Nov 2023 08:34:07 GMT
Cache-Control: public, max-age=31536000
Age: 377312
Last-Modified: Wed, 27 Apr 2022 16:11:40 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15740
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 25 Nov 2022 23:15:29 GMT
Expires: Sat, 25 Nov 2023 23:15:29 GMT
Cache-Control: public, max-age=31536000
Age: 151630
Last-Modified: Wed, 11 May 2022 19:24:56 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15860
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 20:16:46 GMT
Expires: Thu, 23 Nov 2023 20:16:46 GMT
Cache-Control: public, max-age=31536000
Age: 335153
Last-Modified: Wed, 11 May 2022 19:24:42 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 20:16:50 GMT
Expires: Thu, 23 Nov 2023 20:16:50 GMT
Cache-Control: public, max-age=31536000
Age: 335149
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://38.242.235.194
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15920
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 21:43:22 GMT
Expires: Thu, 23 Nov 2023 21:43:22 GMT
Cache-Control: public, max-age=31536000
Age: 329957
Last-Modified: Wed, 11 May 2022 19:24:45 GMT
Content-Type: font/woff2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OEo4pxWSh6VjyQZLuiog3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ywllt9Mj49MznWtcGY+Xw2VELg4=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12873
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:22:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12873
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:22:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12873
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:22:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12873
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:22:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12873
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:22:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
age: 70826
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y0ofyT6UcPjB8mfRR1VMjHSTW64Qb_EQ0rrjsOdbby1CG-xMIFJMPw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:49:19 GMT
age: 70401
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K2eKLQhrsCdd4ASsfEibRuZAYW4CpPTlO3fZs7xdoKrw1HBxfTGkEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
age: 70826
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
age: 70826
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: fc238ea9-0169-47fc-b92e-f12b3ee27c72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b433YGtOoAMFexg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d362-2f97c67a2e5f05b6746cf858;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:12:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: oMrdB0NUGe5CqTY7eFd3u8xaSy9TyDdOrf1awBikFJzm3jWreD2irQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 12:30:20 GMT
age: 17540
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 433875a1b1fef34e45f2d8ac344c07e3
f2129466436cbbdd58abe42a47fb7af19eba58e6
ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5099
x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4jFBvoAMFl1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6"
content-type: image/jpeg
age: 70826
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
38.242.235.194/plugins/moment.min.js
200 OK 0 B URL HTTP/1.1 38.242.235.194/plugins/moment.min.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /plugins/moment.min.js HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "1fc96-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 130198
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
38.242.235.194/images/logos/iresponse-black.png
200 OK 0 B URL HTTP/1.1 38.242.235.194/images/logos/iresponse-black.png
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /images/logos/iresponse-black.png HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "28aae-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 166574
Cache-Control: max-age=31536000
Expires: Mon, 27 Nov 2023 17:22:38 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
38.242.235.194/styles/components.min.css
200 OK 0 B URL HTTP/1.1 38.242.235.194/styles/components.min.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /styles/components.min.css HTTP/1.1
Host: 38.242.235.194
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://38.242.235.194/auth/login.html
Cookie: iresponse_session=f3mnocq2ntvpt40984h1j1o354
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 17:22:38 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.33
Last-Modified: Wed, 19 Aug 2020 18:42:36 GMT
ETag: "9cd9e-5ad3f5e0cdf00"
Accept-Ranges: bytes
Content-Length: 642462
Cache-Control: max-age=2592000
Expires: Tue, 27 Dec 2022 17:22:38 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
38.242.235.194
23.36.76.226
93.184.220.29