303 See Other 1.5 kB IP
ASN #135139 Skylink Fibernet Private Limited
File type HTML document, ASCII text, with very long lines (309)
Hash 632804dbe8f32eec9134308268996f29
702bf65f96c29256e556e7c9a979b8112c39af2e
294152c401d38af6117367b9c283ec8a781da3198146c3ab435ebe6b1b7a2ce2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 303 See Other
Date: Sat, 08 Feb 2025 01:33:59 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: MoodleSession=9r8u5fhom18g6actfnsl7sdb9l; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Redirect-By: Moodle
Location: http://103.114.208.150/login/index.php
Content-Language: en
Content-Length: 1502
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
303 See Other 1.5 kB URL 103.114.208.150/login/index.php
IP
ASN #135139 Skylink Fibernet Private Limited
File type HTML document, ASCII text, with very long lines (310)
Hash a0c37a55a888dcf18913afe9cbd81a5c
f9fb261649946dd534015198ea9a423e64bb34ba
d2feac597da03321cf562fbda854120b545271c22d90b53259244e83aee2e4e1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /login/index.php HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 303 See Other
Date: Sat, 08 Feb 2025 01:33:59 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: MoodleSession=1aalnfrvtkmecq7d4lksd7jj9a; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Redirect-By: Moodle
Location: http://103.114.208.150/data/sample.html
Content-Language: en
Content-Length: 1503
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
200 OK 1.3 kB URL 103.114.208.150/data/sample.html
IP
ASN #135139 Skylink Fibernet Private Limited
File type HTML document, ASCII text
Hash a017843ca7f2deac25c1f630c370286a
c1fadcc987673a3a1633d5ba0601322bcb307ea0
7c8f75ad04ade9cc9664dc9b2fe87b07441047a5073f1c21690119486c9575a0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /data/sample.html HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:33:59 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Fri, 12 Jul 2024 04:09:12 GMT
ETag: "d7a-61d050abf6503-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1331
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html
GET 103.114.208.150/elearning/login/forgot_password.php
200 OK 6.3 kB URL User Request GET 103.114.208.150/elearning/login/forgot_password.php
IP
ASN #135139 Skylink Fibernet Private Limited
File type HTML document, ASCII text, with very long lines (11862)
Hash 91f2dd472e8a9adc7297e48cdbaccbb6
bdd78c3f723b5519d3911b367fd94b9473db0ee4
e858b00bdeeaa3a704e4749aed2b5df67fe1ce7f5f078a4425ab6391f5de2293
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/login/forgot_password.php HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v; path=/elearning/
Expires:
Cache-Control: private, pre-check=0, post-check=0, max-age=0, no-transform
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6260
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
GET 103.114.208.150/elearning/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css
200 OK 1.0 kB URL GET HTTP/1.1 103.114.208.150/elearning/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type ASCII text, with very long lines (1985)
Hash 83c9646167bf7f695b84972e67beeb82
ba7c28cf2daafac7be88cb18e1ac867ca0235f6f
e80e2808064467e137e9daba6dc24151b91b7688dc992ae75f7670a8ac0e240a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Fri, 28 Jul 2023 16:04:08 GMT
Expires: Tue, 03 Feb 2026 01:34:00 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "b9bc567c469e2872cf3bbb14603342a72de2509b"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1037
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css;charset=UTF-8
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/javascript-static.js
200 OK 6.8 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/javascript-static.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (1875)
Hash 3e48d7afbba30532379f260739ca39a5
0512338a4efebe9b646a882a1fc09055a8a3eb5a
111b6329693bb290516569c49cd2f5b578d4310138d7fb36fef8fd4a8288a38d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/lib/javascript-static.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "b96566967f00376f76dbbccc65ba2fc4ac599501"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:06 GMT
Expires: Fri, 09 May 2025 01:34:00 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6812
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-modelist.js
200 OK 2.5 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-modelist.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (4201)
Hash 9a604b227db4f767b59f80b4642a8d57
13108967b6e9dc7d2ce82f4d45e6a951515d177a
39adf0f5f6ebf481f5f38ac5ca87fc422f6acf463aaa6a318d159e25d3fb6f67
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-modelist.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:01 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "82ad7f52446415e9c27064229276435452746468"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:06 GMT
Expires: Fri, 09 May 2025 01:34:01 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2507
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-language_tools.js
200 OK 14 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-language_tools.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (2070)
Hash 3312637f3da9e53021a682563d25fa8e
f5d6ffe9b7be1fddaf6d00273ad33534e25671bf
c409e61777c60d38eadcfda979a371c0d5454f0e551881e998f8f51393e3e586
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-language_tools.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "f447344cf898a017234b12c6f49e09ea8dbb5ce5"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:06 GMT
Expires: Fri, 09 May 2025 01:34:00 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js
200 OK 84 kB URL GET HTTP/1.1 103.114.208.150/elearning/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (6010)
Hash 8039fd714b58260199b364107c92bff6
3776c202a78a99e5eeaafbdc7d8ad61acee3af1d
13eaaadfa414f262b7964320054bb2b322b9ef9f3522bc25c9d60dc83b5141cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Fri, 28 Jul 2023 16:04:08 GMT
Expires: Tue, 03 Feb 2026 01:34:00 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "78581a0bac8a932effb32db3e91e0f2f2b47c08e"
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/polyfills/polyfill.js
200 OK 60 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/polyfills/polyfill.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (36874)
Hash 2f910e51a8154ac70aff76b6d14628c0
9f1a5e85ebd61692d7480c11f652cb29735f6d6d
1d6ba14cf4f307b9bbb13d2ad4e4cb5e701add10378e1b785c4c80dba1342170
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/lib/polyfills/polyfill.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "c97e68537db270321357ac92dd771dd4d621c72d"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:05 GMT
Expires: Fri, 09 May 2025 01:34:00 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/requirejs/require.min.js
200 OK 6.7 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/requirejs/require.min.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (17535)
Hash 1f53ac504f7e69a6df96140eed2d4df2
da00136dd3fd0ccab626d7555ccb5fdf1c096fad
9ce0dbd6a1df9332653e27d1ddc505c5b78fd82b4112de0ec63840c3fbe0b8c2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/lib/requirejs/require.min.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:01 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "b31328c6d14127ccfdc00a09da558143ec57189f"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:07 GMT
Expires: Fri, 09 May 2025 01:34:01 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6662
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-static_highlight.js
200 OK 2.0 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-static_highlight.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (1058)
Hash b97b7d1ac8241632939d0d06c38f73c4
364845b19d311e21de1ee02f338e992beaad323f
e14446fe1fcf8e345a77fad6e884b5c898a39fbea70dc6d22f71dcdf0de91cbc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ext-static_highlight.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:01 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "77ead0fca9ac0850342255e0db97a39b9841737e"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:07 GMT
Expires: Fri, 09 May 2025 01:34:01 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1957
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/theme/styles.php/boost/1737565683_1/all
200 OK 126 kB URL GET HTTP/1.1 103.114.208.150/elearning/theme/styles.php/boost/1737565683_1/all
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Size 126 kB (126113 bytes)
Hash 6f6d0c5ff82a67d22f550a7d53198175
ba9aeba569f739336975f9c30da2b7cdb742dcee
6d1a8b22ff57cbf8ab3805e39e2153210cd1b41ecc3e6128c98e3f9197a31b20
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/theme/styles.php/boost/1737565683_1/all HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "4333b4cb31ab1e8da25d9466d15052f7769e90e1"
Content-Disposition: inline; filename="styles.php"
Last-Modified: Wed, 05 Feb 2025 03:49:40 GMT
Expires: Fri, 09 May 2025 01:34:00 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css; charset=utf-8
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ace.js
200 OK 118 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ace.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (2217)
Size 118 kB (118521 bytes)
Hash d4be037ab329288321b473f3045471cc
5c193d538b30d37186c63ff1754b63f5b46629ec
4233d54025f0d2f456590c6473697963d3385dc373b3d8fbe99c33a997afa0ef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/question/type/coderunner/ace/ace.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:00 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "74b37eb0997be4f0f3739e50c9e82ccfe391b945"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:07 GMT
Expires: Fri, 09 May 2025 01:34:00 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/theme/yui_combo.php?m/1737565683/core/event/event-min.js&m/1737565683/filter_mathjaxloader/loader/loader-min.js
200 OK 1.0 kB URL GET HTTP/1.1 103.114.208.150/elearning/theme/yui_combo.php?m/1737565683/core/event/event-min.js&m/1737565683/filter_mathjaxloader/loader/loader-min.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (2627), with no line terminators
Hash 76617687325f67884815a9b2b0d4e2be
2f7b8734ca64306dad757d2a89fbd2dbb3cdb2fa
01e644698fc787a38c18a7312893aaf9081b994f57f059ba3274361f7b09b206
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/theme/yui_combo.php?m/1737565683/core/event/event-min.js&m/1737565683/filter_mathjaxloader/loader/loader-min.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:02 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Fri, 28 Jul 2023 16:04:08 GMT
Expires: Tue, 03 Feb 2026 01:34:02 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "c18c889cd92f7500945a58de357719a1c37fc64d"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1047
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
GET training.ztoh.org/pluginfile.php/1/theme_boost/backgroundimage/1737565683/courrse.png
200 OK 5.1 kB URL GET HTTP/1.1 training.ztoh.org/pluginfile.php/1/theme_boost/backgroundimage/1737565683/courrse.png
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=Abstract geometric white and gray on light silver gradient background. Modern banner design. Vector Illustration.���http://ns.], progressive, precision 8, 612x204, components 3
Hash 33fae9785ca8bdc844d94a79546b31b5
efe8f4db5379a77f0b19d0f74b1a3d385fccb8b9
afd9f4a1647ad937a476797f2dd607107ec48e9c3620bc330a6805aafa06a73f
GET /pluginfile.php/1/theme_boost/backgroundimage/1737565683/courrse.png HTTP/1.1
Host: training.ztoh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:02 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: MoodleSession=g797s013mlma8stsph3ma1c4s2; path=/
Expires: Wed, 09 Apr 2025 01:34:02 GMT
Cache-Control: public, max-age=5184000, no-transform
Pragma:
Content-Disposition: inline; filename="courrse.png"
Last-Modified: Fri, 28 Jul 2023 16:16:37 GMT
Etag: "efe8f4db5379a77f0b19d0f74b1a3d385fccb8b9"
Accept-Ranges: bytes
Content-Length: 5104
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
GET 103.114.208.150/theme/font.php/boost/core/1737565683/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/1.1 103.114.208.150/theme/font.php/boost/core/1737565683/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /theme/font.php/boost/core/1737565683/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/theme/styles.php/boost/1737565683_1/all
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:01 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "272b135cd0b4fef5d6d799534f13f801dd00c561"
Content-Disposition: inline; filename="fontawesome-webfont.woff2"
Last-Modified: Wed, 22 Jan 2025 17:08:11 GMT
Expires: Fri, 09 May 2025 01:34:01 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Length: 77160
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff2
GET 103.114.208.150/elearning/theme/image.php/boost/theme/1737565683/favicon
404 not found 27 B URL GET HTTP/1.0 103.114.208.150/elearning/theme/image.php/boost/theme/1737565683/favicon
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type ASCII text, with no line terminators
Hash f7306a9a782f30d54810743680fea234
61d2278f7d5367c4dafbcdfe92cdb90e1881d7eb
68a795c121c771fc7bec0664ae5c183309566a7f13066c1b0de4d5843e2bad49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/theme/image.php/boost/theme/1737565683/favicon HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 404 not found
Date: Sat, 08 Feb 2025 01:34:02 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 27
Connection: close
Content-Type: text/html; charset=UTF-8
GET training.ztoh.org/pluginfile.php/1/theme_boost/loginbackgroundimage/1737565683/back1.png
200 OK 172 kB URL GET HTTP/1.1 training.ztoh.org/pluginfile.php/1/theme_boost/loginbackgroundimage/1737565683/back1.png
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 2000x1333, components 3
Size 172 kB (172484 bytes)
Hash d55818f504a88c0e598af3a0ab418fe1
7138954a8bb7c5a73d4d4a12065796e7f4be2fe3
9abf0e9bb3463576f5c883746a7e961ffb72f2927d744a5d75972895488d233f
GET /pluginfile.php/1/theme_boost/loginbackgroundimage/1737565683/back1.png HTTP/1.1
Host: training.ztoh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:02 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: MoodleSession=iurhdcto7d0grp2mhjg2j73fr9; path=/
Expires: Wed, 09 Apr 2025 01:34:02 GMT
Cache-Control: public, max-age=5184000, no-transform
Pragma:
Content-Disposition: inline; filename="back1.png"
Last-Modified: Fri, 28 Jul 2023 16:16:37 GMT
Etag: "7138954a8bb7c5a73d4d4a12065796e7f4be2fe3"
Accept-Ranges: bytes
Content-Length: 172484
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
GET 103.114.208.150/elearning/lib/requirejs.php/1737565683/core/first.js
200 OK 632 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/requirejs.php/1737565683/core/first.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (19758)
Size 632 kB (631510 bytes)
Hash 305f4453cce2f4dd2b0b97dd5ba89bff
65a70d104afa955916475b647b6c6459fe373452
2607b671aabb0f73b6835083bc506c822f84306953d797e9aab55491b4146c7b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/requirejs.php/1737565683/core/first.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:02 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "7ddf4e7630c87c5f903cad266028d428108df2cd"
Content-Disposition: inline; filename="requirejs.php"
Last-Modified: Wed, 22 Jan 2025 17:08:06 GMT
Expires: Fri, 09 May 2025 01:34:02 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/lib/requirejs.php/1737565683/core_form/events.js
200 OK 632 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/requirejs.php/1737565683/core_form/events.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (19758)
Size 632 kB (631510 bytes)
Hash 305f4453cce2f4dd2b0b97dd5ba89bff
65a70d104afa955916475b647b6c6459fe373452
2607b671aabb0f73b6835083bc506c822f84306953d797e9aab55491b4146c7b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/requirejs.php/1737565683/core_form/events.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:02 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "7ddf4e7630c87c5f903cad266028d428108df2cd"
Content-Disposition: inline; filename="requirejs.php"
Last-Modified: Wed, 22 Jan 2025 17:08:06 GMT
Expires: Fri, 09 May 2025 01:34:02 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/jquery/jquery-3.6.0.min.js
200 OK 31 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/javascript.php/1737565683/lib/jquery/jquery-3.6.0.min.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 54e404edcb6b8902433c6a8123e018a7
fb2f413ac31fd0607b3048426e37d81658cb0ecd
37da17e676b0298cd88c1835b00618318df670f9ed4c199274546d4555248dab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/javascript.php/1737565683/lib/jquery/jquery-3.6.0.min.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:03 GMT
Server: Apache/2.4.41 (Ubuntu)
Etag: "f3750e8a542ceda217af578fde2512714b826c05"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Wed, 22 Jan 2025 17:08:09 GMT
Expires: Fri, 09 May 2025 01:34:03 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 103.114.208.150/elearning/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js
200 OK 4.8 kB URL GET HTTP/1.1 103.114.208.150/elearning/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (3857)
Hash 0151b48e61660bed14bf6acd5bb77210
e096360d7d8819dbbf42e7137ed9e37cdd286700
26d1a45d173703f01ca9bb8be4335bae6005c3bc0a5f78b380ad18fb152b8835
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:03 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Fri, 28 Jul 2023 16:04:08 GMT
Expires: Tue, 03 Feb 2026 01:34:03 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "b24ca831785ba367093f089618e840be511be85d"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4808
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
POST 103.114.208.150/elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=media_videojs_get_language
200 OK 4.5 kB URL POST HTTP/1.1 103.114.208.150/elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=media_videojs_get_language
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
Hash 1d55bc8fb15ace98616b30027310a057
1109dee50f7660eb75b2ec7dfc5889434d91351c
aaf9075c9b35ee27d05a21e89ec43d1b2013a8151360e59050c8977edd33d5b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=media_videojs_get_language HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 76
Origin: http://103.114.208.150
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:03 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4531
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
GET 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=core_get_string&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22changesmadereallygoaway%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22moodle%22%2C%22lang%22%3A%22en%22%7D%7D%5D
200 OK 111 B URL GET HTTP/1.1 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=core_get_string&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22changesmadereallygoaway%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22moodle%22%2C%22lang%22%3A%22en%22%7D%7D%5D
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
Hash aa4910d44753abc18bf53998693d909d
96a26d0478af621a4df6bde7cbc05a8176806903
28824dbe3abcada0b65643717944a5f84416d44cbb5b5e478cb25bbc56d4e7a0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/ajax/service-nologin.php?info=core_get_string&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22changesmadereallygoaway%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22moodle%22%2C%22lang%22%3A%22en%22%7D%7D%5D HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:04 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Fri, 09 May 2025 01:34:04 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Length: 111
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
POST 103.114.208.150/elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=local_disablerightclick_settings
200 OK 2.1 kB URL POST HTTP/1.1 103.114.208.150/elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=local_disablerightclick_settings
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
Hash 3159c4c1a0ba14e14e9a7d6a8875b316
dee9c704f89f60e981b8a1efec9bc0e5260deb28
38eefeddfaf4f1bd8fc2ba8b2f8f9aeff3e259593a9e0990eb7cf232c6de5b23
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=local_disablerightclick_settings HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 84
Origin: http://103.114.208.150
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:04 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 2095
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
POST 103.114.208.150/elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=local_disablerightclick_settings
200 OK 2.1 kB URL POST HTTP/1.1 103.114.208.150/elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=local_disablerightclick_settings
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
Hash 3159c4c1a0ba14e14e9a7d6a8875b316
dee9c704f89f60e981b8a1efec9bc0e5260deb28
38eefeddfaf4f1bd8fc2ba8b2f8f9aeff3e259593a9e0990eb7cf232c6de5b23
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /elearning/lib/ajax/service.php?sesskey=dQgnsCrOPf&info=local_disablerightclick_settings HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 84
Origin: http://103.114.208.150
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:04 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 2095
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
GET 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=7-method-calls&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22loading%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_backdrop%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_save_cancel%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_cancel%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22local%2Fmodal%2Falert%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A6%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22pix_icon_fontawesome%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%5D
200 OK 7.6 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=7-method-calls&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22loading%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_backdrop%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_save_cancel%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_cancel%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22local%2Fmodal%2Falert%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A6%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22pix_icon_fontawesome%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%5D
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
Hash 48ead0cde6b6bb9c0cb4031f5e196c59
76a2f0c41b44ffa88c3e158a88f1670a6fdc02cd
f2ca40dc92af47c7117a70d51799590ca93f312b563b7ccc714e56db0dfd0ddd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/ajax/service-nologin.php?info=7-method-calls&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22loading%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_backdrop%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_save_cancel%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_cancel%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22local%2Fmodal%2Falert%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A6%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22pix_icon_fontawesome%22%2C%22themename%22%3A%22boost%22%2C%22lang%22%3A%22en%22%7D%7D%5D HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:04 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Fri, 09 May 2025 01:34:04 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Length: 7613
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
GET 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=6-method-calls&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D
200 OK 211 B URL GET HTTP/1.1 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=6-method-calls&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
Hash c135ebb8306e47146c197265b9c9022b
425c439b399cc4a29df884f4ac5aa75505944c2c
afefe583c5a695189962783424716b19758b2a08e71480cb91a73c88c98a20be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/ajax/service-nologin.php?info=6-method-calls&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:04 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Fri, 09 May 2025 01:34:04 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Length: 211
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
GET 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22boost%22%7D%7D%5D
200 OK 32 kB URL GET HTTP/1.1 103.114.208.150/elearning/lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22boost%22%7D%7D%5D
IP
ASN #135139 Skylink Fibernet Private Limited
Requested by http://103.114.208.150/elearning/login/forgot_password.php
Hash adc87145a5d1398bbf85a6f25970fa6e
6430869cf043e3ce4014ff99b83e80b43aa79e20
d9fc06238c802d4f69cbb2ffc81c0f11355f08de58e0fd3247baddd7fdd1e983
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /elearning/lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map&cachekey=1737565683&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22boost%22%7D%7D%5D HTTP/1.1
Host: 103.114.208.150
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://103.114.208.150/elearning/login/forgot_password.php
Cookie: MoodleSession=rguqneqk69nr45ivaucc6mdp5v
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 01:34:04 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Fri, 09 May 2025 01:34:04 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
103.114.208.150