| test.igmg.site/ |  51.195.6.66 | 301 Moved Permanently | 162 B |
IP51.195.6.66:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 02 Sep 2022 20:02:09 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://test.igmg.site/
|
|
| firefox.settings.services.mozilla.com/v1/ |  143.204.55.35 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash99b7d23c1748d0526782b9ff9ea45f09 eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 19:13:51 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pb5170pqss65SMamrX7bNStQaeLQEZ8cl_qzyzJEEvnq4vQJ2_aB5Q==
Age: 2898
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashbcdebf7a2bad5db595e8a0c1abb2ddcb 249dda2fa5e37b8a8f3a8c797193bf0874b6eedc 9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19715
Expires: Sat, 03 Sep 2022 01:30:44 GMT
Date: Fri, 02 Sep 2022 20:02:09 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.25 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.25:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: q17Wk9xrp8H92L5iE8WRKABvzYvNI0iK4AWYehQISWmVi1qZEstXLQ==
age: 67612
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash93a0bc46a993ee08ab5ca5c3a4503958 d011d2075e3a5ae6d0d6d24fa41ba013ee19350b 26b23fd79a2180e6db3b72ff741e6f1704b2b883a4825d49a5949f850c562e64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26B23FD79A2180E6DB3B72FF741E6F1704B2B883A4825D49A5949F850C562E64"
Last-Modified: Wed, 31 Aug 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Sat, 03 Sep 2022 02:01:30 GMT
Date: Fri, 02 Sep 2022 20:02:10 GMT
Connection: keep-alive
|
|
| cdnjs.cloudflare.com/ajax/libs/dropzone/5.4.0/dropzone.css |  104.17.24.14 | 200 OK | 1.5 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/dropzone/5.4.0/dropzone.css IP104.17.24.14:0
Hash593403dc4ce9adcdf7d8b44f18513be3 ab9859e2e1e1440884c15e707e9c2eb655c60711 8dfffecd68c0f0dec371039f73aeb8d4d8551e350b42cca7da50e2d7df142263
GET /ajax/libs/dropzone/5.4.0/dropzone.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css; charset=utf-8
content-length: 1464
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e3e-312b"
last-modified: Mon, 04 May 2020 16:09:34 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 385200
expires: Wed, 23 Aug 2023 20:02:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t3yNDF3FzPDWACBIj4wj2Z%2BfQ7obeQTodXwDsg9sscUOxsdKl6RckYRhF%2BntFbOUXTmtw6bQYiwHqwjZkB1jEGjkYew%2B2lwK27ujpYRuMr1JRoe%2B%2BWgQv9RpeadH6Ql4Lz4HrpkR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7448d77f2ea30b55-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/login.min.css?1239640158 | 51.195.6.66 | 200 OK | 1.4 kB |
URL HTTP/2test.igmg.site/assets/css/login.min.css?1239640158 IP51.195.6.66:0
File typeASCII text, with very long lines (3443), with CRLF line terminators Hashf6f9b5e606cb4c08d6f4dbc5f7d2cd67 edf98a0cfb99db34deeb45d6cb257c93528668ac 359b8a57841c28578ade6e1e2089fcbe137a0c805d2d7f3a5bb2986b0aa9b263
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/login.min.css?1239640158 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-e55"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/iros_amblem.png?r=727262499 | 51.195.6.66 | 200 OK | 4.3 kB |
URL HTTP/2test.igmg.site/images/iros_amblem.png?r=727262499 IP51.195.6.66:0
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data Hashe06152b0921f030754d80520b1a27237 8ab440c4bbce55cf374773017051a4defec1739b 1aa1d9de13ca429b7affd44fffe6709e3885a1cf962a9878e7abcfb40da026b1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/iros_amblem.png?r=727262499 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 4281
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-10b9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/igmg_os_logo.png | 51.195.6.66 | 200 OK | 4.9 kB |
URL HTTP/2test.igmg.site/images/igmg_os_logo.png IP51.195.6.66:0
File typePNG image data, 400 x 54, 8-bit/color RGBA, non-interlaced\012- data Hashbb5bd0155bb30ba44c129be28c0e3428 885a119b71895fa9699bb1afff6f5d503364744a 3347cf02ef082e471361b37cdc867dea84e44c7ce138502c13e8284855d2d4a1
GET /images/igmg_os_logo.png HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 4912
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-1330"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/program4.png?r=965963853 | 51.195.6.66 | 200 OK | 2.4 kB |
URL HTTP/2test.igmg.site/images/program4.png?r=965963853 IP51.195.6.66:0
File typePNG image data, 77 x 83, 8-bit/color RGBA, non-interlaced\012- data Hash7385f9e6996f26e048e0656af1a63b55 da3e1b9166f1a8171a7b3b0ecdd0fcad8d7fe1ec c4e1e74d6ad27c277320efec9e1bd55897e424be35b22abf1fcb5ef015984e79
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/program4.png?r=965963853 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 2363
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-93b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/program5.png?r=1091488552 | 51.195.6.66 | 200 OK | 34 kB |
URL HTTP/2test.igmg.site/images/program5.png?r=1091488552 IP51.195.6.66:0
File typePNG image data, 150 x 150, 8-bit/color RGB, non-interlaced\012- data Hash10df1fbe515007849e1dce800a69b332 3476224effecaa7c050cdebba17da09699e356c5 f914c7f0a5075be27429eae01730847ab78864d092d6e3cfdedcc9f08d95ea74
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/program5.png?r=1091488552 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 34008
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-84d8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/program7.png?r=1000187591 | 51.195.6.66 | 200 OK | 17 kB |
URL HTTP/2test.igmg.site/images/program7.png?r=1000187591 IP51.195.6.66:0
File typePNG image data, 143 x 132, 8-bit/color RGB, non-interlaced\012- data Hasheeb2d5fe356d71a3128c903cb041b306 a9b1c3099a347e38a886a075a6a75737631c9667 314f0cf28a9f6341b3c47f96c0ecf06a7c929b495b502907a987afed8fa7feed
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/program7.png?r=1000187591 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 16669
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-411d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/program3.png?r=631444386 | 51.195.6.66 | 200 OK | 2.4 kB |
URL HTTP/2test.igmg.site/images/program3.png?r=631444386 IP51.195.6.66:0
File typePNG image data, 92 x 83, 8-bit/color RGBA, non-interlaced\012- data Hash00ac55dafb6bed7c22fa6f79e268bffa e3a16f6fa4b23db5ac1567a7f7a25ee8b30176cd 2fd5cbee7816a3a0ac5863064f0e7836fc5f2e9e53174984139aaa02a108f31c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/program3.png?r=631444386 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 2358
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-936"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/program2.png?r=375316499 | 51.195.6.66 | 200 OK | 2.7 kB |
URL HTTP/2test.igmg.site/images/program2.png?r=375316499 IP51.195.6.66:0
File typePNG image data, 200 x 133, 8-bit colormap, non-interlaced\012- data Hash8a8445dbaf9c9daba257bd6142958234 7fbf1239846097347b75409cb833ec003e712965 e6ad65ffc98707290032a8b8a7711f732a47b130098f7df9e76d59171b06bb0f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/program2.png?r=375316499 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 2699
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-a8b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.sparkline.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.sparkline.min.js IP51.195.6.66:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.sparkline.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
content-length: 0
x-accel-version: 0.01
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "0-5e300857cceee"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/program1.png?r=604736914 | 51.195.6.66 | 200 OK | 3.9 kB |
URL HTTP/2test.igmg.site/images/program1.png?r=604736914 IP51.195.6.66:0
File typePNG image data, 85 x 82, 8-bit/color RGBA, non-interlaced\012- data Hashf546ddd9ea85f69f04b23bbcb9a6bbab 1e0f5dacbd43e2b6ceb0693ddc9ed5e4ff868928 96c507fd8ed7b25af04082722480424f2d88ad77144c65739ea5b259f7d97d71
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/program1.png?r=604736914 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 3922
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-f52"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/images/program4.png?r=1055469099 | 51.195.6.66 | 200 OK | 2.4 kB |
URL HTTP/2test.igmg.site/images/program4.png?r=1055469099 IP51.195.6.66:0
File typePNG image data, 77 x 83, 8-bit/color RGBA, non-interlaced\012- data Hash7385f9e6996f26e048e0656af1a63b55 da3e1b9166f1a8171a7b3b0ecdd0fcad8d7fe1ec c4e1e74d6ad27c277320efec9e1bd55897e424be35b22abf1fcb5ef015984e79
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /images/program4.png?r=1055469099 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: image/png
content-length: 2363
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-93b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/js.cookie.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/js.cookie.min.js IP51.195.6.66:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/js.cookie.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
content-length: 0
x-accel-version: 0.01
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "0-5e300857cde8e"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/daterangepicker.min.js | 51.195.6.66 | 200 OK | 6.9 kB |
URL HTTP/2test.igmg.site/assets/js/daterangepicker.min.js IP51.195.6.66:0
File typeASCII text, with very long lines (31304) Hash76975a96707d226593fefe5598e61751 f74fe35c0da19281d4301a1a7bd8373467517b9a 1ca4c11855595b196cd16c040769a919f5aa635caec98a07dcea6bb2c48ccb51
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/daterangepicker.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-7b6a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/raphael-min.js | 51.195.6.66 | 200 OK | 31 kB |
URL HTTP/2test.igmg.site/assets/js/raphael-min.js IP51.195.6.66:0
File typeUnicode text, UTF-8 text, with very long lines (32192) Hash286a214bff195272b1c8090882f3f836 7d1e80f4f535960ce4917c3449e91525f315cd74 e1dd6c23122711153429343ec8afedea8d3c10a3d4fcabe9c2118ed07ee97b7a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/raphael-min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-16555"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/morris.min.js | 51.195.6.66 | 200 OK | 10 kB |
URL HTTP/2test.igmg.site/assets/js/morris.min.js IP51.195.6.66:0
File typeASCII text, with very long lines (32182) Hashe46f5d395af6bd52378af523c1de089d ed8ef04eba5857ce1780c79e0fdf6785e3ad2617 5207953004db9b9505588bd8b8f61908c32797eca816a836999935d2da1ea4d7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/morris.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-8b44"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.70.239.215 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.70.239.215:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YSdHBiQvyomXyyGNOna4kA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IdOE7FdA0BCaSIhB0D42O5AzDbY=
|
|
| test.igmg.site/assets/js/jquery.easypiechart.min.js | 51.195.6.66 | 200 OK | 9.3 kB |
URL HTTP/2test.igmg.site/assets/js/jquery.easypiechart.min.js IP51.195.6.66:0
File typeASCII text, with very long lines (3695) Hash529a415c4a7eafa3949625bf5fab3ad4 52def9b57f69a2490de1a66251923ac3324ea3cb 5003caaa71caebea415e70488c2dd7c0a543307b4cda43bf1410510a84549bda
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.easypiechart.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-f4e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.min.js | 51.195.6.66 | 200 OK | 33 kB |
URL HTTP/2test.igmg.site/assets/js/jquery.min.js IP51.195.6.66:0
File typeASCII text, with very long lines (32077) Hash0211a54d4f0bf7f8859e8f0aeb9437b4 53cb904aace7bd16fede4414807025c5dcacda9c 29b3ac2ddd89719b0eff80e97c28668cf4b931aa2b40cb3a6ac9ed4969bde182
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-17b8a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/amcharts/amcharts.js | 51.195.6.66 | 200 OK | 60 kB |
URL HTTP/2test.igmg.site/assets/amcharts/amcharts.js IP51.195.6.66:0
File typeASCII text, with very long lines (12822) Hashf8a59807029368705a250078e50ebdd0 a095cba4497493455a0e30e777dcad99f71bff72 69f7983bfc972aac88fd6bd534a72528aeb96392930afe729ea44115d2ae2307
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/amcharts/amcharts.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-3314a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/amcharts/dataloader.min.js | 51.195.6.66 | 200 OK | 3.0 kB |
URL HTTP/2test.igmg.site/assets/amcharts/dataloader.min.js IP51.195.6.66:0
File typeASCII text, with very long lines (6795), with no line terminators Hash5cf772d6f2987168e19f6c8ba1479c8f dea5a2ccf8364027ed9829be932b832d277dffd1 4a61d7b7aaae7d1e52a13d8c8c8f8134fb5e8210ee3cf5212071cf1e45babcc7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/amcharts/dataloader.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-1a8b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/components.min.css?2085674207 | 51.195.6.66 | 200 OK | 60 kB |
URL HTTP/2test.igmg.site/assets/css/components.min.css?2085674207 IP51.195.6.66:0
File typeASCII text, with very long lines (1087), with CRLF line terminators Hash961fc07d5b62c36b178dfbd4802f8f46 74c0fbb7fa0953b6771741c67dde4110b4988c1c fe239e7b81e748a8fd3f57f54e87bc6a3cd0134dc4679862d060db9b66ae9348
GET /assets/css/components.min.css?2085674207 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-a0436"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash660657162b524658006a1856e274a946 56c933c6682c0019f6dbd040da6b929044dc216a 9578fc0408868ae40d41af8d13787f4137853c056300524b5558b1c57d39b2b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 20:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.163 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://test.igmg.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 18:53:20 GMT
expires: Tue, 29 Aug 2023 18:53:20 GMT
cache-control: public, max-age=31536000
age: 349731
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/bootstrap.min.css?267102400 | 51.195.6.66 | 200 OK | 52 kB |
URL HTTP/2test.igmg.site/assets/css/bootstrap.min.css?267102400 IP51.195.6.66:0
File typeASCII text, with very long lines (65354) Hash8b64f2cdeb16517c5193f069a5455918 3bd7f702a6f96a8a1dddde07911ea43b66d9edb0 5a90f7f98342e954bb9de7d3867061245c8340dac3c9d3ba0cace930cb537f94
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/bootstrap.min.css?267102400 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-1cc99"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 46 kB |
IP142.250.74.3:0
Hash9dd6afda33a9cd6da68edaa8a6e910a5 1a036810678c3122b747a0e4aacd5d66050659ff 2777994727259ae859441f99d469529b7b5b175998c9b7a7cbee67036522c669
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 20:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| test.igmg.site/images/logo.png | 51.195.6.66 | 200 OK | 62 kB |
URL HTTP/2test.igmg.site/images/logo.png IP51.195.6.66:0
File typePNG image data, 190 x 190, 8-bit/color RGB, non-interlaced\012- data Hashbdba6772eb3477480740c8a34de0d166 c322e86c037868cb60235ed54b3efd7e355820db 747dc61d8573f1904b33b9f7157682643018a5710bb9c2580316ec37514ff1c6
GET /images/logo.png HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:11 GMT
content-type: image/png
content-length: 61610
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: "62c34c76-f0aa"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/plugins.min.css?228594562 | 51.195.6.66 | 200 OK | 64 kB |
URL HTTP/2test.igmg.site/assets/css/plugins.min.css?228594562 IP51.195.6.66:0
File typeUnicode text, UTF-8 text, with very long lines (33012) Hash35e4416824c4ebd5809959b410b96045 326777fba4423b455a40eede267312a2e9e629f7 ce41ac0b6296ccef630a7af5f7547ffd396b151570f78ec8275dcee677f4eaf6
GET /assets/css/plugins.min.css?228594562 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-a4bb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash12f00eac4bda78b5d4c4bc00e96be439 5d6d88dbf72f208bc33c9af693440aec02e5f11c 4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14742
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 20:02:12 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash12f00eac4bda78b5d4c4bc00e96be439 5d6d88dbf72f208bc33c9af693440aec02e5f11c 4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14742
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 20:02:12 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash12f00eac4bda78b5d4c4bc00e96be439 5d6d88dbf72f208bc33c9af693440aec02e5f11c 4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14742
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 20:02:12 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash12f00eac4bda78b5d4c4bc00e96be439 5d6d88dbf72f208bc33c9af693440aec02e5f11c 4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14742
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 20:02:12 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg | 34.120.237.76 | 200 OK | 5.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5c3b7580a37e6eb7e5bd18491f1d4dd6 288b82ad8f924eb9570ae1c55da84d041f862366 046d1ef76448c53446068ef5f8315b7299484996cdebfd9d1e749b4ded9c7d3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5079
x-amzn-requestid: 3b19c77a-2e9b-499f-890b-36fc4ee72ba7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XslOVEtZIAMFv1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630e825b-01b7b71617b59f7414a0e5e5;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 21:34:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: et3ZsWRVoBNMpArUk9CohTyMpS5F0eKiR6cZJRfwAEiiFJUaeay58g==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:48:05 GMT
age: 80047
etag: "288b82ad8f924eb9570ae1c55da84d041f862366"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg | 34.120.237.76 | 200 OK | 6.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5e05660322f0368dd2bf8067d7e4554d ec65cb47d86488f734c945a210d5f636a40fea2c 98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: wLezqM4_yKqtOR7D43beBqm8TAD5y8eQ7xHOxjDJdHchCpyusuzMuQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:55:46 GMT
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
content-type: image/jpeg
age: 79586
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash955f2a35bd6b3802670e7fa8a7cda833 4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c 2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: n6DJbsUGTdXT42cNLTDq6Uz28H2SDhwq6drdKP4axAHsBz471X7r_g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:26 GMT
age: 80686
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash24d848f7606889b048b6334e70d8a5e0 85239ef4f2fee8d3345e599bc942cab63ff3aaf6 da6cf33b440b51f72a70f309d62fd581aed246b6a78b8f329fa3899db15ff86d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5889
x-amzn-requestid: 42237574-f86e-4ece-b986-6d0c5910fcc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzMVgHajoAMFmXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112756-48ff9d98464cf3c9680d97b4;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:42:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _7BBSlQQucoO5poncTYuX4fcmS4WFg3UcVFXalckGCCNFKJ0h5UpsQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:06:51 GMT
etag: "85239ef4f2fee8d3345e599bc942cab63ff3aaf6"
content-type: image/jpeg
age: 78921
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5ba50b2fd1814c5ffc95aef40c69ce8c cbb4546228115cccc122b16209e70171bef5c1f2 de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BOa5zGQyJS9q9bHmtKzlNtyS9ToGPZJkDFo2uY2lzz8Lnd3cZLQEaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:01:10 GMT
age: 79262
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg | 34.120.237.76 | 200 OK | 17 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash12756903aaa74164feb5f8525398ca36 9fef9b071daea6793cbbdfe391254ac4326b1aa2 6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16818
x-amzn-requestid: fa921878-2054-453b-b313-681cdd9c9068
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj-Z_HUNIAMFltg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b110c-053ce81943fea70c2de7daa0;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 06:54:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CDyJUMKmUlrT3LgfeiZhQN1XEV2vKTIZtmV4QZYXaoM4PWbYo8IyJA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 14:46:29 GMT
age: 18943
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/jqvmap.css?1569652033 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/jqvmap.css?1569652033 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/jqvmap.css?1569652033 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"38b-5e300857c80ce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| unpkg.com/xlsx/dist/xlsx.full.min.js | 104.16.124.175 | 302 Found | 0 B |
URL HTTP/2unpkg.com/xlsx/dist/xlsx.full.min.js IP104.16.124.175:0
GET /xlsx/dist/xlsx.full.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /xlsx@0.18.5/dist/xlsx.full.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GBZWBWMX5B6SV3QV1BC84X1F-fra
cf-cache-status: HIT
age: 391
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7448d77f3957b52d-OSL
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.counterup.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.counterup.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.counterup.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-42d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.slimscroll.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.slimscroll.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.slimscroll.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-1437"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/dashboard.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/dashboard.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/dashboard.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-530d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.dataTables.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.dataTables.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.dataTables.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-13ff2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery-ui.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery-ui.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery-ui.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-3dee5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.vmap.europe.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.vmap.europe.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.vmap.europe.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-17d75"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.waypoints.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.waypoints.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.waypoints.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-1f6c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/amcharts/export.css?913301555 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/amcharts/export.css?913301555 IP51.195.6.66:0
GET /assets/amcharts/export.css?913301555 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-8397"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.vmap.germany.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.vmap.germany.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.vmap.germany.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-d893"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/?act=js_translates | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/?act=js_translates IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /?act=js_translates HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-powered-by: PHP/7.4.30, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/app.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/app.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/app.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-3c77"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.flot.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.flot.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.flot.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-cee6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/ | 51.195.6.66 | 200 OK | 0 B |
IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126; expires=Sun, 11-Dec-2022 20:02:10 GMT; Max-Age=8640000; path=/
x-powered-by: PHP/7.4.30, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/morris.css?1876410709 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/morris.css?1876410709 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/morris.css?1876410709 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"1b0-5e300857c80ce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/select2/select2.min.css?751974761 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/select2/select2.min.css?751974761 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/select2/select2.min.css?751974761 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-7c8b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/select2/select2.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/select2/select2.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/select2/select2.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-1042e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:400,300,600,700&subset=all | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans:400,300,600,700&subset=all IP142.250.74.10:0
GET /css?family=Open+Sans:400,300,600,700&subset=all HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:02:10 GMT
date: Fri, 02 Sep 2022 20:02:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.vmap.sampledata.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.vmap.sampledata.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.vmap.sampledata.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-952"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.blockui.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.blockui.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.blockui.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-2554"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/bootbox.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/bootbox.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/bootbox.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-4543"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/colorbox.css?1107324445 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/colorbox.css?1107324445 IP51.195.6.66:0
GET /assets/css/colorbox.css?1107324445 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-114f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/fullcalendar/lib/main.min.css?764707384 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/fullcalendar/lib/main.min.css?764707384 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/fullcalendar/lib/main.min.css?764707384 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-616b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| unpkg.com/file-saver@1.3.3/FileSaver.js | 104.16.124.175 | 200 OK | 0 B |
URL HTTP/2unpkg.com/file-saver@1.3.3/FileSaver.js IP104.16.124.175:0
GET /file-saver@1.3.3/FileSaver.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Wed, 05 Oct 2016 10:43:25 GMT
etag: W/"174d-ppV+tNTWNc2klmEzFicm/vyFuQM"
via: 1.1 fly.io
fly-request-id: 01G7VRE3FTP33CX4G5YTR379R3-ams
cf-cache-status: HIT
age: 4433698
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7448d77f3964b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/igmgfont.css?402129450 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/igmgfont.css?402129450 IP51.195.6.66:0
GET /assets/css/igmgfont.css?402129450 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-6c5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/fullcalendar/lib/locales-all.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/fullcalendar/lib/locales-all.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/fullcalendar/lib/locales-all.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-47e2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.vmap.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.vmap.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.vmap.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-6ba2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/simple-line-icons.min.css?449477062 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/simple-line-icons.min.css?449477062 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/simple-line-icons.min.css?449477062 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-256b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| unpkg.com/blob.js@1.0.1/Blob.js | 104.16.124.175 | 200 OK | 0 B |
URL HTTP/2unpkg.com/blob.js@1.0.1/Blob.js IP104.16.124.175:0
GET /blob.js@1.0.1/Blob.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2016 10:24:13 GMT
etag: W/"1800-jszKs+14oLm7MdJGCNbZkvu8ALE"
via: 1.1 fly.io
fly-request-id: 01F52A04572E1EZHSX8W8CQKRK
cf-cache-status: HIT
age: 10258618
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7448d77f2949b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/ekurs.css?455170688 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/ekurs.css?455170688 IP51.195.6.66:0
GET /assets/css/ekurs.css?455170688 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-62b5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/demo.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/demo.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/demo.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-10a6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/select2/tr.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/select2/tr.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/select2/tr.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"305-5e300857cee2e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/fullcalendar.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/fullcalendar.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/fullcalendar.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-180ab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/additional-methods.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/additional-methods.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/additional-methods.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-433a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/daterangepicker.min.css?1762985793 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/daterangepicker.min.css?1762985793 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/daterangepicker.min.css?1762985793 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-15ea"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/layout.min.css?1413574922 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/layout.min.css?1413574922 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/layout.min.css?1413574922 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-ec89"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/fullcalendar/lib/main.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/fullcalendar/lib/main.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/fullcalendar/lib/main.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-3c681"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.validate.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.validate.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.validate.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-5262"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.flot.categories.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.flot.categories.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.flot.categories.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-a26"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/layout.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/layout.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/layout.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-11c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/dataTables.min.css?1796716380 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/dataTables.min.css?1796716380 IP51.195.6.66:0
GET /assets/css/dataTables.min.css?1796716380 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-342b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/moment-with-locales.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/moment-with-locales.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/moment-with-locales.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-9721a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/popper.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/popper.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/popper.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-52ce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/select2.full.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/select2.full.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/select2.full.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-124fd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.number.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.number.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.number.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-185f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/bootstrap-switch.min.css?661661918 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/bootstrap-switch.min.css?661661918 IP51.195.6.66:0
GET /assets/css/bootstrap-switch.min.css?661661918 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-1939"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/amcharts/pie.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/amcharts/pie.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/amcharts/pie.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-394d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/pwstrength.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/pwstrength.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/pwstrength.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-9785"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/bayrakfont.css?150859430 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/bayrakfont.css?150859430 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/bayrakfont.css?150859430 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-3361"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/quick-nav.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/quick-nav.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/quick-nav.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"19f-5e300857ce65e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/bootstrap-switch.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/bootstrap-switch.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/bootstrap-switch.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-3a37"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/quick-sidebar.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/quick-sidebar.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/quick-sidebar.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-ae3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/amcharts/light.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/amcharts/light.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/amcharts/light.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-b62"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/colorbox/jquery.colorbox-min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/colorbox/jquery.colorbox-min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/colorbox/jquery.colorbox-min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-2eb8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/ekurs.js?948981604 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/ekurs.js?948981604 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/ekurs.js?948981604 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-62d6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/dropzone/dropzone.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/dropzone/dropzone.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/dropzone/dropzone.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-22feb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/jquery.vmap.usa.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/jquery.vmap.usa.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/jquery.vmap.usa.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-ba04"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/js/login.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/js/login.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/js/login.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-d1c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/jquery-ui.css?346953599 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/jquery-ui.css?346953599 IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/css/jquery-ui.css?346953599 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-91ce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/amcharts/serial.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/amcharts/serial.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/amcharts/serial.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-c01f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/tinymce/tinymce.min.js | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/tinymce/tinymce.min.js IP51.195.6.66:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /assets/tinymce/tinymce.min.js HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-72a93"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| test.igmg.site/assets/css/default.min.css?202357661 | 51.195.6.66 | 200 OK | 0 B |
URL HTTP/2test.igmg.site/assets/css/default.min.css?202357661 IP51.195.6.66:0
GET /assets/css/default.min.css?202357661 HTTP/1.1
Host: test.igmg.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://test.igmg.site/
Cookie: PHPSESSID=cgr1gn2o6qtdt7g41ovkl0b126
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 20:24:22 GMT
etag: W/"62c34c76-5a7f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v5.7.2/css/all.css | 104.21.63.54 | 200 OK | 0 B |
URL HTTP/2use.fontawesome.com/releases/v5.7.2/css/all.css IP104.21.63.54:0
GET /releases/v5.7.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://test.igmg.site
Connection: keep-alive
Referer: https://test.igmg.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 20:02:10 GMT
content-type: text/css
x-amz-id-2: V6tU18yWoX8y9b+YxDrUfFiohprpnmnzdf9P8GL9Eyb0NOKf8/zuzW9z8h3WuABJAAOZjtHjUgE=
x-amz-request-id: EHTK0VQ395T6073Z
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:57 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jqLXau4CPo5H%2F8hb%2FfPFc9%2FRw3joaMvruJjblHPA3OzEl462eIyJ6nwdu0%2BdZ1%2Fu4q%2BhNxoJnbTl7l9GbtqDeWWFv3m%2FXqQ4fXY4i28auoeCVHD%2Blfgk0lMrmByb6wL%2Bd2kizbRD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7448d77f2be6b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|