r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11741
Expires: Sun, 13 Nov 2022 16:31:19 GMT
Date: Sun, 13 Nov 2022 13:15:38 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e969be0f3201087da138cbc8b89f10
d0a27f525f2b242b5dafa157f126c2ba880c8809
f7e5f39372b5adcc30c27e727eee1b19e6d13ed1b54fa1ad67235dc8ee08ac51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6484
Cache-Control: max-age=169427
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 13:15:38 GMT
Etag: "6370c779-1d7"
Expires: Tue, 15 Nov 2022 12:19:25 GMT
Last-Modified: Sun, 13 Nov 2022 10:31:21 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5076aaa9f4ccd602540286ce0590cb9a
bbf7936a8413a564478971d9e19beb6338cbc869
00e3b967c579b0ccf709b78d497a43d95646b16eb50925fef1e2694c58f290b2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00E3B967C579B0CCF709B78D497A43D95646B16EB50925FEF1E2694C58F290B2"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5323
Expires: Sun, 13 Nov 2022 14:44:21 GMT
Date: Sun, 13 Nov 2022 13:15:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 13 Nov 2022 12:44:20 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1878
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2TvEvPrmcKsLGZt0YmFuCNW8okCv5l4hfEA7SPc+ppTuMgXySbYN3IYPY/8j5zWGihcKiGVsOyM=
x-amz-request-id: NH47VDK451Z60317
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 13 Nov 2022 12:50:41 GMT
age: 1497
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 13 Nov 2022 13:15:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
200 OK 2.7 kB URL HTTP/1.1 dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
IP
ASN #9318 SK Broadband Co Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 65a132b4ee05eba7171bc8c097c25c3a
eda070c4865cd660e3deee722689d4c631f7abb8
6d83ed70af3864cbb3919577f0d41ceabd8eb0581f207b38397a72599bab5e88
Analyzer Verdict Alert fortinet Malware
GET /f0z/hlybnfsqpxkkklgbtq.bin HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:39 GMT
Server: Apache/2.4.18 (Ubuntu)
Set-Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2723
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dev2-admin.ycbnt.net/webpage/bower_components/animate.css/animate.css
200 OK 4.6 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/animate.css/animate.css
IP
ASN #9318 SK Broadband Co Ltd
Hash caaeb943bdc3be07867651e31d7c2394
9406d7b78d07cabc07c8c32638b804fef2951c23
327d094c55357907f0cc3cb03580892cb058d9da9041458f11cc08bcaab402a1
GET /webpage/bower_components/animate.css/animate.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:55 GMT
ETag: "11d97-5d28eed8030d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4601
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 13 Nov 2022 12:25:00 GMT
cache-control: public,max-age=3600
age: 3038
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
dev2-admin.ycbnt.net/webpage/bower_components/font-awesome/css/font-awesome.min.css
200 OK 5.0 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/font-awesome/css/font-awesome.min.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (21822)
Hash 5fc680fa1d13940a1a9cba6f89965f74
98a85daaf67d23ff264953e583c68315f76f5549
0f61bee70c4eca1d92acdfd8ad8285206bced50ef37af0ad2c846d1e5cbc3534
GET /webpage/bower_components/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:14:45 GMT
ETag: "55e0-5d28efecd15b0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5042
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/bower_components/venturocket-angular-slider/build/angular-slider.css
200 OK 467 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/venturocket-angular-slider/build/angular-slider.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 584019b24db10fa8d7bd416327007e87
6ad47897cb369161214a27991b5a2364c8a96865
a6084cef29b8d05c7fff13b542dc257bf2eefd113052c584058e05d5324845d1
GET /webpage/bower_components/venturocket-angular-slider/build/angular-slider.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:17:07 GMT
ETag: "56d-5d28f07475f6f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 467
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/bower_components/angularjs-toaster/toaster.css
200 OK 5.9 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angularjs-toaster/toaster.css
IP
ASN #9318 SK Broadband Co Ltd
File type Unicode text, UTF-8 text, with very long lines (3917)
Hash 498e242e515708b5c1212319eb9e5a27
165164967177aa6f8fb864338c9343a1ba699e2b
2f5571aeeef90716aa3716b9ebb6cf5f844fae27b56543ead7a85c5a48a3dfe5
GET /webpage/bower_components/angularjs-toaster/toaster.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:49 GMT
ETag: "2e8c-5d28eed2c4472-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5912
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/bower_components/bootstrap/dist/css/bootstrap.css
200 OK 21 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/bootstrap/dist/css/bootstrap.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (540)
Hash 90f184bb0b95bee39d19e2df28b079a4
6ea5ecbb46b624c9d33e8351f24015686d0861aa
af60703beb138ea6e05fb2bfa14adc4cee098e8e6a9cd0306f7084e58cee50f9
GET /webpage/bower_components/bootstrap/dist/css/bootstrap.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:18:39 GMT
ETag: "22866-5d28f0cb7478f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20765
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/bower_components/ladda/dist/ladda-themeless.min.css
200 OK 1.2 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/ladda/dist/ladda-themeless.min.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (7593)
Hash 5b4a0d3774f644dd864b7a71b55cf10b
956dd266a2511b1f3771a8d3f832317a82a71152
60c8708cf343d084f44b3392277a687bf836b6b9bc6bb979a72c85aa5803fe2d
GET /webpage/bower_components/ladda/dist/ladda-themeless.min.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:15:47 GMT
ETag: "1e1e-5d28f028460f0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1155
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/fonts/nanumsquare.css
200 OK 210 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/fonts/nanumsquare.css
IP
ASN #9318 SK Broadband Co Ltd
Hash ef9c5d1e8cb77cdae0fa57a2c9ff772a
2e7842e9bbba7036147d0b714c74b28829513dbc
529820f143e09201ddf1da8b4ca458fcaee79038aee3825d6cb985f7bb8d1e00
GET /webpage/fonts/nanumsquare.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:07:34 GMT
ETag: "3e8-5d28ee5213f13-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 210
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/css/font.css
200 OK 274 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/css/font.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash baba4faee7d776ecd0630bcd8969a9a8
045354ad1c66ff86894b1f5453878513acf11c37
6dffb9f296ea898d0782c235bffdaf94f4bd48c70746aa29863d43b9f7eea38b
GET /webpage/css/font.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:07:34 GMT
ETag: "7d6-5d28ee51eaed3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 274
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.digicert.com/
200 OK 471 B IP
Hash 0a9a357f652868f9317812b8103ba15d
95a90c7a07b591dce7f39c6f9ab27974d1a1ed2a
16fd52c7ee6806455e724f30af8d58630a141a8a3823c48c20b5da3a71f066da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4858
Cache-Control: max-age=162731
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 13:15:39 GMT
Etag: "6370b3ac-1d7"
Expires: Tue, 15 Nov 2022 10:27:50 GMT
Last-Modified: Sun, 13 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
dev2-admin.ycbnt.net/webpage/css/common.css
200 OK 6.9 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/css/common.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 6dbc58b8246010cb7c79b96b8997710c
85809ca90e12cd8d97a1ce68fd9ee260710a8753
d3a2f0576b3393269310c12bfe3230ef69f19f062292e21fb123cbf638ae9ead
GET /webpage/css/common.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:07:36 GMT
ETag: "9347-5d28ee5336f53-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6923
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/css/app.css
200 OK 14 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/css/app.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 3284e33eaafee38d852a52bf88bbd179
11aa0d296dc1568aaa9b33b15437dcd1db154041
6bd6808cf13d85d3f68d79cf470dc79f1d6a03d7eb1335db19578e90a37b4b94
GET /webpage/css/app.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:07:35 GMT
ETag: "14aea-5d28ee52630b3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13646
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/bower_components/fullcalendar/dist/fullcalendar.css
200 OK 5.8 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/fullcalendar/dist/fullcalendar.css
IP
ASN #9318 SK Broadband Co Ltd
File type troff or preprocessor input, ASCII text
Hash 702607a96ee29c8e3aa8aad066ebb71e
af567490be8fa61f90954d4ed7a6a731c0156cd6
0f989f25e822fec66a01f4bd267e06dfe8f969da502f00c45f0a2112d9b12908
GET /webpage/bower_components/fullcalendar/dist/fullcalendar.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:15:13 GMT
ETag: "57c4-5d28f007ce890-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5775
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CQDITGAoja7GSnv3NMBG5w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MzkXo9dgzRtpXP2C+h3iQHdB7bg=
dev2-admin.ycbnt.net/webpage/bower_components/angular/1.5.8/angular-locale_ko.js
200 OK 729 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular/1.5.8/angular-locale_ko.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 4388a8e295ffcf530fe9c94028e10671
5efd0bfd22cba6e2fd9c0f60029fd48d7ac5426f
5e1a3c247030fc04ee66f3a7b3eb3788d056b7e4758168414f3ba669a418235f
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular/1.5.8/angular-locale_ko.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:15 GMT
ETag: "a5b-5d28ef975f551-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 729
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-animate/angular-animate.min.js
200 OK 5.1 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-animate/angular-animate.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (519)
Hash 9ca5310c7e99238e684acaea1e55c3a7
8335bf810ab7dd757b213210e70c5e9e5c1451fc
1f123a68368302a7cc76f8b2f543e8df93ab65e6b507ea0a5c23e73ba1624364
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-animate/angular-animate.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:40 GMT
ETag: "3499-5d28ee9084512-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5097
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-cookies/angular-cookies.min.js
200 OK 510 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-cookies/angular-cookies.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (511)
Hash 60a81531ade6b8275c8920bc52f5c9a4
9be9439e8a2edc5b86d04eab69e1c127c804fef4
cd98dff2a87f65991077ec9eddd2fa63d4aa581b5ec0973c014992df24e33b83
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-cookies/angular-cookies.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:52 GMT
ETag: "339-5d28ee9ba2ff2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 510
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/jquery/dist/jquery.min.js
200 OK 30 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/jquery/dist/jquery.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (32180)
Hash 19bb042b362be9d52a6a4afc1c79f0e1
2c27f676226825381f7a830e65b4d17c02c0c949
bca4f1d8bfca3a6b297d78b33fa24bf8fe780e8aa6ecaff9d116c3f6abeb2ed8
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/jquery/dist/jquery.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:15:17 GMT
ETag: "14983-5d28f00b58c90-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 29547
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-resource/angular-resource.min.js
200 OK 1.8 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-resource/angular-resource.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (519)
Hash 4748e955c849cb191130ae230068a2b6
d6cdc3718ab9ad97adedd86182d605517596b86f
da704c88920bc3ccdac81cee69c94f67d3f08d3526147c22a1c657189ac15fe6
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-resource/angular-resource.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:14 GMT
ETag: "dfe-5d28eeb0fcd12-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1765
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-sanitize/angular-sanitize.min.js
200 OK 3.2 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-sanitize/angular-sanitize.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type exported SGML document, ASCII text, with very long lines (1282)
Hash c814b1f18dec9dacf1dedd98821639d1
0b07c2c5c47799e1c9bf9429cc6a9953124f6f1c
b1f8376b2c8da97798865c770197937d734364b41e6f16aa748940f50f7d88b3
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-sanitize/angular-sanitize.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:16 GMT
ETag: "1826-5d28eeb30e1d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3199
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-touch/angular-touch.min.js
200 OK 1.6 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-touch/angular-touch.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (517)
Hash c1a6d3e8fd036ab02bded9317baa433c
d984f7dba7d754e16268fcefc79a18bd3e98d7cd
d23b83e96dd8d08c4847fae6079b18a5400fa2abc24f5dc26472a7ec0d33d621
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-touch/angular-touch.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:25 GMT
ETag: "e3c-5d28eebb86152-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1647
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-ui-router/release/angular-ui-router.min.js
200 OK 11 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-ui-router/release/angular-ui-router.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (28516)
Hash 62131c9d47b6e9ca4643c1caffc5e0a3
ed64b9c90d8058194fcb893b369c931e8c993cd7
67529a8440c78e6a9ea9ee3b9575fe351daa15fe734d2a7816e214f3958ae24e
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-ui-router/release/angular-ui-router.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:36 GMT
ETag: "700c-5d28efaaa2f90-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10742
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular/angular.min.js
200 OK 46 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular/angular.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (556)
Hash e07bc91e953144583ff4f2452acc0e7d
d313ff75436c5ac56143e3f2d0dec0b0067b903b
da25f19947fd36573d318a2982346e293afb14072ee3e66143135cee0b9a66dd
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular/angular.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:41 GMT
ETag: "1e9c5-5d28ee9163f32-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 45988
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/ngstorage/ngStorage.js
200 OK 1.0 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/ngstorage/ngStorage.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 1b8ef55306239a2e095af1c8eb67fcc3
e87fc2528f8079bc9706d58463043bffe4ed687a
2d0ed9629e4ede325f68a30aa6c36faf957aa5ed0959277b025a1710c6bd4fa5
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/ngstorage/ngStorage.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:11:46 GMT
ETag: "e35-5d28ef41ef431-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1022
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-ui-utils/ui-utils.min.js
200 OK 9.5 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-ui-utils/ui-utils.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (26145)
Hash 265f0032fec853b4eac532ce4ec6cb2b
d1a8cd9e2871fda994a98bbec807c4e849f2d883
f69e50708188cd4caafd09d8aac48af0a3482a1a49ae2cfc0e03bab9cc218ab9
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-ui-utils/ui-utils.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:44 GMT
ETag: "670a-5d28eece24af2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9520
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-bootstrap/ui-bootstrap-tpls.min.js
200 OK 18 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-bootstrap/ui-bootstrap-tpls.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type Unicode text, UTF-8 text, with very long lines (32201)
Hash 4e7027f614ea281e7be03424d6fc25a7
98e2618b185a12b800006061bbdfb5243f897fde
693ada1bc006c0463ec51cd541ff7311bd3f05ab70e6325a24ea116f89a9b728
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-bootstrap/ui-bootstrap-tpls.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:47 GMT
ETag: "fe97-5d28ee97297d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17467
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/ckeditor/vendor/ckeditor/4.10.1/ckeditor.js
200 OK 190 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/ckeditor/vendor/ckeditor/4.10.1/ckeditor.js
IP
ASN #9318 SK Broadband Co Ltd
File type Unicode text, UTF-8 (with BOM) text, with very long lines (573)
Size 190 kB (189804 bytes)
Hash 6c95b6a3b5e49ac25689e4e109ba1f0e
24911d38f730b1f506979dc957584ac89b412a65
12bf16edb8f0f10d4ab3a07172c80d75dd64f1803d9236e0d4bc310c45117cd2
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/ckeditor/vendor/ckeditor/4.10.1/ckeditor.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:40 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:23:29 GMT
ETag: "9b339-5d28f1e01daad-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-translate/angular-translate.min.js
200 OK 4.6 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-translate/angular-translate.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (13665)
Hash 6cb58982278a54135903d771e0bbe3a9
43f1284b78236b450e6507824b3214743aa4d58c
7428cbf51260dc79d07283bee949ea3f8b87ead98023e845673c85a647380256
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-translate/angular-translate.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:28 GMT
ETag: "35f2-5d28eebe20192-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4558
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/oclazyload/dist/ocLazyLoad.min.js
200 OK 4.2 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/oclazyload/dist/ocLazyLoad.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (11376)
Hash f57a8a83e2827d456942073a1a707633
7212223ab0b40d313c0d861235fc4f536fd923c7
99ef8d5ab073dbbdb9caf69495f7f94a502467418a9b3e91427a15d508e4ef21
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/oclazyload/dist/ocLazyLoad.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:16:21 GMT
ETag: "2d3e-5d28f047d816f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4220
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-translate-loader-static-files/angular-translate-loader-static-files.js
200 OK 649 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-translate-loader-static-files/angular-translate-loader-static-files.js
IP
ASN #9318 SK Broadband Co Ltd
Hash af21c8c0cea558fda54f629e461ca8df
b4903432716e9f4c679ba3c3ec2d3521abe4a6e0
977c3cb2acb6317ece6e0a16994796c595335a2b726bbbdcbec3d264a0c7b12e
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-translate-loader-static-files/angular-translate-loader-static-files.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:28 GMT
ETag: "513-5d28eebecaff2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 649
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-translate-storage-cookie/angular-translate-storage-cookie.js
200 OK 524 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-translate-storage-cookie/angular-translate-storage-cookie.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 8b8f8c1472e1a4a0e4c52481a33b1195
28af4658a6d5ef0e732dd3337a323ca175f5cbba
a499951bf274cf4b1ed89a8b499b7bff1d7caea1e220b836cc7d8ccc51be4046
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-translate-storage-cookie/angular-translate-storage-cookie.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:31 GMT
ETag: "748-5d28eec10d1f2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 524
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-translate-storage-local/angular-translate-storage-local.js
200 OK 814 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-translate-storage-local/angular-translate-storage-local.js
IP
ASN #9318 SK Broadband Co Ltd
Hash b35e9b0398459d83b91e67c9806e00c5
589375d53b011cb348e20fcefd57b43130502126
0c3153b55f5d4d1791aff01f9a9c09b16aa8b26695766f239f20719fbd7f0c2d
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-translate-storage-local/angular-translate-storage-local.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:32 GMT
ETag: "b3f-5d28eec237f32-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 814
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5013
Expires: Sun, 13 Nov 2022 14:39:13 GMT
Date: Sun, 13 Nov 2022 13:15:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5013
Expires: Sun, 13 Nov 2022 14:39:13 GMT
Date: Sun, 13 Nov 2022 13:15:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5013
Expires: Sun, 13 Nov 2022 14:39:13 GMT
Date: Sun, 13 Nov 2022 13:15:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 221170365ec0ab6bb773472933bccb4e
2f8d80c36b9d52bbca60ddc946176b8bca2f05f5
c1fedf00b8a0defa4fada242cf3e28c90937bf5f1c10145aebb3494c5a0b5066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9540
x-amzn-requestid: 69c339ec-ac3c-49a4-8029-01d21a7f50b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: be3itHj1oAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f6c77-79d478af722a4ecf50a381a9;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 09:50:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uxbx0xudJDX6_72_MTyyW6R2FXmdfV_5APgpZhqG-6QIeE_yPdGxSg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 22:16:10 GMT
etag: "2f8d80c36b9d52bbca60ddc946176b8bca2f05f5"
content-type: image/jpeg
age: 53970
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 31a009393081c25d9afbde558a278ebf
bf8de6c00f579baa320456bd0e79ab80978008bc
90e81f6a10d3dbc56a45e9cfd65dbcd6bddf9e3ab526b4cca270bc2f26404950
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5149
x-amzn-requestid: 394f108e-48b9-4550-ab9f-5b4883792485
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEIqfHOoIAMFlCw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364bb0f-648124d07e289043410f1dd0;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:11:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vIA209vEBYDDuLU8S0VHzbzlxAeKrXWgkaxhm3hvjsyjjRpEUdLkkg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 07:45:54 GMT
age: 19786
etag: "bf8de6c00f579baa320456bd0e79ab80978008bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dev2-admin.ycbnt.net/webpage/bower_components/ladda/dist/spin.min.js
200 OK 2.0 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/ladda/dist/spin.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (4123), with no line terminators
Hash c64869365e35ce94e1fbed54499f5ba7
cbf6d4b732449da2be79187b77ce4b23a9c2ce1f
67f46966c749e0c5ce297df983c31e1019502474ba4b4caaa7af6ffe5458df99
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/ladda/dist/spin.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:15:48 GMT
ETag: "101b-5d28f02927a50-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2000
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:52:38 GMT
age: 55382
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2942789-3784-432b-a380-73951d12767a.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2942789-3784-432b-a380-73951d12767a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93d4c9b75e8e21151056247b8a76e1d5
98eebc284e7a7817cc3397a40defaf7f2cc2f9af
621a65a13db5f93806e90094ca71a82eb586f383950278a0cbed3dba2a8fb9f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2942789-3784-432b-a380-73951d12767a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8582
x-amzn-requestid: e82ca80b-e945-4c56-a8f8-0c139aae8e86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bgfLqEh8IAMFeSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6370124a-400c01252ab480d9366a9410;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: XhzX6HVmgnoesOaTa40kRgxZziVaT8odcVPIPfVT9Fa7zj0DoG5XBQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:58:03 GMT
age: 55057
etag: "98eebc284e7a7817cc3397a40defaf7f2cc2f9af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfc69f5-02e2-48e4-a7f8-345ee02dd656.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfc69f5-02e2-48e4-a7f8-345ee02dd656.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f181df0e475c123b46f016d3c0bbaa5
399ce32b1fdcdef9061bddb840663f35e39b919a
ed9ba753f718903cd997c027f58b63f41e32107367b22b03f964d7eecdf9ba16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfc69f5-02e2-48e4-a7f8-345ee02dd656.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11187
x-amzn-requestid: 475229e1-bbb5-43a0-8733-1140a99b6b6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEIaqFFrIAMF7KA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364baaa-4261a60e57ae0c4d7a62e5e9;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:09:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3EozHADkYojY5JlLLoEfjaDW0iwzEWBFe_cOV2a7hK1SSBkWGBIpng==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 10:25:37 GMT
age: 10203
etag: "399ce32b1fdcdef9061bddb840663f35e39b919a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26249508ef18eac51cf62cf6e90339a4
a9922959c532dd26f21bda4f74ee1fa8496e862e
25075ef6337bae8e60412cdca98afbae6aca61d889aadce4cbad4a8522f4c4b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7867
x-amzn-requestid: e05d4978-6f46-4395-8121-4d969a222328
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bgfLqFWIoAMF01A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6370124a-4033150d0180e56e2965e26e;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDkJ7OIcS3FiDPufRTj5VtL5CMxbNN2o2Zq50QQ9UNeDw4uE4j3jrw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:54:29 GMT
age: 55271
etag: "a9922959c532dd26f21bda4f74ee1fa8496e862e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dev2-admin.ycbnt.net/webpage/bower_components/angularjs-toaster/toaster.js
200 OK 2.2 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angularjs-toaster/toaster.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 6114ddfc4d92e32fc40b0c10730b4afa
f7980ebfce7efeec4a9a694fee7a8e3936401096
009af37d048d902b23903bd59af7473bc7af6a9b250d3ad3d3adecd32ea27720
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angularjs-toaster/toaster.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:50 GMT
ETag: "1ffe-5d28eed3210d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2222
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/ladda/dist/ladda.min.js
200 OK 1.5 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/ladda/dist/ladda.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (3257)
Hash 3df1f62896f047e5cb9d750f3b2bc47d
fc8b48a1b6507a7c3e23c7a58ccdda8897e9acd0
3718a3fef1729fd1a3921cec22f3bea2cd93cfad8e6ad460fd072aa7c26ea0b5
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/ladda/dist/ladda.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:15:48 GMT
ETag: "d4b-5d28f028a2d50-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1535
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-ladda/dist/angular-ladda.min.js
200 OK 563 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-ladda/dist/angular-ladda.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (1012)
Hash 3960af00f5464395c42e2c539b72985b
b14a6c4cf85c4c9a2ec9eef22748fd08a4da792e
b7853e08e9f0f65ff59faf130fc4a2b525dfd4a66974eb21a7d9fe81382c23ec
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-ladda/dist/angular-ladda.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:24 GMT
ETag: "40f-5d28ef9f90031-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 563
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/lodash/lodash.min.js
200 OK 24 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/lodash/lodash.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (4234), with CRLF line terminators
Hash e5b6a56a275f034318a05a0ba434810a
0191c806840a039227e18a07376150f73686c32f
694e7fe3e355ea0f9c637e77511afc6f9a7a05811d730ea0d96046b7d1127df5
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/lodash/lodash.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:11:24 GMT
ETag: "11e4e-5d28ef2ca2231-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24432
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/spin.js/spin.min.js
200 OK 2.1 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/spin.js/spin.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (4174), with CRLF line terminators
Hash f73270ac729822e8bd8b39a9addbce73
bb81597e393e57ee11687678dda4eca6142559d7
4619d567fc324f87be0d706d3febc49be4cd4f3a79901a978bfa111194eab0a2
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/spin.js/spin.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:12:06 GMT
ETag: "1072-5d28ef54a83b1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2064
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-loading/angular-loading.js
200 OK 1.9 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-loading/angular-loading.js
IP
ASN #9318 SK Broadband Co Ltd
File type assembler source, ASCII text
Hash 734612602793e54ecaf079e228d87639
3d94b415c7dbc634d4fc92a552ca1cb8f182d716
a15807b9b4e456e45184bb5222d3fa0a6d2582ee3eb3fcb4c5050add85b49369
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-loading/angular-loading.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:06 GMT
ETag: "189b-5d28eea989972-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1920
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-local-storage/dist/angular-local-storage.min.js
200 OK 2.3 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-local-storage/dist/angular-local-storage.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (6219)
Hash 1e1bd2b544ecd4091307dfc562e35768
20913351659c6f5422d13bbe4e83cb244354492f
ba7835abe553af87dd932f03de8974b926394d593261211ed7ae1f8658612cd1
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-local-storage/dist/angular-local-storage.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:28 GMT
ETag: "1992-5d28efa3bd591-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2291
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/bootstrap/dist/js/bootstrap.min.js
200 OK 9.4 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/bootstrap/dist/js/bootstrap.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (32405)
Hash 51502150727896be5a8fab38aa9043f0
2fc43548b0b5f96d1796d8a742fed0f6634d507e
15c4b87bbe52de50ac60ea253b3bab0f796d74e9d708d0ca0550d3b9f9d7764c
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/bootstrap/dist/js/bootstrap.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:18:40 GMT
ETag: "8a7c-5d28f0cd389ef-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9407
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/bootbox/bootbox.js
200 OK 8.0 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/bootbox/bootbox.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 6c8edfa91d3785d01b9969052c657340
51d7a927449d5736b27a2160351b67577e50428c
09e1b61ed1265639bf8afff3e8bc7b9adaa300903a83cdaea4559a473299525e
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/bootbox/bootbox.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:58 GMT
ETag: "67ce-5d28eeda8f652-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7985
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/ngBootbox/dist/ngBootbox.min.js
200 OK 800 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/ngBootbox/dist/ngBootbox.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (2517), with no line terminators
Hash c49abac7c272d1b7a96b479b5901d0ab
dc8dd85b36ca26eb8040395acf3fe6d94db33661
fda01876db4faf4a8960887e7b046ceb2d9bdf12db9330cf51f6f2a9ee9f088e
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/ngBootbox/dist/ngBootbox.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:16:18 GMT
ETag: "9d5-5d28f045d37cf-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 800
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-sprintf/sprintf.js
200 OK 2.3 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-sprintf/sprintf.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 98d352cb2b8941ac008df36007da6e30
e4687d274df21fb340de2f8538ff215f5e9e9e0d
29ab3c84f231fe84c86decd154d42ee835550c5777bf059e6208bc28f68e5257
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-sprintf/sprintf.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:25 GMT
ETag: "2586-5d28eebb340d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2261
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-sprintf/angular-sprintf.js
200 OK 217 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-sprintf/angular-sprintf.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 045eeae93f608e281682974c78d81329
5fdcb3c173a9f966472f88c4c50fbc5a97c7a867
7efc239fc76130eefd5a33c3ca46ef9bdc5b4ef123c917ac6f9a383b1e457458
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-sprintf/angular-sprintf.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:09:25 GMT
ETag: "283-5d28eebba7492-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 217
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-base64/angular-base64.min.js
200 OK 649 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-base64/angular-base64.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (1360), with no line terminators
Hash 1296c213e7fde42953f2760ef7bce3fc
9c5a9708efe0787945dd9aa682738225d4c35993
0a806f46df7f609ba05ab8149f4a2bf4ee5da928d74cad85408711b33f545d43
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-base64/angular-base64.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:44 GMT
ETag: "550-5d28ee940d972-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 649
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/underscore/underscore.js
200 OK 13 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/underscore/underscore.js
IP
ASN #9318 SK Broadband Co Ltd
Hash f7cbe2a80ccfa75e4d1bfa90f5d8ad8a
d1516af9b802aa982951dd0f66276f3d96691f13
743703bdf4df16df64edcb7a5782ddecb9f657b71f4d95daab881d0ac85ef198
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/underscore/underscore.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:12:11 GMT
ETag: "ba39-5d28ef5a08351-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13103
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/async/dist/async.min.js
200 OK 4.3 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/async/dist/async.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (12436), with no line terminators
Hash 00d56db447d9afeb213be447504bdcb7
49f8ceb4e856a17cb770bf7de7c1d90f5d44d849
4e151248a0affa210f80c17192381ffb2a16f2b03035b0eef048f0e4b91cf6a1
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/async/dist/async.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:41 GMT
ETag: "3094-5d28efafb3d90-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4268
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-modal-service/dst/angular-modal-service.js
200 OK 2.3 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-modal-service/dst/angular-modal-service.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 342850ed3dd0e132c890178d6b5a6e44
f562e9e2d98ba1f7bc87b21edc1600902fd08976
939167c75ace4a9b56cb5437d163875f034c009eda27f87e0c269b9acada5d6a
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-modal-service/dst/angular-modal-service.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:30 GMT
ETag: "1ecd-5d28efa508671-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2321
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/ng-sortable-master/dist/ng-sortable.min.js
200 OK 4.5 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/ng-sortable-master/dist/ng-sortable.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (19709), with no line terminators
Hash 11470a5b6d9b2e39bca87dc846cecee8
54a580a5f6f38d79cca40804d976e217717792d2
002a47af49522ff4956ba3e5620b51f71fe2a5ae5bcb725130dce08080d19c83
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/ng-sortable-master/dist/ng-sortable.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:16:14 GMT
ETag: "4cfd-5d28f041e5a10-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4511
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-currency2-filter/currency.core.module.js
200 OK 36 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-currency2-filter/currency.core.module.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with no line terminators
Hash 4f88dbf8e57b0c449ffdc2ac4fc1c346
083aec171bacf2855125663d1fa885a97fcca98a
2b14147232c89a72aee2cceb405148ee336f9f5e5a7b9cabab30effc58739853
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-currency2-filter/currency.core.module.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:54 GMT
ETag: "24-5d28ee9debf52"
Accept-Ranges: bytes
Content-Length: 36
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-currency2-filter/currency2.filter.js
200 OK 292 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-currency2-filter/currency2.filter.js
IP
ASN #9318 SK Broadband Co Ltd
File type Algol 68 source text\012- Pascal source, ASCII text
Hash 3b06fb8c5cc14f45bf33590a8a24bf0e
61d6ab2be6ae9c5a1d094d259183028527ec0fc6
96ee063f719985473d2c1fe9ddfbed064579deef1af94e4685c9d49577a6e71a
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-currency2-filter/currency2.filter.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:54 GMT
ETag: "298-5d28ee9debf52-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 292
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/moment/moment.js
200 OK 22 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/moment/moment.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 19f10ef14ecbafae3f0ab53d879425f5
98d2725b78387716ee41b93330b8fee9cdc5cbf4
5b072ef2c8ef3932f21554118bdd098bd4bd90d43d98ad3079aafca977e75503
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/moment/moment.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:11:25 GMT
ETag: "17893-5d28ef2e66491-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 22426
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/xml2json/xml2json.js
200 OK 4.5 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/xml2json/xml2json.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 8853f6d186ba953398f663e4fb75dff0
12f8937bfa94f1542b3e9948df77e3fd777fdf11
10db277986341658d0c257b54e08651913e5121567a77cbdcff64fc0deaae467
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/xml2json/xml2json.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:12:33 GMT
ETag: "3df4-5d28ef6f42c71-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4485
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/venturocket-angular-slider/build/angular-slider.js
200 OK 15 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/venturocket-angular-slider/build/angular-slider.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (3738)
Hash 0cbc051c87bebc9513e84d916087e5e4
1566201b6a31e748b3dedfc6f69293e7abccd214
d05779c6fb04f9fc0d2b88a19e14a089c144f3ac28072421bd4d3318154b167e
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/venturocket-angular-slider/build/angular-slider.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:17:09 GMT
ETag: "17751-5d28f076007ef-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15251
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-smart-table/dist/smart-table.js
200 OK 4.3 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-smart-table/dist/smart-table.js
IP
ASN #9318 SK Broadband Co Ltd
File type HTML document textAlgol 68 source text\012- Pascal source, ASCII text, with CRLF line terminators
Hash 64824965b165d8b8331c87030976aa23
ba29dd528c5678fd782f8a3de6498d44856c0a3b
dd29bc6335babe2cffe9283b1f79abacaf308b943dd66369848f824dd8276b90
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-smart-table/dist/smart-table.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:32 GMT
ETag: "46c5-5d28efa6e0150-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4251
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-kui-select/dist/select.js
200 OK 8.3 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-kui-select/dist/select.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (731)
Hash 85b0e9013731925f9625e07b81ac833a
ff07d5a65bdafd040eb8f59a00c8c767ffbd77ef
792d0d90a9f2395c1903e6db150ea537a61c76d58528963225cc8236e949971d
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-kui-select/dist/select.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:24 GMT
ETag: "76a8-5d28ef9fd9411-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8338
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/angular-file-upload/angular-file-upload.min.js
200 OK 4.2 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-file-upload/angular-file-upload.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (14804)
Hash 44d65276b41c3ee466bd196f7a0c6115
84abdd1b95f1db7da3209be405378e0a668fb7cb
351f29182e972dd70395ab7d34f72b08a20d4fcee35ad5ee37185b62d347c921
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/angular-file-upload/angular-file-upload.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:57 GMT
ETag: "3a56-5d28eea0d60d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4190
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/owlcarousel/owl.carousel.min.js
200 OK 11 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/owlcarousel/owl.carousel.min.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (31997), with CRLF line terminators
Hash d2e4ab6ba660a80841bd9dde942c23e6
94069146ed504f5a4bb7605c606a3d0b36301c74
fa0b3bc9df7190dbb9cfce51eedd617cc7b97ac3d6dda39b1d81d4f717ce6ddb
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/owlcarousel/owl.carousel.min.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:11:49 GMT
ETag: "ad3c-5d28ef449dc91-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11418
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/owlcarousel/ric.owlCarousel.js
200 OK 480 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/owlcarousel/ric.owlCarousel.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 568ea07594c1d7e95674df75bbe58ad5
6150491689d196a6f49e7ef38e9efa9d7f6dd074
787e8fba41a68391587d0e023eafa888a866bffb6dc0b7461c7b6dcc6770a8f3
Analyzer Verdict Alert fortinet Malware
GET /webpage/bower_components/owlcarousel/ric.owlCarousel.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:11:48 GMT
ETag: "4ad-5d28ef43c6f11-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 480
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/config.js
200 OK 590 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/config.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 029514058e40855a358cbdc50c7cd542
bb5565fa69bf702f4ccaf56fca69e01ec4a17ab5
20f6d04b15a1c72565ee0b2e004b5e621b90d529dee575707a3abe42a33dde73
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/config.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:07:59 GMT
ETag: "556-5d28ee697a2d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 590
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/app.js
200 OK 392 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/app.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 3c6c8d8b5fefb65837f9e060d04b6cc6
06d7c21c6439c60cf2cb14fb2dbeae131b2e1b64
89d047a3ce3487099d691b4e25c26809ad873a7fd7d09a67d4ed0ddb4db3ad3b
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/app.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:07:59 GMT
ETag: "2b1-5d28ee697a2d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 392
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/config.lazyload.js
200 OK 1.6 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/config.lazyload.js
IP
ASN #9318 SK Broadband Co Ltd
Hash 7c754c2ccdd7547ecd4b9deb01b4d2d4
d8672318b3fedfce523805f558c2b4b190cc90ab
dd1cc7f7d6f24e1e06ec85eb77c416c9d7a0127b2f38dd2c2116cb3b3c5aec45
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/config.lazyload.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:00 GMT
ETag: "27fe-5d28ee6a936d2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1582
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/config.router.js
200 OK 2.3 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/config.router.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 51bafa6bd7893cb42ab793c10d45af15
994ccefa5b17327a173e85b20ac236468b74fa42
68c98e968e5e589fca524cbd3a1e32865d111c4700fee203fd3aa0a584dc3f6a
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/config.router.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:00 GMT
ETag: "2d04-5d28ee6a2aef2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2323
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/main.js
200 OK 1.2 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/main.js
IP
ASN #9318 SK Broadband Co Ltd
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash f7092ec4f27270250fa7cfdec570fe43
68eae5822426626f2dbcf67a04c728280f1868cb
8b03f99ec5ee22eecdd5f01a6c4947919f57258280ed436bfd80b46596ad6875
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/main.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:01 GMT
ETag: "c86-5d28ee6b33952-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1226
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/directives/ui-jq.js
200 OK 1.2 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/directives/ui-jq.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 6d3c3c712a0adae6f041a853e6c0c1fb
39392c0aeb780c3a7dd02c1cb53a76be3693d99c
ba63fcdccced177c555655bf06df8d6fa9e995ef98821221209de0971cba43ff
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/directives/ui-jq.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:12:51 GMT
ETag: "c3e-5d28ef7fe9791-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1225
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/services/ui-load.js
200 OK 841 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/services/ui-load.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 79ffd5ca2ef92f0e287ed4c35144fa06
27224fa822eeea8822b4baf829087e259cda332d
a2072e40a1378447f251469e9093d4a9107c2e36717e6d6607bf3e1171c3929d
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/services/ui-load.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:12:55 GMT
ETag: "9b8-5d28ef8369f51-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 841
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/directives/ui-nav.js
200 OK 777 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/directives/ui-nav.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 92f15697eb90214c63db8cc10a454574
bab7c9bea02460d5102748fa19eb8ea5b7dc7967
69ddc64a80e647b67d1c810ec822c6d7fc4f71b941bcfc6a4d55f6b4bfbbe4a5
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/directives/ui-nav.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:12:52 GMT
ETag: "990-5d28ef80ffcb1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 777
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/js/directives/ui-module.js
200 OK 282 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/js/directives/ui-module.js
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with CRLF line terminators
Hash 059840ec67599437aea209946daceab9
3bd6567f208c239d62b95dbcdee306c6d6b76873
05717ac04176e5db4e6de446bd5f005ec2fba80fa1fbfab38ed5ccf9de6219d4
Analyzer Verdict Alert fortinet Malware
GET /webpage/js/directives/ui-module.js HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:12:51 GMT
ETag: "253-5d28ef806c551-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 282
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
dev2-admin.ycbnt.net/webpage/bower_components/simple-line-icons/css/simple-line-icons.css
200 OK 2.4 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/simple-line-icons/css/simple-line-icons.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (2600), with CRLF line terminators
Hash cc1dee0eed18b039be71c7ff53f268c5
826c32354feb53330ff6e51b0d396ed6f4f178d6
bb2e425f1db14cd07f1ed4a29a7790fcca6d1f8319169c01b27cd6623d0b0894
GET /webpage/bower_components/simple-line-icons/css/simple-line-icons.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:16:49 GMT
ETag: "2d34-5d28f062fc54f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2367
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/bower_components/owlcarousel/assets/owl.carousel.min.css
200 OK 1.1 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/owlcarousel/assets/owl.carousel.min.css
IP
ASN #9318 SK Broadband Co Ltd
File type ASCII text, with very long lines (3184), with CRLF line terminators
Hash 876317e545381a07cee87c128b58caee
b7ee0636454c35d65266e3184417c48dc27cc29a
c52b1d154239012738c124d954c81601915ce231f896b982ca79c2f94b2a81d0
GET /webpage/bower_components/owlcarousel/assets/owl.carousel.min.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:16:21 GMT
ETag: "d1c-5d28f04862c2f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1072
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/bower_components/angular-kui-select/dist/select.css
200 OK 1.7 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/bower_components/angular-kui-select/dist/select.css
IP
ASN #9318 SK Broadband Co Ltd
Hash e17844f2b002e98aa59c8e7a168a5b23
277868b270d45aeafa9279092ce1f325bd054279
6248463744b0b73686e145cdc18521630435e604a2c651cebea4d43684a6873f
GET /webpage/bower_components/angular-kui-select/dist/select.css HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:13:24 GMT
ETag: "15de-5d28ef9f5e351-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1655
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/css
dev2-admin.ycbnt.net/webpage/img/favicon.png
200 OK 16 kB URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/img/favicon.png
IP
ASN #9318 SK Broadband Co Ltd
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash d636c8a8bf13e45c947d8e22c481d81b
a24b4c6fe811306213c8760cad6af664a23dfdf4
78c5ca73805d481826b7583b77c2fdc06e1d78afefcc859e2e97c4a8bd73ad0f
GET /webpage/img/favicon.png HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:00 GMT
ETag: "3d8c-5d28ee6a2ddd2"
Accept-Ranges: bytes
Content-Length: 15756
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
dev2-admin.ycbnt.net/webpage/l10n/ko.json
200 OK 4 B URL HTTP/1.1 dev2-admin.ycbnt.net/webpage/l10n/ko.json
IP
ASN #9318 SK Broadband Co Ltd
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash 73792b9af3fc811b105441cc773526b1
3dbd0a28528cc971d576c7a6dd2bda7edda4042f
bac6a76645c48064f198e711301492ace386110831d381f33ba68a3db6847bd4
Analyzer Verdict Alert fortinet Malware
GET /webpage/l10n/ko.json HTTP/1.1
Host: dev2-admin.ycbnt.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dev2-admin.ycbnt.net/f0z/hlybnfsqpxkkklgbtq.bin
Cookie: ci_session=dt7hh3j8ougvjjl9n86paegg7jrphanp
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 13:15:43 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Tue, 07 Dec 2021 14:08:03 GMT
ETag: "4-5d28ee6d4cb12"
Accept-Ranges: bytes
Content-Length: 4
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/json
175.126.123.148
34.160.144.191
23.36.77.32
93.184.220.29