| 94.156.65.205/firsttechfed/verifysecure.php |  94.156.65.205 | | 32 kB |
URL User Request GET 94.156.65.205/firsttechfed/verifysecure.php IP94.156.65.205:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2458) Hash72856175c2b836ab836f3d1f77b65745 1c3117e0b4e0d4a40e18e2cd38c7dd34ddb4826a 10c21df30c9afd1bc222d463b461ad0ded4aade38a9254172c775a09fec22a91
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | First Tech Credit Union | | Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET PHISHING Possible Phish - Saved Website Comment Observed |
GET /firsttechfed/verifysecure.php HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/1413379559077803 | 94.156.65.205 | 200 OK | 58 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/1413379559077803 IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (5140) Hash9093987f8fd462e13b69db96eeab51de ee5fe76be03f2f709fe5a4e671c572346f2de31b 35c9e1c2b74a34d5328cfcf2cb4bc9294971290af5d2046c97b0ff1a62ff866b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/1413379559077803 HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:26:50 GMT
ETag: "e237-616b394b5e5fd"
Accept-Ranges: bytes
Content-Length: 57911
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/fbevents.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/fbevents.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/fbevents.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/analytics.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/analytics.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/analytics.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/gtm.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/gtm.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/gtm.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource | 94.156.65.205 | 200 OK | 405 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with CRLF line terminators Hashbb35dd653013771d4c0b9d018e50e176 8a8a72b9bd00837d8088e3f287a63fa34229dbe9 35400633f4ed3163a7c189de8844cc311d0e2481db31bafe2573efa6a34e0767
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:26:57 GMT
ETag: "195-616b3952808ec"
Accept-Ranges: bytes
Content-Length: 405
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource(1) | 94.156.65.205 | 200 OK | 696 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource(1) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (696), with no line terminators Hash754baa405fa49813e5d0eb5ffc6e3ec3 4610a89e2295c91d94caa77d074446bf29bbfba2 9b4263be6f97a4263a79b24580b05f2bd13426069a0aaa04c6cb57ee88daf911
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource(1) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:26:57 GMT
ETag: "2b8-616b3952bfc43"
Accept-Ranges: bytes
Content-Length: 696
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/1e027846.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/1e027846.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/1e027846.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/Bootstrap.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/Bootstrap.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/Bootstrap.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/yui-reset.min.css | 94.156.65.205 | 200 OK | 793 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/yui-reset.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (746) Hashff296a5a2b2062ce5cbcb0b8cfcca0e4 5477838f625b923e8a18dc2c28a127275132afcf 590fcd2ea2a3de691c86ecf564fff1fcb0982271cf723ae4d6e2453c9e6f5434
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/yui-reset.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:03 GMT
ETag: "319-616b3958719bc"
Accept-Ranges: bytes
Content-Length: 793
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/font-icons.css | 94.156.65.205 | 200 OK | 123 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/font-icons.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with CRLF line terminators Size123 kB (123194 bytes) Hash93122e2ec7cd1c1ed85d54d6465ed9d6 89e24c47642256229e3f0eb1af470d459a29be39 81b5911ce1e61781a872f3d2a9f7094f4e9944f41c79b028a8ad316ba46611cc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/font-icons.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:03 GMT
ETag: "1e13a-616b39580770d"
Accept-Ranges: bytes
Content-Length: 123194
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.daterangepicker.min.css | 94.156.65.205 | 200 OK | 2.6 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.daterangepicker.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (2577) Hash2832b92b9aaa9994685c5c73f85550e7 97fa89b53df09e895f086412781cc98a1ce57935 ab9c55dea4e2d8b7e988cb51b7f82d7dda04336a90e7b9400ac417198590077b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.daterangepicker.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:04 GMT
ETag: "a4d-616b3959412f0"
Accept-Ranges: bytes
Content-Length: 2637
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/js | 94.156.65.205 | 200 OK | 260 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (5955) Size260 kB (259601 bytes) Hashccdda15ca528e188e26dd8a23ae398b7 91c2a9da442a0d0f36c4e7f057c53d960353f715 354d5a13b1d9f68cd806fc852e18d836c2acf99c7d0b7148865a2c14a321ba16
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:26:53 GMT
ETag: "3f611-616b394e68863"
Accept-Ranges: bytes
Content-Length: 259601
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/grid.min.css | 94.156.65.205 | 200 OK | 6.2 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/grid.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (6200) Hash9f86b99e95e990ba0bb7242efefe0e2b 703c1bb9da1f95f8418f1db5ed5ccbfe24dff2a8 7b0c166ec17b75456e72c3b4ac8e4adf76dd6d13c965f25c26f74587a9b6ef35
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/grid.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:06 GMT
ETag: "1862-616b395adbffc"
Accept-Ranges: bytes
Content-Length: 6242
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/js(1) | 94.156.65.205 | 200 OK | 271 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/js(1) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (7711) Size271 kB (270855 bytes) Hash5cb04186877f5a483e73f26b24baacc8 767383963ff91d7221696556446dffe6c6db20ee b1bc080914d86ec05755d5176d46e9e7a38d3a6872b51ff5e87199ba08eec34c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/js(1) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:26:56 GMT
ETag: "42207-616b395156df8"
Accept-Ranges: bytes
Content-Length: 270855
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-ui.min.css | 94.156.65.205 | 200 OK | 31 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-ui.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (29517) Hasha5572f750a0871beec3e5c771118f593 152d246c50c28633dd803f49e28fe5d7635701e6 75d3513cd72651dab00071d36b00c1546142fa141167f7fc770af9bce061028e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-ui.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:04 GMT
ETag: "7a5a-616b3958e404b"
Accept-Ranges: bytes
Content-Length: 31322
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/base.min.css | 94.156.65.205 | 200 OK | 202 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/base.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeUnicode text, UTF-8 text, with very long lines (30787) Size202 kB (201665 bytes) Hashd9d56d9e2a448efc8977c8d053e27fb6 66d554ed4c15b1a44892779dc48b0897105c7860 17b7f6b4aa751e6a66b4fdeaf596f48c2e153b8552d63f89e48726992169025d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/base.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:05 GMT
ETag: "313c1-616b395a58f32"
Accept-Ranges: bytes
Content-Length: 201665
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/sidebar.min.css | 94.156.65.205 | 200 OK | 2.8 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/sidebar.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (2709) Hash386632ec994f10e236e6185a2977808d 29f88aca1e4864ba2a20f4cc1622ca3fe55e1f10 4ce72ae45e1aafaa5cd4cc684c0000459c6d154c31450aad92bbd51a34107c93
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/sidebar.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:06 GMT
ETag: "ac2-616b395b58169"
Accept-Ranges: bytes
Content-Length: 2754
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris.shim.desktop.min.css | 94.156.65.205 | 200 OK | 673 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris.shim.desktop.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (618) Hash59bf2a4ff43b075967d30bf79df13983 19f297362e717cd28ba498e8d3fa32b126fe7e3f 59f12ecd0c381fee3367ffac176a581a966727684a5ce94390b4390b2fc06ca4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris.shim.desktop.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:07 GMT
ETag: "2a1-616b395c214f5"
Accept-Ranges: bytes
Content-Length: 673
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris.min.css | 94.156.65.205 | 200 OK | 107 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (65536), with no line terminators Size107 kB (107248 bytes) Hash37ee32f690bca2b80513adfb5464a8c7 63af5882ffd49a31ac5c8a72fc3efe17963e4942 d4ef4d17e71da3fb7d7ba0e94bf07b69058090b6c99c3f6d347803dbc9451fb2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:08 GMT
ETag: "1a2f0-616b395cc761a"
Accept-Ranges: bytes
Content-Length: 107248
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-foundation.min.css | 94.156.65.205 | 200 OK | 51 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-foundation.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (50964) Hash0160c354e11f9e1f2ffcd720f880dc2e 7c3b5681a9483a0f37110476e04375e7e88d8fcc 037e5f8a4d2ef765d97f6c14e087cab4f8f27a1ac2a6a7584793b1a76a08fb8f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-foundation.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:08 GMT
ETag: "c86e-616b395d50409"
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-components.shim.desktop.min.css | 94.156.65.205 | 200 OK | 1.3 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-components.shim.desktop.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (1059) Hash99e374ceac437dc6336c44cb033b11f4 84fe98cef9e6529d47da226f1bbf8682bc5b1ac2 7005f69e2e4e579a7101c909c9ab97e112754aa1fd908f4507a324a1dc7af0ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-components.shim.desktop.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:10 GMT
ETag: "506-616b395ebb70d"
Accept-Ranges: bytes
Content-Length: 1286
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/ext-all.min.css | 94.156.65.205 | 200 OK | 126 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/ext-all.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (65414) Size126 kB (126146 bytes) Hash8641b1821bba6e773e521e0a5d5fbc4d 1faed807c009cbb8b959a851fd5215d3befb5df9 fe6518a82d150e495968afb508b00fd52328ff1329056b3524acf12051fb543a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/ext-all.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:05 GMT
ETag: "1ecc2-616b3959aa383"
Accept-Ranges: bytes
Content-Length: 126146
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-foundation(1).min.css | 94.156.65.205 | 200 OK | 52 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-foundation(1).min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (51782) Hashd55010f2577a75798ea4c49aa97c7f8f 8f46f4a057d8b3c418ebcee3a62b7ee32f1c0810 76354b46295906d76eeec4668e2ad4a57f35f5f74ae4fcb69790f7747ccc3608
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-foundation(1).min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:11 GMT
ETag: "cb9f-616b395f55926"
Accept-Ranges: bytes
Content-Length: 52127
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/isotope.min.css | 94.156.65.205 | 200 OK | 25 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/isotope.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (9199) Hash3782eb3d3bb6de4d62ad1b0747337ddc 74713678e5070891f7bdf474e1f76b724ff4f95e 6c479754a571e52f0513fa5ef95f8c8f9d8428f06c08b2c0a6e0d22ab795f8ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/isotope.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:11 GMT
ETag: "633f-616b395ff419b"
Accept-Ranges: bytes
Content-Length: 25407
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/theme.desktop.min.css | 94.156.65.205 | 200 OK | 58 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/theme.desktop.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (57410) Hash016d9853a558e9d246130a13808e42f9 737b11bb03965c0d4aaaa25b8f07962aebc5c405 78ce000fb1c821255b91a80c0fa2d90a4ca794fb8c1fc6b4245ca7fc93ce42a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/theme.desktop.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:12 GMT
ETag: "e075-616b3960376ea"
Accept-Ranges: bytes
Content-Length: 57461
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.css | 94.156.65.205 | 200 OK | 59 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (59219) Hash47fc784a0709fb95a3e659c4a57aaed0 061adb42bb28c77749e561e88ce1a3cde6749bac b72630c19c99edca2efd1ecd5d29012accc30956e465719d14a2bf2d43046027
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/fi.desktop.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:12 GMT
ETag: "e783-616b396074f70"
Accept-Ranges: bytes
Content-Length: 59267
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrapper-b541ca58f-f88f78918.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrapper-b541ca58f-f88f78918.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrapper-b541ca58f-f88f78918.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/webcomponents_es5-b541ca58f-f88f78918.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/webcomponents_es5-b541ca58f-f88f78918.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/webcomponents_es5-b541ca58f-f88f78918.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/visitor-app.15fe8a49.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/visitor-app.15fe8a49.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/visitor-app.15fe8a49.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/visitor-app.15fe8a49.default.css | 94.156.65.205 | 200 OK | 211 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/visitor-app.15fe8a49.default.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (65536), with no line terminators Size211 kB (211402 bytes) Hash9f94d3ff9fa2bfeb09908451905c8b7a 8968c1801e8282545dbdc5fbf54976ad7d0c25e7 8b2498769ff6d35b6dbbfd31189e7294564b3caa02112b5f5f2bd61769c69996
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/visitor-app.15fe8a49.default.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:16 GMT
ETag: "339ca-616b3964f1a21"
Accept-Ranges: bytes
Content-Length: 211402
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.css | 94.156.65.205 | 200 OK | 7.9 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (7944), with no line terminators Hash510b4fe13abf0edc2dc84d923076ede1 71a2a868d62a98bf9c541676fb7121bbcdb24dde 5b35174b311606884d65d68c2bae7a83dbf570af6b1d9beb89d6d1005c0173f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:18 GMT
ETag: "1f08-616b3965e9d01"
Accept-Ranges: bytes
Content-Length: 7944
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource(2) | 94.156.65.205 | 200 OK | 230 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource(2) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with no line terminators Hashe8d0a259039f5a1b698d24a3e3ae9a81 67949368c96ad36dc4a091481c0b4d601af73d2f d5434eed491fa70f45775f467bce541811e91dd73cc755b22e4cb2f9ec601fbe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource(2) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:18 GMT
ETag: "e6-616b396627faf"
Accept-Ranges: bytes
Content-Length: 230
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource(3) | 94.156.65.205 | 200 OK | 205 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource(3) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with no line terminators Hash340daadffa51bb4008bc7a8261f12e5a 829d2e6204660ac154034aba147b2b746bbd06b8 4e2f508d1114f3c6325a4b22aad4c573585ac6b54160c5cbd282cce58e93e784
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource(3) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:18 GMT
ETag: "cd-616b39666cdce"
Accept-Ranges: bytes
Content-Length: 205
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/localization-ts.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/localization-ts.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/localization-ts.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/polyfill.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/polyfill.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/polyfill.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/webcomponents-bundle.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/webcomponents-bundle.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/webcomponents-bundle.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/custom-elements-es5-adapter.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/custom-elements-es5-adapter.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/custom-elements-es5-adapter.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-components.min.css | 94.156.65.205 | 200 OK | 364 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-components.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (65310) Size364 kB (363732 bytes) Hasha97c24d4da4950364cff6c834d833ba9 cc0d0c6b106d1cccfdbeab40b840754b7a811f9b 4821c46c55bbe77216e5001ae95378f918498da7c50608e904abcf63a855a640
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-components.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:55 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:11 GMT
ETag: "58cd4-616b395fa0943"
Accept-Ranges: bytes
Content-Length: 363732
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/Lc2aaSL79MEam6oTTtum6hQbbbb | 94.156.65.205 | 200 OK | 88 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/Lc2aaSL79MEam6oTTtum6hQbbbb IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeUnicode text, UTF-8 text, with very long lines (65527), with no line terminators Hashe22dadc32e90dab51e98799acfaf2295 e832a0562ffd113d6e2f3c3e332f6f7dd1119edb 6314639f7aeaf02dfc89186fb1acc9d517c816afc28c548ccb2e5c07cf342e1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/Lc2aaSL79MEam6oTTtum6hQbbbb HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:19 GMT
ETag: "15986-616b39675afb8"
Accept-Ranges: bytes
Content-Length: 88454
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/orb-shell.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/orb-shell.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/orb-shell.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/popper.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/popper.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/popper.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-ui.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-ui.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-ui.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/ua-parser.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/ua-parser.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/ua-parser.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-validate-sitetext.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-validate-sitetext.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-validate-sitetext.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/moment.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/moment.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/moment.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-validate.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-validate.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-validate.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrap-dropdown.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrap-dropdown.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrap-dropdown.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrap-modal.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrap-modal.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrap-modal.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrap-select.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrap-select.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrap-select.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.filestyle.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.filestyle.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.filestyle.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/shave.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/shave.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/shave.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.dateRangePicker.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.dateRangePicker.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.dateRangePicker.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/en-US.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/en-US.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/en-US.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/i18n-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/i18n-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/i18n-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.extensions.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.extensions.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.extensions.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/utils-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/utils-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/utils-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/language-toggle-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/language-toggle-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/language-toggle-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/helpers-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/helpers-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/helpers-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-helpers-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-helpers-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-helpers-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/flash-banner-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/flash-banner-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/flash-banner-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/profile_nav-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/profile_nav-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/profile_nav-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/idle-timeout-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/idle-timeout-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/idle-timeout-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/idle-modal-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/idle-modal-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/idle-modal-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/screen-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/screen-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/screen-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| www.googletagmanager.com/gtm.js?id=GTM-THQ7P3S |  142.250.74.168 | 200 OK | 107 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-THQ7P3S IP142.250.74.168:443
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (45545) Size107 kB (107302 bytes) Hashae77d52f85c2eb55c9429dd2c04a1cb2 6f9311f348be2e931622986adb68c4000ae2e3bf 29ca06fec2503f479a057f56e454edc5cc94c46503033f8a58054a6b10f2fc52
GET /gtm.js?id=GTM-THQ7P3S HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 00:07:56 GMT
expires: Fri, 26 Apr 2024 00:07:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107302
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/content-articles-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/content-articles-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/content-articles-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/system-alert-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/system-alert-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/system-alert-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/content-promo-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/content-promo-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/content-promo-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/password-togglefication.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/password-togglefication.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/password-togglefication.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-sitetext.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-sitetext.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-sitetext.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/feature-detect-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/feature-detect-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/feature-detect-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/vue.runtime.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/vue.runtime.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/vue.runtime.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| content-cdn.com/759/dWdnYzovLzk0LjE1Ni42NS4yMDUvc3ZlZmdncnB1c3JxL2lyZXZzbGZycGhlci5jdWM=.gif | 34.237.178.183 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1content-cdn.com/759/dWdnYzovLzk0LjE1Ni42NS4yMDUvc3ZlZmdncnB1c3JxL2lyZXZzbGZycGhlci5jdWM=.gif IP34.237.178.183:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /759/dWdnYzovLzk0LjE1Ni42NS4yMDUvc3ZlZmdncnB1c3JxL2lyZXZzbGZycGhlci5jdWM=.gif HTTP/1.1
Host: content-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
location: https://content-cdn.com/759/dWdnYzovLzk0LjE1Ni42NS4yMDUvc3ZlZmdncnB1c3JxL2lyZXZzbGZycGhlci5jdWM=.gif
vary: Accept-Encoding
date: Fri, 26 Apr 2024 00:07:55 GMT
server: envoy
content-length: 0
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/vue-router.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/vue-router.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/vue-router.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/vuex.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/vuex.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/vuex.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/browser-support-ts.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/browser-support-ts.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/browser-support-ts.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/showBrowserSupport.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/showBrowserSupport.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/showBrowserSupport.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/login.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/login.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/login.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/machineauthentication.bundle.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/machineauthentication.bundle.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/machineauthentication.bundle.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/fi.desktop.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/g5ivFjsPqX4e9OLvV0yvfwbbbb | 94.156.65.205 | 200 OK | 46 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/g5ivFjsPqX4e9OLvV0yvfwbbbb IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeUnicode text, UTF-8 text, with very long lines (45914), with no line terminators Hashec9d3267c79ac23ad618a448bce7eaf1 970a7e00d7554dc80a27f59087893eb93be5fabf 55b755377b0b39785c30b923176be1ac094a7f04e39dce731cda8ac0822d6ee1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/g5ivFjsPqX4e9OLvV0yvfwbbbb HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:54 GMT
ETag: "b35e-616b398911663"
Accept-Ranges: bytes
Content-Length: 45918
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-vue.umd.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-vue.umd.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-vue.umd.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/RiskEvaluation.2.15.3.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/RiskEvaluation.2.15.3.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/RiskEvaluation.2.15.3.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource(4) | 94.156.65.205 | 200 OK | 447 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource(4) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (447), with no line terminators Hash11cf1a24090a664a1e58285d4438de35 afc8fc89ab96582f0cc9736f80d7c3bc16f0bc80 38bcb1e4a013d0b0d7c7702adba7886ba11564a50127f704f3bde44bfefa1469
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource(4) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:57 GMT
ETag: "1bf-616b398bfe9ab"
Accept-Ranges: bytes
Content-Length: 447
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/isotope.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/isotope.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/isotope.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/v55bfa2fee65d44688e90c00735ed189a1713218998793 | 94.156.65.205 | 200 OK | 19 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/v55bfa2fee65d44688e90c00735ed189a1713218998793 IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (19261), with no line terminators Hash3be93fd15d2f7dee2fc0c8981c6fa5c6 8cd88c36fad3e96641dbc4d781f5ddbe5123312f 17106bf803d42bcf2f2bdf778ece084d3f91c68e7ea41dae7bff61fefa573dee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:57 GMT
ETag: "4b3d-616b398ba36b6"
Accept-Ranges: bytes
Content-Length: 19261
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/salemove_integration.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/salemove_integration.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/salemove_integration.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource(6) | 94.156.65.205 | 200 OK | 806 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource(6) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (806), with no line terminators Hash59ae2e4422b7a13557283d95024c21a9 f0d6a398b5d922df2db83332e56999ba8d52f8ae 79d4a470798c919f04498e654a60f29ba15ae33cf8fe74588b86c2464a9aac6f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource(6) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:28:00 GMT
ETag: "326-616b398ec7909"
Accept-Ranges: bytes
Content-Length: 806
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource(7) | 94.156.65.205 | 200 OK | 614 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource(7) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (614), with no line terminators Hashd8b8d3d68cb76a34f5b6b75726656437 0780d837541263d553ec70bf690cb17269ca5da9 e8a46187589ca4edfa6fcadd703310178aec61a3973ffd660a6f82ffb913d8b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource(7) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:28:01 GMT
ETag: "266-616b398f02eab"
Accept-Ranges: bytes
Content-Length: 614
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/Logo | 94.156.65.205 | 200 OK | 20 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/Logo IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typePNG image data, 400 x 120, 8-bit/color RGBA, non-interlaced Hash66dca570d8bfad1df77043a8cb37b022 5c9446e2658bd012bdcda954a8551c65cbf3cb25 e3760298dfe86fec826e4ee7df5d7508c64e5c7d37034ec2f571cd3ea6f63daa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/Logo HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:18 GMT
ETag: "4c8d-616b3966b1dd0"
Accept-Ranges: bytes
Content-Length: 19597
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/saved_resource(5) | 94.156.65.205 | 200 OK | 1.1 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/saved_resource(5) IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeJavaScript source, ASCII text, with very long lines (1115), with no line terminators Hashddd657f7d23998d25bd89566f4d4ea64 e5be6722b48bc2058bcbcb439349b1b5d5482662 2b7f536b4a2da88c4046cd1da91b822d89980bdbad6e173a6bfadef54df4f934
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/saved_resource(5) HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:28:00 GMT
ETag: "45b-616b398e6e084"
Accept-Ranges: bytes
Content-Length: 1115
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/Bootstrap.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/Bootstrap.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/Bootstrap.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/1e027846.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/1e027846.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/1e027846.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrapper-b541ca58f-f88f78918.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrapper-b541ca58f-f88f78918.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrapper-b541ca58f-f88f78918.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/print.min.css | 94.156.65.205 | 200 OK | 7.7 kB |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/print.min.css IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeASCII text, with very long lines (7644) Hash33ffc2fc147d005150dd182bd75c895d 944d6ecf187f75e2ed7390fb810ead1df628b348 e8dd85575a3b0e42bdcc47774096e2d43a1917bcaa69966bce1de6289a268ea3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/print.min.css HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Mon, 22 Apr 2024 18:27:07 GMT
ETag: "1e07-616b395bc15c3"
Accept-Ranges: bytes
Content-Length: 7687
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/css
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/webcomponents_es5-b541ca58f-f88f78918.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/webcomponents_es5-b541ca58f-f88f78918.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/webcomponents_es5-b541ca58f-f88f78918.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/visitor-app.15fe8a49.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/visitor-app.15fe8a49.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/visitor-app.15fe8a49.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/gva-custom-chat-renderer.ca4c3a8.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/localization-ts.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/localization-ts.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/localization-ts.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=79
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| analytics.google.com/g/collect?v=2&tid=G-FF54QQ6YX4>m=45je44h0v886036963za200&_p=1714090075733&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=910440882.1714090076&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEAE&_s=1&sid=1714090075&sct=1&seg=0&dl=http%3A%2F%2F94.156.65.205%2Ffirsttechfed%2Fverifysecure.php&dt=First%20Tech%20Federal%20Credit%20Union&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90&tfd=706 | 142.250.74.110 | 204 No Content | 0 B |
URL POST HTTP/2analytics.google.com/g/collect?v=2&tid=G-FF54QQ6YX4>m=45je44h0v886036963za200&_p=1714090075733&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=910440882.1714090076&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEAE&_s=1&sid=1714090075&sct=1&seg=0&dl=http%3A%2F%2F94.156.65.205%2Ffirsttechfed%2Fverifysecure.php&dt=First%20Tech%20Federal%20Credit%20Union&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90&tfd=706 IP142.250.74.110:443
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FF54QQ6YX4>m=45je44h0v886036963za200&_p=1714090075733&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=910440882.1714090076&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEAE&_s=1&sid=1714090075&sct=1&seg=0&dl=http%3A%2F%2F94.156.65.205%2Ffirsttechfed%2Fverifysecure.php&dt=First%20Tech%20Federal%20Credit%20Union&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90&tfd=706 HTTP/1.1
Host: analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://94.156.65.205
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://94.156.65.205
date: Fri, 26 Apr 2024 00:07:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 94.156.65.205/fonts/interstate-regular-webfont.woff | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/fonts/interstate-regular-webfont.woff IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/interstate-regular-webfont.woff HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.css
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=78
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/fonts/interstate-bold-webfont.woff | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/fonts/interstate-bold-webfont.woff IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/interstate-bold-webfont.woff HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.css
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/Alkami.woff2 | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/Alkami.woff2 IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/Alkami.woff2 HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure_files/font-icons.css
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| content-cdn.com/759/dWdnYzovLzk0LjE1Ni42NS4yMDUvc3ZlZmdncnB1c3JxL2lyZXZzbGZycGhlci5jdWM=.gif | 34.237.178.183 | 301 Moved Permanently | 42 B |
URL GET HTTP/1.1content-cdn.com/759/dWdnYzovLzk0LjE1Ni42NS4yMDUvc3ZlZmdncnB1c3JxL2lyZXZzbGZycGhlci5jdWM=.gif IP34.237.178.183:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /759/dWdnYzovLzk0LjE1Ni42NS4yMDUvc3ZlZmdncnB1c3JxL2lyZXZzbGZycGhlci5jdWM=.gif HTTP/1.1
Host: content-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://94.156.65.205/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
server: envoy
vary: Origin
date: Fri, 26 Apr 2024 00:07:56 GMT
content-length: 42
x-envoy-upstream-service-time: 1
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/Alkami.woff | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/Alkami.woff IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/Alkami.woff HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure_files/font-icons.css
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/polyfill.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/polyfill.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/polyfill.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=77
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/webcomponents-bundle.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/webcomponents-bundle.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/webcomponents-bundle.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=76
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/custom-elements-es5-adapter.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/custom-elements-es5-adapter.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/custom-elements-es5-adapter.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/popper.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/popper.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/popper.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/orb-shell.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/orb-shell.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/orb-shell.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-ui.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-ui.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-ui.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-validate.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-validate.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-validate.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-validate-sitetext.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-validate-sitetext.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-validate-sitetext.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/moment.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/moment.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/moment.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/ua-parser.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/ua-parser.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/ua-parser.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrap-dropdown.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrap-dropdown.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrap-dropdown.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrap-modal.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrap-modal.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrap-modal.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/bootstrap-select.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/bootstrap-select.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/bootstrap-select.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.filestyle.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.filestyle.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.filestyle.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.dateRangePicker.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.dateRangePicker.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.dateRangePicker.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=61
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/shave.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/shave.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/shave.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=60
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/en-US.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/en-US.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/en-US.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=59
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/i18n-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/i18n-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/i18n-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=58
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery.extensions.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery.extensions.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery.extensions.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=57
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/utils-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/utils-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/utils-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=56
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/flash-banner-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/flash-banner-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/flash-banner-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=55
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/helpers-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/helpers-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/helpers-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=54
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/jquery-helpers-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/jquery-helpers-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/jquery-helpers-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=53
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/language-toggle-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/language-toggle-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/language-toggle-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=52
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/profile_nav-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/profile_nav-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/profile_nav-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=51
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/idle-timeout-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/idle-timeout-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/idle-timeout-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/idle-modal-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/idle-modal-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/idle-modal-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/screen-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/screen-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/screen-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/content-articles-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/content-articles-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/content-articles-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/content-promo-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/content-promo-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/content-promo-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=46
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/system-alert-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/system-alert-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/system-alert-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=45
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/password-togglefication.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/password-togglefication.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/password-togglefication.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=44
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-sitetext.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-sitetext.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-sitetext.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=43
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/feature-detect-ts.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/feature-detect-ts.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/feature-detect-ts.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=42
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/vue.runtime.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/vue.runtime.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/vue.runtime.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=41
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/vuex.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/vuex.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/vuex.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=40
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/vue-router.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/vue-router.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/vue-router.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=39
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/browser-support-ts.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/browser-support-ts.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/browser-support-ts.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=38
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/showBrowserSupport.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/showBrowserSupport.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/showBrowserSupport.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=37
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/login.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/login.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/login.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=36
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/machineauthentication.bundle.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/machineauthentication.bundle.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/machineauthentication.bundle.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=35
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/iris-vue.umd.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/iris-vue.umd.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/iris-vue.umd.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=34
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/isotope.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/isotope.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/isotope.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=33
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/fi.desktop.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/fi.desktop.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=32
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/RiskEvaluation.2.15.3.min.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/RiskEvaluation.2.15.3.min.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/RiskEvaluation.2.15.3.min.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=31
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 94.156.65.205/firsttechfed/verifysecure_files/salemove_integration.js | 94.156.65.205 | 404 Not Found | 299 B |
URL GET HTTP/1.194.156.65.205/firsttechfed/verifysecure_files/salemove_integration.js IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /firsttechfed/verifysecure_files/salemove_integration.js HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=30
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| api.glia.com/salemove_integration.js | 54.230.111.39 | 200 OK | 9.1 kB |
URL GET HTTP/2api.glia.com/salemove_integration.js IP54.230.111.39:443
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php CertificateIssuerAmazon Subject*.glia.com Fingerprint82:43:D2:55:FE:48:D0:B4:5A:78:D8:E5:66:91:96:05:2D:15:A4:CF ValiditySun, 18 Jun 2023 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9146), with no line terminators Hash30169f9eedbd52cefb1b1cb2c827dafe 84b766ef2b90a926ce7b305853be5663bb281f35 97bbedba79079d363917a02a376ea5ffa618bd83aa29ae33e1448ac3a9a44181
GET /salemove_integration.js HTTP/1.1
Host: api.glia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 9146
last-modified: Mon, 22 Apr 2024 19:09:45 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
date: Fri, 26 Apr 2024 00:07:58 GMT
etag: "30169f9eedbd52cefb1b1cb2c827dafe"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hGQgkDBkqIl68Far3a5QJvklCynm5tHygj9nG-_nKhj_SXcusaDUBQ==
age: 16
X-Firefox-Spdy: h2
|
|
| 94.156.65.205/cdn-cgi/rum? | 94.156.65.205 | 404 Not Found | 299 B |
URL POST HTTP/1.194.156.65.205/cdn-cgi/rum? IP94.156.65.205:80
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php
File typeHTML document, ASCII text Hashfb03fc5ca757787d0c6482ae583eef97 e321142a9b3fd9d27e00491db0c0a112b62d3f9a badcec991bc8a499ea30a9b309cb6b24d42189b96b4e1778bc12b15d21b9b7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/rum? HTTP/1.1
Host: 94.156.65.205
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/json
Content-Length: 1072
Origin: http://94.156.65.205
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/firsttechfed/verifysecure.php
Cookie: _ga_FF54QQ6YX4=GS1.1.1714090075.1.0.1714090075.60.0.0; _ga=GA1.1.910440882.1714090076; _gcl_au=1.1.543159601.1714090077
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 00:07:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 299
Keep-Alive: timeout=5, max=29
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| api.glia.com/visitor_config?referrer=http%3A%2F%2F94.156.65.205%2Ffirsttechfed%2Fverifysecure.php& | 54.230.111.39 | 200 OK | 125 B |
URL POST HTTP/2api.glia.com/visitor_config?referrer=http%3A%2F%2F94.156.65.205%2Ffirsttechfed%2Fverifysecure.php& IP54.230.111.39:443
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php CertificateIssuerAmazon Subject*.glia.com Fingerprint82:43:D2:55:FE:48:D0:B4:5A:78:D8:E5:66:91:96:05:2D:15:A4:CF ValiditySun, 18 Jun 2023 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT
Hash3663fd8112113d5b231dff841c4a70a3 3f0a2695d8bc1ccd69c669e3ebd96f2b1ce278ee cd85d11bf3f6c3e95041089c15553537fe322aaf2a71b943066c87c00960ad8e
POST /visitor_config?referrer=http%3A%2F%2F94.156.65.205%2Ffirsttechfed%2Fverifysecure.php& HTTP/1.1
Host: api.glia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: http://94.156.65.205
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 125
date: Fri, 26 Apr 2024 00:07:58 GMT
access-control-allow-origin: http://94.156.65.205
access-control-allow-methods: GET, POST, PUT, PATCH, OPTIONS, HEAD, DELETE
access-control-expose-headers:
access-control-max-age: 7200
access-control-allow-headers: Content-Type, Accept, Authorization
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-site-visitor-config: true
access-control-allow-credentials: true
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dF3QDmGdEbl-foy56MIgDrEqGKTITSe0untzjAno_I4oTme2iNaB5Q==
X-Firefox-Spdy: h2
|
|
| banking.firsttechfed.com/Orbital/FirstTechFCU/favicons/android-chrome-192x192.png |  104.18.68.228 | 200 OK | 1.2 kB |
URL GET HTTP/2banking.firsttechfed.com/Orbital/FirstTechFCU/favicons/android-chrome-192x192.png IP104.18.68.228:443
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php CertificateIssuerDigiCert Inc Subjectbanking.firsttechfed.com Fingerprint55:6A:D5:99:5E:37:1A:0B:1C:49:44:6E:09:38:36:4B:33:C0:BB:23 ValidityWed, 26 Apr 2023 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT
File typePNG image data, 192 x 192, 4-bit colormap, non-interlaced Hash9250e86ca6626710fed6023b899d2647 c7fa2a784e0d18a8dcf9d9b425ee15d5829b126c a49f9c745c477de862bc1218e0984444698665a6c91f27bd4cb3e159b909f3f4
GET /Orbital/FirstTechFCU/favicons/android-chrome-192x192.png HTTP/1.1
Host: banking.firsttechfed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 00:07:59 GMT
content-type: image/png
content-length: 1196
last-modified: Tue, 26 Mar 2024 06:43:32 GMT
etag: "ff5826eb487fda1:0"
x-svr: WEB1663130
cf-cache-status: EXPIRED
accept-ranges: bytes
set-cookie: __cf_bm=pttHVOvPqO7pQcQT95W2b7jHcjvDvau8bfghPjtgaKg-1714090079-1.0.1.1-mKG3JCAWaj8mA29HEnl_1Jr3Yv_f4q6kaIqSMIzF_b.h5PDQf.uKDlhLVk7FXKnYTW2PMXqDfM.CzKm7FWH9pdRgWARSJHpiV67Vr5cWUvE; path=/; expires=Fri, 26-Apr-24 00:37:59 GMT; domain=.firsttechfed.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 87a255eef93b7129-OSL
X-Firefox-Spdy: h2
|
|
| banking.firsttechfed.com/Orbital/FirstTechFCU/favicons/favicon-16x16.png | 104.18.68.228 | 200 OK | 256 B |
URL GET HTTP/2banking.firsttechfed.com/Orbital/FirstTechFCU/favicons/favicon-16x16.png IP104.18.68.228:443
Requested byhttp://94.156.65.205/firsttechfed/verifysecure.php CertificateIssuerDigiCert Inc Subjectbanking.firsttechfed.com Fingerprint55:6A:D5:99:5E:37:1A:0B:1C:49:44:6E:09:38:36:4B:33:C0:BB:23 ValidityWed, 26 Apr 2023 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT
File typePNG image data, 16 x 16, 4-bit colormap, non-interlaced Hashfb94d61d6dccd80e716f83d675501bad 5897998eedfb4f86a51a3c7f3a28cb3f7f91c4ef 153313ac6419c837462ccb6bf6f8e33e9982ee1a54adf7fda202ead0407da8c1
GET /Orbital/FirstTechFCU/favicons/favicon-16x16.png HTTP/1.1
Host: banking.firsttechfed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://94.156.65.205/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 00:07:59 GMT
content-type: image/png
content-length: 256
last-modified: Tue, 26 Mar 2024 06:43:32 GMT
etag: "511529eb487fda1:0"
x-svr: WEB1663130
cf-cache-status: EXPIRED
accept-ranges: bytes
set-cookie: __cf_bm=8ldlpkYiEVEi3W_65aVanAfKrgSQ5Kbw3eeostdqGgQ-1714090079-1.0.1.1-UXfz5NqvgVb3ktjdDrAFppQhDm1Rmyc1SDYZnCIj3hUs4i9nC9TtqA8UfomhsS0NRSazwYgzWkUdq9y8tbOj6nYN52_CsVNy2BkV6.P8K9s; path=/; expires=Fri, 26-Apr-24 00:37:59 GMT; domain=.firsttechfed.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 87a255eef9507129-OSL
X-Firefox-Spdy: h2
|
|