Report - 18.142.65.51/ms/home-ms/

Report Overview

Submitted URL
18.142.65.51/ms/home-ms/
IP
18.142.65.51
ASN
#16509 AMAZON-02
Submitted
2024-04-24 10:50:04
Access
public
Website Title
OneWay Malaysia Ventures| Mengoptimumkan Ruangan Kosong
Final URL
18.142.65.51/ms/home-ms/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
172

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
18.142.65.51	unknown	unknown	2023-06-29	2024-02-20	36 kB	172 kB	18.142.65.51
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-24	418 B	83 kB	142.250.74.72
oneway.my	unknown	unknown	No data	No data	1.4 kB	8.5 kB	18.142.65.51
region1.google-analytics.com	unknown	2005-07-18	2022-03-17	2024-04-21	792 B	442 B	216.239.34.36
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	609 B	27 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed
2024-04-24	medium	18.142.65.51	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	18.142.65.51/ms/home-ms/	3.3 kB	2024-04-24	2024-04-24
Pretty URL 18.142.65.51/ms/home-ms/ IP 18.142.65.51 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 12:50:12 Last Seen2024-04-24 12:50:12 Times Seen1 Hash e669217795e1e1501c01346825a48b6a b6e715a98143d47e2941d987e0d34d4115e309f5 af3dcf9b8df62299af3b4e236152bab1c78263721fc62c31bcfe400ebec955c1 Loading...

HTTP Transactions (92)

URL IP Response Size

18.142.65.51/ms/home-ms/

18.142.65.51

200 OK

43 kB

URL User Request GET HTTP/1.1
18.142.65.51/ms/home-ms/
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

File type
HTML document, Unicode text, UTF-8 text, with very long lines (55392), with CRLF, LF line terminators
Size
43 kB (42710 bytes)
Hash
7be55ce7b30a011beaf71a174ab55bf5
9777347ecf426de45db96a869edb9c18c8906b7a
bf2ee6eea4671f46dfda032c65b83a54d7118543f9653488d46eeaeda10bfb92

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ms/home-ms/ HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:40 GMT
Server: Apache
Link: <http://18.142.65.51/wp-json/>; rel="https://api.w.org/", <http://18.142.65.51/wp-json/wp/v2/pages/3838>; rel="alternate"; type="application/json", <http://18.142.65.51/>; rel=shortlink
Set-Cookie: pll_language=ms; expires=Thu, 24-Apr-2025 10:49:54 GMT; Max-Age=31536000; path=/; SameSite=Lax
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 42710
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.googletagmanager.com/gtag/js?id=G-Q49K386MP1

142.250.74.72

200 OK

83 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-Q49K386MP1
IP
142.250.74.72:443
ASN
#15169 GOOGLE

Requested by
http://18.142.65.51/ms/home-ms/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (2674)
Size
83 kB (82824 bytes)
Hash
0b52cfada9d965ace5ea11b0a51889f1
aad310c2530a29ffe9ec9b8416d024524b2ad904
5a2e6d22ea2acb51a3a1e22158d51f693ebebf15702933227bc295709932b36e

HTTP Headers

GET /gtag/js?id=G-Q49K386MP1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 10:49:58 GMT
expires: Wed, 24 Apr 2024 10:49:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82824
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

18.142.65.51/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=3.32

18.142.65.51

200 OK

459 B

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=3.32
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (1255), with no line terminators
Size
459 B (459 bytes)
Hash
8c2817ec680d79f24431d04bad361a2e
d1883943f6cb6a108a1cf7104a7f28a976b738f9
5471bef2b0f10e8c804122e970c5669c17c1ec97d24a67d8107c12d9d2f23a76

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=3.32 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:58 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:50:56 GMT
ETag: "4e7-6100d8d9cab01-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 459
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.6.4

18.142.65.51

200 OK

8.3 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.6.4
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (40186)
Size
8.3 kB (8320 bytes)
Hash
262ac640afea51f93e5add489c9c6df6
6abf19d8716106b71f37724d93528f71672cd5b9
b515a60a6963e4fcc6877f257ec9ee1b39bb5db12dcb6de97d4704f277ffc84b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.6.4 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:49:38 GMT
ETag: "a580-6100d88f2653f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8320
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.2.7

18.142.65.51

200 OK

4.9 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.2.7
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (33431), with no line terminators
Size
4.9 kB (4897 bytes)
Hash
04f145e44d97fcf295bd232d8bc63251
8bdbd3a47acfc21eee6d82aef8326da8427a8ced
151030e81930652440fa8a20ead6b6a2ead46f0f5b70dd911e07b28f30b80670

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.2.7 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:42 GMT
ETag: "8297-6100d905496e4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4897
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/pdf-print/css/frontend.css?ver=2.3.6

18.142.65.51

200 OK

356 B

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/pdf-print/css/frontend.css?ver=2.3.6
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text
Size
356 B (356 bytes)
Hash
cc0ef941a9dd87ecdcf6de8e2c9a146a
4f2c2096a9a94a8978e56b33f6f8ef546aca3fc6
dc8da374c97584d47b3b29ac809c6cf10c70cfc491dfb1f064963b0fccc1be29

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/pdf-print/css/frontend.css?ver=2.3.6 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:30 GMT
ETag: "5ca-6100d8fa2ac1c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 356
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css?ver=4.6.4

18.142.65.51

200 OK

1.9 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css?ver=4.6.4
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (16101), with no line terminators
Size
1.9 kB (1921 bytes)
Hash
241f4d48b03e98758044dacb938412f3
da2c524edc1df3727e805cca68f35426067f34d5
29906a351fdc908a391a36a49d2d4b60ef65caf765f6566860842021b505d47a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css?ver=4.6.4 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:49:38 GMT
ETag: "3ee5-6100d88f2559f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1921
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.25.0

18.142.65.51

200 OK

4.0 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.25.0
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (19525)
Size
4.0 kB (4020 bytes)
Hash
edcdb90e5161a1894daff5e6b1b35c3f
1c199cad3f215c2dcc739fcbc10bb14b53bebe13
d2f82e2e141c7a7f31f40ab9ed8c499bba09505bac8b806cf016d10550e2a6d7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.25.0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "4c73-6100d8e242a6f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4020
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.18.3

18.142.65.51

200 OK

14 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.18.3
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (65496)
Size
14 kB (13773 bytes)
Hash
26c7877cd646748f7c94492503902a69
a204d6fb80d23f4e0959fd93531e7ac1fffe05c1
6ecbdb2dc3f86c7ed142dce156d8f3ca1846b75bb512471935f45b8c8949645e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.18.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "1ca54-6100d8e22366f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13773
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6

18.142.65.51

200 OK

2.4 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (12876), with no line terminators
Size
2.4 kB (2409 bytes)
Hash
bcad7781b3e74db2565b8424c45232cd
41b0d94434ef667897c06e1184b703064ffceda1
d622534d53d3ac1095af275f0b30274fcd835785577df2dde6d9398e6f7a2c8f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "324c-6100d8e24f58e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2409
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/uploads/elementor/css/post-1046.css?ver=1688047509

18.142.65.51

200 OK

730 B

URL GET HTTP/1.1
18.142.65.51/wp-content/uploads/elementor/css/post-1046.css?ver=1688047509
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (3300), with no line terminators
Size
730 B (730 bytes)
Hash
91924f68dc7bdcd2e2b9e49035132887
70e046accc2f8d30783daa1b5ebea6759caa683a
524c69983918df926e8cc9f0cac7f8e5dcdd05a74694dcf1d73c1d9dbd5fb87c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/elementor/css/post-1046.css?ver=1688047509 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 14:05:09 GMT
ETag: "ce4-5ff453024dd97-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 730
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

oneway.my/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css

18.142.65.51

200 OK

3.3 kB

URL GET HTTP/1.1
oneway.my/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css
IP
18.142.65.51:443
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/
Certificate
IssuerLet's Encrypt
Subjectoneway.my
FingerprintD9:A7:65:BC:6F:BE:C8:37:0C:F6:00:68:9D:19:BD:D0:01:59:32:8A
ValidityFri, 19 Apr 2024 19:07:42 GMT - Thu, 18 Jul 2024 19:07:41 GMT

File type
Unicode text, UTF-8 text, with very long lines (26629)
Size
3.3 kB (3332 bytes)
Hash
6ab772e1f58ccaf79674da927c6eeff1
82120750c196fb49e4ff49adcb78d50545c6e155
957ad7528cf119595444eb428bf0f19da6444b291fa735dc8bb02468ae5aab42

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css HTTP/1.1
Host: oneway.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 13:57:38 GMT
ETag: "6832-5ff451542bcd4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3332
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/ameliabooking/public/css/frontend/elementor.css?ver=6.1

18.142.65.51

200 OK

412 B

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/ameliabooking/public/css/frontend/elementor.css?ver=6.1
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (1289), with no line terminators
Size
412 B (412 bytes)
Hash
6434246cbd6de727925287f1ad4f403e
f25edfa77bd1bd3a10b5ce33d7dc6d183e7ece34
dea16c686026480077d33c41ecb8d95785a61c0f82208c8e2adfcc207a2c0f55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/ameliabooking/public/css/frontend/elementor.css?ver=6.1 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 13:57:30 GMT
ETag: "509-5ff4514d0c902-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 412
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.10.3

18.142.65.51

200 OK

1.4 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.10.3
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (8733)
Size
1.4 kB (1448 bytes)
Hash
658ca73f042d908ac181ab425ef37731
26d1d057a0c7844195b2c178bb635f689fe1f45f
536acc50c5fe49ef05ffd7f3f50c0170ed55fe77907bfb280f9ef63c1d259f1b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.10.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 13:57:38 GMT
ETag: "2249-5ff4515430af4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1448
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css?ver=4.6.4

18.142.65.51

200 OK

16 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css?ver=4.6.4
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Size
16 kB (16121 bytes)
Hash
29e5334f4c4769b43dc7cf05ae501ebe
a3aab731abb9d1e8a19f753144e476db83f118df
c7ce70e9c1b1bd67fb26fc2d3fe172e06f7c4b13018ef1343a014ed41bbe4d6b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css?ver=4.6.4 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:49:59 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:49:38 GMT
ETag: "1cae6-6100d88f2559f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16121
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/uploads/elementor/css/post-3229.css?ver=1688047550

18.142.65.51

200 OK

944 B

URL GET HTTP/1.1
18.142.65.51/wp-content/uploads/elementor/css/post-3229.css?ver=1688047550
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (4100)
Size
944 B (944 bytes)
Hash
88abfa30739e496e32ddfd1492b7a54f
1fe8d1be80ae0f89da405ea9343ef3faebfef550
23ab3eff17c82b2f2f6cde63f96b35bc1123b836d04d5d18ea363551fa3f4b28

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/elementor/css/post-3229.css?ver=1688047550 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 14:05:50 GMT
ETag: "1c32-5ff453296f687-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 944
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/uploads/elementor/css/post-3838.css?ver=1688047550

18.142.65.51

200 OK

2.8 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/uploads/elementor/css/post-3838.css?ver=1688047550
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (31378), with no line terminators
Size
2.8 kB (2784 bytes)
Hash
5610cdbb5d9df1b5edbb8e7ff85c600c
b27fe59e43410b51fa355d9e020515fdea600c6d
31d3e5875ef1fe34323a681a115b8e96e633d8b6cb131031af5247a428dbad6a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/elementor/css/post-3838.css?ver=1688047550 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 14:05:50 GMT
ETag: "7a92-5ff4532961bc7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2784
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/uploads/elementor/css/post-3641.css?ver=1688047532

18.142.65.51

200 OK

1.8 kB

URL GET HTTP/1.1
18.142.65.51/wp-content/uploads/elementor/css/post-3641.css?ver=1688047532
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (7275), with CRLF, LF line terminators
Size
1.8 kB (1832 bytes)
Hash
cfadddf920461f0e1f969bfa4b5c7040
eb8a1a5f25a440f9136bbb1d3cfa8eeaec5045fc
a48bb5621d8bc502d0acc72bb76f7b32267a60fc6cd2a17be7339f52c337b0b4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/elementor/css/post-3641.css?ver=1688047532 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 14:05:32 GMT
ETag: "39bd-5ff45318e0289-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1832
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/css

oneway.my/wp-content/plugins/elementor-pro/assets/css/widget-carousel.min.css

18.142.65.51

3.2 kB

URL GET
oneway.my/wp-content/plugins/elementor-pro/assets/css/widget-carousel.min.css
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/
Certificate
IssuerLet's Encrypt
Subjectoneway.my
FingerprintD9:A7:65:BC:6F:BE:C8:37:0C:F6:00:68:9D:19:BD:D0:01:59:32:8A
ValidityFri, 19 Apr 2024 19:07:42 GMT - Thu, 18 Jul 2024 19:07:41 GMT

File type
ASCII text, with very long lines (31726)
Size
3.2 kB (3217 bytes)
Hash
d7537d07eec2650f2e4107a8ed68ff3e
733dcde46d8f4e77c6449a130a33215cd83fb35c
1f23e0c2ed077df79a23f78f9cf675d85823a155f1af2371900c91292af3f86c

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/css/widget-carousel.min.css HTTP/1.1
Host: oneway.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 13:57:38 GMT
ETag: "7c1a-5ff451542bcd4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3217
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3

18.142.65.51

13 kB

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (57726)
Size
13 kB (12582 bytes)
Hash
eeb705d0bdccfd645d3bbd46dd1fbab3
066def290f42ed8c00860e573cc880bd46e9ced4
d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "e238-6100d8e24594f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12582
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3

18.142.65.51

308 B

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (491)
Size
308 B (308 bytes)
Hash
3eef8c9e589a6fd58292e79bbac4ba5d
d3ebdb629b8d9c92380b14b1676b123398f0841b
eea3d6ccda7f6503078cce9dc41176c1357af1c93a5b3625131ef7cf21c9d7c4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "2a5-6100d8e24594f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 308
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3

18.142.65.51

308 B

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (489)
Size
308 B (308 bytes)
Hash
144e43c3b3d8ea5b278c062c202c92f2
3c037057a419245849747b4762d09d88cab66fc1
9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "2a3-6100d8e24594f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 308
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/css

oneway.my/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css

18.142.65.51

200 OK

972 B

URL GET HTTP/1.1
oneway.my/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css
IP
18.142.65.51:443
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/
Certificate
IssuerLet's Encrypt
Subjectoneway.my
FingerprintD9:A7:65:BC:6F:BE:C8:37:0C:F6:00:68:9D:19:BD:D0:01:59:32:8A
ValidityFri, 19 Apr 2024 19:07:42 GMT - Thu, 18 Jul 2024 19:07:41 GMT

File type
ASCII text, with very long lines (9881)
Size
972 B (972 bytes)
Hash
de889cd9624ccf88acf7c11ba2f28574
cdfdfcb613b66408a9f782a52e8aa93441b81cdc
ba8bea6a6bbbb634afd80fa6128f556a2d09331a9b5e14754d134c43748d5dcd

HTTP Headers

GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1
Host: oneway.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "26c1-6100d8e22654f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 972
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3

18.142.65.51

200 OK

309 B

URL GET HTTP/1.1
18.142.65.51/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
18.142.65.51:80
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
ASCII text, with very long lines (483)
Size
309 B (309 bytes)
Hash
9eb2d3c87feb6bb2ffa63b70532b1477
38f226335a05ab0e30497bc7419eb5e243a9e26c
37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:05 GMT
ETag: "29d-6100d8e24594f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 309
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

18.142.65.51/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1

18.142.65.51

4.9 kB

URL GET
18.142.65.51/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text, with very long lines (13479)
Size
4.9 kB (4872 bytes)
Hash
9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:48:25 GMT
ETag: "3509-6100d849218f4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4872
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-content/plugins/application-banner-google-playstore-applestore/include//js.cookie.js?ver=6.4.4

18.142.65.51

1.4 kB

URL GET
18.142.65.51/wp-content/plugins/application-banner-google-playstore-applestore/include//js.cookie.js?ver=6.4.4
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text
Size
1.4 kB (1394 bytes)
Hash
8b5827111dbe4a5f1ec40aa6f8e5dc81
97da43f53f5b69652bfd8f073a5c07fc0eb10d4f
5a878eb5ab6a7d84131de4491c90d696c72d78205ba670d34ebb30e3e21ad155

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/application-banner-google-playstore-applestore/include//js.cookie.js?ver=6.4.4 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Thu, 29 Jun 2023 14:13:31 GMT
ETag: "fa1-5ff454e16be8e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1394
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.8.5.2

18.142.65.51

3.5 kB

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.8.5.2
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text, with very long lines (9242)
Size
3.5 kB (3537 bytes)
Hash
ef56117d1bb5cc41aa6bd127a49c7640
b9c2ed774177fc0fceba5cb58113024b23fe4fb7
d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.8.5.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:49 GMT
ETag: "25a4-6100d90be4d56-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3537
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-content/plugins/print-invoices-packing-slip-labels-for-woocommerce/public/js/wf-woocommerce-packing-list-public.js?ver=4.4.0

18.142.65.51

607 B

URL GET
18.142.65.51/wp-content/plugins/print-invoices-packing-slip-labels-for-woocommerce/public/js/wf-woocommerce-packing-list-public.js?ver=4.4.0
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text
Size
607 B (607 bytes)
Hash
431114e914b749a1e9d9276b7007db93
322ff1406df2168eee24205836200f7afe380044
eb5bac572426814b3ace3a43eee257604a594a374d32ccb567aec71b6cd3be78

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/print-invoices-packing-slip-labels-for-woocommerce/public/js/wf-woocommerce-packing-list-public.js?ver=4.4.0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:59 GMT
ETag: "69d-6100d915de8a1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 607
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=8.5.2

18.142.65.51

1.1 kB

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=8.5.2
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text, with very long lines (3037), with no line terminators
Size
1.1 kB (1091 bytes)
Hash
ac7eef7756c1ad7d9df33edae9f60e5d
fb334d6bdf233b1c0b3a3658c0763e5916eda4b0
92b4feff9bb6c863075d35cd38d989cc254f99489f574338def1949904027d42

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=8.5.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:49 GMT
ETag: "bdd-6100d90be3db6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1091
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-includes/js/jquery/jquery.min.js?ver=3.7.1

18.142.65.51

30 kB

URL GET
18.142.65.51/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (30368 bytes)
Hash
826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:00 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:48:25 GMT
ETag: "15601-6100d849218f4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30368
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.5.2

18.142.65.51

980 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.5.2
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text, with very long lines (1679)
Size
980 B (980 bytes)
Hash
53e07784d8fab2f50b99ff9868124992
d8739feb2845a3fa4a8c085aeabc4eb0e6945590
1533d5bc82424a9a3ac37a7fe543925909d25715d16938b9e02c728c86fd86e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.5.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:49 GMT
ETag: "735-6100d90be5cf6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 980
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.5.2

18.142.65.51

799 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.5.2
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
JavaScript source, ASCII text, with very long lines (2139), with no line terminators
Size
799 B (799 bytes)
Hash
6d3b3d63df025e97f370c5efab2c96da
78c0c8e7504f9314b2e9fd714bbab530af52f2af
8c0b5e384ae00c512f4bb1ba5e2fe622fab4bfc541c99555df38c19c329d3fe6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.5.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:49 GMT
ETag: "85b-6100d90be4d56-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 799
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: application/javascript

18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=11.8.0-dev

18.142.65.51

2.5 kB

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=11.8.0-dev
IP
18.142.65.51:0
ASN
#16509 AMAZON-02

Requested by
http://18.142.65.51/ms/home-ms/

File type
Unicode text, UTF-8 text, with very long lines (9122)
Size
2.5 kB (2492 bytes)
Hash
0dccf79e4ae955b32dea554e34e5a561
a61da4360a0234499f2291ab406f9617c1e14887
a743ad20058ca07e2f8400703a72453f733181d31f9cd8332e1be0d66108024f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=11.8.0-dev HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 10:50:01 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2024 03:51:49 GMT
ETag: "312b-6100d90bc68f6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2492
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: text/css

region1.google-analytics.com/g/collect?v=2&tid=G-Q49K386MP1&gtm=45je44m0v870796722za200&_p=1713955802113&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&gdid=dZTNiMT&cid=1028116620.1713955802&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713955802&sct=1&seg=0&dl=http%3A%2F%2F18.142.65.51%2Fms%2Fhome-ms%2F&dt=OneWay%20Malaysia%20Ventures%7C%20Mengoptimumkan%20Ruangan%20Kosong&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=22280

216.239.34.36

0 B

URL
region1.google-analytics.com/g/collect?v=2&tid=G-Q49K386MP1&gtm=45je44m0v870796722za200&_p=1713955802113&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&gdid=dZTNiMT&cid=1028116620.1713955802&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713955802&sct=1&seg=0&dl=http%3A%2F%2F18.142.65.51%2Fms%2Fhome-ms%2F&dt=OneWay%20Malaysia%20Ventures%7C%20Mengoptimumkan%20Ruangan%20Kosong&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=22280
IP
216.239.34.36:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-Q49K386MP1&gtm=45je44m0v870796722za200&_p=1713955802113&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&gdid=dZTNiMT&cid=1028116620.1713955802&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713955802&sct=1&seg=0&dl=http%3A%2F%2F18.142.65.51%2Fms%2Fhome-ms%2F&dt=OneWay%20Malaysia%20Ventures%7C%20Mengoptimumkan%20Ruangan%20Kosong&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=22280 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://18.142.65.51
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: http://18.142.65.51
date: Wed, 24 Apr 2024 10:50:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

18.142.65.51/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.10.3

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.10.3
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.10.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/uploads/2022/07/goods-supply-1024x768.png

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/uploads/2022/07/goods-supply-1024x768.png
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2022/07/goods-supply-1024x768.png HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution-blocks.min.js?ver=8.5.2

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution-blocks.min.js?ver=8.5.2
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution-blocks.min.js?ver=8.5.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/vendor/react.min.js?ver=18.2.0

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/vendor/react.min.js?ver=18.2.0
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/vendor/react.min.js?ver=18.2.0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/is-shallow-equal.min.js?ver=20c2b06ecf04afb14fee

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/is-shallow-equal.min.js?ver=20c2b06ecf04afb14fee
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/is-shallow-equal.min.js?ver=20c2b06ecf04afb14fee HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/vendor/lodash.min.js?ver=4.17.19

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/vendor/lodash.min.js?ver=4.17.19
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/vendor/lodash.min.js?ver=4.17.19 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/priority-queue.min.js?ver=422e19e9d48b269c5219

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/priority-queue.min.js?ver=422e19e9d48b269c5219
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/priority-queue.min.js?ver=422e19e9d48b269c5219 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/private-apis.min.js?ver=11cb2ebaa70a9f1f0ab5

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/private-apis.min.js?ver=11cb2ebaa70a9f1f0ab5
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/private-apis.min.js?ver=11cb2ebaa70a9f1f0ab5 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/data.min.js?ver=dc5f255634f3da29c8d5

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/data.min.js?ver=dc5f255634f3da29c8d5
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/data.min.js?ver=dc5f255634f3da29c8d5 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/blocks-checkout.js?ver=9f469ef17beaf7c51576

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/blocks-checkout.js?ver=9f469ef17beaf7c51576
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/client/blocks/blocks-checkout.js?ver=9f469ef17beaf7c51576 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.4.4

142.250.74.106

200 OK

26 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.4.4
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://18.142.65.51/ms/home-ms/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
26 kB (26330 bytes)
Hash
aa41248927242f42f765c279234b7cfb
65f39cf67b13ae7bd1c08e66a5b8e3b769d090ff
b2b513d915ee0689890c4c17b634c139f58067a1b0ec3513e21886945b215c66

HTTP Headers

GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.4.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 10:49:58 GMT
date: Wed, 24 Apr 2024 10:49:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

18.142.65.51/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.32

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.32
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.32 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/warning.min.js?ver=122829a085511691f14d

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/warning.min.js?ver=122829a085511691f14d
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/warning.min.js?ver=122829a085511691f14d HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.10.3

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.10.3
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.10.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/uploads/2022/07/Mr-Faustine.jpg

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/uploads/2022/07/Mr-Faustine.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2022/07/Mr-Faustine.jpg HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/primitives.min.js?ver=6984e6eb5d6157c4fe44

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/primitives.min.js?ver=6984e6eb5d6157c4fe44
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/primitives.min.js?ver=6984e6eb5d6157c4fe44 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/a11y.min.js?ver=7032343a947cfccf5608

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/a11y.min.js?ver=7032343a947cfccf5608
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/a11y.min.js?ver=7032343a947cfccf5608 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=8.5.2

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=8.5.2
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=8.5.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/element.min.js?ver=ed1c7604880e8b574b40

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/element.min.js?ver=ed1c7604880e8b574b40
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/element.min.js?ver=ed1c7604880e8b574b40 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.18.3

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.18.3
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.18.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/vendor/react-dom.min.js?ver=18.2.0

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/vendor/react-dom.min.js?ver=18.2.0
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/vendor/react-dom.min.js?ver=18.2.0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/notices.min.js?ver=38e88f4b627cf873edd0

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/notices.min.js?ver=38e88f4b627cf873edd0
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/notices.min.js?ver=38e88f4b627cf873edd0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/redux-routine.min.js?ver=0be1b2a6a79703e28531

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/redux-routine.min.js?ver=0be1b2a6a79703e28531
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/redux-routine.min.js?ver=0be1b2a6a79703e28531 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/uploads/2022/07/b79aa9fc-63bc-4b1f-b23c-a0ab0b94af59-e1658453393427.jpg

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/uploads/2022/07/b79aa9fc-63bc-4b1f-b23c-a0ab0b94af59-e1658453393427.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2022/07/b79aa9fc-63bc-4b1f-b23c-a0ab0b94af59-e1658453393427.jpg HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/connect-polylang-elementor/assets/css/language-switcher.min.css?ver=2.4.3

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/connect-polylang-elementor/assets/css/language-switcher.min.css?ver=2.4.3
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/connect-polylang-elementor/assets/css/language-switcher.min.css?ver=2.4.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.6.4

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.6.4
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.6.4 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/deprecated.min.js?ver=73ad3591e7bc95f4777a

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/deprecated.min.js?ver=73ad3591e7bc95f4777a
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/deprecated.min.js?ver=73ad3591e7bc95f4777a HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/keycodes.min.js?ver=3460bd0fac9859d6886c

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/keycodes.min.js?ver=3460bd0fac9859d6886c
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/keycodes.min.js?ver=3460bd0fac9859d6886c HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/url.min.js?ver=b4979979018b684be209

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/url.min.js?ver=b4979979018b684be209
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/url.min.js?ver=b4979979018b684be209 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-settings.js?ver=07c2f0675ddd247d2325

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-settings.js?ver=07c2f0675ddd247d2325
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-settings.js?ver=07c2f0675ddd247d2325 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/dom.min.js?ver=49ff2869626fbeaacc23

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/dom.min.js?ver=49ff2869626fbeaacc23
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/dom.min.js?ver=49ff2869626fbeaacc23 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/escape-html.min.js?ver=03e27a7b6ae14f7afaa6

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/escape-html.min.js?ver=03e27a7b6ae14f7afaa6
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/escape-html.min.js?ver=03e27a7b6ae14f7afaa6 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.18.3

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.18.3
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.18.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.18.3

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.18.3
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.18.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-registry.js?ver=1c879273bd5c193cad0a

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-registry.js?ver=1c879273bd5c193cad0a
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-registry.js?ver=1c879273bd5c193cad0a HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/api-fetch.min.js?ver=0fa4dabf8bf2c7adf21a

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/api-fetch.min.js?ver=0fa4dabf8bf2c7adf21a
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/api-fetch.min.js?ver=0fa4dabf8bf2c7adf21a HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/html-entities.min.js?ver=36a4a255da7dd2e1bf8e

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/html-entities.min.js?ver=36a4a255da7dd2e1bf8e
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/html-entities.min.js?ver=36a4a255da7dd2e1bf8e HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-middleware.js?ver=ca04183222edaf8a26be

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-middleware.js?ver=ca04183222edaf8a26be
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-middleware.js?ver=ca04183222edaf8a26be HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/imagesloaded.min.js?ver=5.0.0

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/imagesloaded.min.js?ver=5.0.0
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/uploads/2022/07/sharizal-e1658453347242.jpg

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/uploads/2022/07/sharizal-e1658453347242.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2022/07/sharizal-e1658453347242.jpg HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/compose.min.js?ver=3189b344ff39fef940b7

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/compose.min.js?ver=3189b344ff39fef940b7
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/compose.min.js?ver=3189b344ff39fef940b7 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/data-controls.min.js?ver=fe4ccc8a1782ea8e2cb1

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/data-controls.min.js?ver=fe4ccc8a1782ea8e2cb1
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/data-controls.min.js?ver=fe4ccc8a1782ea8e2cb1 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca

0.0.0.0

0 B

URL GET
18.142.65.51/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/blocks-components.js?ver=b165bb2bd213326d7f31

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/blocks-components.js?ver=b165bb2bd213326d7f31
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/client/blocks/blocks-components.js?ver=b165bb2bd213326d7f31 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/uploads/2022/04/OneWay-Logo-Eggshell-Transparent_320x100-1024x410.png

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/uploads/2022/04/OneWay-Logo-Eggshell-Transparent_320x100-1024x410.png
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2022/04/OneWay-Logo-Eggshell-Transparent_320x100-1024x410.png HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/uploads/2022/07/women-working-with-an-infant-1024x768.png

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/uploads/2022/07/women-working-with-an-infant-1024x768.png
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2022/07/women-working-with-an-infant-1024x768.png HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=8.5.2

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=8.5.2
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=8.5.2 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.10.3

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.10.3
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.10.3 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-data.js?ver=c96aba0171b12e03b8a6

0.0.0.0

0 B

URL GET
18.142.65.51/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-data.js?ver=c96aba0171b12e03b8a6
IP
0.0.0.0:0
ASN
#0

Requested by
http://18.142.65.51/ms/home-ms/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks-data.js?ver=c96aba0171b12e03b8a6 HTTP/1.1
Host: 18.142.65.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.142.65.51/ms/home-ms/
Cookie: pll_language=ms
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (92)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP