| |  34.198.174.182 | | 950 B |
IP34.198.174.182:0
File typeHTML document, ASCII text, with CRLF line terminators Hash67af424db0b370cf2314afcbbbe54992 b92a1808852c27725adf5bb5dda664a1e4c282a9 c22c79e5b6b37ac54efefa4a96179611665b8390db67f3fe4a6dac11b5307b7a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Mon, 30 Jan 2023 17:15:14 GMT
ETag: W/"ba0-18603acfcd0"
Content-Encoding: gzip
|
|
| ajax.googleapis.com/ajax/libs/angularjs/1.5.6/angular-route.js | 142.250.74.138 | 200 OK | 10 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/angularjs/1.5.6/angular-route.js IP142.250.74.138:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hashd2fa3a25305d65e7abaa860a686651a9 af83e994ac6cc55959017d3ef11f972b5a93cdf9 c57f800228853c4f43bbdcbc58b13c0e5d63899b760db6189154e829034ae2ed
GET /ajax/libs/angularjs/1.5.6/angular-route.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 9994
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 19 Apr 2024 16:10:37 GMT
expires: Sat, 19 Apr 2025 16:10:37 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 540471
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/angularjs/1.5.6/angular-cookies.js | 142.250.74.138 | 200 OK | 2.8 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/angularjs/1.5.6/angular-cookies.js IP142.250.74.138:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text Hash2bdb167216bd76f86a69a496c6ce4ab1 2c4f2c942be2854c77da7959201989efb46604c2 3bcc0118fceab934f8bb41116d6a1bad4e1d1d1014af10caa371b44e7fad63ca
GET /ajax/libs/angularjs/1.5.6/angular-cookies.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 2764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 06:00:07 GMT
expires: Fri, 25 Apr 2025 06:00:07 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 58701
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/angularjs/1.5.6/angular.min.js | 142.250.74.138 | 200 OK | 56 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/angularjs/1.5.6/angular.min.js IP142.250.74.138:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (640) Hash1fbd6b010938cee7268f503865b56559 394471692d5ce0b5c31e13e675144c990e0c4eed fd4c7a3d73783d5ace2d4e91644f61caf6e6309c8ae2c6e317a272c34972b25d
GET /ajax/libs/angularjs/1.5.6/angular.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 56240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 12:27:06 GMT
expires: Wed, 23 Apr 2025 12:27:06 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 208283
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 34.198.174.182/style.css | 34.198.174.182 | 200 OK | 189 B |
IP34.198.174.182:80
File typeASCII text, with CRLF line terminators Hash9328e2f67686491444ba11ece9646bd4 4b276f02551b88839b7808a7860bed5b37adf862 86440356259ae2080216c5317e1be94b439340a5d8ced2f50215356e4eb6eaee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /style.css HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:28 GMT
Content-Type: text/css; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Tue, 07 Feb 2023 18:53:18 GMT
ETag: W/"122-1862d39a530"
Content-Encoding: gzip
|
|
| 34.198.174.182/graph-options.js | 34.198.174.182 | 200 OK | 609 B |
URL GET HTTP/1.134.198.174.182/graph-options.js IP34.198.174.182:80
File typeASCII text, with CRLF line terminators Hashf0c919f676a6daf04b7d39aebf2ad53e 4a1f6ba1514f0833f4d849a792383bf8ca4737c1 d9f6e9c4c9397709c101efe0b7fb09bb0be5c208576b1b9a490dc5c6aa2a7782
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /graph-options.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Thu, 06 Jul 2023 21:52:28 GMT
ETag: W/"121c-1892d313960"
Content-Encoding: gzip
|
|
| 34.198.174.182/util.js | 34.198.174.182 | 200 OK | 3.1 kB |
IP34.198.174.182:80
File typeASCII text, with CRLF line terminators Hash7748ea87015c9ea25a19011f202d4d1c 1aec4f853d169d99bbcb83d5d9b72566c0fa5700 f4cc13ad608fe0e9adb9e7da9671919c226995cf9931f8c16016b95caaaacb2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /util.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Tue, 07 Feb 2023 19:11:42 GMT
ETag: W/"2498-1862d4a7db0"
Content-Encoding: gzip
|
|
| 34.198.174.182/defData.js | 34.198.174.182 | 200 OK | 381 B |
URL GET HTTP/1.134.198.174.182/defData.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash9c1b508e7b377d57c8fb9752c8abf183 40661f11b77db67a2f405cb766813c39ea0fab5b 4cb65052e6c85cfe814dce8e6c4caac403d33690d7e959f9df464cda40327aa3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /defData.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"393-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/mainApp.js | 34.198.174.182 | 200 OK | 3.0 kB |
URL GET HTTP/1.134.198.174.182/mainApp.js IP34.198.174.182:80
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2051), with CRLF line terminators Hashea86bd7c78aa8fd5cfbc79bbc3f27b73 51485a3e723a3854de84e6911f7ec85110be6d34 4498a433a06e6083cb59cb6595ed7d8bb90ae00acc05876dddce473651d83b07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /mainApp.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"1be9-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/appData.js | 34.198.174.182 | 200 OK | 3.9 kB |
URL GET HTTP/1.134.198.174.182/appData.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hashb652f9d368f28af3045eeaeb4e2b3896 3a806b42bef8da5d3c33d1589aef29ffa023a336 9cb39cc52b2544e233fdfc7d98cde4f12b21cf36521c92e36ee09265e2ae03fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /appData.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 07 Jul 2023 18:18:24 GMT
ETag: W/"691d-18931939980"
Content-Encoding: gzip
|
|
| 34.198.174.182/index.js | 34.198.174.182 | 200 OK | 183 B |
IP34.198.174.182:80
File typeASCII text, with CRLF line terminators Hash2b6ebe6ac98717cdec345ca5f3e847ce 88b1a9e025d088c263b3fe45d5fe92d6aae05f2f a6058bb3096dd855995c5e6e0f1ec3d48456eb0b276b0d072e107b5d301c54ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"fb-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/login.js | 34.198.174.182 | 200 OK | 567 B |
IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hashfdc82a03c3db752821fb6330804a405a 8f798adc0fc8ba4788ee52f4f6d7ba483946179d 67e665a8fe20a8fbe69d0193fd7b2f44298aca5b449b7fa1e0998fd78fea5a50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"61e-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/definition.js | 34.198.174.182 | 200 OK | 431 B |
URL GET HTTP/1.134.198.174.182/definition.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash99c00ac1adfe3e61b71bd913b40a6e34 76d4d576c7620960e2ead6a0eb762154666cbe56 28f739e1e61773cee63ed2e6850afa2a727288cf5b25bf90e1bcdd1225c8afca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /definition.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"683-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/node_modules/moment/moment.js | 34.198.174.182 | 200 OK | 35 kB |
URL GET HTTP/1.134.198.174.182/node_modules/moment/moment.js IP34.198.174.182:80
File typeJavaScript source, ASCII text Hashf168ae7e46af756cca89d94fb41dea6d 6880f206d0b28ae7a9823f1eccbf7cd552fb716b 6757799d7ebe2301a38e491883e7d67bf8f3bc969ee0d61e8d3cfb3dc22e9b11
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /node_modules/moment/moment.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"23d84-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/analyticsTable.js | 34.198.174.182 | 200 OK | 919 B |
URL GET HTTP/1.134.198.174.182/analyticsTable.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash1fd97e827b3f9dff9ab78ebe0822d2bb 3b73c278905f68b740065761eb3100d14ec1bf15 7ffdf469ca4da31b5e42383c48e3fa126abda43e7755c896e0dd03a11a46538c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /analyticsTable.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"b28-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/serverStatus.js | 34.198.174.182 | 200 OK | 980 B |
URL GET HTTP/1.134.198.174.182/serverStatus.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash4a508ebda36fe4164241e59c7e69fb4a 641767bb5fd3f65f8110622b9019ff449c32ba95 b7d33216a9c4e5d4ab9d2eaa435eea1d0519904d6dc54a88ee406e89ec77553d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /serverStatus.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:12 GMT
ETag: W/"d3b-16d7370bfc0"
Content-Encoding: gzip
|
|
| 34.198.174.182/testUser.js | 34.198.174.182 | 200 OK | 442 B |
URL GET HTTP/1.134.198.174.182/testUser.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7099217985a8d1de8d397d23f8364f67 0780f56f5bea8b27d483b4a764f2300020eed447 f3cb1d47f97a1ee0a103f8966417f1a2cd855a3083df2c05ef35ff5b40e494af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /testUser.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:12 GMT
ETag: W/"6de-16d7370bfc0"
Content-Encoding: gzip
|
|
| 34.198.174.182/analytics.js | 34.198.174.182 | 200 OK | 354 B |
URL GET HTTP/1.134.198.174.182/analytics.js IP34.198.174.182:80
File typeASCII text, with CRLF line terminators Hash2c50c08b2129a45ed8aa03f4c94582e3 0035e93a026dfe67ec9e1895c27f653140c5b6a9 580476d61487e32e6fa4991c8836214b4589549f617d14407ab80d6605611c5a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /analytics.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Tue, 08 Jun 2021 16:25:50 GMT
ETag: W/"30c-179ec71c6b0"
Content-Encoding: gzip
|
|
| 34.198.174.182/metrics-dau.js | 34.198.174.182 | 200 OK | 1.1 kB |
URL GET HTTP/1.134.198.174.182/metrics-dau.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hashd5f6b82ca11042a39386d00ed0025d00 f134d8d0366990dea377207015f4f50f3cd9ea1d 9dfdb93e53ea49145f6539b91852ef728f954ff2b016485e86d21acceba34018
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /metrics-dau.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Thu, 06 Jul 2023 22:06:54 GMT
ETag: W/"13a4-1892d3e7030"
Content-Encoding: gzip
|
|
| 34.198.174.182/metrics-retention.js | 34.198.174.182 | 200 OK | 657 B |
URL GET HTTP/1.134.198.174.182/metrics-retention.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash54fe8a11369d5fa40d666ff7b3aa600f 3ceff22ac3ec4f6e5fbe23337d0d34fde407589d be65b1dc64220b5995fc9c2ae882765d174d35b98b588827836dfbfbd70e426d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /metrics-retention.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"a82-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/metrics-revenue.js | 34.198.174.182 | 200 OK | 744 B |
URL GET HTTP/1.134.198.174.182/metrics-revenue.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash280d563f6262ea33c33f56b5bc5e734c ff2c4a2a2aed4c1191f42ab76596c1cb156ed60c c05b3cae040c42383a135eaa417abbf2a7171724fa8112c060ebbfae9e245253
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /metrics-revenue.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 23 Apr 2021 15:37:42 GMT
ETag: W/"b78-178ff612d70"
Content-Encoding: gzip
|
|
| 34.198.174.182/metrics-accumulation.js | 34.198.174.182 | 200 OK | 1.1 kB |
URL GET HTTP/1.134.198.174.182/metrics-accumulation.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash0f621c676409bd491c55bf0b4ad73194 aee20b1013303103b7bb9035ad1206221b85e59c 2f76bd78c0f811efa103b6a1c3e45e00ed7cbb12ade22d627a129c9204400440
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /metrics-accumulation.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 17 Feb 2023 16:04:02 GMT
ETag: W/"1576-186601e4550"
Content-Encoding: gzip
|
|
| 34.198.174.182/node_modules/angular-chart.js/dist/angular-chart.min.js | 34.198.174.182 | 200 OK | 2.5 kB |
URL GET HTTP/1.134.198.174.182/node_modules/angular-chart.js/dist/angular-chart.min.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with very long lines (6168) Hash1e37c081676b8a9f0246b11d413ff1e1 b91037d48824e95fdb0aeb01eabc10cb78784272 c9d9953a5f20451d44e320f5382fda41d2cd3c220a5d21c8a65f723aef0459e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /node_modules/angular-chart.js/dist/angular-chart.min.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:56:52 GMT
ETag: W/"195c-16d737071a0"
Content-Encoding: gzip
|
|
| 34.198.174.182/home.js | 34.198.174.182 | 200 OK | 250 B |
IP34.198.174.182:80
File typeJavaScript source, ASCII text, with CRLF line terminators Hash8a505bc3211262ff04d1fba3d758c53b 693e2982a547042ae171ccc509197cac442bd8ed 49a3eb3a192bb1418d1c5011ac517d3d019ae58a1715cb4586e43902b7a76272
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"1c3-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/node_modules/angular-spinner/dist/angular-spinner.min.js | 34.198.174.182 | 200 OK | 2.8 kB |
URL GET HTTP/1.134.198.174.182/node_modules/angular-spinner/dist/angular-spinner.min.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with very long lines (6658), with no line terminators Hashf25d26acc2e857d981a916e17177f7c5 7ec282451dbc69ec190c8e225a0e903ec4881187 f4af61a3a84308d92a1debc8c6de4920bdaae56a28254f1422c3dfef80818998
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /node_modules/angular-spinner/dist/angular-spinner.min.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:56:58 GMT
ETag: W/"1a02-16d73708910"
Content-Encoding: gzip
|
|
| 34.198.174.182/app-selector.js | 34.198.174.182 | 200 OK | 765 B |
URL GET HTTP/1.134.198.174.182/app-selector.js IP34.198.174.182:80
File typeASCII text, with CRLF line terminators Hash2d96fac03c66d3d31873f06e05b60759 b16608786babc58a4f17ba2667139973315c292d 8799c22949527d335d9de35131c8647a7f3118d978405d18901caa415f4d148c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-selector.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"b3b-16d7370b7f0"
Content-Encoding: gzip
|
|
| 34.198.174.182/node_modules/chart.js/dist/Chart.min.js | 34.198.174.182 | 200 OK | 40 kB |
URL GET HTTP/1.134.198.174.182/node_modules/chart.js/dist/Chart.min.js IP34.198.174.182:80
File typeJavaScript source, ASCII text, with very long lines (32050) Hash6df10160faa67f9f0b54f9b8ea1e3cdc ed13ef4170b930d792d79df8e3645dde120c9a9a c3c0576bd297c7e9e684ef4de21ba9be52f2f9c02da846ab9c1e340d5271db10
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /node_modules/chart.js/dist/Chart.min.js HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:56:58 GMT
ETag: W/"232c5-16d73708910"
Content-Encoding: gzip
|
|
| 34.198.174.182/favicon.ico | 34.198.174.182 | 200 OK | 1.2 kB |
URL GET HTTP/1.134.198.174.182/favicon.ico IP34.198.174.182:80
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashd0524f475e7bfaa4732b1ca53b971cd6 a8379dbdf5b078e633edf7a9db98bd777ffc2acd 80ad0c1a072632e2c41b8e4b034d7541180f481d1bad3b0582613df209bc951f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: image/x-icon
Content-Length: 1150
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=31536000
ETag: "47e-qDedvfWweOYz7fep25i9d3/8Ks0"
|
|
| 34.198.174.182/login.html | 34.198.174.182 | 200 OK | 273 B |
URL GET HTTP/1.134.198.174.182/login.html IP34.198.174.182:80
File typeASCII text, with CRLF line terminators Hash7772b178af39351d9e8a53535fcd5818 a558ae4017b419469976ba7205af787a0cbcd8e0 54729185c9202ef12c210e23f4d3fe6c8964692a13c25e789f3ebf6cf9390d4f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login.html HTTP/1.1
Host: 34.198.174.182
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 22:18:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.12.1
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 27 Sep 2019 15:57:10 GMT
ETag: W/"26c-16d7370b7f0"
Content-Encoding: gzip
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css |  104.18.10.207 | 200 OK | 121 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP104.18.10.207:443
CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (65371) Size121 kB (121200 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://34.198.174.182/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 22:18:28 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 10/31/2023 18:59:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: a99131ed71793c235969f4741b45dd0f
cdn-cache: HIT
cf-cache-status: HIT
age: 13270489
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a1b58afb82b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|