| |  35.220.131.94 | | 3.3 kB |
IP35.220.131.94:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hashe9589116765f80d43e300bef81392a95 3c95d4c41f8f49338ac3a505e2a2c2121ab4fbdd d553d5719cf9c4a5b28096670333110f3c5d7fa213412181e4c9593ef75d8220
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 35.220.131.94
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 22:10:46 GMT
Server: Apache/2.4.29 (Ubuntu)
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IllUUlVnaExBNGVqem80VnJnaUlPaXc9PSIsInZhbHVlIjoiTGZ4aWlvdDkxbjhpVDdkN0I4UkU2bWJwRkpCZjI5c2NhWDBUeHhCUTQxNFRzYi90L0ptK2VFM2J0dzlBRy8yd3NuL0FuR3VWWkdhVk9kWitscWZGazh6eHFDNHREcmpFL08zcXpZYmFKMHZtdlBuM3VodEQySWlUZUlMd3hSaEYiLCJtYWMiOiI1ODg2MGQ5MmRjNTk4NTVlYWQxZmU3ZTY5OTkxM2ViMzNiNzQ1ODFlYTRkM2VhNGE2OGZiYjY0M2YxY2RkYmQ4In0%3D; expires=Wed, 24-Apr-2024 00:10:46 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlcwUzNRc21sTWh5R09sS3RURTlSZ2c9PSIsInZhbHVlIjoiUnNkeUpHRzQyVDhFTkZRdEMxdDFNcU04aDFEV3ZRYkpyNS9ZYTFBRVU0ajU5SzNSR0RMOFBpallMdE1mSitPSXNYeHJSMitjVEtkWitXZEtJTXA1T2pCZkZvUE9aZlBNdTZJWmxzZzFkTmFySUdMakpoUmlwZ2xQU2RWOUJPV1QiLCJtYWMiOiJjMDU3MGE4MDhhZWI4ZTY0ZTJhYTE0Yzk5MDAwMTY5N2QyYzJmOTRhMmJhMGQzZTA0ZmY4NzI3ZWIzMDBiYzRhIn0%3D; expires=Wed, 24-Apr-2024 00:10:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3290
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css |  151.101.65.229 | 200 OK | 26 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css IP151.101.65.229:443
CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65306) Hash94994c66fec8c3468b269dc0cc242151 ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad 62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab
GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://35.220.131.94
DNT: 1
Connection: keep-alive
Referer: http://35.220.131.94/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: br
accept-ranges: bytes
date: Tue, 23 Apr 2024 22:10:47 GMT
age: 669988
x-served-by: cache-fra-etou8220101-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26333
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js | 151.101.65.229 | 200 OK | 24 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js IP151.101.65.229:443
CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hash7ccd9d390d31af98110f74f842ea9b32 a85e681624c91a106a514c31eacf80de817b2cc3 f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3
GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://35.220.131.94
DNT: 1
Connection: keep-alive
Referer: http://35.220.131.94/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM"
content-encoding: br
accept-ranges: bytes
date: Tue, 23 Apr 2024 22:10:47 GMT
age: 29449588
x-served-by: cache-fra-eddf8230075-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24376
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.js | 151.101.130.137 | 200 OK | 85 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.js IP151.101.130.137:443
CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash2849239b95f5a9a2aea3f6ed9420bb88 af32f706407ab08f800c5e697cce92466e735847 1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239
GET /jquery-3.6.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://35.220.131.94
DNT: 1
Connection: keep-alive
Referer: http://35.220.131.94/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-46744"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 23 Apr 2024 22:10:47 GMT
age: 6367866
x-served-by: cache-lga21935-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 55, 24139
x-timer: S1713910247.125476,VS0,VE0
vary: Accept-Encoding
content-length: 84714
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-226010875-1 | 142.250.74.168 | 200 OK | 73 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-226010875-1 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash080bb66a8fceae8ae0a06b66c6a04e88 a6e8fcda235d2765cfdd501d3885353ebc26bd70 1c84fe8a80430106d8f38937d751ba14b7081b837f68bde849eb5b2239cf7ff4
GET /gtag/js?id=UA-226010875-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://35.220.131.94/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 23 Apr 2024 22:10:47 GMT
expires: Tue, 23 Apr 2024 22:10:47 GMT
cache-control: private, max-age=900
last-modified: Tue, 23 Apr 2024 21:39:19 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73377
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-BBXGDPXQQ8&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 88 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-BBXGDPXQQ8&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hash3dc09c99f90c62d8fa5e16c1ba3d9ac3 b8e77040ebd2d0eeeec77ceb71fcfc6c2870d615 d4311a51b7edec5ce05a3bd07a1a1c8fbde06f7ee0aeb7190beac0156503e6ef
GET /gtag/js?id=G-BBXGDPXQQ8&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://35.220.131.94/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 23 Apr 2024 22:10:47 GMT
expires: Tue, 23 Apr 2024 22:10:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88512
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.220.131.94/favicon.ico | 35.220.131.94 | 200 OK | 0 B |
URL GET HTTP/1.135.220.131.94/favicon.ico IP35.220.131.94:80 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 35.220.131.94
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://35.220.131.94/
Cookie: XSRF-TOKEN=eyJpdiI6IllUUlVnaExBNGVqem80VnJnaUlPaXc9PSIsInZhbHVlIjoiTGZ4aWlvdDkxbjhpVDdkN0I4UkU2bWJwRkpCZjI5c2NhWDBUeHhCUTQxNFRzYi90L0ptK2VFM2J0dzlBRy8yd3NuL0FuR3VWWkdhVk9kWitscWZGazh6eHFDNHREcmpFL08zcXpZYmFKMHZtdlBuM3VodEQySWlUZUlMd3hSaEYiLCJtYWMiOiI1ODg2MGQ5MmRjNTk4NTVlYWQxZmU3ZTY5OTkxM2ViMzNiNzQ1ODFlYTRkM2VhNGE2OGZiYjY0M2YxY2RkYmQ4In0%3D; laravel_session=eyJpdiI6IlcwUzNRc21sTWh5R09sS3RURTlSZ2c9PSIsInZhbHVlIjoiUnNkeUpHRzQyVDhFTkZRdEMxdDFNcU04aDFEV3ZRYkpyNS9ZYTFBRVU0ajU5SzNSR0RMOFBpallMdE1mSitPSXNYeHJSMitjVEtkWitXZEtJTXA1T2pCZkZvUE9aZlBNdTZJWmxzZzFkTmFySUdMakpoUmlwZ2xQU2RWOUJPV1QiLCJtYWMiOiJjMDU3MGE4MDhhZWI4ZTY0ZTJhYTE0Yzk5MDAwMTY5N2QyYzJmOTRhMmJhMGQzZTA0ZmY4NzI3ZWIzMDBiYzRhIn0%3D
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 22:10:47 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Thu, 29 Apr 2021 02:06:57 GMT
ETag: "0-5c112f337c74f"
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
|
|
0.0.0.0