| 14.139.85.170/evaluation/hms/student/index.php |  14.139.85.170 | | 5.1 kB |
URL User Request GET 14.139.85.170/evaluation/hms/student/index.php IP14.139.85.170:0 ASN#55824 NKN Core Network
File typeJavaScript source, ASCII text, with CRLF line terminators Hash5e2c76851a2f551febaae556106f29c6 aed4b15911b4f2f712ec8b1192310426d0857bce 2754cf710087f842dc5ed1f9f48b5006045dbc38d0a38b44553cbca884055506
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/index.php HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:16 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
X-Powered-By: PHP/5.4.7
Set-Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 5105
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
|
|
| fonts.googleapis.com/css?family=Lato:300,400,400italic,600,700|Raleway:300,400,500,600,700|Crete+Round:400italic |  142.250.74.106 | 200 OK | 828 B |
URL GET HTTP/1.1fonts.googleapis.com/css?family=Lato:300,400,400italic,600,700|Raleway:300,400,500,600,700|Crete+Round:400italic IP142.250.74.106:80
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
Hash4f8d20a89cfef390ba5604b71595ee38 289ee3070bbcc9b051259df547d3174314919864 3d822215082f2186fc417d61355c0723f2d420c80f19a956053d3c076836b7de
GET /css?family=Lato:300,400,400italic,600,700|Raleway:300,400,500,600,700|Crete+Round:400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 29 Mar 2024 11:24:36 GMT
Date: Fri, 29 Mar 2024 11:24:36 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
|
|
| 14.139.85.170/evaluation/hms/student/vendor/themify-icons/themify-icons.min.css | 14.139.85.170 | 200 OK | 14 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/themify-icons/themify-icons.min.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeASCII text, with very long lines (13847), with no line terminators Hashb3c22e9d656af05e7a728d7ce356b5bb ded9f3a9400a67e398f5c8b128d8b3d1aa1d5456 b5424a405171cc62f0b4cee073f45d5478d7d34d24ace40e1fc5561aa3171baf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/themify-icons/themify-icons.min.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:11:56 GMT
ETag: "3617-544b02b5cfb00"
Accept-Ranges: bytes
Content-Length: 13847
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/vendor/perfect-scrollbar/perfect-scrollbar.min.css | 14.139.85.170 | 200 OK | 3.6 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/perfect-scrollbar/perfect-scrollbar.min.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeASCII text, with very long lines (3463) Hashf1d8efd512ea934a7ae0f912d1dbab9c f950210a5afb5cc28732320a156e27921e5b6801 bba02ab575ba3c6258cba0eb8b9101257d82f4fdd264c1cad102244d71bf1524
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/perfect-scrollbar/perfect-scrollbar.min.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:11:44 GMT
ETag: "e0d-544b02aa5e000"
Accept-Ranges: bytes
Content-Length: 3597
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/vendor/switchery/switchery.min.css | 14.139.85.170 | 200 OK | 682 B |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/switchery/switchery.min.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeASCII text, with very long lines (682), with no line terminators Hash3d5c5f2d195cad6c3658bec52095df6b 31db624af9fdc9411c1457353cb2d0e018a73fc7 da426bd59d02d72e73d239e1aff982bb8e89dd1e94b9dfaa0901c0dfd8b5798a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/switchery/switchery.min.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:11:56 GMT
ETag: "2aa-544b02b5cfb00"
Accept-Ranges: bytes
Content-Length: 682
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/vendor/fontawesome/css/font-awesome.min.css | 14.139.85.170 | 200 OK | 24 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/fontawesome/css/font-awesome.min.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeASCII text, with very long lines (23577) Hash04425bbdc6243fc6e54bf8984fe50330 8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5 541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/fontawesome/css/font-awesome.min.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:10:08 GMT
ETag: "5cbb-544b024ed0800"
Accept-Ranges: bytes
Content-Length: 23739
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/assets/css/plugins.css | 14.139.85.170 | 200 OK | 15 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/assets/css/plugins.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeassembler source, ASCII text, with CRLF line terminators Hashc3739bb9ecd59186d0cd980a5816d19f 7a6759f0f80ceebd5079b0ee0cde6e82c11a0b95 fcd580de29dce0d04a2859aabb2e73917b961473d47bc2ebeb15381b1253b7c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/assets/css/plugins.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:08:54 GMT
ETag: "3c1f-544b02083e180"
Accept-Ranges: bytes
Content-Length: 15391
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/assets/css/themes/theme-1.css | 14.139.85.170 | 200 OK | 12 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/assets/css/themes/theme-1.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeASCII text, with CRLF line terminators Hasheea67fd46b98897227aad997c93fa6e2 d4194726670a886b0fdf1bf1e3b6b5fc969a1926 0d3fab8783ca159660d0d955b2e871fca631297aef949470d42c72737e950f0b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/assets/css/themes/theme-1.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:08:54 GMT
ETag: "2dda-544b02083e180"
Accept-Ranges: bytes
Content-Length: 11738
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/vendor/animate.css/animate.min.css | 14.139.85.170 | 200 OK | 53 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/animate.css/animate.min.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeASCII text, with very long lines (53270) Hash55009d64191e6f9e712a841773ee6611 5f120f4be43d67152bf4bd8f63cca0e027d25a57 b48f9a7031474a0f73f92f2e6cbbfad730b5466cda96d86a4459c06efc986173
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/animate.css/animate.min.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:09:02 GMT
ETag: "d0b7-544b020fdf380"
Accept-Ranges: bytes
Content-Length: 53431
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/vendor/modernizr/modernizr.js | 14.139.85.170 | 200 OK | 9.3 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/modernizr/modernizr.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text, with very long lines (8634), with CRLF line terminators Hash0f5354dad5962fbf75dbca6acd279f31 b2633f308ecd271e35a31e0e8b1d93570320dba9 0bc21d537e9a144305487027daab56d5de191acde5617e6d8be2fd2d7314bb56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/modernizr/modernizr.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:11:12 GMT
ETag: "2441-544b028bd9800"
Accept-Ranges: bytes
Content-Length: 9281
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/vendor/jquery/jquery.min.js | 14.139.85.170 | 200 OK | 96 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/jquery/jquery.min.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text, with very long lines (32341), with CRLF line terminators Hasheaec1712551cd2792f4607f39fab12e7 2439711705752fac5dd1a6a8d6b1be63ffcbc76d 746e54e89161118a67bd59103c4ab55e3060735cc85c1d047c2cf04d4b12043d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/jquery/jquery.min.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:10:32 GMT
ETag: "17881-544b0265b3e00"
Accept-Ranges: bytes
Content-Length: 96385
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/vendor/jquery-cookie/jquery.cookie.js | 14.139.85.170 | 200 OK | 3.1 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/jquery-cookie/jquery.cookie.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text Hash34259e1b3697ec38ec1ad00f29c64305 351604db63ee52e784bbbbaa1f9d77c73620972f 5dcc1f650548dab92380f10aee2a8c4c878ece063b5d4201c1205b3a343f9a8b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/jquery-cookie/jquery.cookie.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:18 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:10:32 GMT
ETag: "c38-544b0265b3e00"
Accept-Ranges: bytes
Content-Length: 3128
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/vendor/perfect-scrollbar/perfect-scrollbar.min.js | 14.139.85.170 | 200 OK | 9.5 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/perfect-scrollbar/perfect-scrollbar.min.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text, with very long lines (9363) Hash61599fe1fcd25312aaec6dcbf41838ea 74a9e6577a9fba4463148948e03dd70eb9853863 0a31c7f435826b0c167f1a6a62e90a00ee1aea89e349cf52fe092ae46ae5f91d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/perfect-scrollbar/perfect-scrollbar.min.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:18 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:11:46 GMT
ETag: "2518-544b02ac46480"
Accept-Ranges: bytes
Content-Length: 9496
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/assets/js/main.js | 14.139.85.170 | 200 OK | 15 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/assets/js/main.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7bedae02e1efb2b7a3cec4db3dfd4052 118e41d8ca78bb10ea7c99b5ecf10bb41d585589 2991988178c78a759aa527259bb5c2041b75004e5745cc4640dbd2282059a8db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/assets/js/main.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:18 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:08:58 GMT
ETag: "39f1-544b020c0ea80"
Accept-Ranges: bytes
Content-Length: 14833
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/vendor/bootstrap/css/bootstrap.min.css | 14.139.85.170 | 200 OK | 114 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/bootstrap/css/bootstrap.min.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeASCII text, with very long lines (65371) Size114 kB (113498 bytes) Hash3ab3438f85ad9f9e27e1af1facf0a9c4 8bec1bba3e23ecba22cffb197a2d440af410b15d d699f303990ce9bd7d7c97e9bd3cad6a46ecf2532f475cf22ae58213237821b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:09:04 GMT
ETag: "1bb5a-544b0211c7800"
Accept-Ranges: bytes
Content-Length: 113498
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 14.139.85.170/evaluation/hms/student/assets/js/login.js | 14.139.85.170 | 200 OK | 3.6 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/assets/js/login.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text, with CRLF line terminators Hash5d9f54ce5dd26a5ea731a1e15705afea ab1061ffde53e0f5679dbd436f0bd4b08fefd3aa acd66521e5b1a20fe06e1e007f3b12924736c3c06cc5c22a990d24d07f916051
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/assets/js/login.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:18 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:08:58 GMT
ETag: "e33-544b020c0ea80"
Accept-Ranges: bytes
Content-Length: 3635
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/vendor/bootstrap/js/bootstrap.min.js | 14.139.85.170 | 200 OK | 36 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/bootstrap/js/bootstrap.min.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text, with very long lines (32087) Hash2616d3564578d8f845813483352802a9 5ada7c103fc1deabc925cc1fdbbb6e451c21fc70 f971b901aeb9e55b07d472afee09bd5ae05159e1119dbd16d993e473565e7fc0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:09:04 GMT
ETag: "8b11-544b0211c7800"
Accept-Ranges: bytes
Content-Length: 35601
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/vendor/jquery-validation/jquery.validate.min.js | 14.139.85.170 | 200 OK | 22 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/jquery-validation/jquery.validate.min.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21445) Hashd7342d64b483db4cdc836047765c07f3 e1085fb6185d0c47ccd1f202d197ba626f017e15 f0f5373ad203101ea91bf826c5a7ef8f7cd74887f06bad2cb9277a504503b9e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/jquery-validation/jquery.validate.min.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:18 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:10:42 GMT
ETag: "5450-544b026f3d480"
Accept-Ranges: bytes
Content-Length: 21584
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/vendor/switchery/switchery.min.js | 14.139.85.170 | 200 OK | 20 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/switchery/switchery.min.js IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeJavaScript source, ASCII text, with very long lines (19975), with no line terminators Hashe012dd16761095fa06f0c4d59c43517c 9b850cb5a20518a748bf1b65d102a8997ebd8ec6 7c997ee0c7f33415d86d84761983df8e82dd9f003b88f1353e5e99f0fbb89b4b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/switchery/switchery.min.js HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:18 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:11:56 GMT
ETag: "4e07-544b02b5cfb00"
Accept-Ranges: bytes
Content-Length: 19975
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 14.139.85.170/evaluation/hms/student/assets/css/styles.css | 14.139.85.170 | 200 OK | 297 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/assets/css/styles.css IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeassembler source, ASCII text, with CRLF line terminators Size297 kB (296821 bytes) Hash24e3df6ed0839647b67c08070530c8a6 8791fd2a265b43d0619df738b22e2aedec9f7329 5815c5db3567a38975e0d69a3079ad76e56a0b92d83a0580a5b015de53bcdbe6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/assets/css/styles.css HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:17 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:08:54 GMT
ETag: "48775-544b02083e180"
Accept-Ranges: bytes
Content-Length: 296821
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2 IP216.58.207.227:80
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeWeb Open Font Format (Version 2), TrueType, length 48208, version 1.0 Hashc49b7c3643f781d71645c5a40a78b5bf e71138026b38afc443fb60da5ffc2244c4f5eb11 8cbc049ddbd7ca67068451ce754401833499959c4c6ed7b98f664d42e0597808
GET /s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://14.139.85.170
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 48208
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 28 Mar 2024 03:11:03 GMT
Expires: Fri, 28 Mar 2025 03:11:03 GMT
Cache-Control: public, max-age=31536000
Age: 116015
Last-Modified: Wed, 13 Sep 2023 23:24:45 GMT
Content-Type: font/woff2
|
|
| fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 IP216.58.207.227:80
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0 Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://14.139.85.170
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23580
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 28 Mar 2024 17:34:38 GMT
Expires: Fri, 28 Mar 2025 17:34:38 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 02 May 2023 15:17:22 GMT
Content-Type: font/woff2
Age: 64200
|
|
| 14.139.85.170/favicon.ico | 14.139.85.170 | 200 OK | 7.8 kB |
URL GET HTTP/1.114.139.85.170/favicon.ico IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeMS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel Hash3bd2ec61324ad4d27cb7b0f484cd4289 405ee999603634be685ce248415ca5e24796109f e92fc5d184a1bf1fde87a8af6b03d31c758a27f15713cc0d321d7a8237334d36
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/index.php
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:19 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Mon, 16 Apr 2012 15:30:18 GMT
ETag: "1e66-4bdcd7fdd5680"
Accept-Ranges: bytes
Content-Length: 7782
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/x-icon
|
|
| 14.139.85.170/evaluation/hms/student/vendor/fontawesome/fonts/fontawesome-webfont.woff2?v=4.3.0 | 14.139.85.170 | 200 OK | 57 kB |
URL GET HTTP/1.114.139.85.170/evaluation/hms/student/vendor/fontawesome/fonts/fontawesome-webfont.woff2?v=4.3.0 IP14.139.85.170:80 ASN#55824 NKN Core Network
Requested byhttp://14.139.85.170/evaluation/hms/student/index.php
File typeWeb Open Font Format (Version 2), TrueType, length 56780, version 4.197 Hash97493d3f11c0a3bd5cbd959f5d19b699 1075231650f579955905bb2f6527148a8e2b4b16 aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /evaluation/hms/student/vendor/fontawesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: 14.139.85.170
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://14.139.85.170/evaluation/hms/student/vendor/fontawesome/css/font-awesome.min.css
Cookie: PHPSESSID=nseljjjq2ql73jktn2ijh9usv3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 11:24:19 GMT
Server: Apache/2.4.3 (Win32) OpenSSL/1.0.1c PHP/5.4.7
Last-Modified: Wed, 28 Dec 2016 04:10:12 GMT
ETag: "ddcc-544b0252a1100"
Accept-Ranges: bytes
Content-Length: 56780
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-97-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-97-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-97-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-04-29-22-13-57.chain; p384ecdsa=wTPRZWZVpNSxBNNZv2YiD5K7aEBmCWmYuFb0B2ita2TiRn0OsKsuWyfgx6aCoXqUr_mSAAcySi9efBIv5etaeyiqWABT5E2pCTGxWTrw_k1VTyaxvxUJeFASVOiCSO2_
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Fri, 29 Mar 2024 11:24:43 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 11
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|