Report - 119.235.48.78/moodle/login/forgot

Report Overview

Visited public
2025-03-02 00:20:12
Tags
URL
119.235.48.78/moodle/login/forgot_password.php
Finishing URL
119.235.48.78/moodle/login/forgot_password.php
IP / ASN
119.235.48.78
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA
Title
Forgotten password

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
119.235.48.78	unknown	unknown	No data	No data	9.1 kB	1.3 MB	119.235.48.78
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-02-26	530 B	8.7 kB	142.250.178.67
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-02-26	438 B	1.5 kB	142.250.74.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed
2025-03-02	medium	119.235.48.78	Sinkholed

ThreatFox

No alerts detected

JavaScript (15)

	URL	From	Size	First Seen	Last Seen
	119.235.48.78/moodle/login/forgot_password.php	ScriptElement	13 kB	2025-03-02	2025-03-02
Pretty URL 119.235.48.78/moodle/login/forgot_password.php IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-02 00:20 Last Seen2025-03-02 00:20 Times Seen1 Hash 33876e095eb179fac99800cd9b1a51db e6b0ab3edbfbf0a6345a54ca47c68f8baa0c7f92 b11b613083a1db24f5d9044935c7d7d7b88673a0c9de9df704d76d74cee4984f Loading...

	119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/formchangechecker/formchangechecker-min.js	ScriptElement	3.2 kB	2023-03-07	2025-05-06
Pretty URL 119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/formchangechecker/formchangechecker-min.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:43 Last Seen2025-05-06 20:53 Times Seen67 Hash 49187a1380118ca350832cad857f908d 5228286bb2d6a2d74b790dd5b5e7cf1705920789 2e89f5227db34a3cb12e42f7d3192b9b9e57e86207419c3254a8d92d97ed0a14 Loading...

	119.235.48.78/moodle/lib/requirejs.php/1724772606/core/first.js	ScriptElement	1.7 MB	2025-03-02	2025-03-02
Pretty URL 119.235.48.78/moodle/lib/requirejs.php/1724772606/core/first.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-02 00:20 Last Seen2025-03-02 00:20 Times Seen1 Hash abc8aed2cde29177f3e9ff3a38de9d58 b22ffc0af327de1d042dd28f2222adc644868763 b9aabfa42fee19836526358daca95612a23f71e810948342ef404c0edea8b365 Loading...

	unknown	Function	37 B	2023-04-11	2025-05-12
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31 Last Seen2025-05-12 03:52 Times Seen263764 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	119.235.48.78/moodle/lib/javascript.php/1724772606/lib/javascript-static.js	ScriptElement	21 kB	2023-03-09	2025-04-26
Pretty URL 119.235.48.78/moodle/lib/javascript.php/1724772606/lib/javascript-static.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 06:03 Last Seen2025-04-26 14:44 Times Seen150 Hash 453a31b8b4a22f14ecfd363355b2382c b2c02627ab350d9aef14fcec96a12f8f488cf201 449723b1d16bcd4fd32e34bcbd8f41a2ff7cfe84b939740a9417f71dd4f61479 Loading...

	119.235.48.78/moodle/login/forgot_password.php	ScriptElement	60 B	2023-03-07	2025-05-12
Pretty URL 119.235.48.78/moodle/login/forgot_password.php IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:07 Last Seen2025-05-12 03:05 Times Seen1665 Hash dba70bf9335863dea2696ca9da069b01 adfc079c12684d419766c7732c35da693517a7f8 05f515ab150c8852191afb40be55373b5b5337d89d513e48b802293123361798 Loading...

	119.235.48.78/moodle/login/forgot_password.php	ScriptElement	1.1 kB	2025-03-02	2025-03-02
Pretty URL 119.235.48.78/moodle/login/forgot_password.php IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-02 00:20 Last Seen2025-03-02 00:20 Times Seen1 Hash 2036d999fdf8bc38a33672fd6e34ff99 40ebef5f716ed14aa2048081e21f037d92058f3f 134df50e2bc2ce2378d4504617884bd0457ef46d30560f5ec881be8750fdc3c0 Loading...

	119.235.48.78/moodle/login/forgot_password.php	ScriptElement	5.7 kB	2025-03-02	2025-03-02
Pretty URL 119.235.48.78/moodle/login/forgot_password.php IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-02 00:20 Last Seen2025-03-02 00:20 Times Seen1 Hash 0a44601dff77d3317dce5856913c93bb 2b2c7fcd0e952e100c1dec117f192b4bc9f0204d 6a482e3c2cfa7c00af333993ac8a1be7d12dcb9a04a0127b70f7305b9c1f5dcb Loading...

	119.235.48.78/moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js	ScriptElement	15 kB	2023-03-07	2025-05-12
Pretty URL 119.235.48.78/moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07 Last Seen2025-05-12 02:12 Times Seen1144 Hash 0151b48e61660bed14bf6acd5bb77210 e096360d7d8819dbbf42e7137ed9e37cdd286700 26d1a45d173703f01ca9bb8be4335bae6005c3bc0a5f78b380ad18fb152b8835 Loading...

	119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/event/event-min.js&m/1724772606/filter_mathjaxloader/loader/loader-min.js	ScriptElement	2.2 kB	2023-03-09	2025-04-26
Pretty URL 119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/event/event-min.js&m/1724772606/filter_mathjaxloader/loader/loader-min.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:36 Last Seen2025-04-26 14:44 Times Seen54 Hash e1105ef144a8d10728583f56a1bbb6b3 534247e3052098887c591522ebe3c71a052dcffa bfa76027d9baaf676da19ce732f769a7afc5c9a92ffc6ee377ebf9542d929fa5 Loading...

	119.235.48.78/moodle/lib/javascript.php/1724772606/lib/jquery/jquery-3.2.1.min.js	ScriptElement	87 kB	2023-03-07	2025-04-26
Pretty URL 119.235.48.78/moodle/lib/javascript.php/1724772606/lib/jquery/jquery-3.2.1.min.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09 Last Seen2025-04-26 14:44 Times Seen199 Hash f995371cc1232f7810fef886ad18fc1e dbeeca76e522c0abfd9c9ea85a02ed82e66c4bfd 4d8b560b0de451450b378976aadf95623e77714bfdcddf7a4602332d2c98d394 Loading...

	119.235.48.78/moodle/login/forgot_password.php	ScriptElement	1.2 kB	2023-03-09	2025-04-15
Pretty URL 119.235.48.78/moodle/login/forgot_password.php IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-09 06:04 Last Seen2025-04-15 01:08 Times Seen48 Hash 1d42dd4674d58c135faae6a3619b362e 044dd0b7b481e23da197f3b0ae99509b297adb00 5b920b8fc31912ef0c816a8c0cf5ac22ee6f4853878c3b23047592db652ef3c3 Loading...

	119.235.48.78/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js	ScriptElement	283 kB	2023-03-07	2025-05-12
Pretty URL 119.235.48.78/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07 Last Seen2025-05-12 02:12 Times Seen1140 Hash 8039fd714b58260199b364107c92bff6 3776c202a78a99e5eeaafbdc7d8ad61acee3af1d 13eaaadfa414f262b7964320054bb2b322b9ef9f3522bc25c9d60dc83b5141cf Loading...

	119.235.48.78/moodle/login/forgot_password.php	ScriptElement	670 B	2025-03-02	2025-03-02
Pretty URL 119.235.48.78/moodle/login/forgot_password.php IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-02 00:20 Last Seen2025-03-02 00:20 Times Seen1 Hash 23bba4a68b53a682102b19555d67028e e9f6aef290331bb9853fe4da79e5e5749d309c6f 96576c797b3e8e767922c4f85a99e5df99a0ffd80e900f517d7deda5174d072d Loading...

	119.235.48.78/moodle/lib/javascript.php/1724772606/lib/requirejs/require.min.js	ScriptElement	18 kB	2023-03-07	2025-04-26
Pretty URL 119.235.48.78/moodle/lib/javascript.php/1724772606/lib/requirejs/require.min.js IP 119.235.48.78 ASN #45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09 Last Seen2025-04-26 14:44 Times Seen201 Hash a11263771490c9f78221df8ea1b25f0b a3265f7cd869146b8b55252f8f7d6d8073a34e6c 4b9f572393f50aa7fd63ba6ac5d3b39c1a4ee71e27766757a76821418c040650 Loading...

HTTP Transactions (20)

URL IP Response Size

119.235.48.78/moodle/login/forgot_password.php

119.235.48.78

200 OK

8.3 kB

URL User Request GET HTTP/1.1
119.235.48.78/moodle/login/forgot_password.php
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

File type
HTML document, ASCII text, with very long lines (12313)
Size
8.3 kB (8341 bytes)
Hash
6b39331eadc87d3df6febfb8f4cb84ed
62f7c57d6da60fb5f74b342d1a35d395929bcd20
416ae816c2a7b99f32fb24de6125de3bb4a6fe744c9f15a5f5b64d02afd079f7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/login/forgot_password.php HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:40 GMT
Server: Apache/2.4.29 (Ubuntu)
Set-Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94; path=/moodle/
Expires: 
Cache-Control: private, pre-check=0, post-check=0, max-age=0, no-transform
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8341
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8

119.235.48.78/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css

119.235.48.78

200 OK

1.0 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
ASCII text, with very long lines (1979)
Size
1.0 kB (1035 bytes)
Hash
513a25e692b0f89326ceae1b1fd34b3f
413a14125fe60e21ae94a4b69dd5c8ae9c06c6cb
45b30b681ac946d1ef0352364b41a3908b8f351aa8613d87241a94489bf9fd8f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:41 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 13 Feb 2020 06:34:15 GMT
Expires: Wed, 25 Feb 2026 00:19:41 GMT
Pragma: 
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "b9bc567c469e2872cf3bbb14603342a72de2509b"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1035
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css;charset=UTF-8

119.235.48.78/moodle/lib/javascript.php/1724772606/lib/requirejs/require.min.js

119.235.48.78

200 OK

6.5 kB

URL GET HTTP/1.1
119.235.48.78/moodle/lib/javascript.php/1724772606/lib/requirejs/require.min.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JavaScript source, ASCII text, with very long lines (17535), with no line terminators
Size
6.5 kB (6531 bytes)
Hash
a11263771490c9f78221df8ea1b25f0b
a3265f7cd869146b8b55252f8f7d6d8073a34e6c
4b9f572393f50aa7fd63ba6ac5d3b39c1a4ee71e27766757a76821418c040650

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/lib/javascript.php/1724772606/lib/requirejs/require.min.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:41 GMT
Server: Apache/2.4.29 (Ubuntu)
Etag: "638da62eb758a73b0489095ac384ebc8fbfe5666"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 27 Aug 2024 15:30:09 GMT
Expires: Sat, 31 May 2025 00:19:41 GMT
Pragma: 
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6531
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8

119.235.48.78/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js

119.235.48.78

200 OK

84 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JavaScript source, ASCII text, with very long lines (6010)
Size
84 kB (84392 bytes)
Hash
8039fd714b58260199b364107c92bff6
3776c202a78a99e5eeaafbdc7d8ad61acee3af1d
13eaaadfa414f262b7964320054bb2b322b9ef9f3522bc25c9d60dc83b5141cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:41 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 13 Feb 2020 06:34:15 GMT
Expires: Wed, 25 Feb 2026 00:19:41 GMT
Pragma: 
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "78581a0bac8a932effb32db3e91e0f2f2b47c08e"
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

119.235.48.78/moodle/theme/styles.php/moove/1724772606_1/all

119.235.48.78

200 OK

148 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/styles.php/moove/1724772606_1/all
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size
148 kB (148473 bytes)
Hash
201ac38a9c32b1734a8fda05fd1382c0
5b84478363a7cfc76668d493d6acea2e4f24dbbf
c676f9061649f1e0d5a3f1bc6d6a7cd8138129b579e8772338c9ff6b5f678a39

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/styles.php/moove/1724772606_1/all HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:41 GMT
Server: Apache/2.4.29 (Ubuntu)
Etag: "e0e019ff4d26be851b730f929d6227478df5f635"
Content-Disposition: inline; filename="styles.php"
Last-Modified: Tue, 27 Aug 2024 15:30:32 GMT
Expires: Sat, 31 May 2025 00:19:41 GMT
Pragma: 
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css; charset=utf-8

fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2

142.250.178.67

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
142.250.178.67:443
ASN
#15169 GOOGLE

Requested by
http://119.235.48.78/moodle/login/forgot_password.php
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5
ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://119.235.48.78
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Feb 2025 18:15:57 GMT
expires: Fri, 27 Feb 2026 18:15:57 GMT
cache-control: public, max-age=31536000
age: 194625
last-modified: Wed, 04 Dec 2024 06:53:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

119.235.48.78/moodle/theme/moove/pix/moodle-logo-white.png

119.235.48.78

200 OK

85 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/moove/pix/moodle-logo-white.png
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
PNG image data, 4010 x 1023, 8-bit/color RGBA, non-interlaced
Size
85 kB (85223 bytes)
Hash
fe66c91006a29f3bf35b82245ee2edaa
972b0f822c3bff1cf50ea3f0149eed48034de16e
f74bd584a21d5a2034780a503a39bac18216324dc49b56a454c2f7531ed3d6db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/moove/pix/moodle-logo-white.png HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 18 Dec 2020 09:22:59 GMT
ETag: "14ce7-5b6b9a78253ef"
Accept-Ranges: bytes
Content-Length: 85223
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

119.235.48.78/moodle/lib/javascript.php/1724772606/lib/javascript-static.js

119.235.48.78

200 OK

6.8 kB

URL GET HTTP/1.1
119.235.48.78/moodle/lib/javascript.php/1724772606/lib/javascript-static.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JavaScript source, ASCII text, with very long lines (1875)
Size
6.8 kB (6779 bytes)
Hash
453a31b8b4a22f14ecfd363355b2382c
b2c02627ab350d9aef14fcec96a12f8f488cf201
449723b1d16bcd4fd32e34bcbd8f41a2ff7cfe84b939740a9417f71dd4f61479

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/lib/javascript.php/1724772606/lib/javascript-static.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Etag: "33ab4ec8bf8db56832b1278ca8d4d94b208914b4"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 27 Aug 2024 15:30:33 GMT
Expires: Sat, 31 May 2025 00:19:42 GMT
Pragma: 
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6779
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8

119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/event/event-min.js&m/1724772606/filter_mathjaxloader/loader/loader-min.js

119.235.48.78

200 OK

851 B

URL GET HTTP/1.1
119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/event/event-min.js&m/1724772606/filter_mathjaxloader/loader/loader-min.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JavaScript source, ASCII text, with very long lines (1374)
Size
851 B (851 bytes)
Hash
e1105ef144a8d10728583f56a1bbb6b3
534247e3052098887c591522ebe3c71a052dcffa
bfa76027d9baaf676da19ce732f769a7afc5c9a92ffc6ee377ebf9542d929fa5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/yui_combo.php?m/1724772606/core/event/event-min.js&m/1724772606/filter_mathjaxloader/loader/loader-min.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 13 Feb 2020 06:34:15 GMT
Expires: Wed, 25 Feb 2026 00:19:42 GMT
Pragma: 
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "c1586d31e6186e54bcb59a3b3f9f5574b3110efb"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 851
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

119.235.48.78/moodle/pluginfile.php/1/core_admin/logo/0x200/1724772606/clg.JPG

119.235.48.78

200 OK

165 kB

URL GET HTTP/1.1
119.235.48.78/moodle/pluginfile.php/1/core_admin/logo/0x200/1724772606/clg.JPG
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
PNG image data, 1351 x 120, 8-bit/color RGBA, non-interlaced
Size
165 kB (165332 bytes)
Hash
d1e30e26bba370906d914f974ea5f86d
9618a717348d1882814896f23b51af66a35b2f0d
53e944f0b6ceb7c78699327d015679d43c52ed183b73df676fc0e0e88713399d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/pluginfile.php/1/core_admin/logo/0x200/1724772606/clg.JPG HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Expires: Thu, 01 May 2025 00:19:42 GMT
Cache-Control: public, max-age=5184000, no-transform
Pragma: 
Content-Disposition: inline; filename="clg.JPG"
Last-Modified: Tue, 27 Aug 2024 15:30:51 GMT
Accept-Ranges: bytes
Content-Length: 165332
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/formchangechecker/formchangechecker-min.js

119.235.48.78

200 OK

911 B

URL GET HTTP/1.1
119.235.48.78/moodle/theme/yui_combo.php?m/1724772606/core/formchangechecker/formchangechecker-min.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
ASCII text, with very long lines (3149)
Size
911 B (911 bytes)
Hash
49187a1380118ca350832cad857f908d
5228286bb2d6a2d74b790dd5b5e7cf1705920789
2e89f5227db34a3cb12e42f7d3192b9b9e57e86207419c3254a8d92d97ed0a14

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/yui_combo.php?m/1724772606/core/formchangechecker/formchangechecker-min.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 13 Feb 2020 06:34:15 GMT
Expires: Wed, 25 Feb 2026 00:19:42 GMT
Pragma: 
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "b3043cc2ff018817971770626632fcdb0d5e5964"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 911
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

119.235.48.78/moodle/theme/image.php/moove/theme/1724772599/footer-bg

119.235.48.78

200 OK

247 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/image.php/moove/theme/1724772599/footer-bg
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
PNG image data, 2054 x 633, 8-bit/color RGBA, non-interlaced
Size
247 kB (247385 bytes)
Hash
8c7980436541c3cf17f2b11259faffd0
7415c77bf149687f5b1dcec7c6d5e83c730605c3
c281e6a0ab4169c647a6757f49d006c6358ac6d28a8280b9a086f29b42fd6741

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/image.php/moove/theme/1724772599/footer-bg HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/theme/styles.php/moove/1724772606_1/all
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Disposition: inline; filename="footer-bg.png"
Last-Modified: Sun, 02 Mar 2025 00:19:42 GMT
Expires: Sun, 02 Mar 2025 00:19:57 GMT
Pragma: 
Accept-Ranges: none
Content-Length: 247385
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

119.235.48.78/moodle/theme/font.php/moove/theme/1724772599/Simple-Line-Icons.woff2?v=2.4.0

119.235.48.78

200 OK

30 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/font.php/moove/theme/1724772599/Simple-Line-Icons.woff2?v=2.4.0
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
Web Open Font Format (Version 2), TrueType, length 30064, version 1.0
Size
30 kB (30064 bytes)
Hash
0cb0b9c589c0624c9c78dd3d83e946f6
5da603104d4d6e362824ec9e7db32eb2d617949a
104673f4859604362a18fc6294197d8fffb8cb24ad3211e92eb04f655e18cf4a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/font.php/moove/theme/1724772599/Simple-Line-Icons.woff2?v=2.4.0 HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/theme/styles.php/moove/1724772606_1/all
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Disposition: inline; filename="Simple-Line-Icons.woff2"
Last-Modified: Sun, 02 Mar 2025 00:19:42 GMT
Expires: Sun, 02 Mar 2025 00:19:57 GMT
Pragma: 
Accept-Ranges: none
Content-Length: 30064
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/font-woff2

119.235.48.78/moodle/theme/image.php/moove/theme/1724772606/favicon

119.235.48.78

200 OK

1.2 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/image.php/moove/theme/1724772606/favicon
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
135aed33c0a7b8f44f0227a71b9ce345
120e10c8a17aebb31c74b6988f8bce9b05dd6606
7afbabec7cddb87ab3b2c3f56509ca9c8f76925db0570372f1a6a366606be1b4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/image.php/moove/theme/1724772606/favicon HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Etag: "bfccf7eead988ec4363b97a7d86526426fe7a7bf"
Content-Disposition: inline; filename="favicon.ico"
Last-Modified: Tue, 27 Aug 2024 15:30:34 GMT
Expires: Sat, 31 May 2025 00:19:42 GMT
Pragma: 
Cache-Control: public, max-age=7776000, no-transform, immutable
Accept-Ranges: none
Content-Length: 1150
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon

119.235.48.78/moodle/lib/requirejs.php/1724772606/core/first.js

119.235.48.78

200 OK

463 kB

URL GET HTTP/1.1
119.235.48.78/moodle/lib/requirejs.php/1724772606/core/first.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (9821)
Size
463 kB (463143 bytes)
Hash
abc8aed2cde29177f3e9ff3a38de9d58
b22ffc0af327de1d042dd28f2222adc644868763
b9aabfa42fee19836526358daca95612a23f71e810948342ef404c0edea8b365

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/lib/requirejs.php/1724772606/core/first.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:43 GMT
Server: Apache/2.4.29 (Ubuntu)
Etag: "dcc7ae4d68b4cdcbae014ed6a289b7323d94eab9"
Content-Disposition: inline; filename="requirejs.php"
Last-Modified: Tue, 27 Aug 2024 15:30:23 GMT
Expires: Sat, 31 May 2025 00:19:43 GMT
Pragma: 
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8

119.235.48.78/moodle/lib/javascript.php/1724772606/lib/jquery/jquery-3.2.1.min.js

119.235.48.78

200 OK

30 kB

URL GET HTTP/1.1
119.235.48.78/moodle/lib/javascript.php/1724772606/lib/jquery/jquery-3.2.1.min.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
30 kB (30081 bytes)
Hash
f995371cc1232f7810fef886ad18fc1e
dbeeca76e522c0abfd9c9ea85a02ed82e66c4bfd
4d8b560b0de451450b378976aadf95623e77714bfdcddf7a4602332d2c98d394

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/lib/javascript.php/1724772606/lib/jquery/jquery-3.2.1.min.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:44 GMT
Server: Apache/2.4.29 (Ubuntu)
Etag: "dcf209a57834480471a009b419a06edd322442a5"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 27 Aug 2024 15:30:25 GMT
Expires: Sat, 31 May 2025 00:19:44 GMT
Pragma: 
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8

119.235.48.78/moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js

119.235.48.78

200 OK

4.8 kB

URL GET HTTP/1.1
119.235.48.78/moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JavaScript source, ASCII text, with very long lines (3857)
Size
4.8 kB (4808 bytes)
Hash
0151b48e61660bed14bf6acd5bb77210
e096360d7d8819dbbf42e7137ed9e37cdd286700
26d1a45d173703f01ca9bb8be4335bae6005c3bc0a5f78b380ad18fb152b8835

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:45 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Thu, 13 Feb 2020 06:34:15 GMT
Expires: Wed, 25 Feb 2026 00:19:45 GMT
Pragma: 
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "b24ca831785ba367093f089618e840be511be85d"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4808
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

119.235.48.78/moodle/lib/ajax/service.php?sesskey=DH7ED7215A&info=core_fetch_notifications

119.235.48.78

200 OK

234 B

URL POST HTTP/1.1
119.235.48.78/moodle/lib/ajax/service.php?sesskey=DH7ED7215A&info=core_fetch_notifications
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JSON text data
Size
234 B (234 bytes)
Hash
717aacff795de37ef183a22aa03ec1c2
5db58242407d401f0a6903a1b63c44eab1c104d9
4a00fcce3dc8134c00db623e6952a0613f7bb86da9d2c9c0f26acdee8703f1f6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /moodle/lib/ajax/service.php?sesskey=DH7ED7215A&info=core_fetch_notifications HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 76
Origin: http://119.235.48.78
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:45 GMT
Server: Apache/2.4.29 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 234
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8

119.235.48.78/moodle/lib/ajax/service.php?sesskey=DH7ED7215A&info=local_disablerightclick_settings

119.235.48.78

200 OK

2.1 kB

URL POST HTTP/1.1
119.235.48.78/moodle/lib/ajax/service.php?sesskey=DH7ED7215A&info=local_disablerightclick_settings
IP
119.235.48.78:80
ASN
#45582 VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA

Requested by
http://119.235.48.78/moodle/login/forgot_password.php

File type
JSON text data
Size
2.1 kB (2145 bytes)
Hash
e2e146c5071284c89b9d2c496adc8081
fdba96bca0cb10f6457a7fd18795acb38f8733e2
aaaba62fceb05cfe18d3192c723dce3898b6232fc709686b8f9af3739b0d9018

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /moodle/lib/ajax/service.php?sesskey=DH7ED7215A&info=local_disablerightclick_settings HTTP/1.1
Host: 119.235.48.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 84
Origin: http://119.235.48.78
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/moodle/login/forgot_password.php
Cookie: MoodleSession=qvijsnu7g91b0nbepoqmehlc94
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 00:19:45 GMT
Server: Apache/2.4.29 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 2145
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8

fonts.googleapis.com/css?family=Poppins

142.250.74.138

200 OK

794 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Poppins
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
http://119.235.48.78/moodle/login/forgot_password.php
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintF1:11:17:AF:9C:89:34:EE:D5:CB:84:40:84:EA:01:19:A9:F6:ED:C2
ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT

File type
ASCII text, with very long lines (810), with no line terminators
Size
794 B (794 bytes)
Hash
ca8352d8c991c54072630875b16bd858
89ddb142b56594ccb7f790bfed400ea9715ddf11
2b2f27498d389a7696dbce90d631384fcfd6eaaf29594aab6f887d94d1fd349f

HTTP Headers

GET /css?family=Poppins HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://119.235.48.78/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 02 Mar 2025 00:19:41 GMT
date: Sun, 02 Mar 2025 00:19:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL