Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Tue 17 Oct 2017, 14:26
All times are UTC - 4
 Forum index » House Training » Users ( For the regulars )
Possible ALERT: Is Murga Forum Login Compromised?
Moderators: Flash, Ian, JohnMurga
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [15 Posts]  
Author Message
belham2

Joined: 15 Aug 2016
Posts: 1144

PostPosted: Sat 16 Sep 2017, 06:31    Post subject:  Possible ALERT: Is Murga Forum Login Compromised?
Subject description: Logging in created "login.php" file and stored it in my computer
 

Hi Flash and/or anyone,

Hope this is just a false alarm or my not understanding how PHP Logins work, but when I logged into the forum just a moment ago and I clicked the "Login" button, a 'login.php" file was downloaded to my computer.

First time I have ever seen this. It downloaded the file to my pupOS (have found it in /root, /etc/ and /usr/bin folders now. WTF?! [If you are outside a Container or SELinux enclosure, the file is installing something and immediately deleting itself---inside something, it is not---BE CAREFUL PEOPLE, something is going on Shocked Evil or Very Mad

Thank God I am running in 'frugal' install using Barry's Containers for Seamonkey. Hopefully that stopped any infection going thru the whole drive with my kennel of pups.
I've honestly never seen anything like this in 25+ yrs of fooling with the Net.....so hopefully it is just something goofy (and not malware) going on..

To be safe, I am completely deleting this 'frugal' install of Barry's and will reset it up later---------after I check later the murga forum later and see that someone has posted here & what they see and/or know. Far as I know, login PHP forks are ONLY supposed to go to the browser, and not hop out of the browser, momentarily get saved somewhere, install something, then delete itself in the next second Like I said, Barry's system fooled it thinking it was in the /root or the pupOS, when it is not, it is in a Container and anything it did is/was deleted as soon as I close the browser.
Back to top
View user's profile Send private message 
rockedge


Joined: 11 Apr 2012
Posts: 400
Location: Connecticut, United States

PostPosted: Sat 16 Sep 2017, 10:55    Post subject:  

the only time I have had this happen was with web server software not parsing the php as script but seeing it as a text file which the web server attempts to serve, this results in a download of the php file because the web server thinks it is a text file.
Back to top
View user's profile Send private message Visit poster's website 
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 12665
Location: Arizona USA

PostPosted: Sat 16 Sep 2017, 11:03    Post subject:  

I googled "login.php file" and it looks like it's something to do with logging in to the forum. Laughing In other words, it's not an attempt to put malware on your computer. But I don't know what it is.
Back to top
View user's profile Send private message 
rufwoof

Joined: 24 Feb 2014
Posts: 2141

PostPosted: Sat 16 Sep 2017, 15:27    Post subject:  

No login.php files being stored for me. I do however run the browser as a non-root so it doesn't have write permissions to /root /etc nor /usr/bin. Even so, no login.php being written to any of the areas that the account can write to either.
Back to top
View user's profile Send private message 
step

Joined: 04 May 2012
Posts: 931

PostPosted: Sat 16 Sep 2017, 16:12    Post subject:  

Ditto
_________________
Fatdog64-710|+Packages|Kodi|Findnrun|+forum|gtkmenuplus
Back to top
View user's profile Send private message 
dancytron

Joined: 18 Jul 2012
Posts: 897

PostPosted: Sat 16 Sep 2017, 16:54    Post subject:  

Did you try to open up the file in leafpad or geany and see what's in it?

Compare it to the source from the login.php file and if it is the same, then it is just a browser hiccup.

If it is different and unintelligible, then something weird is going on. Maybe, run a virus scanner on it.
Back to top
View user's profile Send private message 
jd7654

Joined: 06 Apr 2015
Posts: 238

PostPosted: Sat 16 Sep 2017, 21:51    Post subject:  

I didn't see any such strange behavior.

Maybe it is something to do with Easy and Container implementation?
Back to top
View user's profile Send private message 
greengeek


Joined: 20 Jul 2010
Posts: 4658
Location: Republic of Novo Zelande

PostPosted: Sun 17 Sep 2017, 02:03    Post subject:  

Hi Belham - what was the method you used to spot that the file had been downloaded? (how did you become aware of it?). How can I know if this is happening on my system? (Slacko 5.6 derivative running Chrome 48 )
Back to top
View user's profile Send private message 
greengeek


Joined: 20 Jul 2010
Posts: 4658
Location: Republic of Novo Zelande

PostPosted: Sun 17 Sep 2017, 14:41    Post subject:  

I wonder if there is a way to run a script that continually looks for the login.php file and if found immediately makes a copy somewhere for you to inspect (while the original file gets deleted and is long gone...)
Back to top
View user's profile Send private message 
tallboy


Joined: 21 Sep 2010
Posts: 799
Location: Oslo, Norway

PostPosted: Sun 17 Sep 2017, 18:15    Post subject:  

Live Lucid 5.2.8.7: no file here.

tallboy

_________________
True freedom is a live Puppy on a multisession CD/DVD.
Back to top
View user's profile Send private message 
Peterm321

Joined: 29 Jan 2009
Posts: 382

PostPosted: Mon 18 Sep 2017, 00:54    Post subject:  

No issue arising from my browser setup. login.php is a file on the murga-linux server that is returned to the browser to login forum members. It appears to be a standard HTML file but with a php extension that may affect a misconfigured browser to interpret as some kind of download and might save it somewhere. That is the best idea I can think of right now, sorry if no help.
SCRDUMP.jpg
 Description   Screen dump of login.php
 Filesize   68.22 KB
 Viewed   195 Time(s)

SCRDUMP.jpg

Back to top
View user's profile Send private message 
belham2

Joined: 15 Aug 2016
Posts: 1144

PostPosted: Mon 18 Sep 2017, 13:46    Post subject:  

Thanks all for replying.

Spent yesterday and tonight trying to re-produce what happened....but I cannot. Therefore, it's gotta be a non-issue, and I am going to go with what Rockedge and Peter (just above) said. I've read in detail, made some calls to friends in the biz (white hatters), and they didn't make me feel any better telling me about the vast majority of new hacking is malware resting on servers waiting for a login so they can begin executing things. Realized right away it was best to quit talking to these brainiacs.

So, overall, the only thing that sticks in the back of my mind is that three times in a row a login.php was downloaded to different directories. Every time I had tried to click on it, up popped (for a micro-second) a terminal, something was 'executed', and then it disappears. There was no way to look at that file, and with it appearing in different directories, it set off alarm bells in my mind. That is why I posted in 3 different forums.

Still, if there was an issue, others would be seeing something, and especially I would be able to re-produce it. Like I said it happened inside Barry's EasyLinux 4.0 and thankfully (I believe) whatever happened his new Container setups, for browser and terminal and whatever you want, stopped whatever was happening. And this was on pristine Easyinux4.0 that had been nowhere on the Net other than Murga.

Anyway, my apologies to all. Maybe at the time it happened to me (when I was posting from Europe), maybe I caught the server hosting murga under maintenance or whatever, and just got weird stuff happening with the login.php. Still, it makes me wonder, why didn't it (if the server was under maintenance) affect my regular posting I was doing at that minute?

Just chalk it up to Net Ghost demons....maybe it's true, Gibson said long ago when we croak we might be uploaded to an digital ether to cause havoc anew.
Back to top
View user's profile Send private message 
belham2

Joined: 15 Aug 2016
Posts: 1144

PostPosted: Mon 18 Sep 2017, 14:01    Post subject:  

[...followup...]

....also please know this all could be some weird occurrence because of Barry's new 'Container" system in Easy Linux 4.0. It just may be logging into anything anywhere just doesn't work well with how things are now set up inside EasyLinux.
Back to top
View user's profile Send private message 
perdido


Joined: 09 Dec 2013
Posts: 631
Location: Altair IV , Just north of Eeyore Junction.

PostPosted: Sun 01 Oct 2017, 18:12    Post subject:  

Before you login to murga forum:

Right click on login
save as login.php

Its just the html login page.

As viewed in Geany
Code:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="Content-Style-Type" content="text/css">
<link rel="top" href="index.php" title="Puppy Linux Discussion Forum Forum Index">
<link rel="search" href="search.php" title="Search">
<link rel="help" href="faq.php" title="FAQ">
<link rel="author" href="memberlist.php" title="Memberlist">
<link rel="copyright" href="http://www.phpbb.com" title="phpBB">
<link rel="SHORTCUT ICON" href="./images/favicon.ico" title="Puppy Linux Discussion Forum">
<title>Puppy Linux Discussion Forum :: Log in</title>
<!-- link rel="stylesheet" href="templates/subSilver/subSilver.css" type="text/css" -->
<style type="text/css">
<!--
/*
The original subSilver Theme for phpBB version 2+
Created by subBlue design
http://www.subBlue.com
NOTE: These CSS definitions are stored within the main page body so that you can use the phpBB2
theme administration centre. When you have finalised your style you could cut the final CSS code
and place it in an external file, deleting this section to save bandwidth.
*/
/* General page style. The scroll bar colours only visible in IE5.5+ */
body {
background-color: #E5E5E5;
scrollbar-face-color: #DEE3E7;
scrollbar-highlight-color: #FFFFFF;
scrollbar-shadow-color: #DEE3E7;
scrollbar-3dlight-color: #D1D7DC;
scrollbar-arrow-color:  #006699;
scrollbar-track-color: #EFEFEF;
scrollbar-darkshadow-color: #98AAB1;
}
/* General font families for common tags */
font,th,td,p { font-family: Verdana, Arial, Helvetica, sans-serif }
a:link,a:active,a:visited { color : #006699; }
a:hover      { text-decoration: underline; color : #DD6900; }
hr   { height: 0px; border: solid #D1D7DC 0px; border-top-width: 1px;}
/*--- mod : categories hierarchy */
form {
margin: 0px;
padding: 0px;
}
td.attachrow {
color: #000000;
font-size: 11px;
font-weight: normal;
border: 1px #006699 solid;
}
td.attachheader {
color: #314687;
font-size: 11px;
font-weight: bold;
background: #D7D7E7 url(images/cellpic1.gif) repeat-x;
height: 21px;
white-space: nowrap;
}
table.attachtable {
color: #000000;
font-size: 12px;
font-weight: normal;
border: 1px #006699 solid;
border-collapse: collapse;
}
.absbottom {
vertical-align: text-bottom;
}
.dom_overview_abshidden { position: absolute; visibility: hidden; width: 300px; }
/*--- fin mod : categories hierarchy */
/* This is the border line & background colour round the entire page */
.bodyline   { background-color: #FFFFFF; border: 1px #98AAB1 solid; }
/* This is the outline round the main forum tables */
.forumline   { background-color: #FFFFFF; border: 2px #006699 solid; }
/* Main table cell colours and backgrounds */
td.row1   { background-color: #EFEFEF; }
td.row2   { background-color: #DEE3E7; }
td.row3   { background-color: #D1D7DC; }
/*
This is for the table cell above the Topics, Post & Last posts on the index.php page
By default this is the fading out gradiated silver background.
However, you could replace this with a bitmap specific for each forum
*/
td.rowpic {
background-color: #FFFFFF;
background-image: url(templates/subSilver/images/cellpic2.jpg);
background-repeat: repeat-y;
}
/* Header cells - the blue and silver gradient backgrounds */
th   {
color: #FFA34F; font-size: 11px; font-weight : bold;
background-color: #006699; height: 25px;
background-image: url(templates/subSilver/images/cellpic3.gif);
}
td.cat,td.catHead,td.catSides,td.catLeft,td.catRight,td.catBottom {
background-image: url(templates/subSilver/images/cellpic1.gif);
background-color:#D1D7DC; border: #FFFFFF; border-style: solid; height: 28px;
}
/*
Setting additional nice inner borders for the main table cells.
The names indicate which sides the border will be on.
Don't worry if you don't understand this, just ignore it :-)
*/
td.cat,td.catHead,td.catBottom {
height: 29px;
border-width: 0px 0px 0px 0px;
}
th.thHead,th.thSides,th.thTop,th.thLeft,th.thRight,th.thBottom,th.thCornerL,th.thCornerR {
font-weight: bold; border: #FFFFFF; border-style: solid; height: 28px;
}
td.row3Right,td.spaceRow {
background-color: #D1D7DC; border: #FFFFFF; border-style: solid;
}
th.thHead,td.catHead { font-size: 12px; border-width: 1px 1px 0px 1px; }
th.thSides,td.catSides,td.spaceRow    { border-width: 0px 1px 0px 1px; }
th.thRight,td.catRight,td.row3Right    { border-width: 0px 1px 0px 0px; }
th.thLeft,td.catLeft     { border-width: 0px 0px 0px 1px; }
th.thBottom,td.catBottom  { border-width: 0px 1px 1px 1px; }
th.thTop    { border-width: 1px 0px 0px 0px; }
th.thCornerL { border-width: 1px 0px 0px 1px; }
th.thCornerR { border-width: 1px 1px 0px 0px; }
/* The largest text used in the index page title and toptic title etc. */
.maintitle   {
font-weight: bold; font-size: 22px; font-family: "Trebuchet MS",Verdana, Arial, Helvetica, sans-serif;
text-decoration: none; line-height : 120%; color : #000000;
}
/* General text */
.gen { font-size : 12px; }
.genmed { font-size : 11px; }
.gensmall { font-size : 10px; }
.gen,.genmed,.gensmall { color : #000000; }
a.gen,a.genmed,a.gensmall { color: #006699; text-decoration: none; }
a.gen:hover,a.genmed:hover,a.gensmall:hover   { color: #DD6900; text-decoration: underline; }
/* The register, login, search etc links at the top of the page */
.mainmenu      { font-size : 11px; color : #000000 }
a.mainmenu      { text-decoration: none; color : #006699;  }
a.mainmenu:hover{ text-decoration: underline; color : #DD6900; }
/* Forum category titles */
.cattitle      { font-weight: bold; font-size: 12px ; letter-spacing: 1px; color : #006699}
a.cattitle      { text-decoration: none; color : #006699; }
a.cattitle:hover{ text-decoration: underline; }
/* Forum title: Text and link to the forums used in: index.php */
.forumlink      { font-weight: bold; font-size: 12px; color : #006699; }
a.forumlink    { text-decoration: none; color : #006699; }
a.forumlink:hover{ text-decoration: underline; color : #DD6900; }
/* Used for the navigation text, (Page 1,2,3 etc) and the navigation bar when in a forum */
.nav         { font-weight: bold; font-size: 11px; color : #000000;}
a.nav         { text-decoration: none; color : #006699; }
a.nav:hover      { text-decoration: underline; }
/* titles for the topics: could specify viewed link colour too */
.topictitle,h1,h2   { font-weight: bold; font-size: 11px; color : #000000; }
a.topictitle:link   { text-decoration: none; color : #006699; }
a.topictitle:visited { text-decoration: none; color : #5493B4; }
a.topictitle:hover   { text-decoration: underline; color : #DD6900; }
/* Name of poster in viewmsg.php and viewtopic.php and other places */
.name         { font-size : 11px; color : #000000;}
/* Location, number of posts, post date etc */
.postdetails      { font-size : 10px; color : #000000; }
/* The content of the posts (body of text) */
.postbody { font-size : 12px; line-height: 18px}
a.postlink:link   { text-decoration: none; color : #006699 }
a.postlink:visited { text-decoration: none; color : #5493B4; }
a.postlink:hover { text-decoration: underline; color : #DD6900}
/* Quote & Code blocks */
.code {
font-family: Courier, 'Courier New', sans-serif; font-size: 11px; color: #006600;
background-color: #FAFAFA; border: #D1D7DC; border-style: solid;
border-left-width: 1px; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px
}
.quote {
font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #444444; line-height: 125%;
background-color: #FAFAFA; border: #D1D7DC; border-style: solid;
border-left-width: 1px; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px
}
/* Copyright and bottom info */
.copyright      { font-size: 10px; font-family: Verdana, Arial, Helvetica, sans-serif; color: #444444; letter-spacing: -1px;}
a.copyright      { color: #444444; text-decoration: none;}
a.copyright:hover { color: #000000; text-decoration: underline;}
/* Form elements */
input,textarea, select {
color : #000000;
font: normal 11px Verdana, Arial, Helvetica, sans-serif;
border-color : #000000;
}
/* The text input fields background colour */
input.post, textarea.post, select {
background-color : #FFFFFF;
}
input { text-indent : 2px; }
/* The buttons used for bbCode styling in message post */
input.button {
background-color : #EFEFEF;
color : #000000;
font-size: 11px; font-family: Verdana, Arial, Helvetica, sans-serif;
}
/* The main submit button option */
input.mainoption {
background-color : #FAFAFA;
font-weight : bold;
}
/* None-bold submit button */
input.liteoption {
background-color : #FAFAFA;
font-weight : normal;
}
/* This is the line in the posting page which shows the rollover
help line. This is actually a text box, but if set to be the same
colour as the background no one will know ;)
*/
.helpline { background-color: #DEE3E7; border-style: none; }
/* Import the fancy styles for IE only (NS4.x doesn't use the @import function) */
@import url("templates/subSilver/formIE.css");
-->
</style>
</head>
<body bgcolor="#E5E5E5" text="#000000" link="#006699" vlink="#5493B4">
<a name="top"></a>
<table width="100%" cellspacing="0" cellpadding="10" border="0" align="center">
<tr>
<td class="bodyline"><table width="100%" cellspacing="0" cellpadding="0" border="0">
<tr>
<td><a href="index.php"><img src="./templates/subSilver/images/logo_phpBB.gif" border="0" alt="Puppy Linux Discussion Forum Forum Index" vspace="1" /></a></td>
<td align="center" width="100%" valign="middle"><span class="maintitle">Puppy Linux Discussion Forum</span><br /><span class="gen">Puppy HOME page :&nbsp;<a href="http://puppylinux.com">puppylinux.com</a><br />
"THE" alternative forum :&nbsp;<a href="http://puppylinux.info">puppylinux.info</a><br />&nbsp; </span>
<table cellspacing="0" cellpadding="2" border="0">
<tr>
<td align="center" valign="top" nowrap="nowrap"><span class="mainmenu">&nbsp;<a href="faq.php" class="mainmenu"><img src="templates/subSilver/images/icon_mini_faq.gif" width="12" height="13" border="0" alt="FAQ" hspace="3" />FAQ</a>&nbsp; &nbsp;<a href="search.php" class="mainmenu"><img src="templates/subSilver/images/icon_mini_search.gif" width="12" height="13" border="0" alt="Search" hspace="3" />Search</a>&nbsp; &nbsp;<a href="memberlist.php" class="mainmenu"><img src="templates/subSilver/images/icon_mini_members.gif" width="12" height="13" border="0" alt="Memberlist" hspace="3" />Memberlist</a>&nbsp; &nbsp;<a href="groupcp.php" class="mainmenu"><img src="templates/subSilver/images/icon_mini_groups.gif" width="12" height="13" border="0" alt="Usergroups" hspace="3" />Usergroups</a>&nbsp;
&nbsp;<a href="profile.php?mode=register" class="mainmenu"><img src="templates/subSilver/images/icon_mini_register.gif" width="12" height="13" border="0" alt="Register" hspace="3" />Register</a>&nbsp;
</span></td>
</tr>
<tr>
<td height="25" align="center" valign="top" nowrap="nowrap"><span class="mainmenu">&nbsp;<a href="usercp.php" class="mainmenu"><img src="templates/subSilver/images/icon_mini_profile.gif" width="12" height="13" border="0" alt="Profile" hspace="3" />Profile</a>&nbsp; &nbsp;<a href="privmsg.php?folder=inbox" class="mainmenu"><img src="templates/subSilver/images/icon_mini_message.gif" width="12" height="13" border="0" alt="Log in to check your private messages" hspace="3" />Log in to check your private messages</a>&nbsp; &nbsp;<a href="login.php" class="mainmenu"><img src="templates/subSilver/images/icon_mini_login.gif" width="12" height="13" border="0" alt="Log in" hspace="3" />Log in</a>&nbsp;</span></td>
</tr>
</table></td>
</tr>
</table>
<br />
<form action="login.php" method="post" target="_top">
<table width="100%" cellspacing="0" cellpadding="2" border="0" align="center">
<tr>
<td align="left" width="100%" valign="bottom"><span class="nav">
<img src="./images/favicon.gif" border="0" class="absbottom" alt="" />&nbsp;<a href="index.php" title="Puppy Linux Discussion Forum" class="nav">Forum index</a> &raquo;&nbsp;<a href="login.php" title="" class="nav">Log in</a></span></td>
</tr>
</table><table width="100%" cellpadding="4" cellspacing="1" border="0" class="forumline" align="center">
<tr>
<th height="25" class="thHead" nowrap="nowrap">Please enter your username and password to log in.</th>
</tr>
<tr>
<td class="row1"><table border="0" cellpadding="3" cellspacing="1" width="100%">
<tr>
<td colspan="2" align="center">&nbsp;</td>
</tr>
<tr>
<td width="45%" align="right"><span class="gen">Username:</span></td>
<td>
<input type="text" class="post" name="username" size="25" maxlength="40" value="" />
</td>
</tr>
<tr>
<td align="right"><span class="gen">Password:</span></td>
<td>
<input type="password" class="post" name="password" size="25" maxlength="32" />
</td>
</tr>
<tr align="center">
<td colspan="2"><span class="gen">Log me on automatically each visit: <input type="checkbox" name="autologin" /></span></td>
</tr>
<tr align="center">
<td colspan="2"><input type="hidden" name="redirect" value="" /><input type="submit" name="login" class="mainoption" value="Log in" /></td>
</tr>
<tr align="center">
<td colspan="2"><span class="gensmall"><a href="profile.php?mode=sendpassword" class="gensmall">I forgot my password</a></span></td>
</tr>
</table></td>
</tr>
</table>
</form><div align="center"><span class="copyright"><br /><br />
<!--
We request you retain the full copyright notice below including the link to www.phpbb.com.
This not only gives respect to the large amount of time given freely by the developers
but also helps build interest, traffic and use of phpBB 2.0. If you cannot (for good
reason) retain the full copyright we request you at least leave in place the
Powered by phpBB line, with phpBB linked to www.phpbb.com. If you refuse
to include even this then support on our forums may be affected.
The phpBB Group : 2002
// -->
Powered by <a href="http://www.phpbb.com/" target="_phpbb" class="copyright">phpBB</a> &copy; 2001, 2005 phpBB Group<br /></span>
<!--
AD PLACEHOLDER
<div id="wb_Image1" style="position:absolute; width:auto; height:auto; top:18; right:18; z-index:1">
</div>
-->
</td>
</tr>
</table>
<br class="nav" />
<table cellpadding="2" cellspacing="1" border="0" width="100%" class="bodyline">
<tr>
<td colspan="2" align="center"><span class="gensmall">
[ Time: 0.0056s ][ Queries:  3 (0.0014s) ][ GZIP on ]</span></td>
</tr>
</table>
<br clear="all" />
</body>
</html>

_________________
.
Back to top
View user's profile Send private message 
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 12665
Location: Arizona USA

PostPosted: Sun 01 Oct 2017, 18:21    Post subject:  

It doesn't appear that there's any kind of login protection, such as encryption. I had hoped there was. Sad If you log in to the forum using a public wifi connection, anyone could see your login credentials.
Maybe a later version of php:bb encrypts the login page at least.
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [15 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » House Training » Users ( For the regulars )
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0893s ][ Queries: 13 (0.0079s) ][ GZIP on ]