Report - publifon.com/wp-content/cosq/

Report Overview

Submitted URL
publifon.com/wp-content/cosq/
IP
35.173.128.23
ASN
#14618 AMAZON-AES
Submitted
2024-03-27 05:18:07
Access
public
Website Title
Login
Final URL
publifon.com/wp-content/cosq/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
46

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
publifon.com	unknown	unknown	2017-03-10	2024-03-27	11 kB	545 kB	35.173.128.23

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-26	medium	publifon.com/wp-content/cosq/	Swisscom IT Services AG

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed
2024-03-27	medium	publifon.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	publifon.com/wp-content/cosq/7446.bundle.js	72 kB	2023-10-12	2024-04-20
Pretty URL publifon.com/wp-content/cosq/7446.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-12 20:12:28 Last Seen2024-04-20 07:30:02 Times Seen35 Hash 3898f37067b75d12c0962292eaead1b7 f7acfcc924c5e4cb6f9ad6750d26807d87d85b6b c0481822be7bdaf250ae60f29377b9e0c223cd8a0b1e7e953d2e7dd22b19c4bc Loading...

	publifon.com/wp-content/cosq/4927.bundle.js	46 kB	2023-08-31	2024-04-20
Pretty URL publifon.com/wp-content/cosq/4927.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 09:58:23 Last Seen2024-04-20 07:30:02 Times Seen38 Hash 953d93836cc8e427077f48cb38ca033e 9cdf3f1f14e282b57b58e05f620057b14fce06f5 2c1faf744efd9539afa55de9184470909cdb63a8d2a5bf80130b428cba088b9a Loading...

	publifon.com/wp-content/cosq/login-layout.bundle-042dfd4c798b854eb14823831f796dfa.js	6.9 kB	2023-10-12	2024-04-20
Pretty URL publifon.com/wp-content/cosq/login-layout.bundle-042dfd4c798b854eb14823831f796dfa.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-12 20:12:28 Last Seen2024-04-20 07:30:03 Times Seen46 Hash 042dfd4c798b854eb14823831f796dfa 7da0fb1f5803663c7c4a652e46cd3e294992fb39 111288b03ac39c556614a53affb70c3058d2cc3ccfb34bf3707c236446ed1602 Loading...

	publifon.com/wp-content/cosq/username.bundle-c7e96c4298c466dd269b5f4c95ac8860.js	2.7 kB	2023-08-31	2024-04-20
Pretty URL publifon.com/wp-content/cosq/username.bundle-c7e96c4298c466dd269b5f4c95ac8860.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 09:58:23 Last Seen2024-04-20 07:30:03 Times Seen44 Hash c7e96c4298c466dd269b5f4c95ac8860 e12c8bd944f15556aa51c0c668871182fc7d2940 8918f3c64cee28c09b0d96216d406d57f427b8b35ecf8b046591f67f7f6c7a7b Loading...

	publifon.com/wp-content/cosq/8623.bundle.js	16 kB	2023-08-31	2024-04-20
Pretty URL publifon.com/wp-content/cosq/8623.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 09:58:23 Last Seen2024-04-20 07:30:03 Times Seen51 Hash 2b6e9eecbd3626c95dd52a6f920bb838 0a1c6cd975f685bce8d29849adb7a9221ca8979c da43ccbf453fdd2d66f1b93c8f4b220c81122f157974ee1721153e92656e8c76 Loading...

	publifon.com/wp-content/cosq/9506.bundle.js	25 kB	2023-08-31	2024-04-20
Pretty URL publifon.com/wp-content/cosq/9506.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 09:58:23 Last Seen2024-04-20 07:30:03 Times Seen51 Hash 5e8b2edd328f16e9a74d8e7eec3b58a3 d17599aa8437c1580f5752d68f02b5f11ddc1781 c8a47767a0502f80514ab075a54669fa850ea16cbe4ee75d0de27ab253c93f6a Loading...

	publifon.com/wp-content/cosq/5271.bundle.js	29 kB	2023-08-31	2024-04-20
Pretty URL publifon.com/wp-content/cosq/5271.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 09:58:23 Last Seen2024-04-20 07:30:03 Times Seen45 Hash 618f42a7f2bd8a70f217821b18c4fc14 1299e3aa95a5ab0367a4d183163e66aa11fe1408 687e0d3eac32ac9c92bd4c9e1eb9f53dd614327553a98c4df123074eaf72e8fb Loading...

	publifon.com/wp-content/cosq/commons.bundle-9c3ee18bec3178ac56fba8758698ed50.js	689 kB	2024-03-12	2024-04-20
Pretty URL publifon.com/wp-content/cosq/commons.bundle-9c3ee18bec3178ac56fba8758698ed50.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-12 16:53:32 Last Seen2024-04-20 07:30:03 Times Seen22 Hash a8a6e6553031bcc851691b13f4606a67 88126fc4405ba7974473887a374037437e16b9d4 50ae4f117c0a95fac573f91fc9f7ef58e1530fb727f8d0e5a9a0b5cec4e51405 Loading...

	publifon.com/wp-content/cosq/8735.bundle.js	24 kB	2023-08-31	2024-04-20
Pretty URL publifon.com/wp-content/cosq/8735.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 09:58:23 Last Seen2024-04-20 07:30:03 Times Seen43 Hash f0b39589580841b7debcd5e867dd587b 95f0beefda9fa51dd4acb40a8f947547417db083 5eb799589dc8d41e070eebae2b5905db25fc6d6f8c562a6454531895f215c6cb Loading...

	publifon.com/wp-content/cosq/8692.bundle.js	59 kB	2023-10-12	2024-04-20
Pretty URL publifon.com/wp-content/cosq/8692.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-12 20:12:28 Last Seen2024-04-20 07:30:03 Times Seen48 Hash 080a48aaf921f4193ef2f287ac29d0fc 844b4bf811179e3c544b355781469410d19b77b8 3bc0d6076843d622c25b34a4f920b77269d817d020da4c38f938d87d8b701f44 Loading...

	publifon.com/wp-content/cosq/6359.bundle.js	1.1 kB	2023-08-31	2024-04-20
Pretty URL publifon.com/wp-content/cosq/6359.bundle.js IP 35.173.128.23 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 09:58:23 Last Seen2024-04-20 07:30:02 Times Seen44 Hash 835e2d9eafc13f2bacd24debeb7ddebf ded2cbc1f1e966012868c6fffd8b0b27ebe8ee4f 0eb0e946e3efe2b4ce23eba1ca2b2af6c2d5ffaaaf6b864ef373a0c381a7e175 Loading...

HTTP Transactions (22)

URL IP Response Size

publifon.com/wp-content/cosq/

35.173.128.23

200 OK

2.5 kB

URL User Request GET HTTP/1.1
publifon.com/wp-content/cosq/
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.5 kB (2485 bytes)
Hash
d43eea697702cbb72b541255ee74e16f
361919ce4a2efe02aab592c13bf12eae6235ff1d
c346cca58523f1ad0020fbe8dfe14fbffaae2574917d136be26fdf698b383b75

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Swisscom IT Services AG
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/ HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:41 GMT
Server: Apache
Last-Modified: Tue, 12 Mar 2024 23:47:14 GMT
ETag: "1f50-6137f470be480-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2485
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html

publifon.com/wp-content/cosq/username-fa6d102d6372f230a60c0776f6a8ca43.css

35.173.128.23

200 OK

169 B

URL GET HTTP/1.1
publifon.com/wp-content/cosq/username-fa6d102d6372f230a60c0776f6a8ca43.css
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
ASCII text
Size
169 B (169 bytes)
Hash
fa6d102d6372f230a60c0776f6a8ca43
c5fc6a5fe6fd07beaa1005d66e3f719c17a02d02
9a1ac677d56dc950ff30b55e3aca33dd057259d0deaedd5412ac516ba5cc9c0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/username-fa6d102d6372f230a60c0776f6a8ca43.css HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:42 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:06:54 GMT
ETag: "f7-6126515065f80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 169
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

publifon.com/wp-content/cosq/login-layout.bundle-042dfd4c798b854eb14823831f796dfa.js

35.173.128.23

200 OK

3.0 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/login-layout.bundle-042dfd4c798b854eb14823831f796dfa.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, ASCII text, with very long lines (6862), with no line terminators
Size
3.0 kB (2953 bytes)
Hash
042dfd4c798b854eb14823831f796dfa
7da0fb1f5803663c7c4a652e46cd3e294992fb39
111288b03ac39c556614a53affb70c3058d2cc3ccfb34bf3707c236446ed1602

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/login-layout.bundle-042dfd4c798b854eb14823831f796dfa.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:42 GMT
Server: Apache
Last-Modified: Wed, 28 Feb 2024 05:33:58 GMT
ETag: "1ace-6126a7d487d80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2953
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/username.bundle-c7e96c4298c466dd269b5f4c95ac8860.js

35.173.128.23

200 OK

1.4 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/username.bundle-c7e96c4298c466dd269b5f4c95ac8860.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, ASCII text, with very long lines (2743), with no line terminators
Size
1.4 kB (1382 bytes)
Hash
c7e96c4298c466dd269b5f4c95ac8860
e12c8bd944f15556aa51c0c668871182fc7d2940
8918f3c64cee28c09b0d96216d406d57f427b8b35ecf8b046591f67f7f6c7a7b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/username.bundle-c7e96c4298c466dd269b5f4c95ac8860.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:42 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:04:22 GMT
ETag: "ab7-612650bf70980-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1382
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/commons.bundle-9c3ee18bec3178ac56fba8758698ed50.js

35.173.128.23

200 OK

116 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/commons.bundle-9c3ee18bec3178ac56fba8758698ed50.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (463), with CRLF line terminators
Size
116 kB (116100 bytes)
Hash
a8a6e6553031bcc851691b13f4606a67
88126fc4405ba7974473887a374037437e16b9d4
50ae4f117c0a95fac573f91fc9f7ef58e1530fb727f8d0e5a9a0b5cec4e51405

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/commons.bundle-9c3ee18bec3178ac56fba8758698ed50.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:42 GMT
Server: Apache
Last-Modified: Wed, 28 Feb 2024 06:10:02 GMT
ETag: "a833b-6126afe448280-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css

35.173.128.23

200 OK

62 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
Unicode text, UTF-8 text, with very long lines (64275)
Size
62 kB (61817 bytes)
Hash
69ca2664ba9eedfb30a3916350a7d1d1
2a5784857d3914bfff569792b9b8955af6d167fb
0532eb04ec29372d0a7d1f1ec1515d2d2ba896d5ad26ecd72630012d1ae502f9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:42 GMT
Server: Apache
Last-Modified: Sun, 10 Mar 2024 23:22:30 GMT
ETag: "63e62-61356b2e91980-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css

publifon.com/favicon.ico

35.173.128.23

500 Internal Server Error

0 B

URL GET HTTP/1.1
publifon.com/favicon.ico
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 500 Internal Server Error
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

publifon.com/wp-content/cosq/swisscom-logo-lifeform-38be0de766af1aaa475f946c32b47944.svg

35.173.128.23

200 OK

6.2 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/swisscom-logo-lifeform-38be0de766af1aaa475f946c32b47944.svg
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
SVG Scalable Vector Graphics image
Size
6.2 kB (6163 bytes)
Hash
38be0de766af1aaa475f946c32b47944
646ff2fae3c8080da7c067e6506f1a1193b9cfc8
330fddfd254cb42deebdac50ccbc6d9988d365378457fae29dc10b3c2edb43e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/swisscom-logo-lifeform-38be0de766af1aaa475f946c32b47944.svg HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:09:14 GMT
ETag: "1813-612651d5e9a80"
Accept-Ranges: bytes
Content-Length: 6163
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml

publifon.com/wp-content/cosq/8623.bundle.js

35.173.128.23

200 OK

3.9 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/8623.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, ASCII text, with very long lines (15884), with no line terminators
Size
3.9 kB (3908 bytes)
Hash
2b6e9eecbd3626c95dd52a6f920bb838
0a1c6cd975f685bce8d29849adb7a9221ca8979c
da43ccbf453fdd2d66f1b93c8f4b220c81122f157974ee1721153e92656e8c76

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/8623.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:06:10 GMT
ETag: "3e0c-612651266fc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3908
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/8735.bundle.js

35.173.128.23

200 OK

4.7 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/8735.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (23588), with no line terminators
Size
4.7 kB (4701 bytes)
Hash
f0b39589580841b7debcd5e867dd587b
95f0beefda9fa51dd4acb40a8f947547417db083
5eb799589dc8d41e070eebae2b5905db25fc6d6f8c562a6454531895f215c6cb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/8735.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:05:10 GMT
ETag: "5c25-612650ed37580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4701
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/9506.bundle.js

35.173.128.23

200 OK

4.0 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/9506.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, ASCII text, with very long lines (24760), with no line terminators
Size
4.0 kB (3967 bytes)
Hash
5e8b2edd328f16e9a74d8e7eec3b58a3
d17599aa8437c1580f5752d68f02b5f11ddc1781
c8a47767a0502f80514ab075a54669fa850ea16cbe4ee75d0de27ab253c93f6a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/9506.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:06:14 GMT
ETag: "60b8-6126512a40580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3967
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/8692.bundle.js

35.173.128.23

200 OK

12 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/8692.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, ASCII text, with very long lines (58787), with no line terminators
Size
12 kB (12110 bytes)
Hash
080a48aaf921f4193ef2f287ac29d0fc
844b4bf811179e3c544b355781469410d19b77b8
3bc0d6076843d622c25b34a4f920b77269d817d020da4c38f938d87d8b701f44

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/8692.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:05:04 GMT
ETag: "e5a3-612650e77e800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12110
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/6359.bundle.js

35.173.128.23

200 OK

490 B

URL GET HTTP/1.1
publifon.com/wp-content/cosq/6359.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, ASCII text, with very long lines (1088), with no line terminators
Size
490 B (490 bytes)
Hash
835e2d9eafc13f2bacd24debeb7ddebf
ded2cbc1f1e966012868c6fffd8b0b27ebe8ee4f
0eb0e946e3efe2b4ce23eba1ca2b2af6c2d5ffaaaf6b864ef373a0c381a7e175

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/6359.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:06:18 GMT
ETag: "440-6126512e10e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 490
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/5271.bundle.js

35.173.128.23

200 OK

11 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/5271.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (29341), with no line terminators
Size
11 kB (11381 bytes)
Hash
618f42a7f2bd8a70f217821b18c4fc14
1299e3aa95a5ab0367a4d183163e66aa11fe1408
687e0d3eac32ac9c92bd4c9e1eb9f53dd614327553a98c4df123074eaf72e8fb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/5271.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:04:58 GMT
ETag: "72bc-612650e1c5a80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11381
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/7446.bundle.js

35.173.128.23

200 OK

20 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/7446.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65519), with no line terminators
Size
20 kB (19790 bytes)
Hash
3898f37067b75d12c0962292eaead1b7
f7acfcc924c5e4cb6f9ad6750d26807d87d85b6b
c0481822be7bdaf250ae60f29377b9e0c223cd8a0b1e7e953d2e7dd22b19c4bc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/7446.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:06:22 GMT
ETag: "1181b-61265131e1780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19790
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/img/lifeform-spritesheet-db5b9234be03de8612bb31c38e09fcf7.png

35.173.128.23

500 Internal Server Error

0 B

URL GET HTTP/1.1
publifon.com/wp-content/cosq/img/lifeform-spritesheet-db5b9234be03de8612bb31c38e09fcf7.png
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/img/lifeform-spritesheet-db5b9234be03de8612bb31c38e09fcf7.png HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 500 Internal Server Error
Date: Wed, 27 Mar 2024 05:17:51 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

publifon.com/wp-content/cosq/TheSansB_700_-7dac4ba6f5bfb4ba199e7fe3454a6780.woff2

35.173.128.23

200 OK

50 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/TheSansB_700_-7dac4ba6f5bfb4ba199e7fe3454a6780.woff2
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 49592, version 2.5570
Size
50 kB (49592 bytes)
Hash
7dac4ba6f5bfb4ba199e7fe3454a6780
8df19c4658d5317868b1d8d3c302b19eea81677e
09525fb3b4747dfbceaa9401af3c089fae3aa045934b77ec444cfe62c0efd3da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/TheSansB_700_-7dac4ba6f5bfb4ba199e7fe3454a6780.woff2 HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:08:18 GMT
ETag: "c1b8-612651a081c80"
Accept-Ranges: bytes
Content-Length: 49592
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: font/woff2

publifon.com/wp-content/cosq/TheSansB_600_-a54202ef3bf0e3da19bca052e636ca9c.woff2

35.173.128.23

200 OK

55 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/TheSansB_600_-a54202ef3bf0e3da19bca052e636ca9c.woff2
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 55008, version 2.5570
Size
55 kB (55008 bytes)
Hash
a54202ef3bf0e3da19bca052e636ca9c
1be7b883513f1f2ae87b968e2303475493216873
5e39a8bb7dc50616b9f41997f90bbb8330be6eb35bb973995618c38a0e3c21f4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/TheSansB_600_-a54202ef3bf0e3da19bca052e636ca9c.woff2 HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:50 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:08:14 GMT
ETag: "d6e0-6126519cb1380"
Accept-Ranges: bytes
Content-Length: 55008
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: font/woff2

publifon.com/wp-content/cosq/TheSansB_400_-4f0d59a18ca1c88dcfbbce6510b21da5.woff2

35.173.128.23

200 OK

51 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/TheSansB_400_-4f0d59a18ca1c88dcfbbce6510b21da5.woff2
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 50708, version 2.13828
Size
51 kB (50708 bytes)
Hash
4f0d59a18ca1c88dcfbbce6510b21da5
a832475bfb2af15db4541eaba52618c26cee2cd8
f0cc4ee9dc83925f474ab0b5ed3a5395038c979e157d4bae8e67225f1b0922d8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/TheSansB_400_-4f0d59a18ca1c88dcfbbce6510b21da5.woff2 HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:51 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:07:32 GMT
ETag: "c614-61265174a3500"
Accept-Ranges: bytes
Content-Length: 50708
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: font/woff2

publifon.com/wp-content/cosq/4927.bundle.js

35.173.128.23

200 OK

5.8 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/4927.bundle.js
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (46322), with no line terminators
Size
5.8 kB (5761 bytes)
Hash
953d93836cc8e427077f48cb38ca033e
9cdf3f1f14e282b57b58e05f620057b14fce06f5
2c1faf744efd9539afa55de9184470909cdb63a8d2a5bf80130b428cba088b9a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/4927.bundle.js HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:51 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:06:26 GMT
ETag: "b4f3-61265135b2080-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5761
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: application/javascript

publifon.com/wp-content/cosq/TheSansB_500_-d7955bec1417e0168f42adfe7ceaf8b5.woff2

35.173.128.23

200 OK

52 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/TheSansB_500_-d7955bec1417e0168f42adfe7ceaf8b5.woff2
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 52044, version 2.5570
Size
52 kB (52044 bytes)
Hash
d7955bec1417e0168f42adfe7ceaf8b5
f2cf5939bcacdefe7cbb920d7873d55b00772be0
6010e95e45ae8c7c0064724e1ea3ac9495ae55a6241633446db052364c06f5f3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/TheSansB_500_-d7955bec1417e0168f42adfe7ceaf8b5.woff2 HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:51 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:07:34 GMT
ETag: "cb4c-612651768b980"
Accept-Ranges: bytes
Content-Length: 52044
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: font/woff2

publifon.com/wp-content/cosq/sdx-icons-22a2d9b323ec1a64b633a76d600ad50c.woff2

35.173.128.23

200 OK

78 kB

URL GET HTTP/1.1
publifon.com/wp-content/cosq/sdx-icons-22a2d9b323ec1a64b633a76d600ad50c.woff2
IP
35.173.128.23:443
ASN
#14618 AMAZON-AES

Requested by
https://publifon.com/wp-content/cosq/
Certificate
IssuerLet's Encrypt
Subjectpublifon.com
FingerprintC8:2D:41:21:D0:C8:56:AD:A5:51:FC:08:E0:D0:04:A7:95:18:31:2D
ValidityTue, 12 Mar 2024 12:54:56 GMT - Mon, 10 Jun 2024 12:54:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77896, version 1.0
Size
78 kB (77896 bytes)
Hash
22a2d9b323ec1a64b633a76d600ad50c
ed7c4cdf9af5c58e9d0198468459c6b1ad44c227
716d227cc7210bcc9f2401f71e430639a3c4c853b94199a37d99f41c98b34568

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cosq/sdx-icons-22a2d9b323ec1a64b633a76d600ad50c.woff2 HTTP/1.1
Host: publifon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://publifon.com/wp-content/cosq/commons-35f66fa724e94bd0f2b64e9c691e773a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 05:17:51 GMT
Server: Apache
Last-Modified: Tue, 27 Feb 2024 23:08:22 GMT
ETag: "13048-612651a452580"
Accept-Ranges: bytes
Content-Length: 77896
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: font/woff2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML