| code.jquery.com/jquery-3.4.1.slim.min.js |  151.101.2.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.4.1.slim.min.js IP151.101.2.137:443
CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65247) Hashd9b11ca4d877c327889805b73bb79edd dd15958a3f0f1f3601461f927c4703a56ed59011 a5ab2a00a0439854f8787a0dda775dea5377ef4905886505c938941d6854ee4f
GET /jquery-3.4.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nazymtabys.kz
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1157d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 27 Apr 2024 04:39:13 GMT
age: 19288951
x-served-by: cache-lga13626-LGA, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 15, 35194
x-timer: S1714192753.230767,VS0,VE0
vary: Accept-Encoding
content-length: 24328
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 |  185.98.5.133 | 404 Not Found | 1.0 kB |
URL GET HTTP/2nazymtabys.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeHTML document, ASCII text Hash73222eec1166ea857afc54d5ce52da7a 139b1c235f5703aa24522838396dbeaa7a92e202 d2e2a262c57cc8fe1462c09106d9b45949d5fb52efed2cc1eb8198a79ef5774e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: text/html; charset=UTF-8
content-length: 1023
last-modified: Fri, 07 Jul 2023 04:55:36 GMT
etag: "3ff-5ffde718af7a5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 | 185.98.5.133 | 404 Not Found | 1.0 kB |
URL GET HTTP/2nazymtabys.kz/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeHTML document, ASCII text Hash73222eec1166ea857afc54d5ce52da7a 139b1c235f5703aa24522838396dbeaa7a92e202 d2e2a262c57cc8fe1462c09106d9b45949d5fb52efed2cc1eb8198a79ef5774e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: text/html; charset=UTF-8
content-length: 1023
last-modified: Fri, 07 Jul 2023 04:55:36 GMT
etag: "3ff-5ffde718af7a5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 | 185.98.5.133 | 404 Not Found | 1.0 kB |
URL GET HTTP/2nazymtabys.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeHTML document, ASCII text Hash73222eec1166ea857afc54d5ce52da7a 139b1c235f5703aa24522838396dbeaa7a92e202 d2e2a262c57cc8fe1462c09106d9b45949d5fb52efed2cc1eb8198a79ef5774e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: text/html; charset=UTF-8
content-length: 1023
last-modified: Fri, 07 Jul 2023 04:55:36 GMT
etag: "3ff-5ffde718af7a5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2 | 185.98.5.133 | 404 Not Found | 1.0 kB |
URL GET HTTP/2nazymtabys.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2 IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeHTML document, ASCII text Hash73222eec1166ea857afc54d5ce52da7a 139b1c235f5703aa24522838396dbeaa7a92e202 d2e2a262c57cc8fe1462c09106d9b45949d5fb52efed2cc1eb8198a79ef5774e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2 HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: text/html; charset=UTF-8
content-length: 1023
last-modified: Fri, 07 Jul 2023 04:55:36 GMT
etag: "3ff-5ffde718af7a5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/img/apple-touch-icon.png | 185.98.5.133 | 200 OK | 16 kB |
URL GET HTTP/2nazymtabys.kz/img/apple-touch-icon.png IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typegzip compressed data, max compression, from Unix Hash26543eb8b8981d9c166ae3e89f6e9984 b1400ed123ddfdaee18e13dc40684b0f114d526f e49c7be1fe83d699a40f7bd75982591b78ace24b388e23aa3f034578fa5ddff8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /img/apple-touch-icon.png HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:14 GMT
content-type: image/png
last-modified: Thu, 22 Dec 2022 11:12:28 GMT
etag: W/"63a43b9c-160c"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 185.98.5.133 | 200 OK | 12 kB |
URL User Request GET HTTP/2IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:12 GMT
content-type: text/html; charset=UTF-8
last-modified: Fri, 07 Jul 2023 05:01:23 GMT
etag: W/"64a79c23-308a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/css/font-roboto_1.css | 185.98.5.133 | 200 OK | 6.7 kB |
URL GET HTTP/2nazymtabys.kz/css/font-roboto_1.css IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeASCII text, with very long lines (7104), with no line terminators Hashca2d493c3546f0b2feca043dce68afe0 2cffd4641fbb3d0672a7b8549f5a8ecd7ea557b1 0a58dcb5dac4c4c706e2aad8b41caf256e4ea86fe80ba9243916a86a646ca821
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/font-roboto_1.css HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 11:12:26 GMT
etag: W/"63a43b9a-1a48"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/css/bootstrap.min_3.css | 185.98.5.133 | 200 OK | 42 kB |
URL GET HTTP/2nazymtabys.kz/css/bootstrap.min_3.css IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeASCII text, with very long lines (42164), with CRLF line terminators Hash9bd1aa6ec80f258e0195e28444167fa0 8f74fb90f48177f0125f7addf91b4285e76d9d6b 63db15f00ab6b5a8cf92bff0cd98448c373732d7d3d4edc9c7a3b4d129e9627c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/bootstrap.min_3.css HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 11:12:26 GMT
etag: W/"63a43b9a-a624"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/file/img1.jpg | 185.98.5.133 | 200 OK | 443 kB |
URL GET HTTP/2nazymtabys.kz/file/img1.jpg IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typePNG image data, 785 x 792, 8-bit/color RGBA, non-interlaced Size443 kB (443347 bytes) Hash149fbe1f94bfbe78d8fb4cb008a26907 d47586274eb5a83680212e2166bee810bccc7b59 31a69e373666204d9efff2cf75ccd6445b0f225a7f4ad36f6451e2495f346afe
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /file/img1.jpg HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: image/jpeg
last-modified: Fri, 07 Jul 2023 05:00:18 GMT
etag: W/"64a79be2-6c3d3"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/css/telegram_232.css | 185.98.5.133 | 200 OK | 122 kB |
URL GET HTTP/2nazymtabys.kz/css/telegram_232.css IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeASCII text, with very long lines (1862), with CRLF line terminators Size122 kB (122448 bytes) Hash4cf6f5f2896f44ce2c706a70c0a0042f eb349cc47771d9812a2a221de896eb187f53a777 9231ebed71118b4d1d99ac92a995477abed458882e73bc5d2752c93d82364e7d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/telegram_232.css HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 11:12:27 GMT
etag: W/"63a43b9b-1de50"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/js/tgwallpaper.min_3.js | 185.98.5.133 | 200 OK | 3.0 kB |
URL GET HTTP/2nazymtabys.kz/js/tgwallpaper.min_3.js IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeASCII text, with very long lines (2998), with no line terminators Hashf03422dc797fd26a3834b1ec041128ed a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a 046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /js/tgwallpaper.min_3.js HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 11:12:32 GMT
etag: W/"63a43ba0-ba3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nazymtabys.kz/img/tgme/pattern.svg | 185.98.5.133 | 200 OK | 231 kB |
URL GET HTTP/2nazymtabys.kz/img/tgme/pattern.svg IP185.98.5.133:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnazymtabys.kz FingerprintBA:95:E4:A3:6A:89:42:EF:77:B7:B1:E3:76:12:43:AC:08:17:33:CE ValiditySun, 03 Mar 2024 05:46:50 GMT - Sat, 01 Jun 2024 05:46:49 GMT
File typeSVG Scalable Vector Graphics image Size231 kB (230871 bytes) Hash7410ea0072f4df1e149a15a2bd924738 8878c8b4987cdb3c467fb5f14becedf9202e576f daa086b24cbd2610eb3261446100ff513a4526c5b2bce41e758629f5cd8a6a20
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /img/tgme/pattern.svg HTTP/1.1
Host: nazymtabys.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/css/telegram_232.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 04:39:13 GMT
content-type: image/svg+xml
last-modified: Thu, 22 Dec 2022 11:12:29 GMT
etag: W/"63a43b9d-385d7"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/img/website_icon.svg?4 |  149.154.167.99 | 200 OK | 1.9 kB |
URL GET HTTP/2telegram.org/img/website_icon.svg?4 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeSVG Scalable Vector Graphics image Hash5caca7ae1cffb3da0b06150a15020005 04cfb934f238d33209406393a3fbf78454815739 1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nazymtabys.kz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:14 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Wed, 01 May 2024 04:39:14 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|