Report - beta.tkzp.ir/

Report Overview

Submitted URL
beta.tkzp.ir/
IP
185.141.105.105
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD
Submitted
2022-12-06 07:05:35
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
beta.tkzp.ir	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.9 kB	905 kB	185.141.105.105
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.149.83.187
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	61 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-06	medium	beta.tkzp.ir/	Phishing
2022-12-06	medium	beta.tkzp.ir/js_underDesign.js?ver=1	Phishing
2022-12-06	medium	beta.tkzp.ir/JquerySlide.js	Phishing
2022-12-06	medium	beta.tkzp.ir/siteLayout.min.js	Phishing
2022-12-06	medium	beta.tkzp.ir/IRANSansWeb(FaNum).eot	Phishing
2022-12-06	medium	beta.tkzp.ir/Content/base/dynamic/shopping867/favIcon.jpg?ver=1	Phishing
2022-12-06	medium	beta.tkzp.ir/IRANSansWeb(FaNum).woff2	Phishing
2022-12-06	medium	beta.tkzp.ir/content/jt/645/HtmlLayout.txt?_=1670310321960	Phishing
2022-12-06	medium	beta.tkzp.ir/Site/GetLogCounter	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	beta.tkzp.ir/	4.1 kB	2023-03-07	2023-04-02
Pretty URL beta.tkzp.ir/ IP 185.141.105.105 ASN #48715 Sefroyek Pardaz Engineering Co. LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:05 Last Seen2023-04-02 21:17:29 Times Seen3 Hash 85a6629874191ab34fa453fa2d7724a8 173aad2f6e1a12b226ccc91e6921363a332d7f10 07e89a128ff014849e71a47cb9cc5df13639f9ffa4c72625a835f41cf4460930 Loading...

	beta.tkzp.ir/js_underDesign.js?ver=1	16 kB	2023-03-07	2023-05-15
Pretty URL beta.tkzp.ir/js_underDesign.js?ver=1 IP 185.141.105.105 ASN #48715 Sefroyek Pardaz Engineering Co. LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:05 Last Seen2023-05-15 01:07:27 Times Seen7 Hash fe55f48502afeb0723ec3b82df1530c2 6b05d5091b7b706163396c4a458b09b09ca5d360 fcb5a16455f18cf807518ebb9be4bea3e4db56ca690b5d7c1d55868b842ce04d Loading...

	beta.tkzp.ir/JquerySlide.js	16 kB	2023-03-07	2023-05-15
Pretty URL beta.tkzp.ir/JquerySlide.js IP 185.141.105.105 ASN #48715 Sefroyek Pardaz Engineering Co. LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:05 Last Seen2023-05-15 01:07:27 Times Seen5 Hash 25c36833a3b287a2d04b6f6b51af484b 36e5439c80b8609fb3da810d44bb0c042fe982f5 eb3bbae7aa5b740d0fda65739d4795587a1be85878fb5c88c391d550a44f4524 Loading...

	beta.tkzp.ir/siteLayout.min.js	400 kB	2023-03-07	2023-05-15
Pretty URL beta.tkzp.ir/siteLayout.min.js IP 185.141.105.105 ASN #48715 Sefroyek Pardaz Engineering Co. LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:05 Last Seen2023-05-15 01:07:27 Times Seen5 Hash 62d4d5f146ee9105575d9cff1fd5ed93 5a225e82235c2af8648bb8b83946c133136453ca 047d720d39494713b593976f151369adf41c74bf6d628a8a3912d30e7c7097a5 Loading...

HTTP Transactions (44)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4808
Expires: Tue, 06 Dec 2022 08:25:31 GMT
Date: Tue, 06 Dec 2022 07:05:23 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 211
Cache-Control: max-age=98967
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 07:05:23 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 10:34:50 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 06:18:36 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2807
alt-svc: clear
X-Firefox-Spdy: h2

beta.tkzp.ir/

185.141.105.105

200 OK

57 kB

URL HTTP/1.1
beta.tkzp.ir/
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (380), with CRLF line terminators
Size
57 kB (57446 bytes)
Hash
6648cfcae919b009b0b171e02651fc20
e91992e28cf9548f4f374a8743db4cdf5d960b3a
6685edaf3075967721a4b9d03b6f0a863d3eadb72f0d29176c2cb9995eec1275

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Wed, 20 Jan 2021 11:01:43 GMT
Accept-Ranges: bytes
ETag: "e3c655a31befd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 57446

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4903
Expires: Tue, 06 Dec 2022 08:27:06 GMT
Date: Tue, 06 Dec 2022 07:05:23 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: WNLYXJD29EsxBcgMGgfS5zlMPSJKhcsuyDfQpe236SAefh87NVN44cUwQziTMQzK+HAC6hpEpcg=
x-amz-request-id: AAPDYBRFPA25DJEK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 06:47:00 GMT
age: 1103
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 07:05:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

beta.tkzp.ir/font-awesome.min.css

185.141.105.105

200 OK

39 kB

URL HTTP/1.1
beta.tkzp.ir/font-awesome.min.css
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
troff or preprocessor input, ASCII text
Size
39 kB (38610 bytes)
Hash
624b51c4e1a0210d8616aa6aca20cbe0
98f3b8230d3c34a246d65de67a67bce97b01d916
09cd3a0a372fefca72930b2eacce4b4e1b5edb60ac754bef1dda4cafb7990809

HTTP Headers

GET /font-awesome.min.css HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 20 Jan 2021 03:27:27 GMT
Accept-Ranges: bytes
ETag: "53d3512ddceed61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 38610

beta.tkzp.ir/siteLayout95.min.css

185.141.105.105

200 OK

3.3 kB

URL HTTP/1.1
beta.tkzp.ir/siteLayout95.min.css
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
Unicode text, UTF-8 text, with very long lines (3235), with CRLF line terminators
Size
3.3 kB (3279 bytes)
Hash
625f0ea4dec0552af3db032821eff806
8d1eb540b300cbe92a3f6cde1f9c50df56f7fdb3
4f84af69e46e083190d4b63bb79a3fa5e1bafac2e8d479e810be3fc8c817093d

HTTP Headers

GET /siteLayout95.min.css HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 20 Jan 2021 03:18:56 GMT
Accept-Ranges: bytes
ETag: "566cebfcdaeed61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 3279

beta.tkzp.ir/js_underDesign.js?ver=1

185.141.105.105

200 OK

16 kB

URL HTTP/1.1
beta.tkzp.ir/js_underDesign.js?ver=1
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
Unicode text, UTF-8 text, with very long lines (492), with CRLF line terminators
Size
16 kB (15850 bytes)
Hash
021cc5a71dc63c06266b6387cb0fa8a6
deb7704db27b9291658c5878ac0e48c09f87df19
eb44e427a28717afcaa6126c6abe084db541ee536ad67c3cb23ddd5098cb9c50

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js_underDesign.js?ver=1 HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 20 Jan 2021 03:18:39 GMT
Accept-Ranges: bytes
ETag: "1452b6f2daeed61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 15850

beta.tkzp.ir/JquerySlide.js

185.141.105.105

200 OK

16 kB

URL HTTP/1.1
beta.tkzp.ir/JquerySlide.js
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (2455), with CRLF line terminators
Size
16 kB (15994 bytes)
Hash
7bd3feb9163523ee52111cffbed70332
b91af145265709d3d4012eb1dcfbe3df57be6a7b
9c4565043c0c9e4c5e99a0a859f2a2f66f00639a748beb5a716431fe3a2a0e3d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /JquerySlide.js HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 20 Jan 2021 03:18:37 GMT
Accept-Ranges: bytes
ETag: "6fd969f1daeed61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 15994

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 06:08:58 GMT
cache-control: public,max-age=3600
age: 3386
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

beta.tkzp.ir/css_underDesign.css

185.141.105.105

200 OK

103 kB

URL HTTP/1.1
beta.tkzp.ir/css_underDesign.css
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
ASCII text, with very long lines (738), with CRLF line terminators
Size
103 kB (103335 bytes)
Hash
1254f94399f37df2cd2467b95ae62384
9cab4ed328e869c25328cf3345b0f500fb3191ab
714f672cfc092054e67bf16ea1b7de4188ef4cdba9b0ced52eac866eb3155cc5

HTTP Headers

GET /css_underDesign.css HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 20 Jan 2021 06:05:50 GMT
Accept-Ranges: bytes
ETag: "68597f4df2eed61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT

beta.tkzp.ir/search_magnifier.png

185.141.105.105

200 OK

997 B

URL HTTP/1.1
beta.tkzp.ir/search_magnifier.png
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 30 x 30, 8-bit colormap, non-interlaced\012- data
Size
997 B (997 bytes)
Hash
4f63860b47a341a2d35217c958ac8138
22f43b48dcd1d565c6344b42e7f8195404ad0163
6b6010d8c05b9149356933bdb7c84e1376f20bca8e01790427e3447d95083d8f

HTTP Headers

GET /search_magnifier.png HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 20 Jan 2021 03:18:45 GMT
Accept-Ranges: bytes
ETag: "3855f8f5daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 997

beta.tkzp.ir/siteLayout.min.js

185.141.105.105

200 OK

400 kB

URL HTTP/1.1
beta.tkzp.ir/siteLayout.min.js
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size
400 kB (399696 bytes)
Hash
f61fab78765dbe5dd1b23c808f39ff1e
a8b9661ffc94a0c44cac34e5241708eaa2a21679
7915f32adac729bb04111af0ae91774d6fa17fabdf7d51b2ff574be2b98437d4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /siteLayout.min.js HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 20 Jan 2021 03:18:54 GMT
Accept-Ranges: bytes
ETag: "c0ea1fbdaeed61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT

beta.tkzp.ir/loading-2.gif

185.141.105.105

200 OK

2.7 kB

URL HTTP/1.1
beta.tkzp.ir/loading-2.gif
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
GIF image data, version 89a, 32 x 32\012- data
Size
2.7 kB (2707 bytes)
Hash
214f3c5ef3de8b01b2fe67da6ccfc7e7
e3839756e2515361eb5bedaed9919d4ca53f7b8f
014e4b61c8d6dbafa792dbccb03d65d38675a32a8bde54f45a6e00b6805dd57a

HTTP Headers

GET /loading-2.gif HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/css_underDesign.css

HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Wed, 20 Jan 2021 03:18:41 GMT
Accept-Ranges: bytes
ETag: "f8aadcf3daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 2707

beta.tkzp.ir/10001.jpg

185.141.105.105

200 OK

36 kB

URL HTTP/1.1
beta.tkzp.ir/10001.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=17, height=350, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], baseline, precision 8, 400x350, components 3\012- data
Size
36 kB (35694 bytes)
Hash
69cbbfdf783b67d44d345c501dbfd3e3
a19c0e934af1398972f8e45320fc45172c47f6f3
c004779488803be217e168dd757c3b83abdec73589e079407a61bc0120b377d7

HTTP Headers

GET /10001.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 10:06:43 GMT
Accept-Ranges: bytes
ETag: "951422f413efd61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 35694

beta.tkzp.ir/92397.jpg

185.141.105.105

200 OK

1.4 kB

URL HTTP/1.1
beta.tkzp.ir/92397.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 60 x 59, 8-bit colormap, non-interlaced\012- data
Size
1.4 kB (1394 bytes)
Hash
c3f8b1083178a910cba4bc86b1cb1bc3
d5625ad935c923d92b3667657e297bb8cf06778d
36377ccf240a6c30924589983c30b11bad064adfc4dca697806d26072a25f6f3

HTTP Headers

GET /92397.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/css_underDesign.css

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 03:17:54 GMT
Accept-Ranges: bytes
ETag: "97ee1d8daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 1394

beta.tkzp.ir/10000.jpg

185.141.105.105

200 OK

43 kB

URL HTTP/1.1
beta.tkzp.ir/10000.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=17, height=350, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], baseline, precision 8, 400x350, components 3\012- data
Size
43 kB (42828 bytes)
Hash
b22734f273030ec2661acf69159dc484
5b013f565c2d143830914970bd04171d53724cad
6c12ea33425e4e5cfbde27fcb256b172732b636f099cdf2565839a8eae1241a2

HTTP Headers

GET /10000.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 10:06:40 GMT
Accept-Ranges: bytes
ETag: "386367f213efd61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 42828

beta.tkzp.ir/91310.jpg

185.141.105.105

200 OK

1.1 kB

URL HTTP/1.1
beta.tkzp.ir/91310.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1054 bytes)
Hash
89adc8d623cb7b53cd4f1e2851aefd50
4a21ba5313a2b99fc00ccc59ef78c3310a385389
9b93309d569d2c1a5c4ca3e8333f97ff3b11147d7f5f46e157d1872a0ec6de7b

HTTP Headers

GET /91310.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 03:17:50 GMT
Accept-Ranges: bytes
ETag: "b0772dd5daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 1054

beta.tkzp.ir/fontawesome-webfont.woff2?v=4.7.0

185.141.105.105

200 OK

77 kB

URL HTTP/1.1
beta.tkzp.ir/fontawesome-webfont.woff2?v=4.7.0
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://beta.tkzp.ir/font-awesome.min.css

HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Wed, 20 Jan 2021 03:27:55 GMT
Accept-Ranges: bytes
ETag: "bb8433edceed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 77160

beta.tkzp.ir/91311.jpg

185.141.105.105

200 OK

1.0 kB

URL HTTP/1.1
beta.tkzp.ir/91311.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
1.0 kB (1028 bytes)
Hash
87037ed4660ed5986b5cd8a17f65f898
df7d8c4f31a09ea328162cadc212c08bfbfb21c9
f57a42e5cd46c386ab4a6709dbbd894ffc5d458821f4a61d5702288483f2d731

HTTP Headers

GET /91311.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 03:17:51 GMT
Accept-Ranges: bytes
ETag: "8e7b16d6daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 1028

beta.tkzp.ir/91312.jpg

185.141.105.105

200 OK

1.2 kB

URL HTTP/1.1
beta.tkzp.ir/91312.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
1.2 kB (1238 bytes)
Hash
2810ad725efd6575259f0642f60317b3
5dd450da6ac9532f6194d78a64423c05e51189f6
3b8744c4e2779940dfd40007d718de7cbe1420bf55a94d56d6ef65cfa408299a

HTTP Headers

GET /91312.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 03:17:53 GMT
Accept-Ranges: bytes
ETag: "d38310d7daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 1238

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 214
Cache-Control: max-age=93902
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 07:05:24 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 09:10:26 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

beta.tkzp.ir/91306.jpg

185.141.105.105

200 OK

1.1 kB

URL HTTP/1.1
beta.tkzp.ir/91306.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1091 bytes)
Hash
1656a7e6cc8e67072d49798d54f10552
37316587b5aa2c5ce8e3d8afe4b1f6213632237c
5e5a44ba71892522ba18cc1ea9c59eaf70ee2c9e76078b20a3fb5119415902d5

HTTP Headers

GET /91306.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 03:17:48 GMT
Accept-Ranges: bytes
ETag: "179232d4daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 1091

beta.tkzp.ir/IRANSansWeb(FaNum).eot

185.141.105.105

200 OK

60 kB

URL HTTP/1.1
beta.tkzp.ir/IRANSansWeb(FaNum).eot
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
Embedded OpenType (EOT), IRANSansWeb(FaNum) family\012- data
Size
60 kB (59768 bytes)
Hash
4f3cd08001a912553842788147e162c2
5d70eed4d1d52c39adf3a67e688d3e1cd0379bb2
6370e989feaf78ffd5063fcd2ab1904a9b090d85f716b6df17fdedc38b632ca3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /IRANSansWeb(FaNum).eot HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/css_underDesign.css

HTTP/1.1 200 OK
Content-Type: application/vnd.ms-fontobject
Last-Modified: Wed, 20 Jan 2021 03:18:26 GMT
Accept-Ranges: bytes
ETag: "869c5ebdaeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:23 GMT
Content-Length: 59768

beta.tkzp.ir/91305.jpg

185.141.105.105

200 OK

1.3 kB

URL HTTP/1.1
beta.tkzp.ir/91305.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1311 bytes)
Hash
0d19067f29f903cb9ff09a873365be64
ca94023839048c8db90696a7219598e6b1093743
2f8423904b47747bc1dbd734e4bd8e4ddea50cac25a3a1fdebd65fd2a20bb475

HTTP Headers

GET /91305.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 03:17:46 GMT
Accept-Ranges: bytes
ETag: "ac132d3daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 1311

beta.tkzp.ir/Content/base/dynamic/shopping867/favIcon.jpg?ver=1

185.141.105.105

404 Not Found

1.2 kB

URL HTTP/1.1
beta.tkzp.ir/Content/base/dynamic/shopping867/favIcon.jpg?ver=1
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
1.2 kB (1245 bytes)
Hash
5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Content/base/dynamic/shopping867/favIcon.jpg?ver=1 HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/siteLayout95.min.css

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 1245

beta.tkzp.ir/92541.jpg

185.141.105.105

200 OK

1.1 kB

URL HTTP/1.1
beta.tkzp.ir/92541.jpg
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1130 bytes)
Hash
25078083d17ba073717b92583304192a
e473204cb352b83e743f1c8cd0246addd56d9eb3
848817c7493a8deca142e32d82939c0ec81d7bc75013dd096626d2f4e743d77c

HTTP Headers

GET /92541.jpg HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 20 Jan 2021 03:18:06 GMT
Accept-Ranges: bytes
ETag: "b1ec7dedaeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 1130

beta.tkzp.ir/IRANSansWeb(FaNum).woff2

185.141.105.105

200 OK

31 kB

URL HTTP/1.1
beta.tkzp.ir/IRANSansWeb(FaNum).woff2
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
Web Open Font Format (Version 2), TrueType, length 31272, version 4.0\012- data
Size
31 kB (31272 bytes)
Hash
d459a9d482f942fb8891fe75c9a7dca3
5814de103fbce57b58837d6f8764e1b8ac340613
7893c18cfc744c28518712c44609f275c362ab2a4338fea8d257f9f722fb32f2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /IRANSansWeb(FaNum).woff2 HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://beta.tkzp.ir/css_underDesign.css

HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Wed, 20 Jan 2021 03:18:35 GMT
Accept-Ranges: bytes
ETag: "26401af0daeed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 31272

beta.tkzp.ir/content/jt/645/HtmlLayout.txt?_=1670310321960

185.141.105.105

404 Not Found

1.2 kB

URL HTTP/1.1
beta.tkzp.ir/content/jt/645/HtmlLayout.txt?_=1670310321960
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
1.2 kB (1245 bytes)
Hash
5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /content/jt/645/HtmlLayout.txt?_=1670310321960 HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=UTF-8
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:24 GMT
Content-Length: 1245

push.services.mozilla.com/

54.149.83.187

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.149.83.187:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7nQnx++kGE+P//9kWaIOtQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: o7kCJZZfV+fgAkgPWJB42ZsZS8U=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4726
Expires: Tue, 06 Dec 2022 08:24:12 GMT
Date: Tue, 06 Dec 2022 07:05:26 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4726
Expires: Tue, 06 Dec 2022 08:24:12 GMT
Date: Tue, 06 Dec 2022 07:05:26 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4726
Expires: Tue, 06 Dec 2022 08:24:12 GMT
Date: Tue, 06 Dec 2022 07:05:26 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4726
Expires: Tue, 06 Dec 2022 08:24:12 GMT
Date: Tue, 06 Dec 2022 07:05:26 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (8997 bytes)
Hash
9fda84db003d0cfc70d73dcb6a3763dd
5c54b4ca3db1c975b3ad7f780f0ebdc867fc2ef4
f00aa6b88dd85164d8f6ee685937a3ca8039b98b442a2e6aede1c4c421b4fc4c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8997
x-amzn-requestid: 54d7ed8c-119c-4583-929c-fd053524814c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csT_8F78IAMFY6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66cc-3d9816725e7e0b1b3404bc4a;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:46:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6nXJg548cHz0REe43NepPeMmnFBAiWO_Fwy2PCKbco4XhNZnBs0Jhw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:46:52 GMT
etag: "5c54b4ca3db1c975b3ad7f780f0ebdc867fc2ef4"
content-type: image/jpeg
age: 33514
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11224 bytes)
Hash
b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:23:09 GMT
age: 31337
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.9 kB (6920 bytes)
Hash
f4193f05dfd1de8bf795f433d4387243
b76ea6ae9df756f131ec16b01cdc7ab19b2d01be
b56231f3c788519751528b849a442d5c7ed828ea4ce3321fd629ca27440ea6e3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6920
x-amzn-requestid: 05ec2698-a5ee-4046-be77-0036755f2946
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSwaEd-IAMF_-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64cf-783b236b79b1e9ba22098cb2;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:23 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GgMHlvU3WIDYMF9fmZAajw_Y3zmPm2zojn7FTqgqtBj7e4qeu8Uokg==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:05:53 GMT
age: 32373
etag: "b76ea6ae9df756f131ec16b01cdc7ab19b2d01be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8749 bytes)
Hash
dcb8fe0c4ba323ab2483fa290c291051
6706e02d6b95edc3a33c951f07d04b0fb7415b77
6be68deb3a330955027ec16eaca2cdf4e2776620ffb7cb995922664b24400f02

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8749
x-amzn-requestid: ee03c447-299b-45d5-b8c6-12d4d1dc436d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_spHdBIAMFywQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-0c9805c6112ec9ec6b9d1544;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tsL8hmcWaBeKYVG2b4g7ebl-sQ0Z5jZaexEfvldfzq9COcOdzqLhUA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:48:21 GMT
age: 33425
etag: "6706e02d6b95edc3a33c951f07d04b0fb7415b77"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9354 bytes)
Hash
2e11524d75503e35c404d6c9a12ac540
5626b75f5c2523f1a0fc301839a06a4e2407f106
d5eb74d026014c0a68893bde1107a9a111b1f0af835e28bb740308017ef80b7f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9354
x-amzn-requestid: fb2dad44-2f8c-4f02-bbc5-405e9586e5af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmctYGLdoAMFyDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e55-28b5680933de0ff4208240be;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6jWrhftx7tANXoWkKtCCjzm66zJDY13bpoA-7qVaZJNHEGsJS8dniw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 04:05:41 GMT
age: 10785
etag: "5626b75f5c2523f1a0fc301839a06a4e2407f106"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8450e32d-c4fa-4c40-82bc-1c36f479692e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (8978 bytes)
Hash
dd0fdca9dfb3e18fcbb5c89e12922da7
d8acf7053a01df2c503c734d52070ff4802d5a01
61e6235613c8ecda0321ecbe0870419bfa65cf3e44e3b85acd257f78725a6843

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8450e32d-c4fa-4c40-82bc-1c36f479692e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8978
x-amzn-requestid: 59cc852a-eb8c-45ab-a370-a176bffea0ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cqSrJGoaoAMF_jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d97e0-3760c58b6d2b7a6561541201;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 07:04:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xSapcXr_Lw9Bg_aOZlfNv5Y-UzqGxG5lVThE4APtxcc8gy8X_W0Kww==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 07:17:55 GMT
etag: "d8acf7053a01df2c503c734d52070ff4802d5a01"
content-type: image/jpeg
age: 85651
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

beta.tkzp.ir/Site/GetLogCounter

185.141.105.105

404 Not Found

1.2 kB

URL HTTP/1.1
beta.tkzp.ir/Site/GetLogCounter
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
1.2 kB (1245 bytes)
Hash
5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

POST /Site/GetLogCounter HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 1040
Origin: http://beta.tkzp.ir
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:31 GMT
Content-Length: 1245

beta.tkzp.ir/favicon.ico

185.141.105.105

404 Not Found

1.2 kB

URL HTTP/1.1
beta.tkzp.ir/favicon.ico
IP
185.141.105.105:0
ASN
#48715 Sefroyek Pardaz Engineering Co. LTD

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
1.2 kB (1245 bytes)
Hash
5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: beta.tkzp.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beta.tkzp.ir/

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 06 Dec 2022 07:05:31 GMT
Content-Length: 1245

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (44)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size