{"report_id":"9fa8e674-3a30-4d8b-8620-2f165008fdd9","version":0,"status":"done","tags":[],"date":"2026-06-17T14:20:16Z","url":{"schema":"http","addr":"aavejob.tech","fqdn":"aavejob.tech","domain":"aavejob.tech","tld":"tech"},"ip":{"addr":"128.65.195.180","port":0,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"http","addr":"aavejob.tech/","fqdn":"aavejob.tech","domain":"aavejob.tech","tld":"tech"},"title":"Welcome to aavejob.tech","dom":{"size":4451,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3087)","md5":"eb611881ac1c8ac83ef52d2bb7cdd4b5","sha1":"d7502972866bc57bf710ebde2bbbdaa6c5b9c711","sha256":"228bf1290cef770efa5ffd316027fa8cf1b7bdfb873a0beeabaa448544dc25a9","sha512":"5ed7a3a5c155b4b8bc08482a9b4c88880a7bf714ad33dccff1c278d9e028384134ba91676c203be8b874b214599d68b37b55a6e111ccfac52639fc4fd5e78563","ssdeep":"96:Ig8hHXER49Rq5R20PRn6RRuV/XhV/Ab8yV/qUV/19k:IjH3uO0PRnOeIwh5","tlshash":"1591881bc690102db507c241faa7aa4d627945e2f715dfec997f66ea638b7c000237a4","dom_hash":"domhash28a5cfbced376fa21b10568c95da2f84","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aavejob.tech","fqdn":"aavejob.tech","domain":"aavejob.tech","tld":"tech"},"ip":{"addr":"128.65.195.180","port":0,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T14:20:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"aavejob.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":1,"received_data":6657,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.storage.infomaniak.website","ip":{"addr":"84.16.68.46","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"domain_registered":"2014-09-18","domain_rank":6992762,"first_seen":"2020-03-06T15:02:22Z","last_seen":"2026-06-15T21:26:24.768679Z","alert_count":0,"request_count":1,"received_data":142951,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":1,"received_data":19453,"sent_data":588,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aavejob.tech","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-15","domain_rank":0,"first_seen":"2026-06-17T14:20:17.352797Z","last_seen":"2026-06-17T14:20:17.352797Z","alert_count":3,"request_count":3,"received_data":5298,"sent_data":1290,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.25","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}]},{"fqdn":"assets.storage.infomaniak.com","ip":{"addr":"84.16.68.46","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"domain_registered":"1997-06-10","domain_rank":7319526,"first_seen":"2019-11-02T20:53:48Z","last_seen":"2026-06-10T01:25:52.379243Z","alert_count":0,"request_count":1,"received_data":24162,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"assets.storage.infomaniak.website/images/background/unsplash/YoadQb46v6k-large.jpg","fqdn":"assets.storage.infomaniak.website","domain":"infomaniak.website","tld":"website"},"ip":{"addr":"84.16.68.46","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://aavejob.tech/","date":"2026-06-17T14:19:52.968Z","timestamp":1781705992968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.infomaniak.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 21:50:11 GMT","end":"Wed, 19 Aug 2026 21:50:10 GMT"},"fingerprint":{"sha1":"93:0C:76:DD:35:A9:16:ED:3A:4B:1D:E4:56:31:7C:C4:A5:95:1C:A4","sha256":"88:1D:B7:43:F7:CA:79:9B:0B:0B:46:A1:EF:C3:6B:2C:12:05:96:D6:C9:24:4A:8C:51:C5:CE:40:78:6B:E0:B6"}}},"request":{"raw":"GET /images/background/unsplash/YoadQb46v6k-large.jpg HTTP/1.1\r\nHost: assets.storage.infomaniak.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://aavejob.tech/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:19:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 142526\r\nlast-modified: Fri, 10 Feb 2023 14:02:42 GMT\r\nx-rgw-object-type: Normal\r\netag: \"3a9118e293086c8e152bad610000c754\"\r\nx-amz-request-id: tx000002297b1d61fda90a3-006a23fc7a-86e0f5b-ch-gva-nvme-d3\r\nx-proxy-cache: STALE\r\naccept-ranges: bytes\r\nx-request-id: cc704793-5fe2-47d7-b5d1-14efea176ead\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":142526,"size_decoded":142951,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1600x1067, components 3","md5":"3a9118e293086c8e152bad610000c754","sha1":"13986515b8f9e75a138d2b69516ced584bddafcc","sha256":"e940d6ab84a3d919deea791f36f134d8ffa05d4b8b1a2c9e623e6b17cef5254f","sha512":"b24042f95ea1ffe106892f447f702724b400cf240bea4026d5be30d92971037d4624f5655b8625c1292c8746bda95e59085ae826b2c0705acb1ba8248586a238","ssdeep":"3072:gRoad4PGH40lTTGxXVvQEon/YKQ+VWfiUG4abhSkYlUwjMFDrBD9nCG:mb4OY0xgXVvQEYYP+Y6UGT0kqUgM3nL","tlshash":"a2d312cfd9433ca6c571be3da28ee1e7250b2224a7c6974572105a20a5594c0ff98fba","first_seen":"2023-05-14T05:46:17Z","last_seen":"2026-06-17T14:20:22.006334Z","times_seen":7,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":193,"connect":34,"send":0,"wait":34,"receive":100,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://aavejob.tech/","date":"2026-06-17T14:19:52.983Z","timestamp":1781705992983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://aavejob.tech\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:08:04 GMT\r\nexpires: Mon, 14 Jun 2027 10:08:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274309\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18640,"size_decoded":19453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-06-21T10:43:26.235719Z","times_seen":40103,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":3,"connect":29,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aavejob.tech/","fqdn":"aavejob.tech","domain":"aavejob.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T14:19:52.006Z","timestamp":1781705992006,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: aavejob.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T10:29:49.859728Z","times_seen":16606232,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"aavejob.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"aavejob.tech/","fqdn":"aavejob.tech","domain":"aavejob.tech","tld":"tech"},"ip":{"addr":"128.65.195.180","port":80,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T14:19:52.305Z","timestamp":1781705992305,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: aavejob.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Jun 2026 14:19:52 GMT\r\nServer: Apache/2.4.25 (Debian)\r\nLast-Modified: Mon, 15 Jun 2026 18:43:24 GMT\r\nETag: \"1175-6544f338ebac4-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1573\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.25","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":4469,"size_decoded":1912,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3087)","md5":"3219f22df7f7a3861e9c78ab89dec026","sha1":"e0ee6137dac9712d472c8883a3b687489ff551b0","sha256":"689deb5c0e0d56a936e48cf35dce91849d40c8960aa80fbd1b5f4e9fc8ab9ac0","sha512":"99541d17aa2a18d6121d352edd9eaad9af1d8d9b25ab4bbe8c883e4434db301daf9b1fd4cd9d625e7947c1efeeccdf6612116c577a57c59167acc8620572f051","ssdeep":"96:kg8hHXER49Rq5R20PRn6RRuV/XhV/Ab8yV/qUV/193:kjH3uO0PRnOeIwhQ","tlshash":"4691982bc680102d7507c241faa7aa4d623946e2f6159fec997fa6ea63c77c000237a4","first_seen":"2026-06-17T14:20:22.012093Z","last_seen":"2026-06-17T14:20:22.012093Z","times_seen":1,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":4,"connect":33,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"aavejob.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.storage.infomaniak.com/fonts/font-awesome/4.3.0/css/font-awesome.min.css","fqdn":"assets.storage.infomaniak.com","domain":"infomaniak.com","tld":"com"},"ip":{"addr":"84.16.68.46","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://aavejob.tech/","date":"2026-06-17T14:19:52.694Z","timestamp":1781705992694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.storage.infomaniak.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 20 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1E:DA:5D:33:A3:E8:47:8A:29:08:06:EA:44:38:58:67:61:A3:49:C0","sha256":"84:B0:91:50:44:39:F4:9A:29:9E:5F:67:E3:1F:C4:95:57:73:16:3E:03:BC:CA:5B:DB:8B:DE:08:2D:96:92:61"}}},"request":{"raw":"GET /fonts/font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1\r\nHost: assets.storage.infomaniak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://aavejob.tech/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:19:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 23742\r\nlast-modified: Fri, 10 Feb 2023 14:02:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f667e6132f8470a39d2395b81ab4ef09\"\r\nx-amz-request-id: tx0000047b5a08e2baa6332-006763478f-5e6f377-ch-gva-nvme-d3\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nx-request-id: a8b755fc-fb3c-4787-8d4d-87d71e3811df\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23742,"size_decoded":24162,"mime_type":"text/css","magic":"ASCII text, with very long lines (23577), with CRLF line terminators","md5":"f667e6132f8470a39d2395b81ab4ef09","sha1":"3e435d5167460aaf367836e1973e90a47039faea","sha256":"222d75918bb518d46a4d283da7de243b4409d597a8c6856070a07e96b600e6d7","sha512":"acabe5c467ccc2e68b8e3c2625b3540a1fdde4610639f031e35e2c4b1d9724db5a8f3a713724dddd9c64b7949905d6ff26156cee41290e8f6a1a9c87aaa569c7","ssdeep":"192:U1MrZX8W+ab2edrKeTUKuErArKlcZJVrJ3ee+cR6waYm215bvfhf5DrkHUasT:Xs5yWeTUKb+KlkJ5de2UYmyTfhYUasT","tlshash":"31b240f8e54d01d66731c48bff85b36862baf73dd5800d99f01f291c29d22a512c9bba","first_seen":"2023-04-07T13:28:52Z","last_seen":"2026-06-21T05:17:28.967254Z","times_seen":1730,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":84,"connect":34,"send":0,"wait":34,"receive":33,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open%20Sans","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://aavejob.tech/","date":"2026-06-17T14:19:52.698Z","timestamp":1781705992698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Open%20Sans HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://aavejob.tech/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Jun 2026 14:19:52 GMT\r\ndate: Wed, 17 Jun 2026 14:19:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":2249,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"52fd336aac376e54df69f73afa4d9a1e","sha1":"ff01fecffbb6ad52a66fc2464c9a06d64ac49ce4","sha256":"0493c5aeeeee76553b77f584271225f936ff2901a1838303744debf8e99728e3","sha512":"6221444a13a3adb37f5064882fa86db9f2e836e7ce90aecc12ac7345281799d902140f502e5a5b8f08d1651f217844cab59ed53e9d3f4b0e9d52d8ba4f6bd3b3","ssdeep":"96:ZOEM9JOEMWDFZ8OEMjkOEMFYOEMhOEMNy+aZjzBrWOEMzubqGIFuV4UOEMCOEMN4:w9AWjBF1INqbCbqGIwV4Rzlqx","tlshash":"25c14d900017545467471ce723cebe30ee4fa2606040d07aabfd8b9aeed6da9a37532d","first_seen":"2025-09-17T00:02:10.461951Z","last_seen":"2026-06-21T10:42:11.018406Z","times_seen":20074,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":41,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"aavejob.tech/favicon.ico","fqdn":"aavejob.tech","domain":"aavejob.tech","tld":"tech"},"ip":{"addr":"128.65.195.180","port":80,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://aavejob.tech/","date":"2026-06-17T14:19:52.964Z","timestamp":1781705992964,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aavejob.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://aavejob.tech/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 17 Jun 2026 14:19:52 GMT\r\nServer: Apache/2.4.25 (Debian)\r\nContent-Length: 274\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.25","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":274,"size_decoded":490,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"ea7b27399540007100e6f3dbe4d7e1f7","sha1":"ad50a2eddca98685f9654c37738dc7232135a462","sha256":"dd32d9423aa3f31c6afc6bb319ded31bd6c346d7d863a620b97cf7132e3246dc","sha512":"209af4f1d9d4ae7ea33464e527d9559edbe3ca039bd028ae1176214ab747f2829cbc71e2a9e918d9a994d9d35edebebc5202123acea685948e71a859ecec3e1d","ssdeep":"","tlshash":"e8d02bee904373cb0812156039c261ca264c13eab46a81e82dcae487525853dcc9628d","first_seen":"2026-06-17T14:20:22.021091Z","last_seen":"2026-06-17T14:20:22.021091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"aavejob.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}