Report - tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start

Report Overview

Submitted URL
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
IP
23.247.129.197
ASN
#137443 Anchnet Asia Limited
Submitted
2024-04-24 16:13:46
Access
public
Website Title
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Final URL
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
tayemcser.top	unknown	unknown	No data	No data	7.9 kB	1.3 MB	23.247.129.197
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.1 kB	98 kB	216.58.207.227
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-23	512 B	1.2 kB	35.244.181.201
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	464 B	24 kB	216.58.207.234

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php	Swisscom IT Services AG

PhishTank

Scan Date	Severity	Indicator	Alert
2024-04-08	medium	tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed
2024-04-24	medium	tayemcser.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php	0 B	2023-03-07	2024-05-06
Pretty URL tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php IP 23.247.129.197 ASN #137443 Anchnet Asia Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-06 03:12:49 Times Seen37372113 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/min.js	90 kB	2023-03-07	2024-05-05
Pretty URL tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/min.js IP 23.247.129.197 ASN #137443 Anchnet Asia Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-05 17:19:06 Times Seen13002 Hash 9ac39dc31635a363e377eda0f6fbe03f 29fa5ad995e9ec866ece1d3d0b698fc556580eee 9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38 Loading...

	tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/bundle.min.js	84 kB	2023-03-07	2024-05-06
Pretty URL tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/bundle.min.js IP 23.247.129.197 ASN #137443 Anchnet Asia Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:43 Last Seen2024-05-06 02:44:41 Times Seen7350 Hash 7f389f5d2622ce2090eca7c36bcb90bc ab27031159724e2421f6ff5c70f48e657abe9d39 8d7089253dca29c9cd8d9deb7ec69b0a3d445f88f6a26478c719be1f90adcb01 Loading...

	tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/jp.min.js	8.5 kB	2023-03-07	2024-05-06
Pretty URL tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/jp.min.js IP 23.247.129.197 ASN #137443 Anchnet Asia Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:43 Last Seen2024-05-06 02:44:41 Times Seen2956 Hash ae3f52c2166f5c09f5f3ceeda2c15f01 7d5b0613ee02bc0f39f546443f338c806634c5f6 6c4ba1c662b440b3aefe5e5147ea2df72f80e510e4979c65485a7b0fff894e37 Loading...

	tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/script.js	154 B	2023-03-07	2024-05-06
Pretty URL tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/script.js IP 23.247.129.197 ASN #137443 Anchnet Asia Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:43 Last Seen2024-05-06 02:44:41 Times Seen2155 Hash 6a88d53561e8acbb4afe27307d3d4fb9 f1922e8889b32f2c5af762bed4c596687ef28cbb 01066344ed84a8cfc6518af2398dead9ce515b86e710c4ad301049541722ddd9 Loading...

HTTP Transactions (18)

URL IP Response Size

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/css.css

23.247.129.197

200 OK

1.9 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/css.css
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
1.9 kB (1908 bytes)
Hash
714abf1bd29241b3107df13e21c1c63e
c9dc62b6f4ae7ae8e400c6afb13dbfdfd6ba056e
1c444785bb19d391ebbab83252368264c9c997eae898e46d66ede5ce5e8488d6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/css.css HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: text/css
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
vary: Accept-Encoding
etag: W/"66123e09-17f6"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/img-log.png

23.247.129.197

200 OK

19 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/img-log.png
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
PNG image data, 294 x 167, 8-bit/color RGB, non-interlaced
Size
19 kB (19321 bytes)
Hash
8a6e7ff8d8a534b22b63cb7428992ea0
6c321714f8c9762556887511fec63bf52d48f943
22344ee1811fa090420a3a00272c072be9ad865dfca67ffbeaa7ef298638fd11

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/doc/img-log.png HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: image/png
content-length: 19321
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
etag: "66123e09-4b79"
expires: Fri, 24 May 2024 16:12:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/logo2.png

23.247.129.197

200 OK

3.4 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/logo2.png
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
PNG image data, 41 x 55, 8-bit/color RGBA, non-interlaced
Size
3.4 kB (3440 bytes)
Hash
fc6476552b76aa3c16cc1ea908dda205
bad0c7ea56e78a725282080e6d954f7b871cfb37
aea14de2f15479f33a2cdfab1cdf996596cd10de05d4c2f1f5137ad1f16a2d4c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/logo2.png HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: image/png
content-length: 3440
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
etag: "66123e09-d70"
expires: Fri, 24 May 2024 16:12:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/ex.png

23.247.129.197

200 OK

825 B

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/ex.png
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
PNG image data, 22 x 22, 8-bit/color RGB, non-interlaced
Size
825 B (825 bytes)
Hash
0856a7b2b3f0f523b36c0927f39b0669
ea451ace46c38b99f5d962a6f1f82effcf660611
2961ec8560a8d677acb7d37a8e1343a8e6bdb72df60a81861adc2da1a494a934

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/ex.png HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: image/png
content-length: 825
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
etag: "66123e09-339"
expires: Fri, 24 May 2024 16:12:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php

23.247.129.197

200 OK

2.2 kB

URL User Request GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
2.2 kB (2176 bytes)
Hash
b501dd298296807b33149c9c3d486517
a514527c42977527565a6e9b40bead7208e5ee6d
73c429770d6d1ed9e486d6038f741f740f47dce5a782fc428617b07eb1d4f5f6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Swisscom IT Services AG
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:05 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/bst.css

23.247.129.197

200 OK

79 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/bst.css
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
79 kB (79163 bytes)
Hash
d4e450cd9b8e09595749ae64e415f6c7
17e61aa0e2622ef22c4c018f78fa870f0cd16013
5670ea91a93cbfec458eab47ca8b8c230f70971d325daff47a2293dad834d484

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/bst.css HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: text/css
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
vary: Accept-Encoding
etag: W/"66123e09-2728e"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tayemcser.top
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 567503
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tayemcser.top
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 567503
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/script.js

23.247.129.197

200 OK

154 B

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/script.js
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
154 B (154 bytes)
Hash
6a88d53561e8acbb4afe27307d3d4fb9
f1922e8889b32f2c5af762bed4c596687ef28cbb
01066344ed84a8cfc6518af2398dead9ce515b86e710c4ad301049541722ddd9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/script.js HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: application/javascript
content-length: 154
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
etag: "66123e09-9a"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/fv.ico

23.247.129.197

200 OK

4.3 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/fv.ico
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
3879541f5a42e91d65fc1939b3f40b45
4c855cae133255ed558c8a6593cb81fc7fbc87d5
33378d64ea729ba7e9b88800b05742916fd577806182fc87f01a4177069cce78

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/fv.ico HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:09 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
etag: "66123e09-10be"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=pGcE5-a8KieyNKjBCZ2N7CfEop6sFx7Rqw_jtHZCjwX5N-7dJd0muLpHYonRVMwfCputH_Dfy6tekSd3su9kcvdwhlOVoVvUmCGaMJOWuxoDIjBu9Vm8hIfd1M4YgicV
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Wed, 24 Apr 2024 16:13:18 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 21
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/remember.png

23.247.129.197

200 OK

546 B

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/remember.png
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
PNG image data, 22 x 22, 8-bit/color RGB, non-interlaced
Size
546 B (546 bytes)
Hash
2cef120aebccfc6a3171c8fcab95390a
54564f6d6ed8af9dccd0e7e21f5330dc34647ade
d05ece9cad4c85b10d56f2e86f829788b30ddb8c7490387e4398260693767a4a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/imgs/remember.png HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: image/png
content-length: 546
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
etag: "66123e09-222"
expires: Fri, 24 May 2024 16:12:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/min.js

23.247.129.197

200 OK

90 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/min.js
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators
Size
90 kB (89476 bytes)
Hash
9ac39dc31635a363e377eda0f6fbe03f
29fa5ad995e9ec866ece1d3d0b698fc556580eee
9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/min.js HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: application/javascript
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
vary: Accept-Encoding
etag: W/"66123e09-15d84"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/bundle.min.js

23.247.129.197

200 OK

84 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/bundle.min.js
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
84 kB (84152 bytes)
Hash
7f389f5d2622ce2090eca7c36bcb90bc
ab27031159724e2421f6ff5c70f48e657abe9d39
8d7089253dca29c9cd8d9deb7ec69b0a3d445f88f6a26478c719be1f90adcb01

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/bundle.min.js HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: application/javascript
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
vary: Accept-Encoding
etag: W/"66123e09-148b8"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/jp.min.js

23.247.129.197

200 OK

8.5 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/jp.min.js
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (8734), with no line terminators
Size
8.5 kB (8459 bytes)
Hash
ea701d1f20879a688f5a76858db4f1c2
4dff2922890660b9ddd85ae3d84326188c2ee726
c5f39a4fea81e4b58d19ffaebd9b8e62bb1018dff367c52c0a30074f7e02235d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/jp.min.js HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: application/javascript
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
vary: Accept-Encoding
etag: W/"66123e09-210b"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/hp.css

23.247.129.197

200 OK

42 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/hp.css
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (41750), with CRLF line terminators
Size
42 kB (41752 bytes)
Hash
fd877f138d23d5a790645eb95167aec3
ee2f01ca01c5f7e6f674ad79a9fea30f78a66f2c
f839760d1621714efedeb3eb08b25e619812dcc33d77aceb0daf405ac727a765

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/css/hp.css HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: text/css
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
vary: Accept-Encoding
etag: W/"66123e09-a318"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/all.min.js

23.247.129.197

200 OK

981 kB

URL GET HTTP/2
tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/all.min.js
IP
23.247.129.197:443
ASN
#137443 Anchnet Asia Limited

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerTrustAsia Technologies, Inc.
Subjecttayemcser.top
Fingerprint90:35:C7:FF:AD:D3:DD:96:85:ED:BC:BF:CB:CF:B8:60:D3:E4:B2:7C
ValidityFri, 22 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65346), with CRLF line terminators
Size
981 kB (980816 bytes)
Hash
7db237920c9e4f6f5312be564b45db2d
c26b960817b0b9bbcc60269acce1abf573ac8639
9b5454c4d0d0e893203e5f39082921fd81ef6906a4a5127ced79d84655635e88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /DAbout/assets/sass/libs/swiss-ch/fr/1/ass/js/all.min.js HTTP/1.1
Host: tayemcser.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Cookie: PHPSESSID=18gqk5rf04n33gccghr9q3cda1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:12:06 GMT
content-type: application/javascript
last-modified: Sun, 07 Apr 2024 06:32:41 GMT
vary: Accept-Encoding
etag: W/"66123e09-ef750"
expires: Thu, 25 Apr 2024 04:12:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700&display=swap

216.58.207.234

200 OK

23 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700&display=swap
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://tayemcser.top/DAbout/assets/sass/libs/swiss-ch/fr/1/doc/start_index.php
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (1572)
Size
23 kB (23268 bytes)
Hash
87d2524059de849bb4de7f90f8f2450f
8b527f858689adb3b115f914c27ee08747c50687
6ca843c8152080da9858beb844feafe1264162fa3285d61286251ef9be1537e6

HTTP Headers

GET /css2?family=Open+Sans:wght@300;400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tayemcser.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 16:13:23 GMT
date: Wed, 24 Apr 2024 16:13:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash