Report - tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02

Report Overview

Visited public
2025-07-05 18:02:50
Tags
Submit Tags
URL
tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Finishing URL
tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
IP / ASN
172.67.136.243
#13335 CLOUDFLARENET
Title
enc_Ami_0_manager_2025-03-08-02_04.mp4 at Streamtape.com

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
tapepops.com	unknown	2025-06-05	2025-06-07	2025-07-02	8.0 kB	760 kB	172.67.136.243
qt.calyxesdefames.com	unknown	2025-05-07	2025-06-05	2025-06-25	427 B	1.5 kB	23.109.170.89
js.mbidadm.com	unknown	2023-02-20	2023-02-21	2025-07-04	417 B	2.1 kB	45.133.44.52
thumb.tapecontent.net	98256	2020-01-18	2020-04-25	2025-06-29	468 B	76 kB	172.67.200.239
www.google.com	7	1997-09-15	2015-05-10	2025-07-02	464 B	1.8 kB	142.250.178.36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-05	medium	tapepops.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (16)

URL IP Response Size

GET tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4

172.67.136.243

200 OK

106 kB

URL User Request GET
tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
JavaScript source, ASCII text, with very long lines (19140)
Size
106 kB (105796 bytes)
Hash
4f2750deae610e413b6c158c65b9adc9
a7e18824e250682b03446557ce33ed7845a7e5ca
3c6a869d40181197353670e9af0f45c3b249ddfb352830259f17bf259f2a0101

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4 HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
cache-control: private
x-robots-tag: nofollow, noindex, noimageindex
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hHHWr%2FrZp3Hfc%2FX770B89SE4roBjxUsqRiWqMdedhMVHcbMBCEU39fycNge997zziwDmO%2BWluPVfmi3pO4B1p1zFNgVxQe%2FmOiE%3D"}]}
cf-cache-status: BYPASS
vary: accept-encoding
content-encoding: br
set-cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; HttpOnly; Path=/
_b=kube17; Path=/
cf-ray: 95a8c6042b1156be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET tapepops.com/images/Logo@2x.png

172.67.136.243

200 OK

15 kB

URL GET
tapepops.com/images/Logo@2x.png
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
PNG image data, 570 x 136, 8-bit/color RGBA, non-interlaced
Size
15 kB (15155 bytes)
Hash
0d15e6255e9f60f4cb40df0a94e65413
eeb43066a20588b93a8ee849c1fae0094e64afba
363c13fbb83512df1791dffbf8db77281759e131129a73d056016ce9b047b423

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Logo@2x.png HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: image/png
content-length: 15155
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YGxUo8TMSkI8eSYGnW1APecgjAIqBz3aepL3KfBIqcpNDkea6cttl%2BlVShDyGoSnQSbVocJJMcNrcTGFIhNTQFOa8jeQWxO2biZMH%2FAOAtR%2B11unnuVh3rt0xNYOq5o%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Aug 2020 11:07:33 GMT
etag: "5f48e575-3b33"
accept-ranges: bytes
age: 5904
cache-control: max-age=345600
cf-cache-status: HIT
cf-ray: 95a8c607bbc956af-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2374&min_rtt=544&rtt_var=1351&sent=140&recv=181&lost=0&retrans=0&sent_bytes=15259&recv_bytes=13132&delivery_rate=721782&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=354&inflight_dur=31&x=40"

GET tapepops.com/scss/player.ec3b7d.css

172.67.136.243

200 OK

32 kB

URL GET
tapepops.com/scss/player.ec3b7d.css
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
ASCII text, with very long lines (31500), with no line terminators
Size
32 kB (31500 bytes)
Hash
ef06c6005aa0385b099dcfe4cf4c37cb
7375834c8a0d81548fde10ad1c1d14af262b958b
25030a9d025c1e8c6d1bc7a95152b7265ef6eade6ed5d568b4631b828dc5e0db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /scss/player.ec3b7d.css HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OeP%2BZgII4wFou3OR6qv%2Boetpx%2F29MHW7O6jx0j2hr2sQVUvm9WANNBkzewY%2BN43q3SBnpZwaGF5CinSEs0NP8DiKREgbGganrvNufkRoWh18wKqOS3EOcmCutkn4DYk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 12 Mar 2022 01:25:25 GMT
etag: W/"622bf685-7b0c"
age: 6125
cache-control: max-age=345600
cf-cache-status: HIT
content-encoding: br
cf-ray: 95a8c607bbcb56af-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2374&min_rtt=544&rtt_var=1351&sent=137&recv=181&lost=0&retrans=0&sent_bytes=11749&recv_bytes=13132&delivery_rate=721782&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=352&inflight_dur=30&x=40"

GET tapepops.com/fonts/Comfortaa/static/Comfortaa-bold.ttf

172.67.136.243

200 OK

140 kB

URL GET
tapepops.com/fonts/Comfortaa/static/Comfortaa-bold.ttf
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2011 The Comfortaa Project Authors (https://github.com/alexeiva/comfortaa), with Reser
Size
140 kB (139892 bytes)
Hash
266e51ad11e63d67171aeadebc6ab541
e7268b6d7cc37d762d6082689ae61d7ad89f0cdf
d262b2243797b03d2978feb8d5d072e53453794c550950546f15d3b933e07dd6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/Comfortaa/static/Comfortaa-bold.ttf HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/scss/style.css
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: application/octet-stream
content-length: 139892
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbk0M8e2HbKpJBraiwkvxDM33Cr7Dlx1IcCzBM6qCeMDXHaErZAZpK5QT0STKiGY4dC8wytyL9NNbpndMNaZVbJpBXTIZPlzjJlaAXD1wgUrRVQB1VgQOI7z1GxM8cY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 13 Dec 2020 16:27:48 GMT
etag: "5fd64104-22274"
accept-ranges: bytes
cache-control: max-age=345600
cf-cache-status: EXPIRED
cf-ray: 95a8c6095bd956af-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=599&min_rtt=0&rtt_var=221&sent=253&recv=216&lost=0&retrans=0&sent_bytes=156456&recv_bytes=15608&delivery_rate=9405125&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=18987&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=785&inflight_dur=128&x=40"

GET tapepops.com/scss/style.css

172.67.136.243

200 OK

14 kB

URL GET
tapepops.com/scss/style.css
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
ASCII text, with very long lines (12855), with CRLF line terminators
Size
14 kB (14088 bytes)
Hash
33d3ff43345064cdb3d5b810054549d4
3973f8f297b7387f618add4df44cec7fe610152f
a833e56956a49699d75f762db47b80fabd66e6a9a463f343aa92537243a49368

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /scss/style.css HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e4FARgrY0qfXNqi2BbeNp8H2Qs%2B8YzQxZ%2Fh8lWcNyhiIS1tLAGGqRo%2BjWmm1BUxRzYdxTzzPHja%2BRAZUgEZUuHHS8cejngq0Hb4jdNAlVqBVRzsj7nlLzogq5%2FZlCAc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Aug 2020 11:07:33 GMT
etag: W/"5f48e575-3708"
age: 5904
cache-control: max-age=345600
cf-cache-status: HIT
content-encoding: br
cf-ray: 95a8c607bbc756af-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1756&min_rtt=0&rtt_var=1327&sent=152&recv=185&lost=0&retrans=0&sent_bytes=28088&recv_bytes=13312&delivery_rate=1468779&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=19583&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=367&inflight_dur=43&x=40"

GET tapepops.com/js/jquery.min.js

172.67.136.243

200 OK

88 kB

URL GET
tapepops.com/js/jquery.min.js
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ji6d%2BvUzxxtNik5ps4LzLtdfx3toRlVtQJNeulAtAxngCzOg4NlXZa2xs0d0jQNO7lH11nfzVNzD9Wc3FxrYzHOlRErxrk%2FA0NmBGA3ptp1lsFZrq9ohDhtgK4v3MHU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 01 Apr 2020 13:49:44 GMT
etag: W/"5e849bf8-15851"
age: 7108
cache-control: max-age=345600
cf-cache-status: HIT
content-encoding: br
cf-ray: 95a8c607bbc856af-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2185&min_rtt=544&rtt_var=1393&sent=146&recv=182&lost=0&retrans=0&sent_bytes=20283&recv_bytes=13176&delivery_rate=1028822&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=360&inflight_dur=38&x=40"

GET qt.calyxesdefames.com/tpMk5N8tJ1h9wL/48005

23.109.170.89

200 OK

5 B

URL GET
qt.calyxesdefames.com/tpMk5N8tJ1h9wL/48005
IP
23.109.170.89:443
ASN
#7979 SERVERS-COM

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerLet's Encrypt
Subjectqt.calyxesdefames.com
Fingerprint84:3F:FA:30:84:6C:AA:86:D5:53:84:08:1C:3A:56:6F:C5:53:3B:38
ValidityWed, 07 May 2025 08:02:57 GMT - Tue, 05 Aug 2025 08:02:56 GMT

File type
ASCII text, with no line terminators
Size
5 B (5 bytes)
Hash
f7a2939527fd9e68723da600e96d76bd
a9e717b6364d2895ee0a716050db32ca0ef1bb42
d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tpMk5N8tJ1h9wL/48005 HTTP/1.1
Host: qt.calyxesdefames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Jul 2025 18:02:28 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://tapepops.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sun, 06-Jul-2025 18:02:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 06-Jul-2025 18:02:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

GET tapepops.com/js/popper.min.js

172.67.136.243

200 OK

20 kB

URL GET
tapepops.com/js/popper.min.js
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
JavaScript source, ASCII text, with very long lines (19730)
Size
20 kB (19903 bytes)
Hash
710021214a23cf8a5a5841a648d65832
bcbf44d5fea869488f3875c1deb6a139134f99bb
3b5ec1c452ad4edd6dcf3964718c2038dc382b9f47fabd6223c992417bd27f99

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/popper.min.js HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vvTfaWTj3s5OkUSpLnMTgkcEhZlxNaufUF%2B0UQAbk5zvOT9wL4actoSUBpYYitq23JIAxdMz8%2FGj6BSuJPOzEy4Cro9DErM1jW%2Biq%2FDWiXnci5UoMgFjWX8JQSO1ukg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Aug 2020 11:07:33 GMT
etag: W/"5f48e575-4dbf"
age: 5904
cache-control: max-age=345600
cf-cache-status: HIT
content-encoding: br
cf-ray: 95a8c607dbce56af-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1265&min_rtt=0&rtt_var=1348&sent=166&recv=188&lost=0&retrans=0&sent_bytes=47688&recv_bytes=13450&delivery_rate=1859913&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=21924&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=377&inflight_dur=53&x=40"

GET tapepops.com/prebid.min.js

172.67.136.243

200 OK

20 B

URL GET
tapepops.com/prebid.min.js
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
ASCII text, with no line terminators
Size
20 B (20 bytes)
Hash
69a305bcdc8e061bbd43294a477a3678
506582a1d912d546f5942d95ffae95ec7f4c37ce
8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /prebid.min.js HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 20
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cGisSObVjGqst4BkDV5oVW98h6gZ87yyDdqytDgQtwrUFjDisuqGPv2%2BGpn72wFJrnQvzK5uXjLJJDPM6gvVkCeg558RBnNJZOnb%2Fdrq2Xv%2BFh%2BzWECpfPWg%2FbtetJ8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 13 Nov 2024 21:29:55 GMT
etag: "67351a53-14"
accept-ranges: bytes
age: 7103
cache-control: max-age=345600
cf-cache-status: HIT
cf-ray: 95a8c607bbca56af-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2185&min_rtt=544&rtt_var=1393&sent=144&recv=182&lost=0&retrans=0&sent_bytes=18829&recv_bytes=13176&delivery_rate=1028822&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=358&inflight_dur=36&x=40"

GET js.mbidadm.com/static/scripts.js

45.133.44.52

200 OK

1.7 kB

URL GET
js.mbidadm.com/static/scripts.js
IP
45.133.44.52:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerLet's Encrypt
Subjectjs.mbidadm.com
FingerprintCD:AB:BC:3F:4A:8E:E2:AA:16:37:DE:A6:C1:66:6B:7B:F0:20:1B:2F
ValidityThu, 12 Jun 2025 02:34:24 GMT - Wed, 10 Sep 2025 02:34:23 GMT

File type
JavaScript source, ASCII text, with very long lines (1732), with no line terminators
Size
1.7 kB (1732 bytes)
Hash
7e14d1597d1dd442175d8ee15cb07f07
de55b2463f332f2096d788047f8a7b07a776e437
cf31e107e8cb091c9477fe99de3a57a65486fe87becf0e8f469846949beff9f3

HTTP Headers

GET /static/scripts.js HTTP/1.1
Host: js.mbidadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 03 Jul 2025 10:06:04 GMT
etag: W/"6866560c-6c4"
content-encoding: gzip
expires: Sat, 05 Jul 2025 18:07:28 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET tapepops.com/js/bootstrap.min.js

172.67.136.243

200 OK

58 kB

URL GET
tapepops.com/js/bootstrap.min.js
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
JavaScript source, ASCII text, with very long lines (57791)
Size
58 kB (58072 bytes)
Hash
e1d98d47689e00f8ecbc5d9f61bdb42e
6778fed3cf095a318141a31f455c8f4663885bde
0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/bootstrap.min.js HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lc7bAoOqTxQ0AKh3MWu%2BNqMwv9TJetUe5ZHSlynruG48OXCrXB3g7rPtijg530I7jk3uHgnvXAxm47YrCboK6Fyb6VfZij%2BEtZ7YsI0tNlY4qmUeB9Qxe63A9psJIlE%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 13 Dec 2020 16:27:48 GMT
etag: W/"5fd64104-e2d8"
age: 4535
cache-control: max-age=345600
cf-cache-status: HIT
content-encoding: br
cf-ray: 95a8c607dbcf56af-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=929&min_rtt=0&rtt_var=797&sent=178&recv=193&lost=0&retrans=0&sent_bytes=62645&recv_bytes=13682&delivery_rate=2097304&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=18673&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=383&inflight_dur=59&x=40"

GET tapepops.com/assets/bootstrap-4.4.1/dist/css/bootstrap.min.css

172.67.136.243

200 OK

160 kB

URL GET
tapepops.com/assets/bootstrap-4.4.1/dist/css/bootstrap.min.css
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
ASCII text, with very long lines (65324)
Size
160 kB (159515 bytes)
Hash
7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/bootstrap-4.4.1/dist/css/bootstrap.min.css HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53lYuNqmX61edpvI0knuAoXdPyr0r4nETQeGZfUx3LW08Smc26gCKa3q7%2BTgA3fS2iAAUISFrbM418vAGT6hJJN8PadF24AKIogpKY365RD%2BiOhCnZjo1QLNhGXMqYE%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Aug 2020 11:07:33 GMT
etag: W/"5f48e575-26f1b"
age: 5904
cache-control: max-age=345600
cf-cache-status: HIT
content-encoding: br
cf-ray: 95a8c607bbc656af-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2007&min_rtt=544&rtt_var=1100&sent=152&recv=184&lost=0&retrans=0&sent_bytes=28088&recv_bytes=13266&delivery_rate=1028822&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=16205&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=365&inflight_dur=42&x=40"

GET thumb.tapecontent.net/thumb/MYKwjjMevYcmgO2/rdaevqmzk7feX3.jpg

172.67.200.239

200 OK

75 kB

URL GET
thumb.tapecontent.net/thumb/MYKwjjMevYcmgO2/rdaevqmzk7feX3.jpg
IP
172.67.200.239:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapecontent.net
Fingerprint69:08:D9:4D:A9:14:F5:DD:E9:A3:20:B0:F3:F8:DA:C6:8F:87:F6:CC
ValidityMon, 02 Jun 2025 16:53:33 GMT - Sun, 31 Aug 2025 17:51:17 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1280x720, components 3
Size
75 kB (75160 bytes)
Hash
7545474024b914f09779f0450668c3d2
38b7a9425876b853fa3265893fb5201f61b1d355
11b9a3ca0e442baaa52394b7ca45cdb2f1d4ccf8567ff634817208e17c51046e

HTTP Headers

GET /thumb/MYKwjjMevYcmgO2/rdaevqmzk7feX3.jpg HTTP/1.1
Host: thumb.tapecontent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: image/jpeg
content-length: 75160
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Fri, 04 Jul 2025 03:26:26 GMT
etag: b01c66ab7164
access-control-allow-origin: *
allow: OPTIONS, GET, HEAD, POST
access-control-allow-headers: Upgrade-Insecure-Requests,Range,Content-Type,If-Modified-Since
access-control-expose-headers: ETag,Expires,Location,Content-Length,Accept-Ranges,Content-Encoding,Content-Range
x-robots-tag: nofollow, noindex, noimageindex
content-disposition: inline; filename="rdaevqmzk7feX3.jpg"
cache-control: public, max-age=259200
expires: Tue, 08 Jul 2025 05:01:19 GMT
accept-ranges: bytes
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wzVYFYioj%2Fm6xE6g8jgNxwDOVtxnjOoO4gkDT9uAL3uU1BRt1n8Z9Di1CrmLCtCRkOdE%2Bzh%2BWsODm8DSc5DTwp%2F5FRz9KQd41BYN6meKfq1HGtE%3D"}]}
cf-ray: 95a8c60819e856a3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET www.google.com/recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs

142.250.178.36

200 OK

1.1 kB

URL GET
www.google.com/recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs
IP
142.250.178.36:443
ASN
#15169 GOOGLE

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
FingerprintEB:D6:F8:30:DB:49:AE:9E:EF:B9:5D:FD:FA:0C:31:CB:DB:06:4E:F0
ValidityTue, 17 Jun 2025 20:03:45 GMT - Tue, 09 Sep 2025 20:03:44 GMT

File type
JavaScript source, ASCII text, with very long lines (1051), with no line terminators
Size
1.1 kB (1051 bytes)
Hash
808cfaeca4bb826badb8d6346f19d6f3
33aa27e5883496e08c51497bb07954c8215a1048
27812bf13abdc32ab2982e622c6e2b495af61310af35dae6262ff7b8155bd8c5

HTTP Headers

GET /recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 05 Jul 2025 18:02:28 GMT
date: Sat, 05 Jul 2025 18:02:28 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET tapepops.com/fonts/Lato/Lato-Regular.ttf

172.67.136.243

200 OK

75 kB

URL GET
tapepops.com/fonts/Lato/Lato-Regular.ttf
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
TrueType Font data, 16 tables, 1st "GPOS", 15 names, Microsoft, language 0x409, Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic with Reserved Font Name "Lato". Licensed und
Size
75 kB (75136 bytes)
Hash
2d36b1a925432bae7f3c53a340868c6e
83dc5921761a7c3d1ee7badba3fc7e1e1f5ed803
ea8979c22cf1d830e3ff939aadd49cc4d78c851e3cb59d2aa95ea10ee752d5d1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/Lato/Lato-Regular.ttf HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/scss/style.css
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:28 GMT
content-type: application/octet-stream
content-length: 75136
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=feCwvWHLHZfAisBfd%2FYK%2B%2BJv%2BBfm2JCEpBwjh7MCIOysPKOFa4XD%2B%2BV%2BsOFpZx4AvA17vx1pHSiY3mHjTu8BTnjbNKj0NZML6OpyhAfzBLDdHjRvOhrnfDKpCBvvH6E%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 13 Dec 2020 16:27:48 GMT
etag: "5fd64104-12580"
accept-ranges: bytes
cache-control: max-age=345600
cf-cache-status: EXPIRED
cf-ray: 95a8c6095bda56af-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=839&min_rtt=0&rtt_var=678&sent=230&recv=206&lost=0&retrans=0&sent_bytes=125717&recv_bytes=15149&delivery_rate=6019253&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=23322&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=746&inflight_dur=101&x=40"

GET tapepops.com/favicon.ico

172.67.136.243

200 OK

42 kB

URL GET
tapepops.com/favicon.ico
IP
172.67.136.243:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Certificate
IssuerGoogle Trust Services
Subjecttapepops.com
Fingerprint9D:B1:71:8E:C3:5E:63:C9:9A:75:89:7E:E8:3D:57:12:47:DD:A1:C6
ValidityThu, 05 Jun 2025 18:03:25 GMT - Wed, 03 Sep 2025 19:01:04 GMT

File type
MS Windows icon resource - 1 icon, 100x100, 32 bits/pixel
Size
42 kB (41662 bytes)
Hash
1f1617bb9d33485e49af9fae638831f9
e245af39fd84866e07b7e177fa0ff6d25221252f
3fe1701b124953220bd71e61910006cb7c3ae36f6c8975075c842101d97cf513

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: tapepops.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapepops.com/v/MYKwjjMevYcmgO2/enc_Ami_0_manager_2025-03-08-02_04.mp4
Cookie: _csrf=a2d776647fe929e4bcdb5f5dae97eb7966ed1dbb04e9980f3eb623ac2566711da%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22KalkZ0wgKKiCalj4mBPSEuS9db0jM88c%22%3B%7D; _b=kube17
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 05 Jul 2025 18:02:29 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lV9aw2ADVtYZybKZaTEQEmKJiXDWKXOs3CfyYcSfV8mLem1TAfF%2FApQQBALUfvO0RrOkziRPB4wvV8MPe6STbiE87%2F3qOkf2aI6VOOoKQBOgFM16UKOSM51G5cFN0mc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 13 Dec 2020 16:27:48 GMT
etag: W/"5fd64104-a2be"
cache-control: max-age=345600
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 95a8c60f7c4156af-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=620&min_rtt=0&rtt_var=158&sent=399&recv=247&lost=0&retrans=0&sent_bytes=347032&recv_bytes=17424&delivery_rate=22125309&ss_exit_cwnd=14910&ss_exit_reason=2&cwnd=23035&unsent_bytes=0&cid=74b7c0e847a52fc1&ts=1733&inflight_dur=170&x=40"

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (16)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash