Report - m.ayctjx.com/

Report Overview

Visitedpublic

2025-07-07 12:21:22

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
m.ayctjx.com	unknown	2024-08-19	2025-07-07	2025-07-07	39 kB	6.1 MB	192.144.79.36
oudngmslhifnsf.gdmgcyy.com	unknown	2020-05-10	2024-02-01	2025-07-03	406 B	1.1 kB	206.119.188.34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-07	medium	ayctjx.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (20)

	URL	From	Size	First Seen	Last Seen
	m.ayctjx.com/static/js/main.js	ScriptElement	3.4 kB	2024-02-01	2025-08-01
URL m.ayctjx.com/static/js/main.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-01 Last Seen 2025-08-01 Times Seen 468 Size 3.4 kB (3399 bytes) MD5 db57dc1095e0109b2897a1e3e917c020 SHA1 eb096656b27ff23dabd33e656541a4674c6bfe12 SHA256 339b0ac6d3fbc1341ab504d41e4abe03e979338783dc2ad9f7d18ccabbc0e101 Format Code Loading...

	m.ayctjx.com/static/js/meanmenu.min.js	ScriptElement	4.0 kB	2023-03-07	2025-08-02
URL m.ayctjx.com/static/js/meanmenu.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 896 Size 4.0 kB (4019 bytes) MD5 0444feb93a5bb35397275148613d7c07 SHA1 ffddb012374e39779bd5415080ab9e7ac5afa194 SHA256 eaf2ccc92a9f802623e6eb69af21a03fc6ba48b509201e2ded5165b58f22957e Format Code Loading...

	m.ayctjx.com/static/js/waypoints.min.js	ScriptElement	8.0 kB	2023-03-07	2025-08-02
URL m.ayctjx.com/static/js/waypoints.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 3775 Size 8.0 kB (8044 bytes) MD5 dfe0eedf8da578f4a4c43b05448c51d9 SHA1 812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520 SHA256 a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833 Format Code Loading...

	m.ayctjx.com/static/js/plugins.js	ScriptElement	760 B	2023-03-07	2025-08-01
URL m.ayctjx.com/static/js/plugins.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-01 Times Seen 1092 Size 760 B (760 bytes) MD5 074c4c08f0730c4d4ca76f724355807c SHA1 09d6a93af6b87a67c5773163d35f40b993fca3d3 SHA256 c6129bd3aeb079f5c310d2a9618478ba0d621992c1a5e5ef320917937dc2dbb7 Format Code Loading...

	m.ayctjx.com/	Eval	608 B	2024-09-19	2025-07-28
URL m.ayctjx.com/ IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by Eval Embedded false Resource Info First Seen 2024-09-19 Last Seen 2025-07-28 Times Seen 47 Size 608 B (608 bytes) MD5 91a58a6ba3e069b7c428cddb9ddeaf7f SHA1 6c2e4e736cf294ee4b084ddf9c9a496a696e6adc SHA256 f8870a186995432a3e2265371a2552735851be03b1e64d18050be5bdec624292 Format Code Loading...

	m.ayctjx.com/static/js/ajax-form.js	ScriptElement	1.2 kB	2023-03-07	2025-08-01
URL m.ayctjx.com/static/js/ajax-form.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-01 Times Seen 479 Size 1.2 kB (1215 bytes) MD5 9fdd4d0f0ab7d63fd10bbc56f73b8874 SHA1 2895c175d93e8d0a6d205a9d47fc11386db126b1 SHA256 6f9e9742293db7a493b19c68bc2885796c5f90e6e9449b3e633ea56780e5213d Format Code Loading...

	m.ayctjx.com/static/js/owl.carousel.min.js	ScriptElement	43 kB	2023-03-07	2025-08-02
URL m.ayctjx.com/static/js/owl.carousel.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 6286 Size 43 kB (42766 bytes) MD5 b7b9c97cd68ec336d01a79d5be48c58d SHA1 1a99890b57c9859a622337ed0b2f989d6e30cc0e SHA256 b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43 Format Code Loading...

	m.ayctjx.com/static/js/swiper.min.js	ScriptElement	121 kB	2023-03-08	2025-08-01
URL m.ayctjx.com/static/js/swiper.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-08 Last Seen 2025-08-01 Times Seen 557 Size 121 kB (121304 bytes) MD5 b117060487d6ec17a9af7c5604a2c149 SHA1 40a26a977cf1c6b060668c9680cf71a6c8e91e0d SHA256 34200a216f42b734a9723a5367645bb517c31e036b42e2bf6a480c62880fc12c Format Code Loading...

	m.ayctjx.com/static/js/bootstrap.min.js	ScriptElement	51 kB	2023-03-07	2025-08-02
URL m.ayctjx.com/static/js/bootstrap.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 107558 Size 51 kB (51039 bytes) MD5 67176c242e1bdc20603c878dee836df3 SHA1 27a71b00383d61ef3c489326b3564d698fc1227c SHA256 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Format Code Loading...

	m.ayctjx.com/static/js/popper.min.js	ScriptElement	20 kB	2023-03-07	2025-08-01
URL m.ayctjx.com/static/js/popper.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-01 Times Seen 1454 Size 20 kB (20336 bytes) MD5 a22f3f7e61af6a069aa6b422537c3f49 SHA1 682fdc625ae80a890d10af2cb16e62540e2186a8 SHA256 d2b9f29ea1f42a60a8beb1c04f76868287f2a48d6ec50fb39d6b888584a03c49 Format Code Loading...

	m.ayctjx.com/tj.js	ScriptElement	364 B	2024-09-19	2025-07-28
URL m.ayctjx.com/tj.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2024-09-19 Last Seen 2025-07-28 Times Seen 46 Size 364 B (364 bytes) MD5 1fadb2c8b52e1c44d9a4b5b334b9380f SHA1 6f899b2f693d73867fc528592329bdffcc74fb2a SHA256 ad7ebb09ce81cb412933c226f2369c3711f68e7d22576fe1517f3d40f4c76500 Format Code Loading...

	oudngmslhifnsf.gdmgcyy.com/tjb.js	ScriptElement	802 B	2024-09-19	2025-07-28
URL oudngmslhifnsf.gdmgcyy.com/tjb.js IP / ASN 206.119.188.34 #133199 SonderCloud Limited Introduced by ScriptElement Embedded false Resource Info First Seen 2024-09-19 Last Seen 2025-07-28 Times Seen 47 Size 802 B (802 bytes) MD5 b413d4eb17d1f3e7daa24ee23d70c561 SHA1 7317ec4d63b9ec2a58fd37e013e78e58dcf004f8 SHA256 9af97240bbfcaace350c39e6b74d01b2324e073630ef88fd2b01f5afbe2991fc Format Code Loading...

	m.ayctjx.com/static/js/counterup.min.js	ScriptElement	1.1 kB	2023-03-07	2025-08-02
URL m.ayctjx.com/static/js/counterup.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 3783 Size 1.1 kB (1067 bytes) MD5 ef36cca760bf1cd76cfcd0e4dc10cef1 SHA1 ef38469f60d58850fe55c4de2ec7e289a2415d71 SHA256 26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29 Format Code Loading...

	m.ayctjx.com/static/js/wow.min.js	ScriptElement	8.4 kB	2023-03-07	2025-08-01
URL m.ayctjx.com/static/js/wow.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-01 Times Seen 3409 Size 8.4 kB (8415 bytes) MD5 36050285bfeeb7395752f0f9bbc08273 SHA1 5924f7bbbf1dfa3f0926851d01f782f23a59e805 SHA256 0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69 Format Code Loading...

	m.ayctjx.com/static/js/jquery-1.12.4.min.js	ScriptElement	97 kB	2023-03-07	2025-08-02
URL m.ayctjx.com/static/js/jquery-1.12.4.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 36327 Size 97 kB (97163 bytes) MD5 4f252523d4af0b478c810c2547a63e19 SHA1 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb SHA256 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404 Format Code Loading...

	m.ayctjx.com/static/js/magnific-popup.min.js	ScriptElement	20 kB	2023-03-07	2025-08-02
URL m.ayctjx.com/static/js/magnific-popup.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 16864 Size 20 kB (20216 bytes) MD5 ba6cf724c8bb1cf5b084e79ff230626e SHA1 f455c5f153f872e52265f87a644ff89fe14a6fb6 SHA256 3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4 Format Code Loading...

	m.ayctjx.com/	Eval	88 B	2024-09-19	2025-07-28
URL m.ayctjx.com/ IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by Eval Embedded false Resource Info First Seen 2024-09-19 Last Seen 2025-07-28 Times Seen 48 Size 88 B (88 bytes) MD5 1ff3a457b8e671a7fe5ca36b9fb19216 SHA1 1828e4d2f94cb4d7ff8a58d1c99b90de1ae106c9 SHA256 2b3c9f01e73e470af71dc42171203efd541137ba977e9205454718797f3205c6 Format Code Loading...

	m.ayctjx.com/static/js/modernizr-3.5.0.min.js	ScriptElement	8.6 kB	2023-03-07	2025-08-01
URL m.ayctjx.com/static/js/modernizr-3.5.0.min.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-01 Times Seen 899 Size 8.6 kB (8636 bytes) MD5 d7c97fdd45a562ace6cffddc9437a779 SHA1 eb6a5e550ab67f95986363a87da875212ba2f139 SHA256 525ba420f42f72699e059e5c20dd3acd591da3d54d70a319b0e360369482dde8 Format Code Loading...

	m.ayctjx.com/static/js/scrolltop.js	ScriptElement	2.2 kB	2023-03-07	2025-08-01
URL m.ayctjx.com/static/js/scrolltop.js IP / ASN 192.144.79.36 #55714 Fiberlink Pvt.Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-01 Times Seen 487 Size 2.2 kB (2239 bytes) MD5 36e8c3c87020b0ac057fa96463619793 SHA1 3bab73ad0a2528b80270b2413ab7955f956acee8 SHA256 8a29dd36263e340e17993bc8a3f8a17c7802b07b36c8592a493c4d0f31bc3fe5 Format Code Loading...

	HASH	FROM	Size	First Seen	Last Seen
	4438fcedbdfee8382bec29cd981c3e26	DocumentWrite	65 B	2024-09-19	2025-07-28
Introduced by DocumentWrite First Seen 2024-09-19 Last Seen 2025-07-28 Times Seen 47 Size 65 B (65 bytes) MD5 4438fcedbdfee8382bec29cd981c3e26 SHA1 539da3b4bf0bb165488b54e2234b1f33cb156c97 SHA256 0bed694b9b3eb6577fac2049b4ffa823fd18cc885a5a79c4ce52d5f5861ebae2 Format Code Loading...

HTTP Transactions (81)

URL IP Response Size

GET m.ayctjx.com/uploads/allimg/250707/1SG234b-0-lp.jpg

192.144.79.36

200 OK

15 kB

URL

m.ayctjx.com/uploads/allimg/250707/1SG234b-0-lp.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 240x144, components 3

First Seen2025-07-07

Last Seen2025-07-07

Times Seen1

Size15 kB (14696 bytes)

MD52488843e8285671b241dff2d9fb5cb61

SHA128738b92260319c7096f8a0280aaae8aae278343

SHA256fe144e08a5c9b2079c216663b4c2509ca46f81f25ca92e6e7eab607f53d076a2

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/allimg/250707/1SG234b-0-lp.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 07 Jul 2025 10:38:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"686ba397-3968"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/uploads/allimg/250707/19193M045-0-lp.jpg

192.144.79.36

200 OK

10 kB

URL

m.ayctjx.com/uploads/allimg/250707/19193M045-0-lp.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

First Seen2025-07-07

Last Seen2025-07-07

Times Seen1

Size10 kB (10411 bytes)

MD56b78951eb5c022af876bc36a579904b1

SHA1c88893ef954b2701583bc6028ea5bdfca5d90b19

SHA256abb76d7cee98da9fffa0ca2b13ac51358c0e7ddf064fbb1e2fb8a524299cdb96

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/allimg/250707/19193M045-0-lp.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 07 Jul 2025 11:19:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"686bad51-28ab"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/images/hero-bg-1.jpg

192.144.79.36

200 OK

59 kB

URL

m.ayctjx.com/static/images/hero-bg-1.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen437

Size59 kB (58769 bytes)

MD554df693087c681bca1e3a984c625aba9

SHA1d1c489b5200f2b55945b848d7490234f296744df

SHA2567b9d4cbbe3baae34090c8f128c4ebad670f69b0ad4103069517c167203a62225

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/hero-bg-1.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/style.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:53:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426650-e591"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/fonts/pxibyp8kv8jhgfvrlej6z1xlfq.woff2

192.144.79.36

200 OK

8.0 kB

URL

m.ayctjx.com/static/fonts/pxibyp8kv8jhgfvrlej6z1xlfq.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 7988, version 1.0

First Seen2023-04-08

Last Seen2025-08-01

Times Seen1612

Size8.0 kB (7988 bytes)

MD5087457026965f98466618a478c4b1b07

SHA100b024ccb35e3694de662d180d6ea7f56de6d654

SHA256b93b9165269362989e2855d0bf0ae232d7193a45c43627b2d03b26d7eb98263b

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/pxibyp8kv8jhgfvrlej6z1xlfq.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: font/woff2
Content-Length: 7988
Last-Modified: Wed, 01 Nov 2023 14:57:06 GMT
Connection: keep-alive
ETag: "65426742-1f34"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/images/subscribe-bg.jpg

192.144.79.36

200 OK

78 kB

URL

m.ayctjx.com/static/images/subscribe-bg.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x250, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen437

Size78 kB (78237 bytes)

MD5abaae475d804c03c9dff6d0d7fc8c45b

SHA13699feb3aae732d75cf38550e21d570462cb5ac6

SHA2561cadfa5a9c3018eb30926fafb7737c72d1066dc65c41ec22162229698ba7bf25

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/subscribe-bg.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/style.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:52:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542663c-1319d"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/

192.144.79.36

200 OK

80 kB

URL

m.ayctjx.com/

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (2127), with CRLF, LF line terminators

First Seen2025-07-07

Last Seen2025-07-07

Times Seen1

Size80 kB (79573 bytes)

MD5ea70619efd06add1dd240c9df86f410a

SHA1d55967f9531edfce755ab47e8d4512d63101c217

SHA25605977b98276250010d7f86aa794b69195e8e8f14a367d296da91cd982e74a0ae

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:00 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/swiper.min.css

192.144.79.36

200 OK

20 kB

URL

m.ayctjx.com/static/css/swiper.min.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text, with very long lines (19512)

First Seen2023-04-21

Last Seen2025-08-01

Times Seen320

Size20 kB (19775 bytes)

MD55c0f2c77026394b48961a2072e95068b

SHA19e1fba8b077619cf85a7f82bbaf1d192590c8103

SHA256fcc52c6f1315aa55dbc6d62c55437b49cadbabc1dde54a7e067b599764ee30b4

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/swiper.min.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426186-4d3f"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/about-1.png

192.144.79.36

200 OK

228 kB

URL

m.ayctjx.com/static/picture/about-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 527 x 555, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen422

Size228 kB (228126 bytes)

MD54171b2c2229183a9006f545f0ead11a2

SHA1b385422f48ef79448c6de4c104e241e40e9366b9

SHA2567f69b0556f6ef74eb6afc1368fc7ad01939a6e4cbfb4613a1b7fc5b9246b9f5a

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/about-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-37b1e"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/ajax-form.js

192.144.79.36

200 OK

1.2 kB

URL

m.ayctjx.com/static/js/ajax-form.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text

First Seen2023-03-07

Last Seen2025-08-01

Times Seen479

Size1.2 kB (1215 bytes)

MD59fdd4d0f0ab7d63fd10bbc56f73b8874

SHA12895c175d93e8d0a6d205a9d47fc11386db126b1

SHA2566f9e9742293db7a493b19c68bc2885796c5f90e6e9449b3e633ea56780e5213d

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/ajax-form.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261d2-4bf"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/fonts/pxieyp8kv8jhgfvrjjfecg.woff2

192.144.79.36

200 OK

7.9 kB

URL

m.ayctjx.com/static/fonts/pxieyp8kv8jhgfvrjjfecg.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 7900, version 1.0

First Seen2023-04-08

Last Seen2025-08-01

Times Seen1978

Size7.9 kB (7900 bytes)

MD59ed361bba8488aeb2797b82befda20f1

SHA16f80d965a066aff81c0a344d4b7297bd009cc099

SHA25641e46faff74c6a77d581689ec35eb040f6c96d17f4d2c5b25dccd42ed498b01c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: font/woff2
Content-Length: 7900
Last-Modified: Wed, 01 Nov 2023 14:57:32 GMT
Connection: keep-alive
ETag: "6542675c-1edc"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/tj.js

192.144.79.36

200 OK

364 B

URL

m.ayctjx.com/tj.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (362)

First Seen2024-09-19

Last Seen2025-07-28

Times Seen46

Size364 B (364 bytes)

MD51fadb2c8b52e1c44d9a4b5b334b9380f

SHA16f899b2f693d73867fc528592329bdffcc74fb2a

SHA256ad7ebb09ce81cb412933c226f2369c3711f68e7d22576fe1517f3d40f4c76500

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tj.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: application/javascript
Content-Length: 364
Last-Modified: Fri, 30 Aug 2024 07:04:57 GMT
Connection: keep-alive
ETag: "66d16f19-16c"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/picture/client-1.png

192.144.79.36

200 OK

757 kB

URL

m.ayctjx.com/static/picture/client-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 162 x 35, 8-bit/color RGBA, non-interlaced

First Seen2024-03-15

Last Seen2025-08-01

Times Seen387

Size757 kB (756954 bytes)

MD5781acbd42081e9e3c1ee7462ce8ad3ad

SHA12770f8174eebbfd5ae593a21b75ab268d7e50a4d

SHA256b71375eea868f5e91723374f586c46e1b838491970612de0716b5b1df81502ec

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/client-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-b8cda"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/meanmenu.min.js

192.144.79.36

200 OK

4.0 kB

URL

m.ayctjx.com/static/js/meanmenu.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (4019), with no line terminators

First Seen2023-03-07

Last Seen2025-08-02

Times Seen896

Size4.0 kB (4019 bytes)

MD50444feb93a5bb35397275148613d7c07

SHA1ffddb012374e39779bd5415080ab9e7ac5afa194

SHA256eaf2ccc92a9f802623e6eb69af21a03fc6ba48b509201e2ded5165b58f22957e

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/meanmenu.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261c2-fb3"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/main.js

192.144.79.36

200 OK

3.4 kB

URL

m.ayctjx.com/static/js/main.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text

First Seen2024-02-01

Last Seen2025-08-01

Times Seen468

Size3.4 kB (3399 bytes)

MD5db57dc1095e0109b2897a1e3e917c020

SHA1eb096656b27ff23dabd33e656541a4674c6bfe12

SHA256339b0ac6d3fbc1341ab504d41e4abe03e979338783dc2ad9f7d18ccabbc0e101

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/main.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:34:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261de-d47"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/fonts/4icv6kvjbnbylgocjc3jsgyn.woff2

192.144.79.36

200 OK

30 kB

URL

m.ayctjx.com/static/fonts/4icv6kvjbnbylgocjc3jsgyn.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 29864, version 1.0

First Seen2023-05-07

Last Seen2025-08-01

Times Seen582

Size30 kB (29864 bytes)

MD5b4e565dcfc8f6cb332be0fc03302ad99

SHA186bec9deab5b1b78b2c3b40df903c7d25e511763

SHA25697d812da07c2319e0e64c4137b33a5d3ccfb4c06fa5ab4444f522959e27a9ed0

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/4icv6kvjbnbylgocjc3jsgyn.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: font/woff2
Content-Length: 29864
Last-Modified: Wed, 01 Nov 2023 14:57:28 GMT
Connection: keep-alive
ETag: "65426758-74a8"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/picture/logo-2.png

192.144.79.36

200 OK

3.1 kB

URL

m.ayctjx.com/static/picture/logo-2.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 125 x 57, 8-bit/color RGBA, non-interlaced

First Seen2024-03-15

Last Seen2025-08-01

Times Seen427

Size3.1 kB (3097 bytes)

MD5f7a90ba93e1c08513c6534e6fabb742c

SHA12a1943030890f91f13a8888e2ded5ca6e762f74c

SHA2562d86c01f9af1456d681d7852b7c6aac9d4957dc44ec7a53357aa6961c79bef25

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/logo-2.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-c19"
Expires: Wed, 06 Aug 2025 12:21:05 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/gallery-2.jpg

192.144.79.36

200 OK

9.7 kB

URL

m.ayctjx.com/static/picture/gallery-2.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen429

Size9.7 kB (9736 bytes)

MD580270079ec7950a0b8d5e834e488dd72

SHA138a26bfd822f52b44c7e907fb15b6feef87f9e83

SHA25658d810fbaa2f91e3aa5437fb5bf193b65db9c8c67b837755617089a50c72b8d3

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/gallery-2.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-2608"
Expires: Wed, 06 Aug 2025 12:21:05 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/gallery-6.jpg

192.144.79.36

200 OK

8.6 kB

URL

m.ayctjx.com/static/picture/gallery-6.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen439

Size8.6 kB (8589 bytes)

MD5939fdd3fe4c3f64694a5c587dcaaff07

SHA1dd6ad294a49435f1ec4f6c4c2cbccaf9ce7a62ac

SHA256fcfe9fdc32d7f1e3485514b47236004b0dbd09c6d934b69b480d79a660e32675

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/gallery-6.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-218d"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/icon-2.png

192.144.79.36

200 OK

3.7 kB

URL

m.ayctjx.com/static/picture/icon-2.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 27 x 42, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen436

Size3.7 kB (3696 bytes)

MD5db2a1bb07e49376ad9e93001a8a08223

SHA189dea4d507f5d61eacf70c755aef7bac003d92ae

SHA256374b798d265fbf16b071275596dc6a5d6915f3ec3bd69d3e453073ad62c495ba

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/icon-2.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-e70"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/client-2.png

192.144.79.36

200 OK

757 kB

URL

m.ayctjx.com/static/picture/client-2.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 207 x 50, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen390

Size757 kB (756891 bytes)

MD5d45a51dead2546060debd05d9eb91c7b

SHA170d11df581e0319856bfa92ce4b386b0d1d5bd71

SHA25698e44f3336028a58ea4f24c7b8f4e06f766e8f362678f0c3f437650382686e94

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/client-2.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-b8c9b"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/scrolltop.js

192.144.79.36

200 OK

2.2 kB

URL

m.ayctjx.com/static/js/scrolltop.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text

First Seen2023-03-07

Last Seen2025-08-01

Times Seen487

Size2.2 kB (2239 bytes)

MD536e8c3c87020b0ac057fa96463619793

SHA13bab73ad0a2528b80270b2413ab7955f956acee8

SHA2568a29dd36263e340e17993bc8a3f8a17c7802b07b36c8592a493c4d0f31bc3fe5

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/scrolltop.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261ce-8bf"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/bootstrap.min.css

192.144.79.36

200 OK

141 kB

URL

m.ayctjx.com/static/css/bootstrap.min.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text, with very long lines (65324)

First Seen2024-08-20

Last Seen2025-08-01

Times Seen236

Size141 kB (140940 bytes)

MD5ce17cbaab7fd4cfda8912d9c4312c218

SHA16df922c89a4ec37c9d8a9eb93ff1fa41e5226cbe

SHA2561bc928b3d60f607be806d73ca90a6a833c063f5d812895e24cd412e064beec4c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/bootstrap.min.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:01 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426176-2268c"
Expires: Tue, 08 Jul 2025 00:21:01 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/hero-mobile-1.png

192.144.79.36

200 OK

48 kB

URL

m.ayctjx.com/static/picture/hero-mobile-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 401 x 801, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen428

Size48 kB (47651 bytes)

MD5689fab29ff518f640b9eb842d7838ff7

SHA1436226b82cdcf8071dd5a3dd9a6a92a3c7aaaf68

SHA2562f190ed00391ce2b621e9f9fbf3610c80e103776f30328cf9cab9b35da8fe192

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/hero-mobile-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426258-ba23"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/faqs-1.png

192.144.79.36

200 OK

141 kB

URL

m.ayctjx.com/static/picture/faqs-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 523 x 555, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen432

Size141 kB (141103 bytes)

MD5b8c8872cbde5a67df9eb242028842b05

SHA1d7ecd383d3bdd4f66ca1a12b7b5d8ec6d1b1219f

SHA256fc49a0fda10de6144340da2a8a01c3f4ab4e046e4c668faa24aac44b3f7ce735

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/faqs-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-2272f"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET oudngmslhifnsf.gdmgcyy.com/tjb.js

206.119.188.34

200 OK

802 B

URL

oudngmslhifnsf.gdmgcyy.com/tjb.js

IP / ASN

206.119.188.34

#133199 SonderCloud Limited

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (802), with no line terminators

First Seen2024-09-19

Last Seen2025-07-28

Times Seen47

Size802 B (802 bytes)

MD5b413d4eb17d1f3e7daa24ee23d70c561

SHA17317ec4d63b9ec2a58fd37e013e78e58dcf004f8

SHA2569af97240bbfcaace350c39e6b74d01b2324e073630ef88fd2b01f5afbe2991fc

Certificate Info

IssuerLet's Encrypt

Subjectoudngmslhifnsf.gdmgcyy.com

Fingerprint34:1E:21:48:1D:79:4D:D2:F6:78:FF:8F:05:45:FD:B2:17:EC:CD:5B

ValidityFri, 13 Jun 2025 12:01:02 GMT - Thu, 11 Sep 2025 12:01:01 GMT

HTTP Headers

GET /tjb.js HTTP/1.1
Host: oudngmslhifnsf.gdmgcyy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.21.4.3
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: application/javascript
Content-Length: 802
Last-Modified: Sun, 19 May 2024 07:52:07 GMT
Connection: keep-alive
ETag: "6649afa7-322"
Accept-Ranges: bytes

GET m.ayctjx.com/static/images/cta-bg.png

192.144.79.36

200 OK

71 kB

URL

m.ayctjx.com/static/images/cta-bg.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 1920 x 350, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen434

Size71 kB (71277 bytes)

MD596d07cdabd48de8c3f406ca38b4a867e

SHA10766359895be74cfd59914603fdacf69887aa968

SHA256892b149b7c759e154d0b8500e86c5682fdc3b6787b66b6148046bca479d670d2

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/cta-bg.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/style.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:52:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542664a-1166d"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/uploads/allimg/250707/1Q9164017-0-lp.jpg

192.144.79.36

200 OK

8.3 kB

URL

m.ayctjx.com/uploads/allimg/250707/1Q9164017-0-lp.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

First Seen2025-07-07

Last Seen2025-07-07

Times Seen1

Size8.3 kB (8334 bytes)

MD5117f10db6e5f89b8761666687af83f81

SHA1fa222dceaf7239207a78d07eb32f7e6925c56233

SHA2565eef65ecdcd42853a1c8422257c3eaf81a0c06e4fd327d9475d8d1150648cf25

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/allimg/250707/1Q9164017-0-lp.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 07 Jul 2025 10:19:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"686b9f26-208e"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/client-4.png

192.144.79.36

200 OK

759 kB

URL

m.ayctjx.com/static/picture/client-4.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 207 x 56, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen405

Size759 kB (758637 bytes)

MD5a7fe812cff429341ceabc2f6b90106ad

SHA173138f68d7145b79276ffb86777ca6e159a11136

SHA256a2c8d365b68c872746170ad957d55d42e1686f3b0bfecd97df8e599b6bc404f9

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/client-4.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-b936d"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/wow.min.js

192.144.79.36

200 OK

8.4 kB

URL

m.ayctjx.com/static/js/wow.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (8385)

First Seen2023-03-07

Last Seen2025-08-01

Times Seen3409

Size8.4 kB (8415 bytes)

MD536050285bfeeb7395752f0f9bbc08273

SHA15924f7bbbf1dfa3f0926851d01f782f23a59e805

SHA2560ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/wow.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261d6-20df"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/fonts/4icv6kvjbnbylgocxcvjsgyn.woff2

192.144.79.36

200 OK

29 kB

URL

m.ayctjx.com/static/fonts/4icv6kvjbnbylgocxcvjsgyn.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 28968, version 1.0

First Seen2023-04-13

Last Seen2025-08-01

Times Seen603

Size29 kB (28968 bytes)

MD5b91fae466c698c775adb2ae92cecc8b2

SHA15c9b89fcd9dee91910506375b316c59aef97e47b

SHA256045469f2d577c2ad73219bbd713640bcb4a4f9a46cecc6c0df0e66338646b27f

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/4icv6kvjbnbylgocxcvjsgyn.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: font/woff2
Content-Length: 28968
Last-Modified: Wed, 01 Nov 2023 14:57:36 GMT
Connection: keep-alive
ETag: "65426760-7128"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/fonts/4ics6kvjbnbylgokfw72.woff2

192.144.79.36

200 OK

34 kB

URL

m.ayctjx.com/static/fonts/4ics6kvjbnbylgokfw72.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 34260, version 1.0

First Seen2023-04-13

Last Seen2025-08-02

Times Seen722

Size34 kB (34260 bytes)

MD55b23eeb3a32b30e91682d601535d2a89

SHA148469f0155a13f3499db31d53cba5d47e8b528b5

SHA2564f4524f7e1a87079bc50a64681f880ccf3e6f5db1ec5fc27949377532a3881da

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/4ics6kvjbnbylgokfw72.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: font/woff2
Content-Length: 34260
Last-Modified: Wed, 01 Nov 2023 14:57:20 GMT
Connection: keep-alive
ETag: "65426750-85d4"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/css/style.css

192.144.79.36

200 OK

38 kB

URL

m.ayctjx.com/static/css/style.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text

First Seen2025-04-07

Last Seen2025-08-01

Times Seen235

Size38 kB (38233 bytes)

MD5ca8d85edce6b2261224e393c6cdef7ab

SHA19689001b07c8b2692f32c054c89fabc8d060f5f2

SHA256e3260baa98665decde692e06c658a00a9d839820248cecbb3a865d5b77005c40

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/style.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 20:23:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542b3ac-9559"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/gallery-3.jpg

192.144.79.36

200 OK

8.4 kB

URL

m.ayctjx.com/static/picture/gallery-3.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen439

Size8.4 kB (8397 bytes)

MD54c1ec4a5c4206f22e37243d99eec884b

SHA1aec1d2d2952f0936062d0acc4c2e34641771c872

SHA2562d83693d57d7a37fae6fdc5da84cda1b126373f85aafa624ad17ccc35a536a5e

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/gallery-3.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-20cd"
Expires: Wed, 06 Aug 2025 12:21:05 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/gallery-5.jpg

192.144.79.36

200 OK

11 kB

URL

m.ayctjx.com/static/picture/gallery-5.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen438

Size11 kB (10949 bytes)

MD57b13e0f6e593a8164ddafade586beadb

SHA1384a3e63dca672854beab1659a5b28acc26c1b9c

SHA256cb1a1bde6f843c89afdd617c7dc5ac3170e1f837749daea38e893be78beeae9b

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/gallery-5.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-2ac5"
Expires: Wed, 06 Aug 2025 12:21:05 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/jquery-1.12.4.min.js

192.144.79.36

200 OK

97 kB

URL

m.ayctjx.com/static/js/jquery-1.12.4.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (32077)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen36327

Size97 kB (97163 bytes)

MD54f252523d4af0b478c810c2547a63e19

SHA15a9dcfbef655a2668e78baebeaa8dc6f41d8dabb

SHA256668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/jquery-1.12.4.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261b4-17b8b"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/waypoints.min.js

192.144.79.36

200 OK

8.0 kB

URL

m.ayctjx.com/static/js/waypoints.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (7808)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen3775

Size8.0 kB (8044 bytes)

MD5dfe0eedf8da578f4a4c43b05448c51d9

SHA1812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520

SHA256a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/waypoints.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261c8-1f6c"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/counterup.min.js

192.144.79.36

200 OK

1.1 kB

URL

m.ayctjx.com/static/js/counterup.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (917)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen3783

Size1.1 kB (1067 bytes)

MD5ef36cca760bf1cd76cfcd0e4dc10cef1

SHA1ef38469f60d58850fe55c4de2ec7e289a2415d71

SHA25626d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/counterup.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261cc-42b"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/default.css

192.144.79.36

200 OK

14 kB

URL

m.ayctjx.com/static/css/default.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text

First Seen2024-08-20

Last Seen2025-08-01

Times Seen239

Size14 kB (14354 bytes)

MD58006b19ef8f43f52d92b786676faacdc

SHA15128ccf1b525e757cc68afbd0504a23128b8d209

SHA25614b3bea27abf08457cc3f1c0424a932bce90f49e71e98aaf3707140561bf4ef4

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/default.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542618a-3812"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/images/643x0w.png

192.144.79.36

200 OK

234 kB

URL

m.ayctjx.com/static/images/643x0w.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 643 x 858, 8-bit/color RGBA, non-interlaced

First Seen2024-03-15

Last Seen2025-08-01

Times Seen430

Size234 kB (234154 bytes)

MD5829f1a6ca8ac75edf0235c4412a7e2df

SHA1f31b3970364480fca947f81bba24d253e447eab6

SHA2560d4223b8fbb93974189d9ae877f9bd4840a2a046fc2a47b07094faf9ff48145c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/643x0w.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 16:13:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542790c-392aa"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/gallery-4.jpg

192.144.79.36

200 OK

4.7 kB

URL

m.ayctjx.com/static/picture/gallery-4.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen421

Size4.7 kB (4721 bytes)

MD53507c2613a89a75b60b04718aaaafec6

SHA18e27a8bd05d333bfbbf4e6b52a7b526164ab5f1b

SHA256ba1d60db77681ffa279dfa8dcf6ad57fc25ffaff5fe21854edcf480c73e18fad

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/gallery-4.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-1271"
Expires: Wed, 06 Aug 2025 12:21:05 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/client-3.png

192.144.79.36

200 OK

757 kB

URL

m.ayctjx.com/static/picture/client-3.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 207 x 40, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen411

Size757 kB (756590 bytes)

MD533752fa5f9f4bc80715eb0e4d0a8dca6

SHA1090fab80b86c597f258aa6d3e69c1856c721f852

SHA2566963475390919af00e932667866dcd50a99bd3c10eed37e7171ce44f2f2a326c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/client-3.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-b8b6e"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2

192.144.79.36

200 OK

7.8 kB

URL

m.ayctjx.com/static/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 7832, version 1.0

First Seen2023-04-08

Last Seen2025-08-01

Times Seen1275

Size7.8 kB (7832 bytes)

MD5f4f17fd53c7d040e56f91a3ecb692b22

SHA11b51342175762634835645ba2f99cd3ab0ac615c

SHA256b0b43e548e691662dac85b1dc159d148a273d5cb9139f3fcf457cdeebe7bdf3f

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: font/woff2
Content-Length: 7832
Last-Modified: Wed, 01 Nov 2023 14:57:10 GMT
Connection: keep-alive
ETag: "65426746-1e98"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/uploads/allimg/250707/201U325W-0-lp.jpg

192.144.79.36

200 OK

10 kB

URL

m.ayctjx.com/uploads/allimg/250707/201U325W-0-lp.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

First Seen2025-07-07

Last Seen2025-07-07

Times Seen1

Size10 kB (10435 bytes)

MD50081fcc7dbcad444528159db1e09d5f6

SHA174242e5a4c68203c18ff085bd60b8a654af58da2

SHA256526bdec71bc95d318f8fdeeff8ce600851b963080357344c2c9c289b9a0039f1

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/allimg/250707/201U325W-0-lp.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 07 Jul 2025 12:19:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"686bbb43-28c3"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/uploads/allimg/250707/193H0BX-0-lp.jpg

192.144.79.36

200 OK

9.2 kB

URL

m.ayctjx.com/uploads/allimg/250707/193H0BX-0-lp.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

First Seen2025-07-07

Last Seen2025-07-07

Times Seen1

Size9.2 kB (9186 bytes)

MD5db9eef3fc35e2a8afb6bfebc49714883

SHA192d09db34625df985ef1a2ca6e0444c93f4f04c6

SHA256667d2ee70a966451c62c6d4fb5f7e990c05566efb5caa89a48aeb18ee3404946

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/allimg/250707/193H0BX-0-lp.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 07 Jul 2025 11:38:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"686bb19b-23e2"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/swiper.min.js

192.144.79.36

200 OK

121 kB

URL

m.ayctjx.com/static/js/swiper.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65276)

First Seen2023-03-08

Last Seen2025-08-01

Times Seen557

Size121 kB (121304 bytes)

MD5b117060487d6ec17a9af7c5604a2c149

SHA140a26a977cf1c6b060668c9680cf71a6c8e91e0d

SHA25634200a216f42b734a9723a5367645bb517c31e036b42e2bf6a480c62880fc12c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/swiper.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261c0-1d9d8"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/shape-3.png

192.144.79.36

200 OK

1.5 kB

URL

m.ayctjx.com/static/picture/shape-3.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen447

Size1.5 kB (1539 bytes)

MD57897206239870928ccadd33798a0c388

SHA1c8ebf2f2078d74e3cd70765dd23610fd2e118295

SHA2565933313031931d2179d11ecac187502a4e628c63c22f89cae78f1a009d5f2f51

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/shape-3.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-603"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/about-icon-1.png

192.144.79.36

200 OK

2.5 kB

URL

m.ayctjx.com/static/picture/about-icon-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen435

Size2.5 kB (2548 bytes)

MD55787184d0495e46a5557b7aa8957af95

SHA1f48a8870e05b6c3cb8278159dfe96bfcd9b9203b

SHA256fe2389b7a1ee96ca436b5ed684c94c61d561b1c9af8a463a79b6c19cf84e7413

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/about-icon-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-9f4"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/gallery-1.jpg

192.144.79.36

200 OK

8.4 kB

URL

m.ayctjx.com/static/picture/gallery-1.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen427

Size8.4 kB (8373 bytes)

MD5a503b5ea39cc615e9f621d3e3b557c88

SHA11f35790c70b0ba47649e51b0029e5ecfd6ce9567

SHA25686e28b1dde1151defcd2156ad46fb88bf142931c26245a3255a68601f49314ae

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/gallery-1.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:36:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426258-20b5"
Expires: Wed, 06 Aug 2025 12:21:05 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/bootstrap.min.js

192.144.79.36

200 OK

51 kB

URL

m.ayctjx.com/static/js/bootstrap.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (50758)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen107558

Size51 kB (51039 bytes)

MD567176c242e1bdc20603c878dee836df3

SHA127a71b00383d61ef3c489326b3564d698fc1227c

SHA25656c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/bootstrap.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261ba-c75f"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/owl.carousel.min.js

192.144.79.36

200 OK

43 kB

URL

m.ayctjx.com/static/js/owl.carousel.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (32000)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen6286

Size43 kB (42766 bytes)

MD5b7b9c97cd68ec336d01a79d5be48c58d

SHA11a99890b57c9859a622337ed0b2f989d6e30cc0e

SHA256b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/owl.carousel.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261c6-a70e"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/meanmenu.css

192.144.79.36

200 OK

3.6 kB

URL

m.ayctjx.com/static/css/meanmenu.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text, with CRLF line terminators

First Seen2025-02-06

Last Seen2025-08-01

Times Seen249

Size3.6 kB (3551 bytes)

MD50114b5bc44cfbf06fecb3419fd86558a

SHA1535f3a6dfbec7470af300f7245a69baf034bf392

SHA256916cc8ed433d7132f756b452e4ab9f9c429bf921b640c1a4a38ccc50465ed721

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/meanmenu.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:01 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426178-ddf"
Expires: Tue, 08 Jul 2025 00:21:01 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/owl.carousel.min.css

192.144.79.36

200 OK

3.4 kB

URL

m.ayctjx.com/static/css/owl.carousel.min.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text, with very long lines (3194)

First Seen2023-04-11

Last Seen2025-08-01

Times Seen289

Size3.4 kB (3364 bytes)

MD56fd338d01b002e369f3981f1a74a40fc

SHA1fcb2985d8ecb9ade9189ea9dfb7040ca313898b1

SHA25675e09f682f70b2216d6fe51f5793fd6b69be396caed264612706aa3b7ac5d8ae

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/owl.carousel.min.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426180-d24"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/owl.theme.default.min.css

192.144.79.36

200 OK

1.0 kB

URL

m.ayctjx.com/static/css/owl.theme.default.min.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text, with very long lines (846)

First Seen2023-04-05

Last Seen2025-08-02

Times Seen6847

Size1.0 kB (1016 bytes)

MD5594b81805a98b267e47c70a8fad30d9f

SHA1684d84ec40b305ca14efc88c91f12972cb6342b4

SHA256924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/owl.theme.default.min.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Content-Length: 1016
Last-Modified: Wed, 01 Nov 2023 14:32:34 GMT
Connection: keep-alive
ETag: "65426182-3f8"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/fonts/pxigyp8kv8jhgfvrjjluchta.woff2

192.144.79.36

200 OK

8.7 kB

URL

m.ayctjx.com/static/fonts/pxigyp8kv8jhgfvrjjluchta.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 8656, version 1.0

First Seen2023-05-04

Last Seen2025-08-01

Times Seen511

Size8.7 kB (8656 bytes)

MD5c8844b2518e608504a044c16951c094e

SHA1b6a98202b81badaa49497d45a4568404e4fe05ec

SHA256f41bc54bcb1241a706432b6ca646835b27140a2eca0f50595ac4fbdd9eeef0f5

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/pxigyp8kv8jhgfvrjjluchta.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: font/woff2
Content-Length: 8656
Last-Modified: Wed, 01 Nov 2023 14:57:14 GMT
Connection: keep-alive
ETag: "6542674a-21d0"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/css/scrolltop.css

192.144.79.36

200 OK

2.2 kB

URL

m.ayctjx.com/static/css/scrolltop.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text

First Seen2025-04-07

Last Seen2025-08-01

Times Seen239

Size2.2 kB (2176 bytes)

MD5007f9ba191cadb2873ad980e6ae280c3

SHA1195ab4d75f90efad6ca1f6c0cc777308e408f1f5

SHA256f4615c9673e1f7b5131b83f0d1c0ab78be0a562a3aba4390d74a0ea2e80b703d

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/scrolltop.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426184-880"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/bg-shape-1.png

192.144.79.36

200 OK

6.8 kB

URL

m.ayctjx.com/static/picture/bg-shape-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 229 x 229, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen435

Size6.8 kB (6772 bytes)

MD5d766bbc7dc567b95f8132c8c835ad430

SHA1ce7021882547660a54cfc66246acb2050f75ab5f

SHA2560797750b854c6127f25fb6a9855ac9fbd0c2a26ad2111cb67b80b26fc5514a1e

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/bg-shape-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426258-1a74"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/uploads/allimg/250707/19543B511-0-lp.jpg

192.144.79.36

200 OK

16 kB

URL

m.ayctjx.com/uploads/allimg/250707/19543B511-0-lp.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

First Seen2025-07-07

Last Seen2025-07-07

Times Seen1

Size16 kB (15564 bytes)

MD5af91f7df961df06f9e768ed8a440847a

SHA1560ab634c22e4cdee557a23cf5ca87ba847e7598

SHA25670130ee012afe9bc1c1d225153b22deb6ae6f5827b2ce7423bbc301a13926306

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/allimg/250707/19543B511-0-lp.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/jpeg
Last-Modified: Mon, 07 Jul 2025 11:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"686bb57e-3ccc"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/shape-2.png

192.144.79.36

200 OK

7.3 kB

URL

m.ayctjx.com/static/picture/shape-2.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 521 x 267, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen447

Size7.3 kB (7349 bytes)

MD523fafbe2054753eb8fbc0378efbd7358

SHA17577b91c4cd1aa99cb58a8f659fc59b2a8a4031e

SHA256a05b62d2692f59650a63e51eebe3935050dda23c9bea9420b0864337d9a836bf

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/shape-2.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-1cb5"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/icon-3.png

192.144.79.36

200 OK

3.0 kB

URL

m.ayctjx.com/static/picture/icon-3.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 45 x 42, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen444

Size3.0 kB (2985 bytes)

MD57b771bffd4eb3584002b6ecc876a2146

SHA130295bba792a8eeee1e01669211eca906039a8c3

SHA25683228bc5e056a9ea12eef48e95455753d46a5867d5559b4afc52e6fcdda1fd19

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/icon-3.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-ba9"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/images/1286x0w.png

192.144.79.36

200 OK

534 kB

URL

m.ayctjx.com/static/images/1286x0w.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 1286 x 1716, 8-bit/color RGBA, non-interlaced

First Seen2024-03-15

Last Seen2025-08-01

Times Seen418

Size534 kB (533732 bytes)

MD5f7aa7d85b380d5caeba468b9768b8637

SHA14e0e4fa07e2fb5ec643be5a105abd612e5167eb8

SHA25668aed7773169eb30fb91e4fb26fb642c030f66662af013373ea3738a225b1520

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/1286x0w.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 16:13:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542790e-824e4"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/modernizr-3.5.0.min.js

192.144.79.36

200 OK

8.6 kB

URL

m.ayctjx.com/static/js/modernizr-3.5.0.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (8320)

First Seen2023-03-07

Last Seen2025-08-01

Times Seen899

Size8.6 kB (8636 bytes)

MD5d7c97fdd45a562ace6cffddc9437a779

SHA1eb6a5e550ab67f95986363a87da875212ba2f139

SHA256525ba420f42f72699e059e5c20dd3acd591da3d54d70a319b0e360369482dde8

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/modernizr-3.5.0.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261b0-21bc"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css

192.144.79.36

200 OK

9.9 kB

URL

m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text

First Seen2025-04-07

Last Seen2025-08-01

Times Seen237

Size9.9 kB (9850 bytes)

MD52ef088411949949624d5a9195246a010

SHA1c867158dd181aecca4680880e61698a3e9653a97

SHA2568b9d1ec006848bee7d0e0f0423fae8c7cc56a30b4113fedecf98646ebc96580c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/c9e1b5dc2b1b4169961debffbf206f94.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/style.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:50:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654265d2-267a"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/magnific-popup.css

192.144.79.36

200 OK

7.0 kB

URL

m.ayctjx.com/static/css/magnific-popup.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text

First Seen2023-04-05

Last Seen2025-08-02

Times Seen6227

Size7.0 kB (6954 bytes)

MD530b593b71d7672658f89bfea0ab360c9

SHA1d6963db6faa9294387bb3175813a61bc3f859437

SHA25645d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/magnific-popup.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542617c-1b2a"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/logo-1.png

192.144.79.36

200 OK

2.8 kB

URL

m.ayctjx.com/static/picture/logo-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 200 x 76, 8-bit/color RGBA, non-interlaced

First Seen2023-11-17

Last Seen2025-08-01

Times Seen287

Size2.8 kB (2765 bytes)

MD5417ca750bcfb8c6fcb2d6f6acb485db3

SHA1b1a6970a5b596feaecfedcf3d0199abc9832d5d2

SHA2565c9171d1b37a58df93b46580332d7dfc2d8873a7c359011f7efb776fbc683bf4

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/logo-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426258-acd"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/shape-1.png

192.144.79.36

200 OK

2.3 kB

URL

m.ayctjx.com/static/picture/shape-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen452

Size2.3 kB (2335 bytes)

MD5ec3948b8d36dea60b210b2ab21a92290

SHA14bb53e0c80977f8d95852c6c25a7459568405b4d

SHA2563c1ae3164c38144ae661f6b4bffd359f55b36a903aa4714b35a70d3a605a47c1

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/shape-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-91f"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/images/foot-bg.png

192.144.79.36

200 OK

18 kB

URL

m.ayctjx.com/static/images/foot-bg.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 1920 x 545, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen447

Size18 kB (18112 bytes)

MD5ffb254eb00f55f4166d0b7472b4177ff

SHA19a20ff0e63357b62bd330c31e2bd339f9a55b918

SHA256bd414b9c7acee8f1f873d2a4a0f281eeb32a3fdf8c410ca7ea9ae3f67b56c64c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/foot-bg.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/style.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:52:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426632-46c0"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/favicon.ico

192.144.79.36

404 Not Found

148 B

URL

m.ayctjx.com/favicon.ico

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeHTML document, ASCII text

First Seen2024-07-21

Last Seen2025-08-01

Times Seen3307

Size148 B (148 bytes)

MD5630e1f9fef1a483fe84154e2d0d046df

SHA1f10e0cf39fb920a438116caaea80a71e0dcdc162

SHA2569cad3cff676946810a81047247f12e4e51faccc01df4134edfd871aee8ba0956

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 07 Jul 2025 12:21:07 GMT
Content-Type: text/html
Content-Length: 148
Connection: keep-alive
ETag: "66c83c4f-94"

GET m.ayctjx.com/static/fonts/fontawesome-webfont.woff2

192.144.79.36

200 OK

77 kB

URL

m.ayctjx.com/static/fonts/fontawesome-webfont.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459

First Seen2023-04-05

Last Seen2025-08-02

Times Seen164875

Size77 kB (77160 bytes)

MD5af7ae505a9eed503f8b8e6982036873e

SHA1d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c

SHA2562adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/fontawesome-all.min.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: font/woff2
Content-Length: 77160
Last-Modified: Wed, 01 Nov 2023 14:51:36 GMT
Connection: keep-alive
ETag: "654265f8-12d68"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/fonts/top-arrow.svg

192.144.79.36

404 Not Found

148 B

URL

m.ayctjx.com/static/fonts/top-arrow.svg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeHTML document, ASCII text

First Seen2024-07-21

Last Seen2025-08-01

Times Seen3307

Size148 B (148 bytes)

MD5630e1f9fef1a483fe84154e2d0d046df

SHA1f10e0cf39fb920a438116caaea80a71e0dcdc162

SHA2569cad3cff676946810a81047247f12e4e51faccc01df4134edfd871aee8ba0956

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/top-arrow.svg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/scrolltop.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: text/html
Content-Length: 148
Connection: keep-alive
ETag: "66c83c4f-94"

GET m.ayctjx.com/static/js/plugins.js

192.144.79.36

200 OK

760 B

URL

m.ayctjx.com/static/js/plugins.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text

First Seen2023-03-07

Last Seen2025-08-01

Times Seen1092

Size760 B (760 bytes)

MD5074c4c08f0730c4d4ca76f724355807c

SHA109d6a93af6b87a67c5773163d35f40b993fca3d3

SHA256c6129bd3aeb079f5c310d2a9618478ba0d621992c1a5e5ef320917937dc2dbb7

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/plugins.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Content-Length: 760
Last-Modified: Wed, 01 Nov 2023 14:34:02 GMT
Connection: keep-alive
ETag: "654261da-2f8"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/css/fontawesome-all.min.css

192.144.79.36

200 OK

31 kB

URL

m.ayctjx.com/static/css/fontawesome-all.min.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text, with very long lines (30763)

First Seen2023-04-07

Last Seen2025-08-01

Times Seen642

Size31 kB (30929 bytes)

MD5861b93b125da96c853cb9680e0c844d2

SHA1078ef3b7983ccef60eeaa80c2591201c8d47d264

SHA2568d4a4872dc0faa2ff83bb6664338e63c6f9b52a603e29b1aa764f2866763b7fc

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/fontawesome-all.min.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542617e-78d1"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/video-bg.jpg

192.144.79.36

200 OK

31 kB

URL

m.ayctjx.com/static/picture/video-bg.jpg

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1140x620, components 3

First Seen2024-02-01

Last Seen2025-08-01

Times Seen434

Size31 kB (31209 bytes)

MD5a8550a80611b7d71d05bb74974d69896

SHA1a3f06e35b67991287adf1d76bb35bdf373116fa5

SHA2564208b4763543d1e81cf875a3f2c5d9ab5c1f9c8bdbf7e806716bb958d589ea5c

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/video-bg.jpg HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/jpeg
Last-Modified: Wed, 01 Nov 2023 14:36:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426256-79e9"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/popper.min.js

192.144.79.36

200 OK

20 kB

URL

m.ayctjx.com/static/js/popper.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (20164)

First Seen2023-03-07

Last Seen2025-08-01

Times Seen1454

Size20 kB (20336 bytes)

MD5a22f3f7e61af6a069aa6b422537c3f49

SHA1682fdc625ae80a890d10af2cb16e62540e2186a8

SHA256d2b9f29ea1f42a60a8beb1c04f76868287f2a48d6ec50fb39d6b888584a03c49

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/popper.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261b6-4f70"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/images/626x0w.png

192.144.79.36

200 OK

263 kB

URL

m.ayctjx.com/static/images/626x0w.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 626 x 835, 8-bit/color RGB, non-interlaced

First Seen2024-03-15

Last Seen2025-08-01

Times Seen411

Size263 kB (262712 bytes)

MD5b078df2ed57b46fafc9aea6fb7ef1438

SHA1eb1224803d25b35daf7266bb07328ab4097169ec

SHA256e6b02ac634e1d1406d1730f718c68349fa5ce24ea694f8ca1cc54d91e358c9d6

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/626x0w.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 16:12:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542790a-40238"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/js/magnific-popup.min.js

192.144.79.36

200 OK

20 kB

URL

m.ayctjx.com/static/js/magnific-popup.min.js

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (20087)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen16864

Size20 kB (20216 bytes)

MD5ba6cf724c8bb1cf5b084e79ff230626e

SHA1f455c5f153f872e52265f87a644ff89fe14a6fb6

SHA2563fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/magnific-popup.min.js HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: application/javascript
Last-Modified: Wed, 01 Nov 2023 14:33:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"654261c6-4ef8"
Expires: Tue, 08 Jul 2025 00:21:03 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/animate.min.css

192.144.79.36

200 OK

70 kB

URL

m.ayctjx.com/static/css/animate.min.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text

First Seen2025-04-07

Last Seen2025-08-01

Times Seen232

Size70 kB (70327 bytes)

MD5a03fca051fa426956b5c8a446a85e868

SHA153878b1011d5543f1bed65027a38d35fde314138

SHA256810ec1b4b20c3fe475307bf9366e18be2603edbf88919bcc2dd0b32ce80c48ec

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/animate.min.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542617a-112b7"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/icon-1.png

192.144.79.36

200 OK

2.5 kB

URL

m.ayctjx.com/static/picture/icon-1.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen442

Size2.5 kB (2466 bytes)

MD5b12ee7f26711f115e8a962d682841331

SHA1a1c578afea5339a63ecbe2d1878e4ae201aa8a6c

SHA256666713a3f66755c9146819c2099af596bc212ff1a7db0cf981eee0c649ab2b8a

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/icon-1.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:04 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542625a-9a2"
Expires: Wed, 06 Aug 2025 12:21:04 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/picture/bg-shape-2.png

192.144.79.36

200 OK

34 kB

URL

m.ayctjx.com/static/picture/bg-shape-2.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 534 x 404, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen452

Size34 kB (33900 bytes)

MD5e6cf106a4d80d1bad808ce3d74342585

SHA1234e439c9c7b08e9e2ade04bb3080d0c98037094

SHA25693b3a18aacf64278c57ca5ac26d64a06a96ca4d3fb55fc3e482b2ad24c7dfc5f

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/picture/bg-shape-2.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:03 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:36:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426258-846c"
Expires: Wed, 06 Aug 2025 12:21:03 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/css/responsive.css

192.144.79.36

200 OK

7.6 kB

URL

m.ayctjx.com/static/css/responsive.css

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeASCII text, with CRLF line terminators

First Seen2025-02-06

Last Seen2025-08-01

Times Seen237

Size7.6 kB (7624 bytes)

MD57af3de2868986e3a1b8d4cf9383b563f

SHA19109d400988041f9402c284fa570a119aa49a83d

SHA25644f6a3412e11579c69463f86b9fc9330785bc8cfe0e6d50a8c6f64ab19909a8d

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/responsive.css HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Nov 2023 14:32:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6542618e-1dc8"
Expires: Tue, 08 Jul 2025 00:21:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

GET m.ayctjx.com/static/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2

192.144.79.36

200 OK

7.8 kB

URL

m.ayctjx.com/static/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 7776, version 1.0

First Seen2023-04-10

Last Seen2025-08-01

Times Seen1533

Size7.8 kB (7776 bytes)

MD584780596e268aa0cb2be48af2ed5c375

SHA1d67ccd32f8c790a746d64d06145882a2f7b06560

SHA256d7ba57e3ccc2e3b2bdf8cc9e613194b802607682bf473293c2e3e29de82c9491

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/c9e1b5dc2b1b4169961debffbf206f94.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:05 GMT
Content-Type: font/woff2
Content-Length: 7776
Last-Modified: Wed, 01 Nov 2023 14:57:02 GMT
Connection: keep-alive
ETag: "6542673e-1e60"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

GET m.ayctjx.com/static/images/testimonial-bg.png

192.144.79.36

200 OK

166 kB

URL

m.ayctjx.com/static/images/testimonial-bg.png

IP / ASN

192.144.79.36

#55714 Fiberlink Pvt.Ltd

Requested byhttps://m.ayctjx.com/

Resource Info

File typePNG image data, 1920 x 798, 8-bit/color RGBA, non-interlaced

First Seen2024-02-01

Last Seen2025-08-01

Times Seen437

Size166 kB (166491 bytes)

MD530ea135bc002f396cbef9eca75d2a74a

SHA1b0ccb2f145bd41477fe8a9fc78d2fba41d25bc49

SHA256456cc833aba447449e919e3abea9b050db12ff7c9ae47766833f7031bf6cdd1b

Certificate Info

IssuerLet's Encrypt

Subjectayctjx.com

Fingerprint5E:30:5A:B1:08:7F:36:9D:BB:47:10:3B:FB:32:1A:51:41:30:D1:C6

ValiditySun, 18 May 2025 22:43:35 GMT - Sat, 16 Aug 2025 22:43:34 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/testimonial-bg.png HTTP/1.1
Host: m.ayctjx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.ayctjx.com/static/css/style.css
Cookie: PHPSESSID=lqptkhlt1bgniu5povnvtlbofa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Jul 2025 12:21:06 GMT
Content-Type: image/png
Last-Modified: Wed, 01 Nov 2023 14:52:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65426644-28a5b"
Expires: Wed, 06 Aug 2025 12:21:06 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip