Domain > 20minutes.fr.admin-mcas.ms

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-06	20.106.103.34 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1466Connection: keep-aliveServer: openrestyDate: Sun, 03 Nov 2024 11:59:36 GMTX-MCAS-Request-Id: a12e92975a8cecc8e27b9c419845a12aCac

html>head>    title>Continue/title>    script typetext/javascript>        function OnBack() {}        function DoSubmit() {            var subt  false;            if (!subt) {                subt  true;                document.hiddenform.submit();            }        }    /script>    link relicon typeimage/png hrefdata:image/png;base64,iVBORw0KGgo />/head>body>form namehiddenform idhiddenform actionhttps://mcas-proxyweb.admin-mcas.ms/certificate-checker enctypeapplication/x-www-form-urlencoded methodGET>input typehidden namelogin idlogin valuefalse />input typehidden nameMcasCSRF idMcasCSRF value55a5879c538c86e6f3eb2010924741fc211667c41190bf606ed1c4afc5453b38 />input typehidden nameoriginalUrl idoriginalUrl valuehttps://20minutes.fr/ />    noscript>        input typesubmit valueClick here to continue />    /noscript>/form>script srchttps://mcasproxy.cdn.mcas.ms/proxyweb/1.60.14-1-hf/js/session-context-store-helper.min.js>/script>script typetext/javascript>var redirectForm  document.hiddenform;redirectForm.setAttribute(action, redirectForm.getAttribute(action) + window.location.hash);SessionContextStoreHelper.storeContextBeforeAction(https://mcasproxy.cdn.mcas.ms/proxyweb/1.60.14-1-hf/html/session-context-restore.html#actionstore&contextDatahttps%3A%2F%2F20minutes.fr%2F, DoSubmit, true);/script>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1466Connection: keep-aliveServer: openrestyDate: Sun, 03 Nov 2024 11:59:37 GMTX-MCAS-Request-Id: 3d04a96f48b99de6e15cb671f2e1f29bStr

html>head>    title>Continue/title>    script typetext/javascript>        function OnBack() {}        function DoSubmit() {            var subt  false;            if (!subt) {                subt  true;                document.hiddenform.submit();            }        }    /script>    link relicon typeimage/png hrefdata:image/png;base64,iVBORw0KGgo />/head>body>form namehiddenform idhiddenform actionhttps://mcas-proxyweb.admin-mcas.ms/certificate-checker enctypeapplication/x-www-form-urlencoded methodGET>input typehidden namelogin idlogin valuefalse />input typehidden nameMcasCSRF idMcasCSRF value80592db634a94bc8c7ec5fafbe347f1a8cd051692a446b818eb3b91d068e4bb2 />input typehidden nameoriginalUrl idoriginalUrl valuehttps://20minutes.fr/ />    noscript>        input typesubmit valueClick here to continue />    /noscript>/form>script srchttps://mcasproxy.cdn.mcas.ms/proxyweb/1.60.14-1-hf/js/session-context-store-helper.min.js>/script>script typetext/javascript>var redirectForm  document.hiddenform;redirectForm.setAttribute(action, redirectForm.getAttribute(action) + window.location.hash);SessionContextStoreHelper.storeContextBeforeAction(https://mcasproxy.cdn.mcas.ms/proxyweb/1.60.14-1-hf/html/session-context-restore.html#actionstore&contextDatahttps%3A%2F%2F20minutes.fr%2F, DoSubmit, true);/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 20minutes.fr.admin-mcas.ms

Is this malicious?

DNS Resolutions

Port 80

Port 443