Investigation Workspace

Entity: 3%7e03c384726f922644 (Tls)

Entity Details
Type
Tls
Linked Entities
IPs Linked to TLS Fingerprint (50)
Hostnames Targeted
Hostname Request Count
www.darcherif.fr 552
akamai.darcherif.fr 258
47
Paths Targeted (with Request Counts)
Path Request Count
/ 76
wp-includes/js/masonry.min.js 26
wp-content/themes/mesmerize/assets/js/theme.bundle.min.js 26
wp-content/plugins/mesmerize-companion/theme-data/mesmerize/assets/js/companion.bundle.min.js 26
wp-content/themes/highlight/assets/js/theme-child.js 26
wp-includes/js/wp-emoji-release.min.js 26
wp-includes/js/imagesloaded.min.js 26
wp-content/themes/highlight/style.min.css 22
wp-content/themes/mesmerize/assets/css/theme.bundle.min.css 22
wp-content/themes/mesmerize/style.min.css 22
wp-includes/css/dist/block-library/style.min.css 22
wp-includes/js/jquery/jquery-migrate.min.js 21
wp-content/uploads/2020/05/ConferenceIndiaCropped.png 21
wp-content/themes/highlight/customizer/sections/content.css 21
wp-includes/js/jquery/jquery.min.js 21
wp-content/plugins/mesmerize-companion/theme-data/mesmerize/assets/css/companion.bundle.min.css 20
assets/img/portfolio/cabin.png 19
assets/img/portfolio/circus.png 19
assets/img/portfolio/game.png 19
assets/img/portfolio/submarine.png 19
assets/img/portfolio/cake.png 19
assets/img/portfolio/safe.png 19
wp-content/uploads/2020/01/Czech-Republic-operation-Temelin-Nuclear-Power-Plant-2003-1024x669.jpg 18
wp-content/themes/highlight/assets/images/hero-1.jpg 18
wp-content/themes/mesmerize/assets/fonts/fontawesome-webfont.woff2 18
css/styles.css 14
css/body.css 14
css/heading.css 14
assets/img/avataaars.svg 14
assets/mail/jqBootstrapValidation.js 13
js/scripts.js 13
js/mpulse.js 13
assets/mail/contact_me.js 13
wp-content/themes/highlight/assets/images/hero-2.jpg 8
cHzBZm/ofTsF/eqgiP/bSmh/aG1QfG1pibEa6maumO/HgAzLVlZ/M1lVPkY/qCVQB 6
nUgzRQGQiVNp_UhOzggZItsrtwk/uzV1bNt3t53Dz2V9JY/NncmY3J3Bw/FR/cfdjtBZG8 6
jdoFWLvZ4/BB/dx/mHX_bkTH9rkukU/c7m7t0JON5EfXQpuSO/An5oVQE/U3Fa/GDlDdQcB 4
.env 4
m8JF59/V6Yfx/PFERE/UQ/L3OcXh9YYOaJwDzY/XgtkODEzAw/QRVdGRk/PPS4B 3
BWfwWH4d81KCV/AQ3W2BNjxNWu-/Y/w7m5ttE15OSpLGEhua/V0wzEwE/PHxDFyB4/QXg 3
TXopfWNANuR3i/si/1SETC7qsZnKc/3cp5fp1mD3Lif4OJ/PD1OGXQoKgE/dTch/U2dsdHkB 3
gsXcU0/R7F/Z2j/j8BGzA/5tOJrtaOawwwmh/ZXFESA/Zic/pHyFGQH4 3
blkww/gMJg/1o25/L6m1/PQR/c7w1chiLuLcbSrkES5/MzUAAg/VQ/IEfAYeCgoC 3
rNiTG/9Z/Q/T/CCbFON1ihAk/puc7Xp1NaO7ENQJ5/d2tkKgcmAQ/VTUXL3/w8MEMB 3
rU1UPLPUS/x/4yn--b9Q/autuwp3NGEVODwD9uf/BX5qK2AC/Fi/csZXtoVhs 3
NHjaB5/l/I/A8fmiIZjamah/9ap7fczESiiDzN/GT0abwQ2RwI/P0ZtUBQ/2Oh0 3
NLT2n8bMG5/MY/yA0mCcG6/fY3bQzD5EOXE4w/alk6OXRdAw/UB/kceCc8O04 3
CroMeN/X3CqBP/_Amnz/YXVTs/sB/iziNbccu5tmabf9Eb5/K0ESVFoYBA/PD1qUjR/nZwY 3
5l6n9QcTX2nN14hLQFc-YgvSTG4/V7r1ptL3YJhmbVmi7k/PmI8IgE/fCh6cVk/9RkI 3
cNzGIaVat1gNRcK1uA/Q9O9NSYmwaLf6b/WTAXAg/P3wfL/2wwSVQB 3
🚫

Block

Very high percentage of detected threat requests (~87%), all accessed paths flagged by WAF, and triggered security alert '3991017', indicating highly malicious activity. This TLS fingerprint's behavior is consistent with other blocklisted entities from the same malicious campaign.

2025-12-31 11:49:33