{"report_id":"001e13e8-67d4-4262-b228-822c112f5386","version":0,"status":"done","tags":[],"date":"2026-07-13T18:47:22Z","url":{"schema":"http","addr":"marleylookup.top","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"marleylookup.top/login","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"title":"Login - MarleyLookup.com","dom":{"size":10114,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (992)","md5":"e87986d8b1e0cfa552db72b5e185a01f","sha1":"236cbb3c479b2ef1f0338e95716f8e01f4139b8a","sha256":"88aa88cdd769bad7abfa076b87b9acda737f8e8c4b18bb2219a1255191b2b6f3","sha512":"a383607373ceb16ad7204aee8108399e81f8fc46bc7a3977e08c6911d2b7bfcdedab0b37694ccd286b9cd7f1f26cf1b74f31ee438060329dcaa3c93398434bfe","ssdeep":"192:zDo+JUEq0/JruI49Z1NUL/LJmtxcCvP0zzkj:zDo+JUERrKyKL0z6","tlshash":"0f22b83221f51436c14383ed859ab33a3967e147fa0d6010bb9d0a946f97ed39c739ad","dom_hash":"domhash1c5399a31453a42ec812eeba018a1fc2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"marleylookup.top","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T18:47:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"marleylookup.top","ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-05-03","domain_rank":0,"first_seen":"2026-07-13T18:46:13.909163Z","last_seen":"2026-07-13T18:46:13.909163Z","alert_count":7,"request_count":7,"received_data":205155,"sent_data":3333,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"marleylookup.top/login","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"009a61a06aa436b442ac0491938e717b","sha1":"ee7fc4dc994a34ca96bf82ef2cf6733e8bc8b400","sha256":"cddac3228cdb43958869f5b08b827610d2841e139053afba133469deebde94fb","sha512":"04d2edf55f435325815f8c5c6ae181e17602635def5d186f09b7d6e828b8996c618e9f8ab14e6b456dad94c1c05a1ac8da15854a7435baf3a5a6740647c1fd5f","ssdeep":"","tlshash":"75d0c0bd300a1014c65394fff035f9543e333400b3c28740802f8c601c39e8fa860a25","size":201,"data":"","first_seen":"2026-07-13T18:46:17.841195Z","last_seen":"2026-07-13T18:47:23.402422Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/login","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"5552db7bfa5d13cfe84bc0de7bb7e889","sha1":"13cb7b68b57529df1ad71f4ba99cb310a2969920","sha256":"8949136b32997460199a496853d2041635206619b85b7258abed216443c591fe","sha512":"afe09fdfbff48bebd03e5c0d8da8a01e48cdef15d1663fc1d7871b3d599dd25f72d772246ec5231de31b4e4eb85302806d8ceebed0d345fe1e4f77edc01fc554","ssdeep":"","tlshash":"7ef0591a32a130fa88b324bba1c743c87d3520865445502138fdca490f744d29633edf","size":546,"data":"","first_seen":"2026-07-13T18:46:17.842282Z","last_seen":"2026-07-13T18:47:23.403201Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/login","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"073c22e1f409bc5a68275dda9019ad4a","sha1":"e8fa1d535f796b490b03ff9bc2c0ee43cc9b56bb","sha256":"d964f12fb37612a012a19e54bf547d984affd41f31d0d82aef2b57aa45e4d9e1","sha512":"b600c1cfc3157c9ae138c5a2affaffda1c23efb67d4831a32040878d0a505ff76a28ee999743c9c71b1c2a6a378b58ed6a9df407663d8c801a6da92ab85d6696","ssdeep":"","tlshash":"e5016fb921f72071823351778b7b924771267616e056d187794d02453f4722192e3a8a","size":819,"data":"","first_seen":"2026-07-13T18:46:17.843451Z","last_seen":"2026-07-13T18:47:23.40707Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/static/js/theme.js","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e84d40c1987d3f3298cccad7e678c2a6","sha1":"dc85d88ae4a46340f06a54e1dae45ee01fb31533","sha256":"f89daf91ef785b5a474effbd9a46acdc9a5e73da609116e02440f1e301ab59c9","sha512":"440471f9f9432010e901b3a23138970ec6ca28ced753594e01e714b5d4f6894fe3f10e1ed6e2ba61411493b88a7d10eeab5fd62cc699f0455d13e30340f467c2","ssdeep":"","tlshash":"5e510d3a79124673c1b757faa72b8b88ffb4217310459201b89cd6841f30c4d8226fdd","size":2446,"data":"","first_seen":"2026-07-13T18:46:17.837781Z","last_seen":"2026-07-13T18:47:23.393819Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/static/js/mobile.js?v=3","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b21ecece46b3f5ab151aab2cfa741eba","sha1":"927ac4b9fe37bbeeb1b633117ba9a2b016067e0d","sha256":"a30e200a0c124ef663f092d9c8e009c175cbfcc2df347f0dacdaa363aef59f2d","sha512":"9aaf4849e04f0ec09b01299da19cef1d6b4f6eea3a4cd02d24d8fedf5e2da00f8828d7334801fffee088457304f43665728f49d3033a50aee8bc8e47570b37b1","ssdeep":"48:yumA+5/5LPvqQxFLDEjKZatjppZ7gGqjjemGTQEGkfVzKe/bydfbV53N0pvMHXfN:cH5/5G+LgjKijppZM6lfRKuSfLQvMPN","tlshash":"4b9101eea50b3a774f372399dc6b4ebcfb66005780055602b99cc6491f708925a378ec","size":4381,"data":"","first_seen":"2026-07-13T18:46:17.838875Z","last_seen":"2026-07-13T18:47:23.396674Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"marleylookup.top/static/js/theme.js","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marleylookup.top/login","date":"2026-07-13T18:46:56.008Z","timestamp":1783968416008,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marleylookup.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 21:07:41 GMT","end":"Tue, 22 Sep 2026 21:07:40 GMT"},"fingerprint":{"sha1":"E1:90:A4:F8:0E:6B:63:6F:CB:83:CE:88:A0:FB:C4:3D:1A:B7:39:59","sha256":"D4:85:68:BC:FB:31:A9:98:C5:CA:B6:CD:B1:64:20:6B:6F:D1:5D:90:99:76:30:74:10:49:E4:A7:8D:DF:4C:51"}}},"request":{"raw":"GET /static/js/theme.js HTTP/1.1\r\nHost: marleylookup.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marleylookup.top/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Jul 2026 18:46:56 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 2446\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=theme.js\r\nLast-Modified: Mon, 22 Jun 2026 17:08:42 GMT\r\nCache-Control: no-cache\r\nETag: \"1782148122.0-2446-312806999\"\r\nAccept-Ranges: bytes\r\nVary: Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2446,"size_decoded":2817,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e84d40c1987d3f3298cccad7e678c2a6","sha1":"dc85d88ae4a46340f06a54e1dae45ee01fb31533","sha256":"f89daf91ef785b5a474effbd9a46acdc9a5e73da609116e02440f1e301ab59c9","sha512":"440471f9f9432010e901b3a23138970ec6ca28ced753594e01e714b5d4f6894fe3f10e1ed6e2ba61411493b88a7d10eeab5fd62cc699f0455d13e30340f467c2","ssdeep":"","tlshash":"5e510d3a79124673c1b757faa72b8b88ffb4217310459201b89cd6841f30c4d8226fdd","first_seen":"2026-07-13T18:46:17.837781Z","last_seen":"2026-07-13T18:47:23.393819Z","times_seen":6,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":38,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/static/js/mobile.js?v=3","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marleylookup.top/login","date":"2026-07-13T18:46:56.009Z","timestamp":1783968416009,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marleylookup.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 21:07:41 GMT","end":"Tue, 22 Sep 2026 21:07:40 GMT"},"fingerprint":{"sha1":"E1:90:A4:F8:0E:6B:63:6F:CB:83:CE:88:A0:FB:C4:3D:1A:B7:39:59","sha256":"D4:85:68:BC:FB:31:A9:98:C5:CA:B6:CD:B1:64:20:6B:6F:D1:5D:90:99:76:30:74:10:49:E4:A7:8D:DF:4C:51"}}},"request":{"raw":"GET /static/js/mobile.js?v=3 HTTP/1.1\r\nHost: marleylookup.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marleylookup.top/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Jul 2026 18:46:56 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 4381\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=mobile.js\r\nLast-Modified: Mon, 22 Jun 2026 17:08:40 GMT\r\nCache-Control: no-cache\r\nETag: \"1782148120.0-4381-561254076\"\r\nAccept-Ranges: bytes\r\nVary: Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4381,"size_decoded":4753,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (572), with CRLF line terminators","md5":"b21ecece46b3f5ab151aab2cfa741eba","sha1":"927ac4b9fe37bbeeb1b633117ba9a2b016067e0d","sha256":"a30e200a0c124ef663f092d9c8e009c175cbfcc2df347f0dacdaa363aef59f2d","sha512":"9aaf4849e04f0ec09b01299da19cef1d6b4f6eea3a4cd02d24d8fedf5e2da00f8828d7334801fffee088457304f43665728f49d3033a50aee8bc8e47570b37b1","ssdeep":"48:yumA+5/5LPvqQxFLDEjKZatjppZ7gGqjjemGTQEGkfVzKe/bydfbV53N0pvMHXfN:cH5/5G+LgjKijppZM6lfRKuSfLQvMPN","tlshash":"4b9101eea50b3a774f372399dc6b4ebcfb66005780055602b99cc6491f708925a378ec","first_seen":"2026-07-13T18:46:17.838875Z","last_seen":"2026-07-13T18:47:23.396674Z","times_seen":6,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/static/favicon.svg","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marleylookup.top/login","date":"2026-07-13T18:46:56.233Z","timestamp":1783968416233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marleylookup.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 21:07:41 GMT","end":"Tue, 22 Sep 2026 21:07:40 GMT"},"fingerprint":{"sha1":"E1:90:A4:F8:0E:6B:63:6F:CB:83:CE:88:A0:FB:C4:3D:1A:B7:39:59","sha256":"D4:85:68:BC:FB:31:A9:98:C5:CA:B6:CD:B1:64:20:6B:6F:D1:5D:90:99:76:30:74:10:49:E4:A7:8D:DF:4C:51"}}},"request":{"raw":"GET /static/favicon.svg HTTP/1.1\r\nHost: marleylookup.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marleylookup.top/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Jul 2026 18:46:56 GMT\r\nContent-Type: image/svg+xml; charset=utf-8\r\nContent-Length: 966\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=favicon.svg\r\nLast-Modified: Mon, 22 Jun 2026 17:08:33 GMT\r\nCache-Control: no-cache\r\nETag: \"1782148113.0-966-336137873\"\r\nAccept-Ranges: bytes\r\nVary: Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":966,"size_decoded":1336,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"a702b9b42592ca1b8fc18188de096fe7","sha1":"5dd395e13d15d522824740889e4ee7e4e763758f","sha256":"b67ed2ad3d51e33e80d6334f3f1fe82e7d5398f67d8ca6861e4baa816508a8c4","sha512":"6c1a47428aa3f5e8c1e7118e22c1fc26e5a8221810e4e2d845c267114cff4fce62ecb9fd437972559dfb4b89f8a11f95fda6dfbc7a6c3ef8757abca6266740fc","ssdeep":"","tlshash":"f3119c24c2a8d526d648830cda04e4b43226c5cb56489250b19cdf3eef158d30c1f7f5","first_seen":"2026-07-13T18:46:17.840061Z","last_seen":"2026-07-13T18:47:23.397806Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T18:46:55.633Z","timestamp":1783968415633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marleylookup.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 21:07:41 GMT","end":"Tue, 22 Sep 2026 21:07:40 GMT"},"fingerprint":{"sha1":"E1:90:A4:F8:0E:6B:63:6F:CB:83:CE:88:A0:FB:C4:3D:1A:B7:39:59","sha256":"D4:85:68:BC:FB:31:A9:98:C5:CA:B6:CD:B1:64:20:6B:6F:D1:5D:90:99:76:30:74:10:49:E4:A7:8D:DF:4C:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marleylookup.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 FOUND\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Jul 2026 18:46:55 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 199\r\nConnection: keep-alive\r\nLocation: /login\r\nVary: Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"FOUND","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T01:29:42.882109Z","times_seen":17225190,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":42,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/login","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T18:46:55.755Z","timestamp":1783968415755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marleylookup.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 21:07:41 GMT","end":"Tue, 22 Sep 2026 21:07:40 GMT"},"fingerprint":{"sha1":"E1:90:A4:F8:0E:6B:63:6F:CB:83:CE:88:A0:FB:C4:3D:1A:B7:39:59","sha256":"D4:85:68:BC:FB:31:A9:98:C5:CA:B6:CD:B1:64:20:6B:6F:D1:5D:90:99:76:30:74:10:49:E4:A7:8D:DF:4C:51"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: marleylookup.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Jul 2026 18:46:55 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Cookie\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9832,"size_decoded":3221,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (986)","md5":"05baab27bf78722b41d8c64377b2305c","sha1":"66e2d6b3684d4e8122981967de5765e3f0bde13c","sha256":"f969516524b360d9e3d7e1eff7921301130203a0fe6d952c32322a872edf41e3","sha512":"a2903af227d1c7e3191a0099d33413628b6a21eba34c705dc2bd7813411c14f2efadd0f1c427090b4efee389824dfef5e046f4add74827be4348b681b27562bd","ssdeep":"192:RoGJcE+0/druI4eZuN9L/oJhasACvP0zz0:RoGJcEhrK/+v0zo","tlshash":"2f12a83211f51432814382fc92aa633a3967e143fa0d6110baed0b945f9bed3dc779ad","first_seen":"2026-07-13T18:46:17.834058Z","last_seen":"2026-07-13T18:47:23.39959Z","times_seen":6,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/static/css/themes.css","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marleylookup.top/login","date":"2026-07-13T18:46:55.998Z","timestamp":1783968415998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marleylookup.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 21:07:41 GMT","end":"Tue, 22 Sep 2026 21:07:40 GMT"},"fingerprint":{"sha1":"E1:90:A4:F8:0E:6B:63:6F:CB:83:CE:88:A0:FB:C4:3D:1A:B7:39:59","sha256":"D4:85:68:BC:FB:31:A9:98:C5:CA:B6:CD:B1:64:20:6B:6F:D1:5D:90:99:76:30:74:10:49:E4:A7:8D:DF:4C:51"}}},"request":{"raw":"GET /static/css/themes.css HTTP/1.1\r\nHost: marleylookup.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marleylookup.top/login\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Jul 2026 18:46:56 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 10770\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=themes.css\r\nLast-Modified: Mon, 22 Jun 2026 17:08:32 GMT\r\nCache-Control: no-cache\r\nETag: \"1782148112.0-10770-1089540002\"\r\nAccept-Ranges: bytes\r\nVary: Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10770,"size_decoded":11139,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6fc24343b221d192dfbb25d6c68fcfee","sha1":"a5963989a7f06b13086304e50c2a79fc6deda311","sha256":"302770cc1c9e28a3a0ffbd6493e449ec3108dc326a0a0c3199ae8a8579083fcb","sha512":"30afae2fde34254c429b8ac5b660b3486de8dd8a41aa94101472721218810e7740a6c4ef7cf7d8440d1a04496bc14109cd216b868183519bd3cc3a017a0e706d","ssdeep":"96:dbyeOwGdp3QemhGMec5Rw1kXvGiBg1/O2k/ef/6P8V9asSD2y+mzx:d2eOwGAemhGMecuW1BgLk/eXP9dSy+","tlshash":"83220301a5c21759b63f8a9fb8d2c9163bf4b6819501c44f6cd7a034bf0e3dee2e2a15","first_seen":"2026-07-13T18:46:17.835364Z","last_seen":"2026-07-13T18:47:23.400578Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marleylookup.top/static/css/marley-app.css?v=80","fqdn":"marleylookup.top","domain":"marleylookup.top","tld":"top"},"ip":{"addr":"144.124.239.226","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marleylookup.top/login","date":"2026-07-13T18:46:56.000Z","timestamp":1783968416000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marleylookup.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 21:07:41 GMT","end":"Tue, 22 Sep 2026 21:07:40 GMT"},"fingerprint":{"sha1":"E1:90:A4:F8:0E:6B:63:6F:CB:83:CE:88:A0:FB:C4:3D:1A:B7:39:59","sha256":"D4:85:68:BC:FB:31:A9:98:C5:CA:B6:CD:B1:64:20:6B:6F:D1:5D:90:99:76:30:74:10:49:E4:A7:8D:DF:4C:51"}}},"request":{"raw":"GET /static/css/marley-app.css?v=80 HTTP/1.1\r\nHost: marleylookup.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marleylookup.top/login\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Jul 2026 18:46:56 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 174479\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=marley-app.css\r\nLast-Modified: Mon, 22 Jun 2026 17:08:31 GMT\r\nCache-Control: no-cache\r\nETag: \"1782148111.0-174479-2189824276\"\r\nAccept-Ranges: bytes\r\nVary: Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":174479,"size_decoded":174854,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ec0c3a34f2cb9e340c3a3d7e6b4ca2fa","sha1":"6100ad1db1c319d18969201c72d9ebc28e65136a","sha256":"cc6c8555eaaf9a83952c658496b27194b5a559286387439402c254d052921b00","sha512":"be2abc94204b162d56400eef93e3e7d919128d1d8e0ad59fa499830fa48badaef60dccfe98b67c23b5aee5561c6321013a96bdbb296265422d85129f0bc84ec0","ssdeep":"768:m09Vc4wvl0Yj5EWtWs8SSirslzA1mc+pybJ2fac63sWMr:m9Bvl0Yj5EWtWs8SxwlLVpyE63XI","tlshash":"13049865f71491b06937eba0bbc3ab3f7b9c60529b010b7e7fe1201853c51e95a61f88","first_seen":"2026-07-13T18:46:17.836708Z","last_seen":"2026-07-13T18:47:23.40151Z","times_seen":6,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":55,"receive":72,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"marleylookup.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}