{"report_id":"05da492c-a61f-4097-b550-d7d0e66d4851","version":6,"status":"done","tags":[],"date":"2026-05-26T23:48:26Z","url":{"schema":"http","addr":"blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":0,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"title":"\u003cbr /\u003e \u003cb\u003eWarning\u003c/b\u003e: Undefined variable $lang in \u003cb\u003e/home2/blucielo/public_html/we/qbooks-panel/auth/index.php\u003c/b\u003e on line \u003cb\u003e56\u003c/b\u003e\u003cbr /\u003e \u003cbr /\u003e \u003cb\u003eWarning\u003c/b\u003e: Trying to access array offset on value of type null in \u003cb\u003e/home2/blucielo/public_html/we/qbooks-panel/auth/index.php\u003c/b\u003e on line \u003cb\u003e56\u003c/b\u003e\u003cbr /\u003e","dom":{"size":10370,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"318669cd2560f397bb6aa376f166e4e0","sha1":"352471ef5406102b7deb98a965215b013f0a0fef","sha256":"1ac055afe97bf451aecb041ed8defff92485291eeb84a68d2e986aa5406673a1","sha512":"a92a6d3b63fbfecc0a46ad89d9f13ffc66f6994280c01374fa853fa37b1da399cbcd6beb5965f0268eb40da0394376302a27abd2aaba261cebaec46e2566f719","ssdeep":"192:XVWT42nE3/2rOsBDXD3HO8fEIQi46E4WjWJEcbUvUdkUrLPAi6AZ+9BWrT:IJnLPJZ+AAsT","tlshash":"572266750260e7f1c0a3149bb3af66c46ee38087c317a4d831adc95ecf56d4c467679a","dom_hash":"domhash9794d7f8096bfe24d3c0de31ffc65687","first_seen":"2026-05-14T15:31:58.642591Z","last_seen":"2026-05-26T23:48:27.261527Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":0,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-30T23:48:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"blucielo.ro","ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"domain_registered":"2011-01-22","domain_rank":0,"first_seen":"2026-05-14T15:31:56.853312Z","last_seen":"2026-05-26T16:47:37.361366Z","alert_count":24,"request_count":8,"received_data":107429,"sent_data":4507,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"664c4f2a386280675861fc9e50ea1e13","sha1":"91fea92f93e56a47c5e3eb128ec383c31aee39d4","sha256":"2a90e82e663c7bbbf9609a22906c172487b97883ec9538551775a4e0133339f7","sha512":"083a33054f49c041b5a8f001cd5e0d13e32164442be70b3a0c5adf33e3ef29c62ab931fd19100b282301a1a099f0b0dabc279c6663c42015c07e86ef28420e73","ssdeep":"","tlshash":"f041d02a73700937c8b642fbb3d596c5ba4601a3e9555d64b4af8e090fc8dd06f70ac7","size":1894,"data":"","first_seen":"2025-08-27T12:19:32.532776Z","last_seen":"2026-05-28T13:25:25.982405Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/res/img/rederror5539ui.png","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","date":"2026-05-26T23:48:05.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/res/img/rederror5539ui.png HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870\r\nCookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Jun 2026 23:48:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Dec 2024 14:33:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 495\r\ndate: Tue, 26 May 2026 23:48:05 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2a995d0efab8735e6589b4a9ea23d5d3","sha1":"44cf5fa2fa883163eeb737635f83984f53643f7d","sha256":"4fac8e3aa50782da05a70200246e012ca2c0bfb12a895e38435918bb6e06def9","sha512":"5db95aeb1e161326f1d03be78f0c0181d4e084a4c39b052078df23d791827bace320e49b726b331610007c463a0d14cc0aac7a5c8d943672b10f925678fa0de0","ssdeep":"","tlshash":"4ff005f5ee44c91dac5466323c1b610ed5d73bf5051c869d45566b00941559456d81c4","first_seen":"2025-08-20T05:17:31.774137Z","last_seen":"2026-07-15T11:22:55.631345Z","times_seen":32,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/res/css/book.css","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","date":"2026-05-26T23:48:05.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/res/css/book.css HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870\r\nCookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Jun 2026 23:48:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jan 2025 20:23:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1928\r\ndate: Tue, 26 May 2026 23:48:05 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9888,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0c615ac2b456dd77ef7a7860479f1e6c","sha1":"b307ad0cdb9838c075a94fb0762e7858f87b445f","sha256":"13c6e65ea44b35406fb1e313f8b27ff8c4765591f6f12a7a728443e5163fc82e","sha512":"398ae0607ca2dcbd2e16e288d097bd60a95aec3b88daf4a680c554898c4278a454412b1e3045a42b28a9248cd60c20b7c4cd4c241fefa1260a0a5c96e2c2fdf1","ssdeep":"192:xVvlL+Jup8blL9ZgB3O23kTu92tlpB3lpa3:xLgHKexP1e","tlshash":"01120098df0221027237dabc73b29644eb6550638a0622fcbbc552058ff50b8a67dfdd","first_seen":"2025-12-07T04:03:51.848697Z","last_seen":"2026-05-26T23:48:27.266687Z","times_seen":12,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/res/css/font/AvenirLTStd-Light.otf","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","date":"2026-05-26T23:48:05.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/res/css/font/AvenirLTStd-Light.otf HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870\r\nCookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Fri, 24 Oct 2014 05:42:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19693\r\ndate: Tue, 26 May 2026 23:48:05 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27240,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"0b78ec9d509f67bfe3f8458c9d285df0","sha1":"c0a4874272c963adf11c582d49469b6b00a578bb","sha256":"a8b28d3160d7d63594ad37d95c26d12e93f43835647d558b6989d1b0aeaeb9ad","sha512":"bac8806bc62620fe583ac5cd00f4b7dc727d5800fd754149280ae1c9cfbca83a2e16cd3088c7619e501204da8722f0ea8dd49e69a32a745ce5571bb34fd1c1c2","ssdeep":"384:fHDujKDGeNxAkTEgD5gJl6PvmRdwMrNJjk+LR/mPwBghqOuoeO8x/n7G:fjujfeNvDKPjUMn7ROPwicOGG","tlshash":"73c2af8b7b0d4b55fcda4b71a251c3862e32f3846d64d7cb9328c2592dd37501f292ab","first_seen":"2023-05-14T18:35:57Z","last_seen":"2026-07-25T08:01:59.915135Z","times_seen":177,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/res/img/favicon.png","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","date":"2026-05-26T23:48:05.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/res/img/favicon.png HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870\r\nCookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Jun 2026 23:48:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Dec 2024 17:45:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 396\r\ndate: Tue, 26 May 2026 23:48:05 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit colormap, non-interlaced","md5":"fab88b35eb2a0f7ee1acaaa9f765371d","sha1":"5151c2d005d2e335aee0f97c535ae613761f4eae","sha256":"c66abb1eb3d8e74c085dd5f7e456f543bf468c71fe643bd5c786d2fae83e7766","sha512":"eb65d5c107083ce5760974e04eb5d37f0c406594305bb13c822105d409d05b05a13f987e43c3686bba78b568de4a18b86f5f3761096e08264aa445dfb67c389b","ssdeep":"","tlshash":"89e0ab9116e1bb78c265d2b304582640a2e3547147945f9304007da36fa2e3082940e2","first_seen":"2025-08-27T12:19:32.526512Z","last_seen":"2026-07-15T11:22:55.654975Z","times_seen":20,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-26T23:48:03.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/index.php?id=d58ea870 HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 26 May 2026 23:48:04 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":10563,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"4b722c64881e0e9aa96cc0878d50a35a","sha1":"fc7d40f6ded3005743439923cb35fd8933b57a4c","sha256":"7ef132973b36097ea8841c6a7fbaa0c37c343b1b40d6a9f60c616e8772e8e970","sha512":"9b216d7c5b5690be75ea5c696ff7261b37f8b146ca56bce8c6881c4fa31dbc5333224c9ec6e1a8a80664fbe148e936b5804d697225286827a2d29cd63a4d3372","ssdeep":"96:XzG6lGZsPnEHZ01PcaA8RjSB758CP4p2IpPIqutnEqPMWNcBcGvcVu9c1/OaLkcA:ispnEV8Rj2wN4JuurFl++z8r","tlshash":"3c222139520086b1c073459bb3aed685eee34097c31764e830bdc96b8f76d0c5677ada","first_seen":"2026-05-14T15:31:58.648931Z","last_seen":"2026-05-26T23:48:27.270624Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1683,"timings":{"blocked":228,"dns":98,"connect":61,"send":0,"wait":1227,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/res/img/gbhtrh456tgbdebh.png","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","date":"2026-05-26T23:48:05.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/res/img/gbhtrh456tgbdebh.png HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870\r\nCookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Jun 2026 23:48:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 30 Nov 2024 23:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 897\r\ndate: Tue, 26 May 2026 23:48:05 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":897,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 20, 8-bit colormap, non-interlaced","md5":"cec25c79eb3918cb2f7aee8c54d3f5d9","sha1":"68105b4985c4574a808f67d31aabae37affbdd16","sha256":"bd40096b08bb94456c0565715a42a62dc8066c2bdf6b4fa19fcfd7adbc454553","sha512":"58290d9b5faa280e79896af70b49bdd3abcc862bbeb3b13376ca89b158f63ec21aa09631f4dc5e7a9ebff7e81218dba5ab91d5dd72ae188836c24c910f0b705b","ssdeep":"","tlshash":"7d11b176f387eff1c84906d560620415de770de1b2aea0d74dc96fd80457cc585316a7","first_seen":"2025-08-20T05:17:31.77212Z","last_seen":"2026-07-15T11:22:55.629658Z","times_seen":34,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/res/css/font/AvenirLTStd-Heavy.otf","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","date":"2026-05-26T23:48:05.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/res/css/font/AvenirLTStd-Heavy.otf HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870\r\nCookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Fri, 24 Oct 2014 05:42:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20004\r\ndate: Tue, 26 May 2026 23:48:05 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27640,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"a7edaaca7240679d0cda0cce2c2e896e","sha1":"bf135f69c60771d3e70ac6fe0d608994ec43b1a2","sha256":"21bd20c236564b77d07d187b68a92281df7715acb8bdbe7241c0546d415d2abe","sha512":"0f5763fff85ef6057c5c8ad86d4c3d70b53b0da709bdbfa31e2ecd2d7c7f6263f2dee3f4c107d4f6c722a9834ab4899ea9dcabdc55b235d563595083961e65c5","ssdeep":"384:O2b5a2rIqFZ6YpNILfqd31mEILt75aeBSHsu0l8TJp7DzWnDHx5Lqqqu8k+LR/mS:O2b5xr6Yp73oEILTtp8tp7XuR5sROKh1","tlshash":"59c2af5b370a8b11fce79f3099e5c745bf32f6541c9de68fa15840d92e437401b2868e","first_seen":"2023-05-14T18:35:57Z","last_seen":"2026-08-04T13:28:03.576849Z","times_seen":179,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blucielo.ro/we/qbooks-panel/auth/res/css/font/AvenirLTStd-Medium.otf","fqdn":"blucielo.ro","domain":"blucielo.ro","tld":"ro"},"ip":{"addr":"89.42.218.82","port":443,"asn":205275,"as":"ROMARG SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870","date":"2026-05-26T23:48:05.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blucielo.ro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 21:07:06 GMT","end":"Sun, 19 Jul 2026 21:07:05 GMT"},"fingerprint":{"sha1":"A5:FE:8C:32:07:9A:85:D5:9C:32:67:13:58:79:50:A3:27:CE:BB:A3","sha256":"FE:9D:29:13:6D:C9:EB:7F:78:50:1B:E3:E2:02:5F:71:35:7D:B8:BC:E2:B9:20:13:C4:96:6B:62:00:4E:59:11"}}},"request":{"raw":"GET /we/qbooks-panel/auth/res/css/font/AvenirLTStd-Medium.otf HTTP/1.1\r\nHost: blucielo.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blucielo.ro/we/qbooks-panel/auth/index.php?id=d58ea870\r\nCookie: PHPSESSID=6i74vmsvarrdjc30j379of3gjs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Fri, 24 Oct 2014 05:42:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19660\r\ndate: Tue, 26 May 2026 23:48:05 GMT\r\nserver: LiteSpeed\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27264,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"4f995fa49446998983e05df9994dc96c","sha1":"4bb358bdce457d097bb6c36b10c0532f850ce942","sha256":"c41fea1fc26f2a0111d2076e47813102050dba2120bc1e3d945f50c5a1d96980","sha512":"7b643becf0f2338e3227b99ce859d6a613abb14a14b059fc1ce5ddfb8c1cd94a113bd9f33bf92e0103dcafbd07de903732882d47cb904a219477e77e7f68247c","ssdeep":"768:LvPrLxoBTTRZiXBzocPxgncapg+ijROi96:L+BVZYB50A+IH96","tlshash":"3ac29e973b096751fcdb4b70c561c3866f33bb45ee94dadbe20891216e927b01f181ca","first_seen":"2023-05-14T23:26:28Z","last_seen":"2026-08-04T13:28:03.587748Z","times_seen":185,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"blucielo.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"blucielo.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}