{"report_id":"08877fca-0b56-43a3-8f44-51e9346f3a27","version":0,"status":"done","tags":[],"date":"2026-07-17T09:36:50Z","url":{"schema":"http","addr":"ti.biogasos.com","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":0,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"title":"Deutsche Bank","dom":{"size":20723,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (642)","md5":"4fd14f08b57f208c64ad4dce913ea34f","sha1":"d122d6635a0e704cc89003cd857b87e1898bc3e3","sha256":"1275d144bf25a0530bf82dc268a76478f4c9f217d80b06128ca55424f9559fc4","sha512":"31f8d128bca7ca909c42dd0edcdfa9db7974f4313af2406c8e7743abd63308a0167255f01c53c3713abf884296ccedcadcaac5bf330d1929eccbb259fe5b753a","ssdeep":"192:Kmvu4qNRtp09t40454c4FPINYYVF5OY22OuiN6uskZqTk0:K909t40454c4FPHB150","tlshash":"71928562a8f4293b012a85c67064575d7dc3400bde174a05bbfd0ba86fdaec3ed136b8","dom_hash":"domhashd46261a80a2dfb9a03377545f09cd1b3","first_seen":"2026-07-17T09:36:53.156647Z","last_seen":"2026-07-17T09:36:53.156647Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ti.biogasos.com","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":0,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:36:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ti.biogasos.com","ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-08","domain_rank":0,"first_seen":"2026-07-17T01:59:00.353534Z","last_seen":"2026-07-17T01:59:00.353534Z","alert_count":36,"request_count":18,"received_data":1257995,"sent_data":10643,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"identity.db.com","ip":{"addr":"2.22.31.193","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"1997-09-02","domain_rank":1117716,"first_seen":"2019-09-19T21:14:26Z","last_seen":"2026-07-17T06:21:41.218235Z","alert_count":0,"request_count":3,"received_data":1051,"sent_data":1728,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"82078be2e1e9a96cebd2f712f7e1963a","sha1":"bdbd40476afac366c228e59fa8bd0ffa3dd8c550","sha256":"939bcc69ca8fc8c650b1ec2711f86930b9db1a549d8c43bd3bf99e365e8e16ee","sha512":"8598e61e5230b8676d1dab8f9de55c7db3a025f9fb914b17bbbb3d600d9b42102ddf5bf650d739494c9d0b8440c75235f1b0b7e32d554099baef15c11870a71d","ssdeep":"","tlshash":"0c21dbbfe59208301cef30ab6d99874438a45a231e06d504383ec6910f68e47bcacf98","size":1405,"data":"","first_seen":"2026-07-17T01:59:04.208381Z","last_seen":"2026-07-17T09:36:53.191216Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"0851b546a654755fa710a872074ab9fd","sha1":"25eef8fb258b8a8c869d293285c63a78947f0ee8","sha256":"9d40973fba3f93b0aff28e58f52a2c2b2c83f37f0db494838e66d5391a8d41dd","sha512":"f566a3b0956814f1757115a4a0a03aba7d06c1614442b768f9d1c1cda9d2b6796aaa19ebaa77fb355a719ac26b8deb5293be5e2e47171fb9aa61b387d2d2b520","ssdeep":"","tlshash":"efa0026b6d145a8905705985f431709854257a067651c48e8854020a1a305e92455105","size":58,"data":"","first_seen":"2024-08-20T20:55:15.354486Z","last_seen":"2026-07-17T09:36:53.192235Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b92f77f0b9a57d5c2585b531ed590f1","sha1":"6b2c884172e2d2701613ecf01ed8e2fc2e92556d","sha256":"5d929bb2e6bf39d96837f9c9df06706fde01e34aa8c11b90bc272bd55a26b1d3","sha512":"5dc10be113756996ffd5d3a6da985f764e95fbbe2d41644fc544431db09263f0b412fd6c56d5a4fdc53ad30cffd82b429953371dafacffb3139bb1cf2592ab5f","ssdeep":"","tlshash":"f8b012f5720584a1e6b11980b4be1b95202a34003012a84042c501a000c741cda27594","size":92,"data":"","first_seen":"2026-07-17T01:59:04.210665Z","last_seen":"2026-07-17T09:36:53.193452Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"4f6da2911fc8f7a479dcc86cb58ae743","sha1":"d579ee29de050edaea7f6c7e63be9cb856626e1e","sha256":"914ad9b113c1932b34422f1836112a7ec4525d546a94a167b7c25a5d94925961","sha512":"b5823183610bb02c30249ff3e1227aeef0942a1233f36514b4054b1ef293daaa47cdc70b455b803f2e1097393e8e52a862bdd889153b151dfe26fbdd22dd8877","ssdeep":"","tlshash":"24c02294b48594a1c82230e38e4efa9d101221b02c7d805082406818a4a40737e228fc","size":179,"data":"","first_seen":"2023-04-13T07:24:52Z","last_seen":"2026-08-11T14:51:50.639671Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/085bd09a85ab18007c8960fb935108d71cc43cb1db83880e2c47b9f96cd9f994.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c913107cfdc34b401d7e6333b5c69dcb","sha1":"a3ec478b703e2640d4fe02493fb6277f338c16df","sha256":"d6e19cbefcf7019285d9e702edadc65481067dd71933099e90df8b624e1f8794","sha512":"b4700ac5881be0a40450cb7446f09b0ceef883185ad096d13e53b6ff5dee3bdf890d298f1e2ead4e852a817ebce2f18d66290aa4b265ce85226ee276615cc77d","ssdeep":"6144:VDyzKkV+tVM//aDxiIdyUaECBtpMEEtVM1eZ6r+qkEiwLBP9k2NL:VDKVZaDxVAUaVBtWVzsr+qkXip9Fh","tlshash":"1de473c0234997eaf5ad1f586a2f048b20e7f0943d079200fdb796eb7937d129535aac","size":688973,"data":"","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.166999Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/617574682f7265616c6d732f6175726f72612a.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"09af52a67c2ebcaea1f48d83a1f99291","sha1":"ba6003b04dbeccbf0ce00309d81d5d54d8672eba","sha256":"66c329339478951680539775a1a6f79942f93cb4c09d05ee6adb6b2a4f19d99f","sha512":"0f1ea0776cff7ccef83992215e8c9d3b3873c22926ce1f5311dc7bc51fbd2454b3ecafae8c78d6f3cf6c7e0794dd9347927583750f0ce7faabd71029d57582f3","ssdeep":"192:WDGuuIRhkyU5mBkTMFCawrwx2nvA7Hs4io:GGuuyhZUmYtalavAw4z","tlshash":"1912d9d171006268773fad4a996f13a923e52550fa6280f04c7af1fb3c3a817436792e","size":9850,"data":"","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.160625Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"6282aa00a115e90f00bcbf6372a55ced","sha1":"5eb29555b11485b17a08b02e5c61b86afddb4d41","sha256":"7c4ec0c10595e75ae4710f54c7a3ef10dfa72ff0f22d2a7714c0ed9ccee22d5a","sha512":"d78d3efcedf8d580d47b804276ffbd7c9dd961547c7e81efa3b64d2206e57ae32f9bf45f3bdf3b5c2e260e2cf9680972283cbcbd788aefb0a2063c5714d3611c","ssdeep":"","tlshash":"d0e020225c1350a484b5a1383c335b91f1ee69d54f477bce1f7014f0405dd14c429bf1","size":365,"data":"","first_seen":"2023-04-13T07:24:52Z","last_seen":"2026-08-11T14:51:50.483828Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-12T08:17:52.691049Z","times_seen":429867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/jquery.min.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-12T08:14:25.296041Z","times_seen":138885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/bootstrap.min.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39680,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-12T07:14:15.782011Z","times_seen":31684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ti.biogasos.com/Ay1Ww0WnPpc6Zq2Ng.html?t=1784280983386","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.556Z","timestamp":1784280983556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Ay1Ww0WnPpc6Zq2Ng.html?t=1784280983386 HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234; 9G2bx1=087561cdc10c1000c8003f65eaa01be22c822134e2d10184; GOd2et=087561cdc105180061d39d3d131cabf24a2a40f57661d91060edbf21369999fe; i7TpCN=087561cdc10d180047507b3e46f27e7bdc614609157bde4c79501f6fd5306ab4; 702M7ce=087561cdc110180026d1a29a5d0119a464b12700cc37cf625ed2311b1584a78f\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-12T08:40:19.88169Z","times_seen":56637,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.557Z","timestamp":1784280983557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nbEhWs1TeKwNW7f: 087561cdc1111800e3b7e857ecc66b07be2a3ed77742e5c7f381372e9c3659ec\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234; 9G2bx1=087561cdc10c1000c8003f65eaa01be22c822134e2d10184; GOd2et=087561cdc105180061d39d3d131cabf24a2a40f57661d91060edbf21369999fe; i7TpCN=087561cdc10d180047507b3e46f27e7bdc614609157bde4c79501f6fd5306ab4; 702M7ce=087561cdc110180026d1a29a5d0119a464b12700cc37cf625ed2311b1584a78f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nSet-Cookie: COOKIE_KEY=178428098397; expires=Mon, 14 Jul 2036 09:36:23 GMT; Max-Age=315360000\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":21018,"size_decoded":21308,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (642), with CRLF line terminators","md5":"981d1fabf4e8bac41c8e650d45a7c4bf","sha1":"ce011ceb8ce0a4df0bf879430f3c35587a77f1cb","sha256":"761657ffc8b4e1dd5e204a4fbfed37b9390a15ff432410c8990b9ff1a86039a6","sha512":"a1948151ab820b3f3fd0fce4a3a357e4d87b22a143c9547312d4a982fae29f6afb5aed44f4dbbb725d7a8b84045de5562459446eac7fbdfdf512beae35bd3165","ssdeep":"192:X8zN/XRtpz7Q4B4614Z4in1fIBBfoEShFs41Jx0MFmts+NzuMqD:mz7Q4B4K4Z4i1fYfiVFv","tlshash":"1e924672a4d4293b013ac6c56074979cfdc2400bda178605bbfd27ab6fbad82ed135b4","first_seen":"2026-07-17T01:59:04.187147Z","last_seen":"2026-07-17T09:36:53.159135Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/617574682f7265616c6d732f6175726f72612a.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.851Z","timestamp":1784280982851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/617574682f7265616c6d732f6175726f72612a.js.download HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 9850\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9850,"size_decoded":10099,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4729)","md5":"09af52a67c2ebcaea1f48d83a1f99291","sha1":"ba6003b04dbeccbf0ce00309d81d5d54d8672eba","sha256":"66c329339478951680539775a1a6f79942f93cb4c09d05ee6adb6b2a4f19d99f","sha512":"0f1ea0776cff7ccef83992215e8c9d3b3873c22926ce1f5311dc7bc51fbd2454b3ecafae8c78d6f3cf6c7e0794dd9347927583750f0ce7faabd71029d57582f3","ssdeep":"192:WDGuuIRhkyU5mBkTMFCawrwx2nvA7Hs4io:GGuuyhZUmYtalavAw4z","tlshash":"1912d9d171006268773fad4a996f13a923e52550fa6280f04c7af1fb3c3a817436792e","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.160625Z","times_seen":6,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":23,"receive":21,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/jquery.min.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.855Z","timestamp":1784280982855,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/jquery.min.js.download HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 88145\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":88145,"size_decoded":88394,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-12T08:14:25.296041Z","times_seen":138885,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"identity.db.com/auth/resources/7.3.3.ga/login/aurora-ng/img/favicon-16x16.png","fqdn":"identity.db.com","domain":"db.com","tld":"com"},"ip":{"addr":"2.22.31.193","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.554Z","timestamp":1784280983554,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identity.db.com","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Dec 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:54:B7:55:6C:AD:AE:04:57:17:CC:B4:D5:99:28:CC:D3:D2:13:96","sha256":"48:74:A9:67:A9:54:A3:4B:5B:CC:51:42:D4:25:A9:AA:B5:2B:E6:21:65:1B:58:F8:D0:B3:AB:C7:58:05:F3:4F"}}},"request":{"raw":"GET /auth/resources/7.3.3.ga/login/aurora-ng/img/favicon-16x16.png HTTP/1.1\r\nHost: identity.db.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nDB-Nickname: VTJGc2RHVmtYMTkrZzd4b1BrOXpwSC9wVnY2alI1cU9CQ2lXWHlFNENIaz0=\r\nX-DB-NAR: 120194-2\r\nContent-Length: 0\r\nContent-Type: image/png\r\nDate: Fri, 17 Jul 2026 09:36:24 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"identity.db.com/DnIVdY/","fqdn":"identity.db.com","domain":"db.com","tld":"com"},"ip":{"addr":"2.22.31.193","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.610Z","timestamp":1784280983610,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identity.db.com","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Dec 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:54:B7:55:6C:AD:AE:04:57:17:CC:B4:D5:99:28:CC:D3:D2:13:96","sha256":"48:74:A9:67:A9:54:A3:4B:5B:CC:51:42:D4:25:A9:AA:B5:2B:E6:21:65:1B:58:F8:D0:B3:AB:C7:58:05:F3:4F"}}},"request":{"raw":"OPTIONS /DnIVdY/ HTTP/1.1\r\nHost: identity.db.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: e20wddae1pu\r\nReferer: https://ti.biogasos.com/\r\nOrigin: https://ti.biogasos.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nAllow: GET,POST,OPTIONS,HEAD\r\nDB-Nickname: VTJGc2RHVmtYMTkrZzd4b1BrOXpwSC9wVnY2alI1cU9CQ2lXWHlFNENIaz0=\r\nX-DB-NAR: 120194-2\r\nContent-Length: 0\r\nDate: Fri, 17 Jul 2026 09:36:24 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":285,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":0,"connect":8,"send":0,"wait":260,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:36:22.427Z","timestamp":1784280982427,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nSet-Cookie: COOKIE_KEY=178428098272; expires=Mon, 14 Jul 2036 09:36:22 GMT; Max-Age=315360000\nCOOKIE_KEY=178428098234; expires=Mon, 14 Jul 2036 09:36:22 GMT; Max-Age=315360000\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21018,"size_decoded":21391,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (642), with CRLF line terminators","md5":"981d1fabf4e8bac41c8e650d45a7c4bf","sha1":"ce011ceb8ce0a4df0bf879430f3c35587a77f1cb","sha256":"761657ffc8b4e1dd5e204a4fbfed37b9390a15ff432410c8990b9ff1a86039a6","sha512":"a1948151ab820b3f3fd0fce4a3a357e4d87b22a143c9547312d4a982fae29f6afb5aed44f4dbbb725d7a8b84045de5562459446eac7fbdfdf512beae35bd3165","ssdeep":"192:X8zN/XRtpz7Q4B4614Z4in1fIBBfoEShFs41Jx0MFmts+NzuMqD:mz7Q4B4K4Z4i1fYfiVFv","tlshash":"1e924672a4d4293b013ac6c56074979cfdc2400bda178605bbfd27ab6fbad82ed135b4","first_seen":"2026-07-17T01:59:04.187147Z","last_seen":"2026-07-17T09:36:53.159135Z","times_seen":4,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":81,"connect":23,"send":0,"wait":43,"receive":18,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/patternfly.min.css","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.842Z","timestamp":1784280982842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/patternfly.min.css HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 213059\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":213059,"size_decoded":213302,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"23ec3aaa0dddba17b593d5de32dd07e8","sha1":"07c7125c8b3bea32c0c007f87ddd9fe662a5f624","sha256":"91c7b92cf95e8c50e514cc3f95467c75605dc057099af852dc3bce86f1c651ba","sha512":"998cf057517616fcbee5d3dd8a549170ef708896d00ca692541943148c3bcd3560681be88e185b520213b15d0efc240bcd054583b0115d04dc38bf681cab569a","ssdeep":"1536:3w/aTDC5EHld3eOWOAbOIcrJNhmyut95UzSz1GB6JA3bfbwABBrIR7AO0X:t53GoNElX5eSzfuHwABBrIR7AO0X","tlshash":"fa24b7b0e11430ea7323c05fb6d0fa562659f211e5568eb7f12f29dc4ec168a1663f2b","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.163545Z","times_seen":6,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/login.css","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.845Z","timestamp":1784280982845,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/login.css HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 23313\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23313,"size_decoded":23556,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ba13cb09c1ebae84039dbe7101aa9fdf","sha1":"fe1ac28a1d1ce22c50a7f3de82cf7b5d66e893d0","sha256":"c1d4500785f9fe56fe29afca2203dd00aa49f040bdedbd9b45770f81d4654144","sha512":"a718d48fef3de0a86fc1155bef484c8df2f3d56985a76648f73d4dbf7e6a425f77e1e6ee1b6488454493aa7fdd6b4147efb8b2ea257e033868a20ece0b867ac8","ssdeep":"192:w4bUf4rlBiz0NCwOhW2+2Zlry2IMng7pmG9xaIULqwF8b3niVNKK1wFii5uw5UoW:J444lVy2IKLi+Lobws5FU","tlshash":"a7a25649eb002009b1372ab9f7b21763ef55005397070a797aad7654cfb58bc6a21fcd","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.16575Z","times_seen":6,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":23,"receive":23,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/085bd09a85ab18007c8960fb935108d71cc43cb1db83880e2c47b9f96cd9f994.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.852Z","timestamp":1784280982852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/085bd09a85ab18007c8960fb935108d71cc43cb1db83880e2c47b9f96cd9f994.js.download HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 688973\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":688973,"size_decoded":689224,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3340)","md5":"c913107cfdc34b401d7e6333b5c69dcb","sha1":"a3ec478b703e2640d4fe02493fb6277f338c16df","sha256":"d6e19cbefcf7019285d9e702edadc65481067dd71933099e90df8b624e1f8794","sha512":"b4700ac5881be0a40450cb7446f09b0ceef883185ad096d13e53b6ff5dee3bdf890d298f1e2ead4e852a817ebce2f18d66290aa4b265ce85226ee276615cc77d","ssdeep":"6144:VDyzKkV+tVM//aDxiIdyUaECBtpMEEtVM1eZ6r+qkEiwLBP9k2NL:VDKVZaDxVAUaVBtWVzsr+qkXip9Fh","tlshash":"1de473c0234997eaf5ad1f586a2f048b20e7f0943d079200fdb796eb7937d129535aac","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.166999Z","times_seen":6,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":23,"receive":139,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/fonts/DeutscheBankText_W_Rg.woff2","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.314Z","timestamp":1784280983314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /fonts/DeutscheBankText_W_Rg.woff2 HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/Deutsche%20Bank_files/login.css\r\nCookie: COOKIE_KEY=178428098234; 9G2bx1=087561cdc10c1000c8003f65eaa01be22c822134e2d10184; GOd2et=087561cdc105180061d39d3d131cabf24a2a40f57661d91060edbf21369999fe\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 20664\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20664,"size_decoded":20908,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20664, version 1.6554","md5":"cbce856f50c162c63f70179ff77ee5e9","sha1":"57547abb474c94e2604eed3fa1bee0637f0bfadd","sha256":"23179f950a100dec3fc303c152f40839bb206a1699cd7034155801c6573cfbea","sha512":"8bc2782ee85dc2e79fd71e9054660e3d3a0b181109f6168c325b47146181f3b691cc96179102b60e5adfb561849ea2d92087d5ccaa3a1c575ee6b5a53fdbbb6c","ssdeep":"384:co+mSA3KmDy8nzw3zka/gmN5ymmYZSzDebsSrz+RbUFaelb6b8umHOCqVUs7/tAw:VSA3ND/nsAcSGZSz6bsCSal+WODyc/tp","tlshash":"8792e16268b5870c50f4aefab0d7d5b4648708b03a7a9def9da71bd4000871639bb275","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.172128Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"identity.db.com/auth/resources/7.3.3.ga/login/aurora-ng/img/apple-touch-icon.png","fqdn":"identity.db.com","domain":"db.com","tld":"com"},"ip":{"addr":"2.22.31.193","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.553Z","timestamp":1784280983553,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /auth/resources/7.3.3.ga/login/aurora-ng/img/apple-touch-icon.png HTTP/1.1\r\nHost: identity.db.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nDB-Nickname: VTJGc2RHVmtYMStnWGNDUDdXODR3TEhGc2xCVVpkaEE3bHBJeFR3bjFBbz0=\r\nX-DB-NAR: 120194-2\r\nContent-Type: image/png\r\nContent-Length: 0\r\nDate: Fri, 17 Jul 2026 09:36:24 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/zocial.min.css","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.844Z","timestamp":1784280982844,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/zocial.min.css HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 41297\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41297,"size_decoded":41540,"mime_type":"text/css","magic":"ASCII text, with very long lines (41145), with CRLF line terminators","md5":"bf9c7f22f407602e73299af8cd01a4a3","sha1":"0602428333ec48d4a612c2f01031f9ab796de0e1","sha256":"8928f969bb979aea3fb1d2be841b51036146569f6ed6f1dab919c26607f13983","sha512":"7df0191117f317cb5205013c4d923249e5616a6229cd6d59a1e1c6d3a31c01f0e0cfbb3550afefe4633ce475d8a0d31a4fa83aa01406ad6da59e0159e0317968","ssdeep":"768:VpWGz2r2JTIq14/Vmytux1JGGEm6O7r8islXJoqyfJf7IhO9:VpWGz2r2JTPYoLghmRYn27IU9","tlshash":"e803d5b4c07618ce7327c84b5d82b1cc66e9ad9197204f75f23b20e96ee11ca9173b6d","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.173586Z","times_seen":6,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":23,"receive":47,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/bootstrap.min.js.download","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.857Z","timestamp":1784280982857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/bootstrap.min.js.download HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 39680\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39680,"size_decoded":39929,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (39553)","md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-12T07:14:15.782011Z","times_seen":31684,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":27,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/combined_shape.png","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.871Z","timestamp":1784280982871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/combined_shape.png HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 578\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":578,"size_decoded":819,"mime_type":"image/png","magic":"PNG image data, 16 x 20, 8-bit/color RGBA, non-interlaced","md5":"fa8286b4b9ea1844139b28864e8d33b3","sha1":"84a8d52e78235378bc91a7c75dfb2b8813f48cac","sha256":"a494102a4222fed3a45c490f7d2329b7f3783e6421e27067a2adef4aa5fc20f4","sha512":"9e076a0872825d6c64cbf75627aa8f4adcb12fc2bf915017d3eb0365d796dcb81b8bfd66d431b26f5fbf1f5bb21d2752b1d535f4934b30e4e9ff02cd3d9f19f0","ssdeep":"","tlshash":"27f041a1875246e8a75fcafbc6aa0809727e238c35d7580e401bc469a1987022ccd972","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.175114Z","times_seen":6,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/img/aurora-background.png","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.283Z","timestamp":1784280983283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /img/aurora-background.png HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/Deutsche%20Bank_files/login.css\r\nCookie: COOKIE_KEY=178428098234; 9G2bx1=087561cdc10c1000c8003f65eaa01be22c822134e2d10184; GOd2et=087561cdc105180061d39d3d131cabf24a2a40f57661d91060edbf21369999fe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-12T08:40:19.88169Z","times_seen":56637,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/fonts/DeutscheBankDisplay_W_Rg.woff2","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:23.315Z","timestamp":1784280983315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /fonts/DeutscheBankDisplay_W_Rg.woff2 HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/Deutsche%20Bank_files/login.css\r\nCookie: COOKIE_KEY=178428098234; 9G2bx1=087561cdc10c1000c8003f65eaa01be22c822134e2d10184; GOd2et=087561cdc105180061d39d3d131cabf24a2a40f57661d91060edbf21369999fe\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 25228\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25228,"size_decoded":25472,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25228, version 1.6554","md5":"1a97dd5c50e87f941e2bb53eef0b02a1","sha1":"0a5069d6f622303decceffa7ad6b7841e4822287","sha256":"de7945bd490992d96ea952f60e231f511b905a8abec625d29f55089c23390483","sha512":"b746624dcf0ece91f6143c7bafcb9a73f6e4be9ee918b791ffeaaed87efbc650556d5aa166f1806fc55ea0e11f9dee7b1c51b05359f3033dcf23f0d4c6fddec8","ssdeep":"384:E+2W4O7Z2JTsT/5f3aTipFfdexC4Zvl3UvOHzCgQt1jwbbyNjtbhkwXlgarl:mWHk5ibfQZrHOgQt1jc0tbJX3","tlshash":"4db2e08b701682e9e1ef14f344ec855fe0ba1947bfc811c65a3c2ac652c20759fabf58","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.177087Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/all.css","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.847Z","timestamp":1784280982847,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/all.css HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:22 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 54456\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":54456,"size_decoded":54699,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-08-12T01:42:03.802151Z","times_seen":15251,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":23,"receive":68,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/common_logo.png","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.865Z","timestamp":1784280982865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/common_logo.png HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3575\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3575,"size_decoded":3817,"mime_type":"image/png","magic":"PNG image data, 158 x 17, 8-bit/color RGBA, non-interlaced","md5":"76867d64332af887cf1140513997c506","sha1":"d8569225e5bd06875408915df486825b3885a9c3","sha256":"7d1564b7bf24afc8fb44063c858393ba863482878360bff0915c54e40a087058","sha512":"0b8658fe0405e01108c445441fc93f6ac105c4c735ac7b73f8ea67217b8833d8a0d824597db64f02194ea423249fc9f93de085ec29fd456394ec8871778b5bc0","ssdeep":"","tlshash":"9b718dfb9e3c8502bc44575adf72de2db385d62060612e3c34942deae04435ca0cee66","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.178915Z","times_seen":7,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":191,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/db_logo_1366.png","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.869Z","timestamp":1784280982869,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/db_logo_1366.png HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1436\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1436,"size_decoded":1678,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"a0cf527d840c73dade76245c3a68cb2b","sha1":"2292dc62244d9448413dc5aa3d68300c0b0a4070","sha256":"69373a67013650b6696c2608f21fa3111731983067d13c79795f5fe57df51c71","sha512":"d732ede5ca8b377d12d2db39ca0c0e54a1e746f77ebfde00ab1f7c819a007d39b0b183d3cc3631806fa5decc4d92e8b8bfddabd20d428329101ca2f6d871600b","ssdeep":"","tlshash":"712119a5a62bfb6a2d31c633b77bbb43f3029ec3c4214221d1c001661805c9daf88b72","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.180336Z","times_seen":6,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ti.biogasos.com/Deutsche%20Bank_files/shape.png","fqdn":"ti.biogasos.com","domain":"biogasos.com","tld":"com"},"ip":{"addr":"77.68.5.178","port":443,"asn":8560,"as":"IONOS SE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ti.biogasos.com/","date":"2026-07-17T09:36:22.873Z","timestamp":1784280982873,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ti.biogasos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 17:27:30 GMT","end":"Thu, 08 Oct 2026 17:27:29 GMT"},"fingerprint":{"sha1":"11:F5:AC:59:EB:CA:58:7D:C5:E6:1C:5A:01:C5:C1:27:9A:61:08:EB","sha256":"5F:04:B7:08:AC:8E:85:C0:56:19:AB:0C:AE:F0:26:78:9C:00:8C:C1:C0:2B:18:D6:DF:D6:A7:E0:B2:4A:EC:22"}}},"request":{"raw":"GET /Deutsche%20Bank_files/shape.png HTTP/1.1\r\nHost: ti.biogasos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ti.biogasos.com/\r\nCookie: COOKIE_KEY=178428098234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 17 Jul 2026 09:36:23 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 30 Mar 2026 13:12:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 508\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":508,"size_decoded":749,"mime_type":"image/png","magic":"PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced","md5":"fbfc84a4e4ad8766ed6ea8021f99e79f","sha1":"1931c99823336cea1320b49826c405881e8fde0e","sha256":"a8f42e98ee6ff868ea7533c2e744643e70ab061a70af509df8f7e05b2f741e26","sha512":"1b03c326f15e044f08fc7759302a3c26c9ef93fb9d4623d1bd2a1acf4cb37861355801f49edb3c2df4d67878eea52aca3fb842349a945c5ea4644f992689496c","ssdeep":"","tlshash":"f3f0755052ef4c104ad34224842f456c7bb417bcc207074e55c7cdb5402dc2645885c1","first_seen":"2023-11-04T18:10:06Z","last_seen":"2026-07-17T09:36:53.190242Z","times_seen":6,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ti.biogasos.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}