{"report_id":"16b0bfc8-0ba4-44a0-acfa-79cf189f0229","version":0,"status":"done","tags":[],"date":"2026-08-28T13:22:59Z","url":{"schema":"http","addr":"rmorpho.org/","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rmorpho.org/","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"title":"Morpho | The open credit network for the world","dom":{"size":19516,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1141)","md5":"74664479aeb8b462921862c3d81f1b6f","sha1":"8eee710c8b3a207c40686cd6e73aa39fdcff595f","sha256":"49fcf2551f964607b2673bfafcc4c1f074649a50b68bac976bfe20fd34cb92f0","sha512":"58eebaefd2fe6fa1902851361d39d2f3b6cf1a1d85f5514e17e90472e0c42c7503db56a9bf6ea1dd1cb26b9e1b79cc8e654a2d7d266e7121e7fe360b1becd10c","ssdeep":"384:8rJfUSiRgf7sEjXCSSqQSRwWN7hUTIwvuuRLjtr1nrFhkvkb9UtATIYTij:8rJfUSiRgwryLiuOL5JnXkMYye","tlshash":"e992e833a38963a50a96322a60dd3f92ea2c044fa3513546772cc9cf5b82665d37fe85","dom_hash":"domhashf135fb13ae8b984e714c0b438f5a9c6d","first_seen":"2026-08-28T13:14:41.109815Z","last_seen":"2026-08-28T13:23:01.638159Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rmorpho.org/","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:22:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rmorpho.org","ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2025-02-19","domain_rank":0,"first_seen":"2026-08-28T13:14:38.568815Z","last_seen":"2026-08-28T13:14:38.568816Z","alert_count":9,"request_count":9,"received_data":2586925,"sent_data":4468,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rmorpho.org/logo512.png","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:31.948Z","timestamp":1787923351948,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /logo512.png HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:32 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 26 Jun 2026 10:09:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a3e4fc2-448e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17550,"size_decoded":16333,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1a6bd20e49ecee578e324c44e37f49e4","sha1":"9ad50eca87ae60fa396d653bce72121fb81b0013","sha256":"f37a243e87c2516c65da859500afa747e921e4ead1128f097c7cdc0bf12700e5","sha512":"6655cf9f2fbf0102e14d3c417244e7793bdd22fdc6d8701ca0c8089d58a2a8bc9be79204b241bf0fff6701909685ade25e573a3659daef5045c32af7031e5e73","ssdeep":"384:7kXDwR5vxX0PlH60x0vFljZTxWq918FStSj:7kzY1ep0x5/te","tlshash":"fb728d57cad37e8fa84b60d087c73b866870584ba3c30e4fcfb2117a614749bba75852","first_seen":"2026-08-28T13:14:41.123938Z","last_seen":"2026-08-28T13:23:01.640759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/favicon.ico","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:31.949Z","timestamp":1787923351949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:32 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Fri, 26 Jun 2026 10:09:29 GMT\r\nConnection: keep-alive\r\nETag: \"6a3e4fd9-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4529,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"7d23f001864d0f471867ef8d216b40d6","sha1":"2fec518ff33e088461a98ba5219ed2a041965bea","sha256":"4f9e1d92806375656e14cb2277c92a22963d9074bfa708fe0787e1b9c8a4aaed","sha512":"09c4e534202a1aaf7910567e7d2895a89da283191d3dfb97c1027c1374837f30482123082f14d24e933321ddb6211a19becc37b302a473d0d767596019d374b4","ssdeep":"12:suHjFrkWAyj+V0tkAyjsziebuBNykqLq+SV9TLGKu1TF3EPIGT3OkckTaOUHxLL8:suHjdBXE0+XqiXB0IXLGKunkV+YGHh8","tlshash":"34913a5365c8f2a1dce04cf8415403714b6f1e3ad8ef2a51c6407ba9c93d4806f1a2ca","first_seen":"2026-08-28T13:14:41.12596Z","last_seen":"2026-08-28T13:23:01.642534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:22:30.366Z","timestamp":1787923350366,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 7127\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19533,"size_decoded":7338,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1141)","md5":"c19192735cabc06ee4f7d37f703f21d7","sha1":"7d26c7e17659f00f37ac62caf5ee8c61179d4230","sha256":"37f968d0d7002e16b3d9012a8b27ca11be1a898ead6d5d5e4bc4022d32079f97","sha512":"a29ba7e00f278c4e69bae50a69712856f35ff36994a7739a298d25d588aa36e84d6e8a95a5ba60d3bbfd073554deb7136c342520c0e0df2905b2784ac5d6d6d3","ssdeep":"384:2rJfUSiRgf7sEjXCSSqQSRwWN7hUTIwvuuRLjtr1nrFhkvkb9UtATIYTiH:2rJfUSiRgwryLiuOL5JnXkMYy2","tlshash":"1c92e833a38963a50a96322a60dd3f92ea2c044fb3513546772cc9cf5b82665d37fe85","first_seen":"2026-08-28T13:14:41.141251Z","last_seen":"2026-08-28T13:23:01.644384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":11,"connect":124,"send":0,"wait":130,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/img/morpho.png","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:30.948Z","timestamp":1787923350948,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /img/morpho.png HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:31 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 26 Jun 2026 10:00:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a3e4db4-21731e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2192158,"size_decoded":2192796,"mime_type":"image/png","magic":"PNG image data, 1600 x 900, 8-bit/color RGB, non-interlaced","md5":"bd89dcbe446d0a9903572dc9d7ae0707","sha1":"a1b93b1059029c133cf76df74c672759506bac5e","sha256":"6c04821c5ee202e86bb2af3ca692cd9634227cdf761233e8ef4a18fb4d2ce54a","sha512":"cff108ad1a8369ab028e7f7435f2657ac71b6249959a3728869aa39b9342c91b7638b87239a1a77d30c51a3cee41b869ce5e066eb5bfa9a90a37589c6a7c29b3","ssdeep":"24576:zVxSbMrmjOkwQqFWijmSlMrsQuShx/x7vW9zXR4Pqh:zVl3kwQejXur1uwNxvW99V","tlshash":"bc253361a81e157f125be88f324359093398b69fdf5fb676042bf19c1a1a2c327367c1","first_seen":"2026-08-28T13:14:41.143622Z","last_seen":"2026-08-28T13:23:01.646683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1388,"timings":{"blocked":114,"dns":0,"connect":126,"send":0,"wait":253,"receive":764,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/img/what_is_morpho.webp","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:30.950Z","timestamp":1787923350950,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /img/what_is_morpho.webp HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 40562\r\nLast-Modified: Fri, 26 Jun 2026 10:02:13 GMT\r\nConnection: keep-alive\r\nETag: \"6a3e4e25-9e72\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40562,"size_decoded":40804,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4d6f2825add7a78e76391a2545d675b6","sha1":"c99a453a78174f1cab5768ca9b2300c70e8a74f1","sha256":"86143373bb41ec3cdc438624af27f1511f97f6990999e51d3235416ebb3fd207","sha512":"b21052be07bc7ed1371040bb869bede2a3d2dc0a9c28ee4aac98c018778457b2d96398d233152308fdd8e44377071233f3cf691a65c6fc4f08f0951581a9aaba","ssdeep":"768:YNp0o//KHM4cutKd1yHSJp/CcxbDo8V1ALpmsciSeM5kGk4tin8Npkn1S8yxmNVo:VoqH08Kr3/FbD1V1OmsG5Zk4tinL4p+q","tlshash":"2c03027e804d0f4763f3b2401f6f0b27b953b9c0a96cca3105a727b4996666f8f66806","first_seen":"2026-08-28T13:14:41.112658Z","last_seen":"2026-08-28T13:23:01.648668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":114,"dns":0,"connect":127,"send":0,"wait":257,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/img/projects.jpeg","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:30.952Z","timestamp":1787923350952,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /img/projects.jpeg HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 26 Jun 2026 10:06:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a3e4f08-1b7ae\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112558,"size_decoded":107785,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1404x820, components 3","md5":"7046aa90034037b5cd8619ff54545415","sha1":"e5169012ff4d947d817c70cbbf046e666c63487b","sha256":"8371d2191127a66abd2d76784a2781c0a5566d47a2a8426546d5d19ee0cc4fd9","sha512":"e8abe07f36e1c43f13430e996cb002712cfd8ec365292ccae687a71ffb805ddfee2508ab344040b91f7f5d53d22a10f95904f9e7dbf7b79eedcfe33bbfff8320","ssdeep":"3072:qBfrQvhjBUA0FXK+vRocVKQRsSHXhfX2Zl1:qBkyJFpvRRKQWEhfX2n1","tlshash":"b5b3019b7a4b8008c46a86bc5266e771f7504ce0f771a5d26fff8c70f420b0d19eaa48","first_seen":"2026-08-28T13:14:41.116696Z","last_seen":"2026-08-28T13:23:01.650413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":113,"dns":0,"connect":127,"send":0,"wait":257,"receive":252,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/index.css","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:30.943Z","timestamp":1787923350943,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 13 Jun 2026 23:05:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a2de23f-44a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1098,"size_decoded":784,"mime_type":"text/css","magic":"ASCII text","md5":"fc90662460a4cd738f72b25400b523b9","sha1":"841b9848b88bce8699857497ee2f5401e5b02d66","sha256":"a4b46888c0c3b1a046446614021987b5cd831dc78078e04e2a25ccaff65a04b3","sha512":"a2274b32ef3deaf60a048b23ae4659894c26e33d374f9059d7c3388b27b8d8c9ae32bd7cc38d0a8bb5c1d57102ec7bae08e5067f81ca79202b37a77b67148d1a","ssdeep":"","tlshash":"cf118014d7e32d16f046c4982afa92903b5d254b458acb2d3a6db758cf0e6608572d94","first_seen":"2026-07-20T11:22:02.999262Z","last_seen":"2026-08-28T13:23:01.652006Z","times_seen":4,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/img/morpho-architecture.jpg","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:30.951Z","timestamp":1787923350951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /img/morpho-architecture.jpg HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 26 Jun 2026 10:03:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a3e4e54-1aefd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110333,"size_decoded":90928,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 1449x1022, components 3","md5":"f0e5085e001124d44c577fe149f8b32b","sha1":"c09bb4416bd5a52564b5cb3f631b66023edfdee8","sha256":"a03ef626b0ae6d7a7dbe2a4813511cfc4dc71c5b5145ecf8e288de6607957222","sha512":"2894057a7e2a460418598915dfa43a59ba3a79f0c70d9805a2d79507b625e6930ea0f495e9aab3aa826a90bc80e5cc0dd163b49bc98fbd13b9a5c01e963f7a7c","ssdeep":"3072:xi/k6PA58n3gYqxABRDF9JRQzTz5GNvvvvvvvvvvvppK:UsOA5y3gYqoRDszTdG8","tlshash":"e3b34a0799459b83a46993e5fe074dad1f166a0df9c23aff54134ecb3e646220c9e03e","first_seen":"2026-08-28T13:14:41.114608Z","last_seen":"2026-08-28T13:23:01.652886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":113,"dns":0,"connect":127,"send":0,"wait":263,"receive":251,"ssl":133},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rmorpho.org/img/funding.webp","fqdn":"rmorpho.org","domain":"rmorpho.org","tld":"org"},"ip":{"addr":"23.254.165.178","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rmorpho.org/","date":"2026-08-28T13:22:30.953Z","timestamp":1787923350953,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmorpho.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:14:34 GMT","end":"Tue, 17 Nov 2026 08:14:33 GMT"},"fingerprint":{"sha1":"A4:10:29:98:E3:D8:83:31:04:A4:DD:25:77:40:C2:F0:07:5F:9C:7E","sha256":"65:12:61:81:B8:CB:A5:F6:ED:61:99:B7:CB:38:96:99:86:B8:18:C2:03:0A:5E:60:53:D3:E9:A2:43:C1:C4:EA"}}},"request":{"raw":"GET /img/funding.webp HTTP/1.1\r\nHost: rmorpho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rmorpho.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Fri, 28 Aug 2026 13:22:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 86654\r\nLast-Modified: Fri, 26 Jun 2026 10:04:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a3e4eb8-1527e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86654,"size_decoded":86897,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd26b6e7aa6a12df895e2f7e81edbe69","sha1":"5d51bf4c865fa084596701e5384c96a8f8051d94","sha256":"e2e1c90ce472cbb9257f134fda122d82b824681f52af09c52625e9ae025931cf","sha512":"1f87b7bb96750d6fcad9009066c12b323c727ffea848f467cbe53f8a00bc55f5ce1c191b60d6b0be24340cdfe495fa55ee6eb69cf1b87381e693fe11df139f8b","ssdeep":"1536:eudu1FQS32nJKthhCurTaq4HWGp3gJD/CW5Z3Dl6oQFEohNakFkBq0dP54DpTse/:bdYFQu2niCuaGGdGD/Pbh6zEohNakFWs","tlshash":"8d8313057f8c003f89a85b7e622e0a5de847b55ba3ef8b31c596c5c41f4ea01bb591e3","first_seen":"2026-08-28T13:14:41.118441Z","last_seen":"2026-08-28T13:23:01.654346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":113,"dns":0,"connect":127,"send":0,"wait":126,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rmorpho.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}