{"report_id":"1aadbdab-f117-4dd3-a595-2a18c0a7ef0a","version":0,"status":"done","tags":[],"date":"2026-08-18T12:26:05Z","url":{"schema":"http","addr":"business-management-support.case-client.com/","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"ip":{"addr":"103.30.194.67","port":0,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"final":{"url":{"schema":"https","addr":"business-management-support.case-client.com/","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"title":"Support Team Business","dom":{"size":1630,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0c70d01a9e9230b5320cdb1404d70821","sha1":"f7bc991d6cbe4d9a64da3748e63612481867543d","sha256":"433a1349db4c5ea1911cd7cd2f21534cca581931e66df896b39fc8fc25a1c10c","sha512":"88ee376a69e28549e15ef8accc485dabb11d4ee19c6f97e3bf550eb406848c6c1fa028535af62515daf844156fc937ea7faf95c4fe7d1aa6cc1b8d12a5d777ac","ssdeep":"","tlshash":"a731768359e60a71028682e4dcd2e2edaf979e1f4b06458039fc424c1fd2e88c72b658","dom_hash":"domhashe4cb875e9e0dad1824b911cc57c7fbc3","first_seen":"2026-08-18T12:26:05.695029Z","last_seen":"2026-08-18T12:26:05.695029Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"business-management-support.case-client.com/","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"ip":{"addr":"103.30.194.67","port":0,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T12:26:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"business-management-support.case-client.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"akmweb.youngjoygame.com","ip":{"addr":"23.214.96.145","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2016-02-25","domain_rank":759760,"first_seen":"2021-06-16T14:12:30Z","last_seen":"2026-08-14T00:33:02.262395Z","alert_count":0,"request_count":1,"received_data":112902,"sent_data":617,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"business-management-support.case-client.com","ip":{"addr":"103.30.194.67","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-08-18T12:21:08.4281Z","last_seen":"2026-08-18T12:21:08.4281Z","alert_count":12,"request_count":4,"received_data":7179,"sent_data":2242,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"business-management-support.case-client.com/assets/app.js","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"ip":{"addr":"103.30.194.67","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9aab6a7ea3e54baa78b9f042a99729b","sha1":"93f9c5e587a32fa57e7dd740ddc86b0ddae266fe","sha256":"288e9a99ee636cef33693e89d6c60b2d514f011088766d0ae61c954f6b5c2242","sha512":"fc97a04aa3bffdff3829c56500576f44a4aed22ace86f9b684e9221b584c25ddcdd2c677c6df20b5ff64fc0824a6266b7e8e8729c3ea647b924327ea07f44a5c","ssdeep":"","tlshash":"42f0e2bb2c66087085baa3a3c117a248fb7440132641888a7ace80054f74dc49677dde","size":489,"data":"","first_seen":"2026-08-18T12:16:52.718323Z","last_seen":"2026-08-18T13:42:55.371611Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"business-management-support.case-client.com/","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"ip":{"addr":"103.30.194.67","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:25:36.192Z","timestamp":1787055936192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.business-management-support.case-client.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 09:11:58 GMT","end":"Fri, 13 Nov 2026 09:11:57 GMT"},"fingerprint":{"sha1":"A1:4B:3B:3C:76:1D:41:D2:0A:1C:8C:5C:BB:AA:77:B0:88:DE:3D:96","sha256":"09:7D:89:8C:63:BD:32:06:12:AE:24:5D:1C:68:9F:BE:8A:5D:43:32:5C:C1:41:8F:8E:F2:F0:C2:74:38:D0:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: business-management-support.case-client.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: MYAPP_SESSION=86e7488ad40b67f1759285609d73be1b; path=/; secure; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 769\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 18 Aug 2026 12:25:37 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"MYAPP_SESSION","value":"86e7488ad40b67f1759285609d73be1b","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"MYAPP_SESSION=86e7488ad40b67f1759285609d73be1b; path=/; secure; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1847,"size_decoded":1408,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"fb6c68001d78c927706281ad1b97d566","sha1":"fc70b8854c1ea3e5a8709a9fc3436c67cabc3483","sha256":"10daa33c14c384c2c77d1c4627befe10740fbb50055f04241bbd3ec1ebb22eb2","sha512":"337defd59eece45433f85d6b2ab62f81b42a3492c342291e0a8e7a93459024a1c23daf7011eadec5533d93e1358d711e98a08a32ac34b989664d6f05a368f56c","ssdeep":"","tlshash":"ce313f92589b1d7102b792a5cca1e3edef87560b4b06060039ec230b3fb2e1ac71768c","first_seen":"2026-08-18T12:26:05.699796Z","last_seen":"2026-08-18T12:26:05.699796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1913,"timings":{"blocked":-1,"dns":6,"connect":1306,"send":0,"wait":298,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"business-management-support.case-client.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-management-support.case-client.com/assets/style.css","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"ip":{"addr":"103.30.194.67","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://business-management-support.case-client.com/","date":"2026-08-18T12:25:38.553Z","timestamp":1787055938553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.business-management-support.case-client.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 09:11:58 GMT","end":"Fri, 13 Nov 2026 09:11:57 GMT"},"fingerprint":{"sha1":"A1:4B:3B:3C:76:1D:41:D2:0A:1C:8C:5C:BB:AA:77:B0:88:DE:3D:96","sha256":"09:7D:89:8C:63:BD:32:06:12:AE:24:5D:1C:68:9F:BE:8A:5D:43:32:5C:C1:41:8F:8E:F2:F0:C2:74:38:D0:D7"}}},"request":{"raw":"GET /assets/style.css HTTP/1.1\r\nHost: business-management-support.case-client.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://business-management-support.case-client.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MYAPP_SESSION=86e7488ad40b67f1759285609d73be1b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 25 Aug 2026 12:25:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 08:16:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 668\r\ndate: Tue, 18 Aug 2026 12:25:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2143,"size_decoded":1034,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"de364452dac62e47f567ace7f5bad759","sha1":"68b533531c3768824e3e55ddaaff294577215cb8","sha256":"5e59e190468649ae651054aaa5dd17b93c139d032c6eb002f3fff4cac20f254f","sha512":"ebd3cb4f72c294bac3728efc6efd2e8f58269d0524b5af7d51c9439307899df162f6857bc0516a84681546d000bc050885def8c6e926d7ee3a31923cf4a61624","ssdeep":"","tlshash":"3d41bd69ee092407f13397a86ba10b46e7a110179702413d7fd4a2a58ff926cd672fdc","first_seen":"2026-08-18T12:16:52.731196Z","last_seen":"2026-08-18T13:42:55.370809Z","times_seen":6,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"business-management-support.case-client.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"business-management-support.case-client.com/assets/app.js","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"ip":{"addr":"103.30.194.67","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://business-management-support.case-client.com/","date":"2026-08-18T12:25:38.556Z","timestamp":1787055938556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.business-management-support.case-client.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 09:11:58 GMT","end":"Fri, 13 Nov 2026 09:11:57 GMT"},"fingerprint":{"sha1":"A1:4B:3B:3C:76:1D:41:D2:0A:1C:8C:5C:BB:AA:77:B0:88:DE:3D:96","sha256":"09:7D:89:8C:63:BD:32:06:12:AE:24:5D:1C:68:9F:BE:8A:5D:43:32:5C:C1:41:8F:8E:F2:F0:C2:74:38:D0:D7"}}},"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: business-management-support.case-client.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://business-management-support.case-client.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MYAPP_SESSION=86e7488ad40b67f1759285609d73be1b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 15 Aug 2026 08:26:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 184\r\ndate: Tue, 18 Aug 2026 12:25:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":489,"size_decoded":420,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"d9aab6a7ea3e54baa78b9f042a99729b","sha1":"93f9c5e587a32fa57e7dd740ddc86b0ddae266fe","sha256":"288e9a99ee636cef33693e89d6c60b2d514f011088766d0ae61c954f6b5c2242","sha512":"fc97a04aa3bffdff3829c56500576f44a4aed22ace86f9b684e9221b584c25ddcdd2c677c6df20b5ff64fc0824a6266b7e8e8729c3ea647b924327ea07f44a5c","ssdeep":"","tlshash":"42f0e2bb2c66087085baa3a3c117a248fb7440132641888a7ace80054f74dc49677dde","first_seen":"2026-08-18T12:16:52.718323Z","last_seen":"2026-08-18T13:42:55.371611Z","times_seen":6,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"business-management-support.case-client.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"akmweb.youngjoygame.com/web/pekob/image/92afb20a48e4aafaa283109a20e9ad53.png","fqdn":"akmweb.youngjoygame.com","domain":"youngjoygame.com","tld":"com"},"ip":{"addr":"23.214.96.145","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-management-support.case-client.com/","date":"2026-08-18T12:25:38.560Z","timestamp":1787055938560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"act.gms.moontontech.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 07:57:34 GMT","end":"Sun, 27 Sep 2026 07:57:33 GMT"},"fingerprint":{"sha1":"E8:2E:74:F3:27:A3:93:0F:D7:06:C9:CC:6B:43:71:63:0C:83:C2:8A","sha256":"FD:C4:0D:33:32:F7:C9:21:1D:8F:6A:F7:A5:B5:C2:5E:03:9F:A4:3F:55:D0:41:12:A2:E3:48:64:B1:05:42:61"}}},"request":{"raw":"GET /web/pekob/image/92afb20a48e4aafaa283109a20e9ad53.png HTTP/1.1\r\nHost: akmweb.youngjoygame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://business-management-support.case-client.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: Nh31D1MFhL0cuiEmQ/lVL1ryMOCQUirl/ARGd04hbirqxNDEKPyvKCSQs0Vt7Dzu661oJR6EH3uQHWwpthJqMc+J1VoCYFFp\r\nx-amz-request-id: 5KT16PCSQNJ868JG\r\nlast-modified: Fri, 20 Feb 2026 13:22:59 GMT\r\netag: \"58a703d6c348aa44fa84fa35b227aa2b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .ityUzUBf6JNeMDXMG9GeUalHJ6BlKIP\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 111916\r\nserver: AmazonS3\r\ncache-control: max-age=2591437\r\nexpires: Thu, 17 Sep 2026 12:16:15 GMT\r\ndate: Tue, 18 Aug 2026 12:25:38 GMT\r\nakamai-mon-iucid-del: 1172575\r\ntiming-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":111916,"size_decoded":112902,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"58a703d6c348aa44fa84fa35b227aa2b","sha1":"d4e8986df72129b203603eb3106214e4f9125e80","sha256":"d577198130d641e753e3d89a453ffcc7650e4f40b62cd0063ab152f8e55443b0","sha512":"1999100d3dcad607befc6c6b211078c1b3cb9ffc8edab09870cb8e143d95ab88b6886a2cbee539dc019a0854c36a8de39ce231a707128c4f49bd0f13d2c0d997","ssdeep":"3072:u6Z3Yg6qoM1pZlx9HMinUZOIQhSx904UO2v:u65+1gh3sgwO7P","tlshash":"84b31205fa49c508c1a46d39bd786f812fe2498f4bf88fccb83cd0466dd1b9ad22921d","first_seen":"2023-04-10T21:00:51Z","last_seen":"2026-08-18T13:42:55.372572Z","times_seen":1111,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":5,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"business-management-support.case-client.com/favicon.ico","fqdn":"business-management-support.case-client.com","domain":"case-client.com","tld":"com"},"ip":{"addr":"103.30.194.67","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://business-management-support.case-client.com/","date":"2026-08-18T12:25:38.897Z","timestamp":1787055938897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.business-management-support.case-client.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 09:11:58 GMT","end":"Fri, 13 Nov 2026 09:11:57 GMT"},"fingerprint":{"sha1":"A1:4B:3B:3C:76:1D:41:D2:0A:1C:8C:5C:BB:AA:77:B0:88:DE:3D:96","sha256":"09:7D:89:8C:63:BD:32:06:12:AE:24:5D:1C:68:9F:BE:8A:5D:43:32:5C:C1:41:8F:8E:F2:F0:C2:74:38:D0:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: business-management-support.case-client.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://business-management-support.case-client.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MYAPP_SESSION=86e7488ad40b67f1759285609d73be1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 18 Aug 2026 12:25:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-18T14:35:58.670223Z","times_seen":150102,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"business-management-support.case-client.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"business-management-support.case-client.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}