{"report_id":"1cbf0fec-57b0-4658-babe-eba82a416c3e","version":0,"status":"done","tags":[],"date":"2026-06-10T23:29:27Z","url":{"schema":"http","addr":"webogram.org","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"webogram.org/","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"title":"Telegram Web","dom":{"size":5155,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bffa42e0d8e71f524e585019602e3c39","sha1":"e6839b43c209f5af710aa1879e22d65502fa1df2","sha256":"818c4bceb18b312959e5ed8b1ac0e6484095f92853f496212db043717e2499f5","sha512":"673f39a641b6d2a5ed62913680de913acc936b57114b25c133042a83af4f3f943d0c9558d637a226a5dacff8828d4997c9379dec9f10646c98be371f5884f6f0","ssdeep":"96:1HVfZSAWt8SfJZfiulstsIRFbw/IU92cCaoohtRK3Zw14aJf+/qrUsGPboH0g2t:DfAAm8kJZfiuaSIw/I/VaXhtRKpw14aO","tlshash":"54b1a79badf35853240351716bbab9841331e00bd40afea57e8e05e5cf45fd98aa364c","dom_hash":"domhashde68666ef2bb0f0b071e0fdaa1826795","first_seen":"2026-03-09T02:37:40.754352Z","last_seen":"2026-08-02T03:04:07.144548Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"webogram.org","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T23:29:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webogram.org","ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-15","domain_rank":205957,"first_seen":"2014-11-02T04:44:43Z","last_seen":"2026-05-28T02:47:27.403206Z","alert_count":16,"request_count":4,"received_data":15446,"sent_data":2009,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-07T22:29:27.813409Z","alert_count":0,"request_count":1,"received_data":566981,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-06-07T23:11:32.887116Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":787,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webogram.org/","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e4633982e0c306645cd8ffdad700ed0","sha1":"98503260b21b34f313b740fbeeaf42c9c74536c4","sha256":"e57379b15327ab6a5e4aa6983f41057fec361a83c723dcfe1d66d18f81f0835f","sha512":"96770e65f37c9dbc5e190f80467c5ac11ec3321bb007bf3c750928b3ed7df585298ccb83c767e1f28f458a3f5ee2d38a11174155d4a672c4128232ffbe145d23","ssdeep":"","tlshash":"12e08c9c282b1c3699a72a4b4b7eb40076282203e859bee1366f52584f58b4b87a1d30","size":350,"data":"","first_seen":"2026-06-10T23:29:29.971539Z","last_seen":"2026-08-02T03:04:07.158302Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BS3E35BK44","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f888dca80c90a8854dc9944d74358fb","sha1":"186f6769945bc7fb586c711141ece757225f4132","sha256":"22bb15854cd5c8657849a4b89267ec0cd8d4c97274ae7753d4fb8fbb5a3b9de9","sha512":"58de9499db4bc6ce01c93f8d4d17d53c9d6049f36b427c84a19d901b53b8108d1fd71ca81d29d4def8f95aec63d2cb874a3b374fe3699ea92b4a1ec6743d718b","ssdeep":"6144:urMbRknTI8s5XtjLAut8QF1TpqBEzVTI1ee8G1Qh7YZKaff:I3nTsHtjRcqsP","tlshash":"edc4facfb3d67422529af478903f01cba97b25e2b45cc8aab1c9cce02d7455a4167f78","size":566377,"data":"","first_seen":"2026-06-10T23:29:29.967009Z","last_seen":"2026-06-10T23:29:29.967009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webogram.org/","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T23:28:58.778Z","timestamp":1781134138778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webogram.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 14:26:52 GMT","end":"Fri, 17 Jul 2026 14:26:51 GMT"},"fingerprint":{"sha1":"30:39:10:45:1C:DC:49:36:3D:A0:E5:34:AC:3D:6A:D9:E3:31:0C:40","sha256":"4F:C4:DD:35:3A:1A:C2:D3:9C:83:FC:18:50:E2:56:16:BA:8B:60:E5:E6:D5:D7:82:1F:D9:84:78:24:29:7D:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: webogram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 18 May 2026 15:26:47 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a0b2fb7-143d\"\r\nexpires: Tue, 09 Jun 2026 02:24:53 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: B638:6FB64:37878:3CF26:6A27771D\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 23:29:02 GMT\r\nvia: 1.1 varnish\r\nage: 41\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781134143.858639,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 10d5021e65b02d24f751b15aafa2a4129b50f8f5\r\ncontent-length: 1883\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":5181,"size_decoded":2571,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f8aefd3ba4a83d09be7c59525e43c651","sha1":"affc488b0379b0047df81c1b5fe6fd685c967aa7","sha256":"fdd11b8430bea181dc1397fb9b3382a98244d84c6ad8fe9126d7141269f5c521","sha512":"e15b3178e515846223afbdf0a2446fcc7d3055c61fa29cb6a0ed817a9c52e9cba49c11278ca7e5845cf371e03796bd3b23ae2a5dd6a5057eb7c32fffef8433ff","ssdeep":"96:nVfwSjWt8SfJZfiulstsIRFbw/IU92cCaoohtRK3Zw14aJf+/qrUsGgbo20g2x:Vf3jm8kJZfiuaSIw/I/VaXhtRKpw14aY","tlshash":"7db1c89badf35853240351716bbab9841331e10bd40afea57ece05e6cf44fd98aa364c","first_seen":"2025-10-20T19:00:01.364024Z","last_seen":"2026-08-02T03:04:07.15217Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4085,"timings":{"blocked":-1,"dns":4050,"connect":9,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BS3E35BK44","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webogram.org/","date":"2026-06-10T23:29:03.119Z","timestamp":1781134143119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:27 GMT","end":"Mon, 10 Aug 2026 18:35:26 GMT"},"fingerprint":{"sha1":"81:79:25:0A:2E:C8:CA:DA:16:EF:B8:34:B7:38:E6:48:7B:5B:4C:6D","sha256":"7B:74:72:15:7A:A8:4B:D0:1D:D6:11:DE:7C:D9:15:EE:E9:22:FF:E8:56:41:9E:88:6C:4A:F9:9F:AB:B3:6E:2C"}}},"request":{"raw":"GET /gtag/js?id=G-BS3E35BK44 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webogram.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 10 Jun 2026 23:29:03 GMT\r\nexpires: Wed, 10 Jun 2026 23:29:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 183964\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566377,"size_decoded":184568,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"9f888dca80c90a8854dc9944d74358fb","sha1":"186f6769945bc7fb586c711141ece757225f4132","sha256":"22bb15854cd5c8657849a4b89267ec0cd8d4c97274ae7753d4fb8fbb5a3b9de9","sha512":"58de9499db4bc6ce01c93f8d4d17d53c9d6049f36b427c84a19d901b53b8108d1fd71ca81d29d4def8f95aec63d2cb874a3b374fe3699ea92b4a1ec6743d718b","ssdeep":"6144:urMbRknTI8s5XtjLAut8QF1TpqBEzVTI1ee8G1Qh7YZKaff:I3nTsHtjRcqsP","tlshash":"edc4facfb3d67422529af478903f01cba97b25e2b45cc8aab1c9cce02d7455a4167f78","first_seen":"2026-06-10T23:29:29.967009Z","last_seen":"2026-06-10T23:29:29.967009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":45,"receive":63,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webogram.org/img/Logo.svg","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webogram.org/","date":"2026-06-10T23:29:03.124Z","timestamp":1781134143124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webogram.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 14:26:52 GMT","end":"Fri, 17 Jul 2026 14:26:51 GMT"},"fingerprint":{"sha1":"30:39:10:45:1C:DC:49:36:3D:A0:E5:34:AC:3D:6A:D9:E3:31:0C:40","sha256":"4F:C4:DD:35:3A:1A:C2:D3:9C:83:FC:18:50:E2:56:16:BA:8B:60:E5:E6:D5:D7:82:1F:D9:84:78:24:29:7D:43"}}},"request":{"raw":"GET /img/Logo.svg HTTP/1.1\r\nHost: webogram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webogram.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 18 May 2026 15:26:47 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a0b2fb7-43b\"\r\nexpires: Wed, 10 Jun 2026 20:41:44 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: D03A:1A5E1F:AA83:BB7D:6A29C9B0\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 23:29:03 GMT\r\nvia: 1.1 varnish\r\nage: 41\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781134143.128668,VS0,VE2\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 9e95551361478f1289be9337825dc6496439780f\r\ncontent-length: 661\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1083,"size_decoded":1335,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95702ab5df3c052be830894600608666","sha1":"022bd3aa74cafd7e21b8acd562ba534eddc610b5","sha256":"2e33202eb1eab3d175c3a87e34f3c8aa3481be01bf7e2941c729dbd2f4f4a5ea","sha512":"9ec16d25d55000e61cc6a0c61054908a03120fd938ec64244e6637e5e09ac3455c6a2a4f02ba637a02240196004845c1826ec6c4af7aa1ae9ed9cd8f560d36bc","ssdeep":"","tlshash":"561142e3debc9960dc4cd3bdeab49d511257302a966787b0d6b03f48390209b6d087e4","first_seen":"2024-04-08T07:08:35Z","last_seen":"2026-08-02T03:04:07.154616Z","times_seen":16,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webogram.org/img/apple-touch-icon.png","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webogram.org/","date":"2026-06-10T23:29:03.258Z","timestamp":1781134143258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webogram.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 14:26:52 GMT","end":"Fri, 17 Jul 2026 14:26:51 GMT"},"fingerprint":{"sha1":"30:39:10:45:1C:DC:49:36:3D:A0:E5:34:AC:3D:6A:D9:E3:31:0C:40","sha256":"4F:C4:DD:35:3A:1A:C2:D3:9C:83:FC:18:50:E2:56:16:BA:8B:60:E5:E6:D5:D7:82:1F:D9:84:78:24:29:7D:43"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: webogram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webogram.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Mon, 18 May 2026 15:26:47 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0b2fb7-160c\"\r\nexpires: Wed, 10 Jun 2026 22:55:10 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 884C:1A5E1F:3091E:35DBB:6A29E8F6\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 10 Jun 2026 23:29:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781134143.264207,VS0,VE117\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 23d3220fcdbc4d75abd2362b5e3e7fe6226c7bd4\r\ncontent-length: 5644\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":5644,"size_decoded":6272,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"295ccdb03006b8dfef45090dafbd46ac","sha1":"491ab660270e47cbac6a5731c51cca71c1c1b2b1","sha256":"a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3","sha512":"90bf3871af6d20372e1b7daa177afccaa16d30970873c2a1363d05fc49eca24b18e406835da051d79887e0e223aae345fd797cfa479f324f776e28b461b17bcd","ssdeep":"96:ZKgGepqI/QddfO0T+kST5610/DXhkyFBKNpu7UhDjuTu+uCCar+0xWl/rB61LVWR:yesBf+DNPVFANc7UhDku5G+0xWl/t6OR","tlshash":"28c19eb8f6ed2e5bc5f28693eb472665b2972a208534c06053f1ea1bd7b2121b4c6342","first_seen":"2023-05-02T07:47:09Z","last_seen":"2026-08-03T10:01:30.828543Z","times_seen":68582,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webogram.org/img/website_icon.svg?4","fqdn":"webogram.org","domain":"webogram.org","tld":"org"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webogram.org/","date":"2026-06-10T23:29:03.261Z","timestamp":1781134143261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webogram.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 14:26:52 GMT","end":"Fri, 17 Jul 2026 14:26:51 GMT"},"fingerprint":{"sha1":"30:39:10:45:1C:DC:49:36:3D:A0:E5:34:AC:3D:6A:D9:E3:31:0C:40","sha256":"4F:C4:DD:35:3A:1A:C2:D3:9C:83:FC:18:50:E2:56:16:BA:8B:60:E5:E6:D5:D7:82:1F:D9:84:78:24:29:7D:43"}}},"request":{"raw":"GET /img/website_icon.svg?4 HTTP/1.1\r\nHost: webogram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webogram.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 18 May 2026 15:26:47 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a0b2fb7-368\"\r\nexpires: Wed, 10 Jun 2026 21:40:05 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 24D8:EC964:1EC07:21A9D:6A29D75D\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 10 Jun 2026 23:29:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781134143.265958,VS0,VE115\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8c899013e28f9a55f825ecfe36e395314fea9521\r\ncontent-length: 528\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":872,"size_decoded":1204,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38ebe4fda59af3288fdde3ce13320515","sha1":"8b63c6c6e64a3311d0209a17b727db47b9248c45","sha256":"50a5061ad89a1c44f7d2919579e51f5883af713a000ec96795d9e867553f305c","sha512":"11bbb3526e27cc56b3695d68d4563336d2aea28887f8e42c325c2351619b345a7553d22f7e91955a9aabf077b822fd4017b6055023d6f668e2e2a54f2d47620a","ssdeep":"","tlshash":"9f114093d020e71ae4c9e16bef62fca0112320cee5b746d485e96a24500fcdbfc08668","first_seen":"2024-04-08T07:08:35Z","last_seen":"2026-08-02T03:04:07.151264Z","times_seen":18,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"webogram.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-BS3E35BK44\u0026cid=1652564129.1781134143\u0026gtm=45je66a0h2v9101539048za200zd9101539048\u0026rcb=3\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938466~115938468~117776794~119456239~119456247\u0026z=1579157605","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webogram.org/","date":"2026-06-10T23:29:03.460Z","timestamp":1781134143460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:39:21 GMT","end":"Mon, 10 Aug 2026 18:39:20 GMT"},"fingerprint":{"sha1":"6E:BB:D5:FE:D9:79:CC:FE:23:D6:E1:24:F7:51:B4:EA:C7:A5:3E:BF","sha256":"D3:65:DF:4C:85:93:FF:13:D7:84:DF:43:A0:13:13:AA:81:E5:6D:FD:67:86:0D:30:F4:BD:84:4A:7F:9C:E1:82"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-BS3E35BK44\u0026cid=1652564129.1781134143\u0026gtm=45je66a0h2v9101539048za200zd9101539048\u0026rcb=3\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938466~115938468~117776794~119456239~119456247\u0026z=1579157605 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webogram.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 10 Jun 2026 23:29:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-03T20:30:29.691894Z","times_seen":1018722,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":102,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}