{"report_id":"23890b2c-ff35-479d-b1cc-1c3c0bebb198","version":0,"status":"done","tags":[],"date":"2026-09-20T05:28:06Z","url":{"schema":"http","addr":"fabtransnationals.com/","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":0,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"fabtransnationals.com/","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"title":"Fab Transnational Oilfield LLC","dom":{"size":18800,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4706)","md5":"9fad54e82310ae28be174b1520fdc9e4","sha1":"2ccb2edcb89fd195266895aa7754f4ef103844a7","sha256":"4ea7da8523c0bb5d473c2ae2d6e9949554a8730fd6d7b8408816da4c5735dbd6","sha512":"6bb68e4e8e40eed731725814425b20f08a8e6012c601f1faf2fa550bbcf84066b9f9027079a4956c6612a9155d095c975a449f1586ea2fca4ccbe75b47b561a2","ssdeep":"384:3v4IIqVtgo0bgf9pBOo5JhwZjFIu8jK0HtbImKZscTEKC1JY:3gIIotgZgVTJhARIVK0HtbWiY","tlshash":"ea828562d1bc193b112703f966a167d931ff8e20e6a60811f3ff069953d3c89ae0bc56","dom_hash":"domhash82d277a92df5edad6e842bd90b62b727","first_seen":"2026-09-20T05:28:15.192806Z","last_seen":"2026-09-20T05:28:53.040731Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fabtransnationals.com/","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":0,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T05:28:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fabtransnationals.com","ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":15,"request_count":15,"received_data":7499456,"sent_data":7669,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fabtransnationals.com/script.js","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae1dec5c25e81975fe3811d8d7c2c462","sha1":"4ed71cb3b86d2e9cf64bffc24128fd4bcc403445","sha256":"10e874de213ac9914d552e243e61fb89390399a6ad0d2395e3cd8dfb9ebc7e8f","sha512":"dd2715c7d395dd5f816a7bb26164be3a865836a06990894859dddd4834a4f2c89cfa79103f751df6db28725ac29b6b488d10ad695a08279214ae2003aed96b61","ssdeep":"","tlshash":"1b21717bf1251c3246bab5f170ee73453eba50212e065c123d48c088047ce8a363ad78","size":1379,"data":"","first_seen":"2026-09-20T05:28:15.216703Z","last_seen":"2026-09-20T05:28:53.060117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/data.js","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f62db43eb82b613937adbdfed3fed170","sha1":"0ccd40833eb96cf6d2b4cde79ac9c3f14f3ef249","sha256":"246edd4333b39d561b6e63192c81ca709905da93a0f67e618a16faa8ecca1910","sha512":"d2dff68065bbf8369933ac28a0040b4899fa75f286a6e8cf446bfe22f299319c8f65c58103300cd5b67b08c0b1cb5185e40698edae21e26885d56fff99d1381d","ssdeep":"96:rCfMW03opLikxBM1exqvwbTVhNlEp7Cb2U2YOGlc7sk83tS/meGrYcZd0Lxg7XLQ:iJ2wOdUvO/eS8rY0KLxPGjp+","tlshash":"41f1e949c368a88f537163f61dee65811f6c3691e71908e9e30f421443bed9e8e37928","size":7517,"data":"","first_seen":"2026-09-20T05:28:15.21489Z","last_seen":"2026-09-20T05:28:53.065309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fabtransnationals.com/images/operations.jpg","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.039Z","timestamp":1789882057039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/operations.jpg HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"73af3-6a994fdb-9e3be43b54d51b4f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 473843\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":473843,"size_decoded":474173,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, manufacturer=Apple, model=iPhone 12 Pro Max, orientation=upper-left, xresolution=194, yresolution=202, resolutionunit=2, software=14.4.1, datetime=2021:03:25 13:10:07, hostcomputer=iPhone 12 Pro Max], baseline, precision 8, 1440x1920, components 3","md5":"81a762bc3494cd4df7b4320ba454881f","sha1":"b43212d4e377dd58d5b6523beb85aa5ad21b9ef3","sha256":"a1e6fdeb1fe39296079b21f637a6b9ab9bc75adece0774b6858861f13e35c6a4","sha512":"3c93666180cc0757ccaee3ed650eae61f2764a65b4bcf1bcd8da3a065414d7e50969c88e8b864d8cf8f6c6154740c145a285d302b50cf8403d355cacb48c076a","ssdeep":"12288:GBk5zBAHnislFP/Zw5SCJ8akIr19gdItFMJTO:dzB+j1y8TIJleJTO","tlshash":"d9a4235d31633c80e3193cb85be2e298f19ee97c07e6ac41969e4dc4ae4905d6d0bd3e","first_seen":"2026-09-19T08:16:32.995402Z","last_seen":"2026-09-20T05:28:53.066181Z","times_seen":3,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/gate-valves.png","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.189Z","timestamp":1789882057189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/gate-valves.png HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"9ab77-6a994fdb-a6ae8b108e9b5d48;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 633719\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":633719,"size_decoded":634048,"mime_type":"image/png","magic":"PNG image data, 951 x 916, 8-bit/color RGBA, non-interlaced","md5":"881f8ceb7bf5a284569464f6281f2381","sha1":"7d2c6fcfb81dc9cae54df67839c21d2b0e497022","sha256":"aeb2306a6be721c14018359feea05f118a655b4b520357100b933185bb8a8c3f","sha512":"503cd8f2497ff73c3ecd03d2ca8e518c60d3b05782d23e76f532e3c9dc066310a6f89087780d5900bc5bcbab5b6cf8979a612fd99ca8a9e2bd2e1142b92ee6f1","ssdeep":"12288:xXpojHX7q7owf4jvfzkKqrP3slRCBm7WYuJhrJtEMr0jtjkM80XSL:2X7cowf23Al3kYBc3urnEMr0JtML","tlshash":"4dd42378e5bda9a8e32f1f60040ab9f497c39403e5fb4817a221fd50d92e96e47c7709","first_seen":"2026-09-19T08:16:33.011818Z","last_seen":"2026-09-20T05:28:53.042532Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/styles.css","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.031Z","timestamp":1789882057031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"3d84-6a994fdb-21a9d79ac884eba0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5380\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15748,"size_decoded":5801,"mime_type":"text/css","magic":"ASCII text, with very long lines (761)","md5":"d229fd0831bf834c6de86a7fef605bf4","sha1":"47596e7199b4f038635906d491cf3dd8606a3ab1","sha256":"c9444944b5efcc57dafe21ed7cd8ba3791d522cc4c2379dc63a576b2bfbcdd84","sha512":"e3810d5a7b0f065c037974544e550ef51a4b00b30948de0fd048c9bec699e6b5645036512535fce7a0ee32d51b8749d7d4884338e56e63636e46ea5999519772","ssdeep":"192:dPDVUtvWDbxBLQgQaEbCSES8Ul+JX1JZlkZDF7QKJBUJGU8v6xcI+kQ:JDSMLbLEb7AlJvuZSQ","tlshash":"6962b365f614723ea427d8386a88e7cc6218f015d91a0bd9fa1fd921d1cb1f71ea3e0d","first_seen":"2026-09-20T05:28:15.199773Z","last_seen":"2026-09-20T05:28:53.064226Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/wellhead.png","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.187Z","timestamp":1789882057187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/wellhead.png HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"10c80-6a994fdb-a4bb9b6382ddffd9;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 68736\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68736,"size_decoded":69064,"mime_type":"image/png","magic":"PNG image data, 269 x 262, 8-bit/color RGB, non-interlaced","md5":"7affcbb8858216284c3f3396d92aa999","sha1":"c51efe8de0c0bcb17f2760428cff908ddb223d04","sha256":"e9ac4c563f6eae6f28bcc18d15324ca94b5df02bf593c465d7f69769eee26933","sha512":"f94b5645afaa826ae76354a55875e40cec07e4b0c98ba5c427c92fa5e4cc18e8db4cb1f0bca8239acdb8c1f623d3bd636e670563b05e28d2dbbb4605fb7f43a8","ssdeep":"1536:1Mxopz79cAjZHQmqPu2deL5K+FjFp0V3VSt72Booclt:iopzGGHZqmeS5pj/0V3ItANclt","tlshash":"c763027f754d32d8f1dfeb88a181fe2365543ba68e200ce90b94796df2a4e202409d5e","first_seen":"2026-09-19T08:16:33.013573Z","last_seen":"2026-09-20T05:28:53.047075Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T05:27:36.750Z","timestamp":1789882056750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Wed, 09 Sep 2026 19:10:11 GMT\r\netag: \"2bd2-6aa1af13-6ef250f12329fdd0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4197\r\ndate: Sun, 20 Sep 2026 05:27:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11218,"size_decoded":4560,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (437)","md5":"9f0728e8cbb8e6974f88d33e8270daea","sha1":"cec46f4ef6909843766a8d9402fd25642e8f0c6e","sha256":"a35d07e7171999bdfbe2002cc8925c45cb251e561dcf0076c78918d47976b168","sha512":"9889b599e2ee2515be6229483f4950f432b101eb1b62464dd14b8a52192ab3dbc79e77d97d2f3a41be985cc925e46ba7b5a39e5f6de3fbc4203568042d54fa8b","ssdeep":"192:X6wvKlIIqDnQTfYw9pnBOodUDjjxkyLHLvZbI3K1g5cTDUKyMluE+4:7v4IIqrel9pBOod8jK0HlbI3Ky5cTEmb","tlshash":"49324262619c2c3b111713e7b165a39971ff8e30e9668462f2ff069947c7c81ae0f4a7","first_seen":"2026-09-20T05:28:15.202414Z","last_seen":"2026-09-20T05:28:53.049177Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":24,"connect":19,"send":0,"wait":20,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/favicon.svg","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.360Z","timestamp":1789882057360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"10b-6a994fdb-91f5566731de6140;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 222\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":267,"size_decoded":588,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b66ee9babb277bf7f56760b5ab8e151","sha1":"df10f4670054c5bfe1da0eeb0443148ae9960d7d","sha256":"1c11112bf9dfd5f19a14f86d97209980c04d22f1ca39dcf28db9cfae911e6c98","sha512":"32128cb83898d034ab32240b787ca73af4bce78402fa407b0614a3496f3927b2a652a667d1927a46ea3d64137ecefaad13fd5f9de9ef326ef715e1dab0d42cc1","ssdeep":"","tlshash":"d8d09554f19c8714c704ce07b2153c5d254ee4c4edc18415f1d0561b548b9f3694974d","first_seen":"2026-09-20T05:28:15.20417Z","last_seen":"2026-09-20T05:28:53.06331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/hero.mp4","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.061Z","timestamp":1789882057061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /hero.mp4 HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ncontent-type: video/mp4\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"3df072-6a994fdb-253f14ffab9fb5eb;;;\"\r\ncontent-range: bytes 0-4059249/4059250\r\ncontent-length: 4059250\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4059250,"size_decoded":4059520,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"950e4b1cba2be56e466d4d0b3e6400b0","sha1":"d31ff82796543b86dba13aac4f3e478c0517bc29","sha256":"c66a4ddc9a143b7c4046bca7cfe4977f017b8bf15b7153c6e0d4597dc039ff1a","sha512":"71dbebc866bb88b129541de8311a704797067ca1c109460a13204aef9fbd45152f0134c83be19ea6b7e40482cd44492138df919bff5012aabc3393c747990b39","ssdeep":"24576:mibDSoeaSD6WnCW89CW7vesvgj3ZvvA3VNlFON4UjpIotpqWfBWJd6Keg:PbDSoexD6ruWTKpvcVNluIyPBRKeg","tlshash":"a12523589b526049ee1994f008202f73233bca2339fdb393b5c47b13563d85655babbd","first_seen":"2026-09-20T05:28:15.205413Z","last_seen":"2026-09-20T05:28:53.050254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/plug-valves.png","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.190Z","timestamp":1789882057190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/plug-valves.png HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"96975-6a994fdb-88f33cad63bce200;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 616821\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":616821,"size_decoded":617150,"mime_type":"image/png","magic":"PNG image data, 951 x 916, 8-bit/color RGBA, non-interlaced","md5":"1822030fd3c87f1cee03648b61b5115b","sha1":"9f67567ecd028fe0e6361378aa24880308fe6ee9","sha256":"d6f4f8a66724e08a6e45858b7a4ea7b9e3cb358bdeb91ce4cfa7668332ad45a2","sha512":"3aefa45d077bb1b186ca0ec31ca6f726ab3d0a9810c3a145d15f573bbc098146e59c3e18ae0ff19a20ffeb424ab7cb23a926c6d73b8930006439fd081f2e8c84","ssdeep":"12288:xXpojHX72FukgPm1RVkxC192H6hqSG/i/Is99VbwXyY/9y/nbm:2X7iukg+1ECeH6hhOETVkX1/98bm","tlshash":"59d42351fdc25f21f047604296c4bb89f89b29139a9c0c08fabd67e3999cc9b43d35e9","first_seen":"2026-09-19T08:16:33.005828Z","last_seen":"2026-09-20T05:28:53.054071Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/weco-flanges.jpg","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.191Z","timestamp":1789882057191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/weco-flanges.jpg HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"86cf-6a994fdb-1b4f9001cc80c232;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 34511\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34511,"size_decoded":34839,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 600x600, components 3","md5":"d3c5524176c007d7cbb587da923419ea","sha1":"27f3f51d9d71b902b8c6cf26baf5ebd5cb24ad45","sha256":"eac4bca1dfea3b41778b8e22fc64d226a5dd08941c045b55582cc79a29c4a3f2","sha512":"7f71d3a1598218d2b7ebda0546af7333dc691a40789be820c25376bc42e558be42316bfe115c57ed2a5c5fc9a19f771e670350262c6549d412914d030769ac09","ssdeep":"768:uBgoo5Y6/Udyyjav8dxrKGZcYZQ+uQPVB0p0:uBfkwM8zXcYbtWp0","tlshash":"18f2e0e9d507f3a6c368a8f7f67f818b9bef50f11a9a0587a518c12a14f84720d401ef","first_seen":"2026-09-19T08:16:32.999015Z","last_seen":"2026-09-20T05:28:53.061905Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/weldneck-flanges.jpg","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.193Z","timestamp":1789882057193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/weldneck-flanges.jpg HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"4ec7-6a994fdb-78c401517fbf1024;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 20167\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20167,"size_decoded":20495,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 600x600, components 3","md5":"7cef2339b37baa6fec8000e5a2265f87","sha1":"de8b786a09f961ba5faa1d3b832d2ce2fa395070","sha256":"328378454644799c37b3c2ac2555bdf7fe9933d85a792c1d09bee8af942a8227","sha512":"1215637764dd21d5444e45acbbda381db7712490d6aed9632379e1b2a08f0b2e13e0cac2e3f349221e0679c17121c5b4f833bf86864facd3baa4249cf5cd885c","ssdeep":"384:FfC49qjS9iNJfntjinMH29CGkngT701TJ+tzzM9YQ:F3sqiNJftjBkko1zQ","tlshash":"bb92c04fb0ca27d3fabdae737076a273ef8e8a0948d230d6b4f2085724391655937255","first_seen":"2026-09-19T08:16:33.01531Z","last_seen":"2026-09-20T05:28:53.043779Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/companion-flanges.jpg","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.196Z","timestamp":1789882057196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/companion-flanges.jpg HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"4484a-6a994fdb-cd2d853d9d7e6010;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 280650\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":280650,"size_decoded":280980,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=                                                      ], baseline, precision 8, 1800x1192, components 3","md5":"8eececc975cf9104351bccd99e310235","sha1":"47e0756aca5d4c2f1ddf21c35c24ec1423ce3f7d","sha256":"c452d252b393d029c8975671fb569028ae25a512d6a1ccba10b507de84d0dd25","sha512":"c10e633e76f3fc1dab6f1e2e3bdb80bcf2293b9568dae15475a293a9fdd12c88b7db93c5ec27c018be8ac0c12e47709d647d89a8c58336e7c0698c61fffdce47","ssdeep":"6144:8zfeBn0/tg+9WzH1HX5YXYayo/UC5wXJUn843kMHknbI8vMSK:8zfeBn0FDMN5eyo/USp3BHkbI9j","tlshash":"5d541280da402b81ceb5fbe49cf91f8dc6153ee5a8d9ae377b6e04751bc00e0928752d","first_seen":"2026-09-19T08:16:33.007197Z","last_seen":"2026-09-20T05:28:53.045064Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/spacer-spools.png","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.197Z","timestamp":1789882057197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/spacer-spools.png HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"911cf-6a994fdb-2df2d0f5b3997807;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 594383\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":594383,"size_decoded":594712,"mime_type":"image/png","magic":"PNG image data, 951 x 916, 8-bit/color RGBA, non-interlaced","md5":"575f3840a3091dd7d4785a21580a08b1","sha1":"772fc7b440c5e86a08f39d59a7c23f7078d2da0a","sha256":"1a664d1011d32cb937e2f1efefc5c75626825e0f58c9464730a62d60dfca39ed","sha512":"144de7227c3da65de2f8e8f7ab340ec6e182e8a6bfd7832ff21adb796b0a2d58d43f7befe826d95eb60c558826e3166f834a7b624be1d2c0a0c1f2b8b846389c","ssdeep":"12288:xXpojHX72FukB2Aa+qBrtc0mtFuJkPFpsjrkCgUryM29sWq1V69J:2X7iukB2Aa+qBquJcFyjACgUrytsZzW","tlshash":"99c43318d0d69b6acb52b571409750f3e485fc620e02784b2ab6dff7ad0704f81f3a9a","first_seen":"2026-09-19T08:16:33.00088Z","last_seen":"2026-09-20T05:28:53.046129Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/images/crossovers.png","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.198Z","timestamp":1789882057198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /images/crossovers.png HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"a5113-6a994fdb-e07c7c1da37f4f0c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 676115\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":676115,"size_decoded":676444,"mime_type":"image/png","magic":"PNG image data, 951 x 916, 8-bit/color RGBA, non-interlaced","md5":"aaf3eba391ec06bf9f8f119a25035993","sha1":"e30e477a2f521695e475df82d46046dad71ad0c2","sha256":"38857ee31d322a55155577cb8920ab8694c48e5b34629b95b62b02bfb3ca8910","sha512":"e34aa5dffadb4eca32bcbf79534dffaabc44b37659dc62e95427540bfc895c12ed1a97119f426e43939844fae04e0db685fc6efcb62367791efc9325feb83e99","ssdeep":"12288:xXpojHX7Oacyh2gB+5apTGfRHyV+akb34AxXI3wq+9m3w9jbiGOiod:2X71cy/B4apTiRHyV+aAo27JMlGOd","tlshash":"58e423ec2ace5b36c935b5a362f8e4f095c7a1074ff085e86e189197e85b50fc2d260d","first_seen":"2026-09-19T08:16:33.008733Z","last_seen":"2026-09-20T05:28:53.04809Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/data.js","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.033Z","timestamp":1789882057033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /data.js HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"1d5d-6a994fdb-8adb258126e9054f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3126\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7517,"size_decoded":3503,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f62db43eb82b613937adbdfed3fed170","sha1":"0ccd40833eb96cf6d2b4cde79ac9c3f14f3ef249","sha256":"246edd4333b39d561b6e63192c81ca709905da93a0f67e618a16faa8ecca1910","sha512":"d2dff68065bbf8369933ac28a0040b4899fa75f286a6e8cf446bfe22f299319c8f65c58103300cd5b67b08c0b1cb5185e40698edae21e26885d56fff99d1381d","ssdeep":"96:rCfMW03opLikxBM1exqvwbTVhNlEp7Cb2U2YOGlc7sk83tS/meGrYcZd0Lxg7XLQ:iJ2wOdUvO/eS8rY0KLxPGjp+","tlshash":"41f1e949c368a88f537163f61dee65811f6c3691e71908e9e30f421443bed9e8e37928","first_seen":"2026-09-20T05:28:15.21489Z","last_seen":"2026-09-20T05:28:53.065309Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fabtransnationals.com/script.js","fqdn":"fabtransnationals.com","domain":"fabtransnationals.com","tld":"com"},"ip":{"addr":"195.58.48.46","port":443,"asn":51659,"as":"LLC Baxet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fabtransnationals.com/","date":"2026-09-20T05:27:37.035Z","timestamp":1789882057035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fabtransnationals.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 09:59:15 GMT","end":"Wed, 02 Dec 2026 09:59:14 GMT"},"fingerprint":{"sha1":"4A:90:62:1E:5C:CC:9B:29:28:62:BF:B9:7C:18:44:B1:66:DC:E0:83","sha256":"43:13:0B:88:24:EC:A1:D6:FB:37:C9:5A:21:8E:70:56:74:EF:D2:58:3F:31:8D:43:E1:89:95:7E:36:F8:95:FF"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: fabtransnationals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fabtransnationals.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 05:27:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 10:45:47 GMT\r\netag: \"563-6a994fdb-ba4985509a1ff48d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 760\r\ndate: Sun, 20 Sep 2026 05:27:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1379,"size_decoded":1135,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ae1dec5c25e81975fe3811d8d7c2c462","sha1":"4ed71cb3b86d2e9cf64bffc24128fd4bcc403445","sha256":"10e874de213ac9914d552e243e61fb89390399a6ad0d2395e3cd8dfb9ebc7e8f","sha512":"dd2715c7d395dd5f816a7bb26164be3a865836a06990894859dddd4834a4f2c89cfa79103f751df6db28725ac29b6b488d10ad695a08279214ae2003aed96b61","ssdeep":"","tlshash":"1b21717bf1251c3246bab5f170ee73453eba50212e065c123d48c088047ce8a363ad78","first_seen":"2026-09-20T05:28:15.216703Z","last_seen":"2026-09-20T05:28:53.060117Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"fabtransnationals.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}