{"report_id":"281c768c-b12b-409c-9fca-7772671e4777","version":0,"status":"done","tags":[],"date":"2026-09-02T20:37:16Z","url":{"schema":"http","addr":"ichamati.org/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":0,"asn":0,"as":"","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ichamati.org/en/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"title":"ichamati.org - Save the River Ichamati, Pabna","dom":{"size":69956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7420)","md5":"c0b7e2b4faf7131587fc05d67dd0d49d","sha1":"fc57fd5438cce822ca0c7e1c5b6ac1a36e39181c","sha256":"a25c7aed141f4b73571237e354c6608029685e30d1e1823637fb277a35c7b8cc","sha512":"b7733f4e0675a2a6e552c3d6ab59cfcc5dd07d8ac39aa2033c2825b2acd5282e0d71fbfec6d498d537052d57c0d5a221d4c18cc6a77dfa5281bdb7c4b4e96f33","ssdeep":"768:NHnuTbXB0tKxa7tu5ebAfswWLAvxmFimPGBV0vsbhcoevZQFActn9OBc6++mi/Vl:Bc9AF","tlshash":"c3639025acf540a9405ec58d16b17e8dafe14e2b4606017afded8fc82fc6e419c7368b","dom_hash":"domhashac1113bdf5bb21895d69b33e43ed6dbe","first_seen":"2026-09-02T20:37:56.065185Z","last_seen":"2026-09-02T20:37:56.065185Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ichamati.org/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":0,"asn":0,"as":"","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T20:37:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ichamati.org","ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T20:37:31.0642Z","last_seen":"2026-09-02T20:37:31.0642Z","alert_count":500,"request_count":100,"received_data":58964721,"sent_data":54697,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ichamati.org/en/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f4fcc7aa8fc75573743a9c1fceb2f9a","sha1":"a8573c1b75f89c8b6d21a6ed8453174930a7cfa6","sha256":"8b90783aae4cdc41ce08a677d7ad92956f6d48bd1829e31a303e3bb8602747fe","sha512":"5c9fd89466d96f6ae1dd171e7957ae220cf16f4d1ecb511f8973aa901415c8f42bb6316c4261fa15b462726116470947d52ea631a372b19a4b6070d34303d0a3","ssdeep":"","tlshash":"6bf0ab0bc164f2178e3e3528569802651863e71444e7010faa4556aca7e33eb9e27cee","size":471,"data":"","first_seen":"2026-09-02T20:37:56.24118Z","last_seen":"2026-09-02T20:37:56.24118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2be4fcbe607f3792888c486cc173862","sha1":"9e3f155912a08a4dbbf5902aa506adf262cea03e","sha256":"b41490ebb14155f49adefa21c4b3445720335d9a14520e3eb1504e2ce024c1d7","sha512":"c9a5f3c2a19584d934c284432faacaa08b2bcbe326d186ce273be9cfc68809562f8baa995ac49e67792a46a730da3e803c63ac897b0656d3cb76206d41f3dad6","ssdeep":"","tlshash":"89115c5f68d62273585374386b8be048e564a41f2247c9507c1c92c11f249b805fefde","size":1053,"data":"","first_seen":"2026-09-02T20:37:56.242319Z","last_seen":"2026-09-02T20:37:56.242319Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"29d43494efd52754ff94faab4cf5b28e","sha1":"8ff83c93065aba3519d7d3f8b20dfa8d79088a19","sha256":"c0a74faa56694db4be973807e5ffba4739eeb7e4d9a43ac30060a86788cb72c9","sha512":"f1b9d4eded7a117f5c95f42d2cc5069eca693bd9873d0f8ca318a65f2b65378e90f7d03f4043edc3a1b7fde81dc49adfca424dade8fc348cbe17e256ef125760","ssdeep":"","tlshash":"f8600033c0fcc030cc30000c0000c0000000f30000f300c000c000c0c0000cc0033003","size":14,"data":"","first_seen":"2023-11-03T05:23:27Z","last_seen":"2026-09-02T20:37:56.243284Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-17T20:42:27.919686Z","times_seen":366847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/webcard/static/app.bundle.1712100204.js","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e6574def420114d30029f79ce0fda77","sha1":"71bf7836e71e3054f47d3f05c93cb797308e39b9","sha256":"42aba936d3aef43737438a8139ce2bcb6f7f3929a6043d2083db08e87d0d6c5a","sha512":"4512bbf032eaa48ba359fb26aa1f90319577618bf921a9fdf4b43d49d9c6da2eae8b6ece2f52195b97509180864a91f6b114a99c5f63c2c946304a79d77fffb4","ssdeep":"6144:Fa8XqXiarIdexuYx1/Qsw+Fkhtrfb2Qe7nldHqBpYTmw2xjcnaiELmT70:EjqhjceO0","tlshash":"4384088db2d2b0a603eb20b9402f160bf23b6555301a9494f679e8e5bc78a4f5137f7d","size":395598,"data":"","first_seen":"2024-08-19T12:54:11.803189Z","last_seen":"2026-09-02T20:37:56.13093Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/js/custom.240327171831.js","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a516dec5b447b493f41732d9eafa58","sha1":"8aa453a3f23fcf33037c7f20dfa7f25dae866fb5","sha256":"91492f090a8464e1ba92bf6f09428656dba39ca09650ad784a6608a64500cd72","sha512":"22d392769e39702cf5761dcee341232993f0c7df484b83bbfbb93c409d394d23c0ed1357c2da2864b9fc54b2c883ccebd9da9305eaf20fd61eb36db1644b7870","ssdeep":"192:pNKm51+4F5BJd+mxEJ6anQvg2U2Xlc2Me2HZ7lb2Mj2HylQ2E2AlzdDUx86ce:pNKmLBb+eTK6gJElcPe0FlbPj0ylQbd+","tlshash":"dc22a5a4fb8d31b6917b317bc44f2198313c6074e50ac999ecacb6782b8593d17c6d2c","size":10301,"data":"","first_seen":"2024-12-23T13:47:59.1528Z","last_seen":"2026-09-02T20:37:56.194651Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-32-Cleaning-Nov-2016.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.482Z","timestamp":1788381401482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-32-Cleaning-Nov-2016.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 374454\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374454,"size_decoded":374786,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=0, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2016:11:01 12:14:26, width=0], baseline, precision 8, 1200x800, components 3","md5":"8a551e42f5ce8d8130084c4b12726bea","sha1":"8003bdab9e0f6e3e556ec80c3da034841bdf45b4","sha256":"0e8bce619b26f3e873048f575149fe749509ff67dea59813925fee04c9056cfe","sha512":"6aa8b18247ac65f31c0b8d09556243003b6d51bc365d804458882b25637eeb8a009380ede78636cd08d4f2b30834709d8e5240f0e05d14b835f5331bcf5c8baa","ssdeep":"6144:0chHZD756jOOeto82S7th4oIUN95ojaA3uwF5NhXN3fGNoQX:zHZDV6jO5tor8tKq5REuy3KoQX","tlshash":"8b84236b73406b32e780a73c8af19e6c73208d61676b7289336c1af5a74b1d4cfd5249","first_seen":"2026-09-02T20:37:56.067517Z","last_seen":"2026-09-02T20:37:56.067517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-47-Cleaning-Apr-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.501Z","timestamp":1788381401501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-47-Cleaning-Apr-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 598701\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598701,"size_decoded":599033,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2018:05:05 11:35:27, width=3264], baseline, precision 8, 900x600, components 3","md5":"1055a44ccd5db7132a8f59ac51aee13d","sha1":"543265132294ccc8a5bb123cedc4bde1f0c20b04","sha256":"34ee36cbc5d3f5563e92260d2d07964d0dd13b7a4c6626005e957540f459e757","sha512":"7e293e0c5761584a9ae9afca150ac6b229380ff3cd9612094716bef4099cced210fe592a3d7a017d5fbd5e3cde9070997a35661a21407600050b36e2836c534c","ssdeep":"12288:ARprpy2O03B0Cw8/DnOeyc8dLbZ20XN1Vu32UUTHF3Pbr0mkinuJt:Arrpy2FmoTsc8dLbooomUUB3PtkinY","tlshash":"f5d42379b4406ee5e3a6da7540ca6c4493d38b83b372d813b3ad6f7a2f33b509d85142","first_seen":"2026-09-02T20:37:56.068853Z","last_seen":"2026-09-02T20:37:56.068853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-58-Cleaning-Apr-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.516Z","timestamp":1788381401516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-58-Cleaning-Apr-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 359705\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359705,"size_decoded":360037,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 900x600, components 3","md5":"3dd8331dc131be65a607f08d804f2065","sha1":"26c7c479ae5a41a426af98fbc28451826ff4eb5a","sha256":"4e1fcf316c486e264840caa3493247059503385ce5c17a85c036446801cd1b87","sha512":"9e5e34f0957faa21df76e79689026b31ba10e10a831831041897a87d34f328cc1c757ed72abe5d380c380629c28df5a69cd27fe68f55af3fe7d4d94a04021c9e","ssdeep":"6144:ZafRpcY+l04HqV+4H8Ul2oODlykKdnmlvrty0C5C/A7A4VJ:ZaJpcY+cV+MMo6ldKFovAIAA4VJ","tlshash":"8c7423655ad19472ded2d37f9bc46373230bb45a903760cbf26c7b292bd2aa0ace4045","first_seen":"2026-09-02T20:37:56.070067Z","last_seen":"2026-09-02T20:37:56.070067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-63-Cleaning-Sep-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.521Z","timestamp":1788381401521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-63-Cleaning-Sep-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 398043\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398043,"size_decoded":398375,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3120, bps=0, manufacturer=HUAWEI, model=FLA-LX2, orientation=upper-left, xresolution=203, yresolution=211, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:10:01 13:06:34, width=4160], progressive, precision 8, 720x480, components 3","md5":"031e8bac3eb2c08166d0f682ff9614de","sha1":"0a5372b3da1b4a6de0b72f17626727de3825327d","sha256":"52cc0376eaa3a4b5bd2dcefe5ef41d02050e06c7ac6ee8b955b55f695356851d","sha512":"1915cf5b5da2a0e9a03fad9610330074ca850481cf58824cffe187f91e6f4828198cf3d5d7b018fc5e16a28d7be37bce5046c88ae0bfe70eb69422b53ef8f085","ssdeep":"12288:i8RIxvPp50sEfldVhxP8EkSVHYRRtSIMQfiwlE:i8Ravx50syldVjP8EdHsR3fiT","tlshash":"a48423919b03c426eac9243e5de293cf531ad27405c31a5ebccd988f7b28dc0595b7a7","first_seen":"2026-09-02T20:37:56.071656Z","last_seen":"2026-09-02T20:37:56.071656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-65-Cleaning-Nov-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.523Z","timestamp":1788381401523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-65-Cleaning-Nov-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 966922\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":966922,"size_decoded":967254,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3120, bps=0, manufacturer=HUAWEI, model=FLA-LX2, orientation=upper-left, xresolution=203, yresolution=211, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:12:14 11:26:54, width=4160], baseline, precision 8, 1200x800, components 3","md5":"4f9b00157071d395b260970c19fff379","sha1":"3c600d297d904d9df88b58a8980795a0e31b2397","sha256":"e6fd0037f0ab5d0de21a1fc9dccb3ffd0ec95843ad3cd9757fe561f16383ae38","sha512":"fc5703787f4231633e6145f1d5696ad469a023f7d1d12fdbcd6b48dbf884c213d8e366007f32f3d39b96c27efa5b149e090b4438e6b5ba76d16cbb1aa5c385c1","ssdeep":"24576:cx0G5wwgaX5YBF61z4fOU3edBlAdRV46OvPEl:cZwM5G7fIv+13+Pk","tlshash":"9f253369ef41cb40eacd45b62135d78c5356ac048173431f7a5ca2e5b7b2b20ebf970a","first_seen":"2026-09-02T20:37:56.073842Z","last_seen":"2026-09-02T20:37:56.073842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-37-Cleaning-May-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.488Z","timestamp":1788381401488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-37-Cleaning-May-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 298309\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298309,"size_decoded":298641,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14], baseline, precision 8, 900x600, components 3","md5":"edb0f1d684f811403a527203bad2e220","sha1":"c55feb43c4e5703176c2db0623a727dc937d0372","sha256":"c213ff227d8b674923c4a2d78a34e344c505165ef6fac781bed8486c771d36a6","sha512":"1c65aefe23f404c693aee994d5849c83a56d56682333d27378442b81fe3d8a95151245b35a2b76be0af899d93bfe7cdff7d307afc4c8d168056c8184cf927d8e","ssdeep":"6144:8XwOvs/koL4b6mXOY2Vx66k3Va6wpeQB2kfcgb7M6f+sIx:8XwV/koLo92VmwpeW2x4XIx","tlshash":"d05422e96a80123af3a144ff97ea99553739ec6633301c9e3bcc769687147e00ca1e15","first_seen":"2026-09-02T20:37:56.077072Z","last_seen":"2026-09-02T20:37:56.077072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/webcard/static/app.min.1712100196.css","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.259Z","timestamp":1788381401259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /webcard/static/app.min.1712100196.css HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Apr 2024 11:58:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16484\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116740,"size_decoded":16858,"mime_type":"text/css","magic":"ASCII text, with very long lines (65356)","md5":"b2f65fb6ccf069385a381596a007edb9","sha1":"e4f341124b26ca7da781959518dafdaac4e10472","sha256":"13ddbd343aa47686cba846604764d56040c280d2e1c6674fe4ff8bc839f181bf","sha512":"d3eb8eb9b2e8bcc0ae0d4089b0b7f4953a4ed97c63e96924ddb199149ccd64944663bcb623827e8da4957312477eda32b43c8ba1ed8121febd3bf963d0557ca3","ssdeep":"768:Hyr+KZK3Iacfx1Uz6J+yQ/SJv4cMwMXipVFFj6PRl:HyrtayUz6J1jJv4cMwMXwDFj6P3","tlshash":"bab3aa9091461de46779c21f9a42fbddffeae72ac2590c84f1e5401cc8d4e8610dabae","first_seen":"2024-07-03T04:14:49Z","last_seen":"2026-09-02T20:37:56.081381Z","times_seen":19,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-10-Cleaning-Nov26-2013.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.442Z","timestamp":1788381401442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-10-Cleaning-Nov26-2013.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 134278\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":134278,"size_decoded":134610,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=Ichamati Cleaning 26 Nov, 2013, manufacturer=SONY, model=DSC-W330, orientation=upper-left, software=Adobe Photoshop CS4 (11.0x20071101 [20071101.m.190 2007/11/01:02:00:00 cutoff; m branch])  Windows, datetime=2013:11:26 13:08:24], baseline, precision 8, 750x525, components 3","md5":"d6f03b051021c4ef312b367d4d2db4b4","sha1":"4f07dee64f985b5a98ee6659d36329dca52f9b54","sha256":"24b2965c2e48cc1d8972c1c65fe3b78e516b86e273aea1c955b49b95ab990f3f","sha512":"7ca103a4e6a2af0663cfafb248c19e4885b5a309a539a2d389924a6d417eb07c80e51700d6a129d9b445980462c0c0efce741dcdf1320dac13c57cdaa33b36c2","ssdeep":"3072:8OrWh06bQwXDOfGqSfBs2BYzyr4i0eMkq4+ipvsI9pOL3+E/tjxyEeipy4x6o:VraZOfofBs/za4sdSWvsgOL3Zfleizp","tlshash":"f5d31238d9a0f784cf87d0b474a119a89192c99647c2bf44324e346db317ad6dfcf2a9","first_seen":"2026-09-02T20:37:56.084768Z","last_seen":"2026-09-02T20:37:56.084768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-14-Cleaning-Apr-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.450Z","timestamp":1788381401450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-14-Cleaning-Apr-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 357368\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":357368,"size_decoded":357700,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=                               , manufacturer=SONY, model=DSC-W330, orientation=upper-left, software=Adobe Photoshop CS4 (11.0x20071101 [20071101.m.190 2007/11/01:02:00:00 cutoff; m branch])  Windows, datetime=2014:04:19 13:04:26], baseline, precision 8, 1200x800, components 3","md5":"67c222a4e209f45a7569379de5b822b3","sha1":"acce3bea94b2ba2d82cb87799c094905b8c6623d","sha256":"720cb7c7ab87a4be3ed4f7d91649f89c7f720d3edb645304bffeeff7b010b3c5","sha512":"0dde89acca7e6c29659fe6c8ccc7966b89deed6c0a50406da18bc7666ab7dc4ab3cebac008e567303e10649e3885da2b256f0631a072b3ee3b83cbd87d31d7e2","ssdeep":"6144:JMrg65ruoJ4yayrMKGMafjaklPsEPPRwu35D5ksmK4kG2jB46iJh4MFPLBQSxj0:JmUNlndn37ksmaGOc/PL+n","tlshash":"eb7423e93c1d54d2ffad93b4c5876647a273ae6d96e1c7ac305c0209e39f4cbc8191a8","first_seen":"2026-09-02T20:37:56.086345Z","last_seen":"2026-09-02T20:37:56.086345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-34-Cleaning-Feb-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.484Z","timestamp":1788381401484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-34-Cleaning-Feb-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 304663\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":304663,"size_decoded":304995,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, manufacturer=LG Electronics, model=LG-D855, orientation=upper-left, xresolution=170, yresolution=178, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2017:02:06 10:01:42, GPS-Data], baseline, precision 8, 900x600, components 3","md5":"189472970fed61eb2946eb8c631741a7","sha1":"152d4ae6e3f59b7e9a2e1eb5d510cf18559fd838","sha256":"ae72a0ac6e85c71f4a2553d4b0741a5a472a5b1c2f849612326ad48e5bfa24b6","sha512":"b845265c2bce3de9fbcd224c077c11a79eefe9a3e0b18475eedbb044b4766773a10fc43830f68b93764287ae6b4c5dd9e44f6b4648b5131355922d0964f84284","ssdeep":"6144:zgOGDgr6aCJsPQXPUuZ+0mOzCdR2e4AG8DG65dZE0XhQzoCPL6BrE:cOGDgrBC2uciDzCdx4AG8K65dSyu5PW2","tlshash":"1d54232c4b6a3de0d1a5227098bc159b71bdfe06a70c3e34361fa6736b29b41ad3518c","first_seen":"2026-09-02T20:37:56.087931Z","last_seen":"2026-09-02T20:37:56.087931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-39-Cleaning-Aug-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.490Z","timestamp":1788381401490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-39-Cleaning-Aug-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 721045\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":721045,"size_decoded":721377,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2017:08:09 11:56:34, width=3264], baseline, precision 8, 900x600, components 3","md5":"0b0f86b656d56c71a67e02c45b5fef66","sha1":"6feaa75661a6a2640b95eca094e2d483a161091d","sha256":"c1a46aa59d407d56ac0b6db8d6b6ce5c8e700a6f9b19fd75e83022e6aca74bd7","sha512":"69e81036b74b74926f1136dc41386b8bee06503397027b08aa5527176d7c92be1d77cfa966f6a0fdd8cc6dd3f5cdc29961b4991862f7409df0cd47474376037c","ssdeep":"12288:G92rGvStBy36zY9vahUv+VLH/q2bU91hRKsAGTseaU6m8Fa5ZTS:GSG6W2Y9gLH/fkHOGT5aU67Faju","tlshash":"69e4230d930b1218e7cf3ef57061f32fa356165a26d70e88bdbd1fe86359f4046292a6","first_seen":"2026-09-02T20:37:56.091414Z","last_seen":"2026-09-02T20:37:56.091414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-41-Cleaning-Sep-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.492Z","timestamp":1788381401492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-41-Cleaning-Sep-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 547813\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547813,"size_decoded":548145,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2017:10:09 15:01:04, width=3264], baseline, precision 8, 900x600, components 3","md5":"60a608297fb2afddd387a7e97a7ab611","sha1":"818cf3ed4c61265cfb675a0894638c323e8fd21e","sha256":"147c087222d1dbf59209d5113fcae1a4dd956364cf6d5e3980cd6b05c93d0408","sha512":"9b041f19f0ec81510cc48810569bdce7b3e20e122becbddb607fbe083cb4693aa5abf7c4980f5cac79b5b94c3e43a922496fc6a21b6b92567154eace840dce6a","ssdeep":"12288:ivY+YAYiXDqFq7HEHKgD3JlU5mCkhXpbHAmOt4l0XgF9fzohEK:innXLEHKgDg5LbQIf","tlshash":"afc423d7b8868b36dfb381bc8dca5ec69a305d035216141bb6ce6f159b9a3610fde310","first_seen":"2026-09-02T20:37:56.094544Z","last_seen":"2026-09-02T20:37:56.094544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-57-Cleaning-Mar-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.515Z","timestamp":1788381401515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-57-Cleaning-Mar-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 439888\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":439888,"size_decoded":440220,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 900x600, components 3","md5":"2fd23ca09c5515ed15b99d8c88e916cb","sha1":"8a29b4c8b290d896c272540ff53e7d28c53e8aa2","sha256":"1b4477c9f6448e75802ef743df6e5938f85110d9004368686f305c4699f5f5f7","sha512":"16134908708f9ce2281277ec27acf2e9bea1ed7c0aeba014cb5aff8e5397d8e5eb98efa106b2702bcb74b80c85cb853bc96848ca538e578f5cb302aedf407b93","ssdeep":"12288:ITiT9udQKMpRK44HdXL9l7OAuP6BKxPLrdKu98x:W0UeK7593utRV8x","tlshash":"549423457b212e32f0d511b2c5d7a7d5b2b22e9c2b931585f62e39843f342b6cc7a887","first_seen":"2026-09-02T20:37:56.097689Z","last_seen":"2026-09-02T20:37:56.097689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-4-FirstCleaning.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.416Z","timestamp":1788381401416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-4-FirstCleaning.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 171601\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171601,"size_decoded":171933,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 720x481, components 3","md5":"14f3fbe0f00304b101a295061102c661","sha1":"fa33a3f5cfd23370a152d20c1b005b0e7dc9f5fa","sha256":"ab924765e1decf92c980ffcfbce1d0fac391d7c5f89b208bad39efa306650381","sha512":"d38e1c84dab82312b07d609760a3a6495a9a5d5f7825812e00f19dd2a55f07f57abde8c8f3a9cbfb4dbcf396f0e6ca912b1618d20805fdc2b80d4547f47a2475","ssdeep":"3072:AoeOpFYQ3J2/ttMLA4kToDYhHp96rmniOMEKI3m9s1AhmoKcq3WWe7e8fhes4fC:Q06DMUbhHurUiYm+WxKcIeD7","tlshash":"4df3123777468381b168db9e65b15d9a80c45012f1f6cb0a8fafde01f72b43e9da2841","first_seen":"2026-09-02T20:37:56.100058Z","last_seen":"2026-09-02T20:37:56.100058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-6-Cleaning-Sep30-2013.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.434Z","timestamp":1788381401434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-6-Cleaning-Sep30-2013.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114607\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114607,"size_decoded":114939,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 662x472, components 3","md5":"37404292d4d6dde66d9ac07ae89eacb0","sha1":"20e25c3789f6ec0b9a49545342d600095b1ae270","sha256":"b75f801888a74246530ad6d93810dcdccd90309c3ea0f895d9d5c8336bfa6a81","sha512":"75155ad2a2d102152dec1759fbd6813678c20bdbb2399ca496317d44a4d29ba6cf404f8cdab051b42173210d42c8cfb7c053c08f948faaced5a3baf0b64e25a8","ssdeep":"3072:Kx4FXG/dX2u+PvbFOsoNilH2c9Bm+yjNA647eM:XFqd2uCKmH2w9yO71","tlshash":"ecb312effbeef94db23b621359ac0b63d47711e62115a3f985f44edc2e851269230029","first_seen":"2026-09-02T20:37:56.104771Z","last_seen":"2026-09-02T20:37:56.104771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-8-Cleaning-Nov2-2013.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.437Z","timestamp":1788381401437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-8-Cleaning-Nov2-2013.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 189568\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":189568,"size_decoded":189900,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=                               , manufacturer=SONY, model=DSC-W330, orientation=upper-left, software=Adobe Photoshop CS4 (11.0x20071101 [20071101.m.190 2007/11/01:02:00:00 cutoff; m branch])  Windows, datetime=2013:11:13 12:21:06], baseline, precision 8, 1000x700, components 3","md5":"085e53ed9948f937de901cff488edf74","sha1":"a056b640a4bcc2e138cb130110cedebefd9c3483","sha256":"70302fbe644eca2f4b55b4ce3c973d2d73c253c63524a9951cb88d3b47b33709","sha512":"a9d7fd8f107c6da18d6413a1ae77f8f96a5f01f6b13968e4b17c8186b47ce43d98217b7139ab0041bd731fcf5bde5de25e30ab71cceeafcda0059e2ce6228645","ssdeep":"3072:9n+kLrIn5l3Ok3fevPk1FqXzaEYwxmafBz63FhKJH4TqY+bSrG0k/qrPKy+WuPg0:9+k/8l3Ok3fok7qXzaEYwxNfBzZYThYf","tlshash":"720412570d1d8b26c976077eec9b26af90f77bdc15a4de86300c0868e753081a6df98d","first_seen":"2026-09-02T20:37:56.106995Z","last_seen":"2026-09-02T20:37:56.106995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-9-Cleaning-Nov13-2013.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.439Z","timestamp":1788381401439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-9-Cleaning-Nov13-2013.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 187386\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187386,"size_decoded":187718,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=                               , manufacturer=SONY, model=DSC-W330, orientation=upper-left, software=Adobe Photoshop CS4 (11.0x20071101 [20071101.m.190 2007/11/01:02:00:00 cutoff; m branch])  Windows, datetime=2013:11:13 12:17:04], baseline, precision 8, 1000x700, components 3","md5":"047adb926eb1515d1609e420fc466d61","sha1":"9736a375edbe7f77804826c3a0b8a609afe098f3","sha256":"8bf2e78d4263ec04d5d155a054bbc36c3870edcbbf3efbe7bc847cdacd9f7f0a","sha512":"1b983230702d3d7ca129d7e755ed85799b0a1a1e6711a212581a6a807ee5806b72556a7fc7434beb203b71e6dd52ad6612338ab5d43c944598dee7e372a50b63","ssdeep":"3072:XOloKXSzNCh/6q6MNHv4ZqOzrYKAFRsLLU+t2tivzaHW3L3Fru4ORGIl:cbaMhSq64v4ZqOItRon2yEfl","tlshash":"af0412b69116a2dfc5f96b7009c1ca8796c58b3b67f42b8cb06c2a0dd3c32f4054997e","first_seen":"2026-09-02T20:37:56.109748Z","last_seen":"2026-09-02T20:37:56.109748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-17-Cleaning-Aug-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.459Z","timestamp":1788381401459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-17-Cleaning-Aug-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 413342\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413342,"size_decoded":413674,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x768, components 3","md5":"60fd7154968e1d5bf3028ca682e9845e","sha1":"acd01c670ca14e3568b6d86b67a5552d3cd03fcc","sha256":"d07b197cf186ace3c22454c2555734bb9a0ef50f4785e12624d36110454f9d39","sha512":"06fb11fc1abbaf3f2859e24679f86ec330965f1192db5cd046069361e65524b5fdd5b0dc538395c9a99310794858160d5cfb23b26363bba89e0dccdb0f396343","ssdeep":"6144:U3inDFip9+MVBnZNevdcqQNpUoELN3tNWWEJL5IBZo3/5QWbo5VdatcSO28nbI:Uakp9DLZBFUbLNdNWPY45QUux928ns","tlshash":"bf942307fe277634ca2e7968d85e7a1dc80504716535cb48b8ba12ff9ac91cb8f0293d","first_seen":"2026-09-02T20:37:56.111243Z","last_seen":"2026-09-02T20:37:56.111243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":414,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-68-FreeingFromLandGrabbers-Dec28-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.528Z","timestamp":1788381401528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-68-FreeingFromLandGrabbers-Dec28-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:51:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9052703\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9052703,"size_decoded":9053036,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=4248, manufacturer=samsung, model=SM-A750GN, orientation=upper-left, xresolution=158, yresolution=166, resolutionunit=2, software=A750GNDXS4BSJ7, datetime=2019:12:28 15:59:43, width=5664], baseline, precision 8, 5664x4248, components 3","md5":"1457173e785be20790e7a733276a78f5","sha1":"d251ead94402c0e5b569a5977c7bd64c8ac11fe6","sha256":"a8184477323ae26116ee19a6c968757708e6155d39fda1c2fb8e3f9b9f100427","sha512":"939808b3cf82881ffe2d6957495514b883d418f8d9475dbea0f76268c28ca0842e29688880575f66880b64418cd164fe33c41b1264f351708a8d4e383614ee7a","ssdeep":"24576:V34YBy2ZQo/9EFjiGEqqRNdaLmYM3NhR4V0Rd/vb:V22Go1y+GbLmRfRK0bvb","tlshash":"c825336fbc08d214c2a47332e213f5ab7398da5d3fa126752967372e78e901f7226315","first_seen":"2026-09-02T20:37:56.11264Z","last_seen":"2026-09-02T20:37:56.11264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-76-Asof-Nov-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.539Z","timestamp":1788381401539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-76-Asof-Nov-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 244461\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244461,"size_decoded":244793,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"d1d50e99a8a977bc8598759b2d6586a9","sha1":"41bc947e6a330a514769cd12ed5bb9ae0b9ded22","sha256":"8d985cbee4e8ec187cc0f35603fc4ac4c1c79c9c93f40b913b067b513ce6a24b","sha512":"ac2ee9e8493fd74755c1186398b7015b02597a36093bc9ccb89db4d6cf5a7d4bf0985a418766cef35f28bc14d78eabc3b8d68f33b389493031c5267dd0ae8915","ssdeep":"6144:u4Xpv/cNdTOVviBNiKutFvanxP+qUREZWc5JI:uctENY6NiKutJ+P5e7","tlshash":"a33423102d5f8a535e6efc1ce492990be26838b663545b286c7cf68e3367cb14b750ac","first_seen":"2026-09-02T20:37:56.113916Z","last_seen":"2026-09-02T20:37:56.113916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1030,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-78-Asof-Jan-2021.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.542Z","timestamp":1788381401542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-78-Asof-Jan-2021.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 208496\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208496,"size_decoded":208828,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"27420820de3c9a03f166853e6fee83b3","sha1":"eb24ae6bf24cc33b7c062707197011c31f4e016b","sha256":"8d5909be7498b8601608f51d26bb4b3874376f9276465ef3025fcc7eb6e92179","sha512":"6c42dd225d573dcf151bc478c75fb96de3976cf03c024cb4432030073c60515b3e43a5f9372d67c48040b3e2cbd7bc7e9d15063339a30cfa9c7934aa400b3e5a","ssdeep":"6144:QnIuM5JP/LzH20CWpE6POiTaLZUlufKmBQORww:fB5Jba1V6PtT5lCKmBQOaw","tlshash":"0f14126a6da5fa40e75ecbcb220803f6d927d6139dd3cb08e305ba7a677d09b403446d","first_seen":"2026-09-02T20:37:56.116634Z","last_seen":"2026-09-02T20:37:56.116634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-3-Tree%20Plantation%20on%20September%2012%202013.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.413Z","timestamp":1788381401413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-3-Tree%20Plantation%20on%20September%2012%202013.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2445351\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2445351,"size_decoded":2445684,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=10, manufacturer=NIKON CORPORATION, model=NIKON D3000, orientation=upper-left, xresolution=168, yresolution=176, resolutionunit=2, software=Ver.1.00 , datetime=2013:09:15 10:12:20], baseline, precision 8, 3872x2592, components 3","md5":"afc73d71f6883993359f8401521a9407","sha1":"1f2d802986dd167aec9da5535e6d3f36dddc53b4","sha256":"edecfa7a1f3ff9d2852bdeb6b165cf9fa857455a808d2142185e0078fce0a2ca","sha512":"2723d23563700cc2e6ae203b69fdf9d9c91d39903c5eccca28d8d30d4e96401cdb73255c34b4fdefe1ba36955c18051c142c6f20f180f0111c3a1400a7778ae8","ssdeep":"24576:S4sCTHBKRgh4CqDdj52VxnACwLC+7ts+KnzMP8hvj23Mq:S4sksRgabDdt2zA9LCCCFnIPqvO","tlshash":"9f2533a837c452ecd1b10a395b64bed1fdf2de48a6d95040b087f356de84e088758abf","first_seen":"2026-09-02T20:37:56.118637Z","last_seen":"2026-09-02T20:37:56.118637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-13-Cleaning-Feb-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.448Z","timestamp":1788381401448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-13-Cleaning-Feb-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5199773\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5199773,"size_decoded":5200106,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=11, description=                               , manufacturer=SONY, model=DSC-W330, orientation=upper-left, xresolution=194, yresolution=202, resolutionunit=2, datetime=2013:12:24 00:51:10], baseline, precision 8, 4320x3240, components 3","md5":"1d362140790c8e28cf4b9425cf2e2212","sha1":"86dd746d61cd6e4660e073a5ac4fe95320977428","sha256":"9bf8a8262229f5bcf72ce3eb7f7183dbc2f3f196e88941543e7d3795f97d21ed","sha512":"43cf30d03c4110c038825c8552ef5eacd4bedef78a2d5ebcb237e60e09c034637578d294bed96af351383a83563bea6d303f359b7d7e970328c22c227f5b6b73","ssdeep":"24576:X/30KWSxQurB5aGScnCFyewJklXavscIZhHl1k:vr1aG3CF+SXafoHg","tlshash":"8425231c38f815b1db92713f64cf43da1831b7a231ee9419e17416ef3ac819ad876e86","first_seen":"2026-09-02T20:37:56.122001Z","last_seen":"2026-09-02T20:37:56.122001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-77-Asof-Dec-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.540Z","timestamp":1788381401540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-77-Asof-Dec-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 246260\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":246260,"size_decoded":246592,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"847cb561e355ea752cab6a8f2565f8f8","sha1":"0af764c5b6f4eaaea7365ed9e97960763bd2fd4a","sha256":"e9e2f1119841ee57d08cb7b32c65cdb3b63e79c37e3288ad43461b6b2984e057","sha512":"0de9c105c5bd270c32f2bda24102666c790e5a5f3e3e245aeb168b6b044948dfc8c5056ca931af2a73848dcac048e0f84f7b783cc42df0d02878a9bbd947df04","ssdeep":"3072:FeONZGSkXWhAoOB3NcDE4/UwYhFq0P5Hm2SeB/ddT8Q23+VnEGpgqyZG:Fp5koAoOcYMYhnc2tYQZV7pgLZG","tlshash":"c03423611ad8191f98f361e1993ef9b6f563c9540e89132466b7acc1b30fe23b639d03","first_seen":"2026-09-02T20:37:56.123764Z","last_seen":"2026-09-02T20:37:56.123764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1017,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/g/fonts.css?family=Poppins:600,500%7CRoboto:300,700,italic\u0026subset=latin\u0026display=swap","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.264Z","timestamp":1788381401264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /g/fonts.css?family=Poppins:600,500%7CRoboto:300,700,italic\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Apr 2024 11:58:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 684\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7653,"size_decoded":1056,"mime_type":"text/css","magic":"ASCII text","md5":"444d4a425b442e35c081fd70fd27e1b1","sha1":"9c82aca508df8041bcfdbc967edc81296025336a","sha256":"72922d62b4b0fcbb2f1447df63860f981f788cdd8a76c6d1eb94de647c51326a","sha512":"de85e9f39536560aa19701b3475b922d32d0555e1a78e875602661e19f11790bf628bc9de9aa171b6b92136cbbefd90cddfb6a2da93d21c93ae33e617d1fe8c5","ssdeep":"192:qcVZlwJkZCkrkQks3nk0kcAk9Q5Wpw3qsmXnN1v893e3RTW:2wCwfhnp49tkCF","tlshash":"6bf197800c2f6000abd71cd67bcf3e31ee4ea1547086c475abfe2869ad9be26536474d","first_seen":"2026-05-10T04:46:07.175564Z","last_seen":"2026-09-02T20:37:56.129084Z","times_seen":2,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/webcard/static/app.bundle.1712100204.js","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.270Z","timestamp":1788381401270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /webcard/static/app.bundle.1712100204.js HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 07 Apr 2024 11:58:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 113023\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395598,"size_decoded":113326,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65468)","md5":"1e6574def420114d30029f79ce0fda77","sha1":"71bf7836e71e3054f47d3f05c93cb797308e39b9","sha256":"42aba936d3aef43737438a8139ce2bcb6f7f3929a6043d2083db08e87d0d6c5a","sha512":"4512bbf032eaa48ba359fb26aa1f90319577618bf921a9fdf4b43d49d9c6da2eae8b6ece2f52195b97509180864a91f6b114a99c5f63c2c946304a79d77fffb4","ssdeep":"6144:Fa8XqXiarIdexuYx1/Qsw+Fkhtrfb2Qe7nldHqBpYTmw2xjcnaiELmT70:EjqhjceO0","tlshash":"4384088db2d2b0a603eb20b9402f160bf23b6555301a9494f679e8e5bc78a4f5137f7d","first_seen":"2024-08-19T12:54:11.803189Z","last_seen":"2026-09-02T20:37:56.13093Z","times_seen":15,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-29-Cleaning-Feb-2016.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.476Z","timestamp":1788381401476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-29-Cleaning-Feb-2016.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 594151\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":594151,"size_decoded":594483,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2016:02:02 18:05:57, width=3264], progressive, precision 8, 1000x700, components 3","md5":"9c69a5aaa0e83bfb9e31d582ce01edbf","sha1":"8460d8302e3272e77312cb2020f1a102e37e6611","sha256":"348e35c5ebb502d6366418779d5651e7c47a5aa8f6037ce75e4c60ea43f2c44c","sha512":"4995007b492f40106a8cd0feafdf8fb60592049d2447726653d98fac06182d168757d13f1dde58397a9e550a659a1fe6d6ee165a9b90da2a96878a2ecd85fc18","ssdeep":"12288:fM+H95xz9e0yBTWNAEVwnpJ5y7LoySj1AVVZvgHJpX2LHhhI:f9He7BTt1pMSj1A0pGjhhI","tlshash":"00c4235be4a25c64dcc68774928bd7ac92885565c7635a38b32c2b3e1f753c0dccce94","first_seen":"2026-09-02T20:37:56.135936Z","last_seen":"2026-09-02T20:37:56.135936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":631,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-44-Cleaning-Dec-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.495Z","timestamp":1788381401495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-44-Cleaning-Dec-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 353057\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353057,"size_decoded":353389,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2018:01:10 10:50:43, width=3264], baseline, precision 8, 750x525, components 3","md5":"72f7f4f7208be239c6e8ff13d679181a","sha1":"97cca1d5075252d2d2c4faa5574f6556c4767416","sha256":"f1905ba85e6f2cacd00aa5fccc8d025d34f41959b38a9c6ad61694ce08bf76e9","sha512":"ae4b390026ba2231425053b2ba9efa7c9109f2a71ea5fd7c593447b93a1f7c824035c3bff5ae87f37f046ab8eb4bce9c4cb449de44a623172987f5c6928faa01","ssdeep":"6144:k4zGlinudL1K48vgmh/58Mc5R+Us7U4sJx9ogJBozrs+qmGQGA0np42X:k+nupQxQ5cU7RW4F+qm710p5","tlshash":"e97423174a93bcb0f0d79a7967e55b0c74521bafe14a574e332d0b222f522c51abe383","first_seen":"2026-09-02T20:37:56.138424Z","last_seen":"2026-09-02T20:37:56.138424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":738,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-64-Cleaning-Oct-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.522Z","timestamp":1788381401522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-64-Cleaning-Oct-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 630676\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":630676,"size_decoded":631008,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3120, bps=0, manufacturer=HUAWEI, model=FLA-LX2, orientation=upper-left, xresolution=203, yresolution=211, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:11:07 10:28:05, width=4160], baseline, precision 8, 900x600, components 3","md5":"2e6ba1c0feae755af9de82aab3b45fa2","sha1":"9f3a601ad4356f754791ef1c300f2874a88c98a0","sha256":"0eacb65cb82c86cd1e137e9cc1c9e499d756647b693ffadb9a94fd198de344cc","sha512":"7600c06341bf19bbe59244da3b7d7d0aaabc21d98996b6ced6ad8a184d92a0d65a376d0c39618892248a32117f95bcdbf3057c4b9f3e415818d3518f95dd4c92","ssdeep":"12288:UMyspzXCCkbX9epddFMEponzUwdPJrTNaXx+E5JIPnfi8Pt3NAw5vO7pICvoyNTu:UMbG+FnpozUwdhrTNaXxB5JM6ep3QpIx","tlshash":"27d42354be0a6f61e8d9a3386c3be26362235f840d67458b700c1f92fb846a3df4476d","first_seen":"2026-09-02T20:37:56.140144Z","last_seen":"2026-09-02T20:37:56.140144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":883,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-72-Asof-July-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.534Z","timestamp":1788381401534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-72-Asof-July-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 255809\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":255809,"size_decoded":256141,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"f9f1cc5a990b1bfaba917acaac03e699","sha1":"48069dfe51b28086799e0c0f7a768d1b035d3baf","sha256":"f62142811197ce00784614a66e3e62d8f455919aa645cdd83c5f0df3c34386bf","sha512":"aa060db63230795c7f63e65d56b1acc74b4396aa7db8c9651d5cb6f698c4ad3cb424eb2d064e888de1d76f8b3a699272ce544771ad72807d1e1894a3695bba23","ssdeep":"6144:fqcMtKP/lXOzycl1GHKGcjQ40Q9XCcqiY/OjPtPUpnTDd:fqRYPNXYPUkjlRX1q0FA9","tlshash":"6644231f2f46a23b837b2c6c705af471154ae15faf3d07b24d6a902d25494bf926b8c3","first_seen":"2026-09-02T20:37:56.141989Z","last_seen":"2026-09-02T20:37:56.141989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":955,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-82-Asof-Oct-2021.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.549Z","timestamp":1788381401549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-82-Asof-Oct-2021.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 215357\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":215357,"size_decoded":215689,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"79be5d2951d9907ce1e73b9d9e46e4b3","sha1":"8e5b80ce6904a93c7f4296004ba4032fe2b58123","sha256":"4834e00df8ffe365145119bff2c8bdfb5fa47b77603552b12d8866724c5789f0","sha512":"1469281c72b8c2863709f835287a710649ea91e0bd5d99d3970b5a81c9162b057fd0a83c9cf5debe6f7dbdf243e1d757afdbda3924efa73d321784ad80d9ea92","ssdeep":"3072:np7rcs1rQQYQiSCVFNcjc3zvyOZZ3jyXRGfWfCAoUYOgV1ZybyG8kafQ9u+C:np70gipFNcg3bdZ3jyXfCd+yGzafQ9K","tlshash":"ad24120186d48bfb79595f192a6e2ce0d9d2657c468fdaf9819103be1799f327cfc200","first_seen":"2026-09-02T20:37:56.143976Z","last_seen":"2026-09-02T20:37:56.143976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/images/172/8151813/ichamati-logo2.png","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.271Z","timestamp":1788381401271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /images/172/8151813/ichamati-logo2.png HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 11:58:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1885\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1885,"size_decoded":2214,"mime_type":"image/png","magic":"PNG image data, 172 x 55, 8-bit colormap, non-interlaced","md5":"360eea1581ca84125ce8119c44afb568","sha1":"8303f1b2bd37263dc26eb22e67de26a077c6d680","sha256":"8ce92bdb71952eafa3cd04f818e37533fd447ab03f08dd0d051ddabe25555dfd","sha512":"28fb5592fb42f292ecdd8a7b63e922627d5ce99fe6c12139152a73d63e23140466013a4f6cb73fc3d92c5be7f7394b765299d9baf68f5cce32e18ed21a4974fc","ssdeep":"","tlshash":"6041e9d6562291f2d4179d6521229530c69acebbea4f900c3dc7cc7f8d4b4d0c58561e","first_seen":"2026-09-02T20:37:56.147512Z","last_seen":"2026-09-02T20:37:56.147512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/timeline.css","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.399Z","timestamp":1788381401399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/timeline.css HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Apr 2024 11:45:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1172\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5086,"size_decoded":1545,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7b9771b344503576b76cb5a021ae1790","sha1":"305798033d6999888e2568ef9a1615c30fbaf394","sha256":"a66855460f9e30e14fc4988ca11611e84f610c8c453e89051f4107c27373a469","sha512":"278bf20701871db7c0c095b5f5b33c74b27cd26ba203543c8d37080a1178595672699ad237fd71a4f49396b47a5d595edc2d32c73fb3a55ba12d5991c4aac797","ssdeep":"96:89pFn3J6DX0dFXorzjsXZFo1peIfu3LpcD8CoCFap+ji2k:89H3sL0LorzjsXZFo1peIfu3LpcttuR","tlshash":"aaa1c299ed11018462bed6ac9b913ad9f7b55473c70201baffc4e644afe861c4098fca","first_seen":"2026-09-02T20:37:56.148699Z","last_seen":"2026-09-02T20:37:56.148699Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-66-Cleaning-Dec-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.524Z","timestamp":1788381401524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-66-Cleaning-Dec-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 564933\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":564933,"size_decoded":565265,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3120, bps=0, manufacturer=HUAWEI, model=FLA-LX2, orientation=upper-left, xresolution=203, yresolution=211, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2020:01:14 14:04:33, width=4160], progressive, precision 8, 900x600, components 3","md5":"322d7022a09254e321f82d5b90aabfaf","sha1":"3f7b7ce767af9bc12cf707f723d3ee8daff6be83","sha256":"742c853c9d0fdda59605f64986cf1b72f34c16aa86aa415f18ffeefea5c4a395","sha512":"b94aac68fbd325d199eb80b9a971bb59a65482cb74410b24e981ab3d634f9ad4a65d053963001b60d5f0251e0fdca8cfb78d8c25aea482e7d5d1b2267c133fb9","ssdeep":"12288:fdPoFO7Wqhkcykx23CJ5GZ1YomyE3RW4hspVKhJvw:fe0Wq7FxqCJ5GZ1bmf3ThDvw","tlshash":"75c423e8ab0dce22c1c035b345cb67d2d7b7f169d64a8a94b82d3e347ba51f4dc28095","first_seen":"2026-09-02T20:37:56.150643Z","last_seen":"2026-09-02T20:37:56.150643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":915,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-79-Asof-Feb-2021.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.545Z","timestamp":1788381401545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-79-Asof-Feb-2021.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 253657\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253657,"size_decoded":253989,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"0524e8c06f7ea22fb89f9bc8d6afc67e","sha1":"47a1cb614e083c97e9fb5995e4a721373117eac2","sha256":"af164171d78eb84d899d3e2ef421b39de813f7d9ff62fa4e204e6f90e6906578","sha512":"7f94346996d9b74a7a74e1037fe795ba253a7d7b5c423c744515f478e824296b696532febc021402cf1e3b74826cb3b1f765c17999167b0c42820cb40e730650","ssdeep":"6144:ttKlbnPOMpgAPTV9Nvobw8GcHkc4L83H6aG+wQX907u0p8/b:+lbPrggV9Nvobw8HkJLEH6YwQX67DpM","tlshash":"7044239bac22923f3dad98add063a3e2f64827c95d143512ff7874097887b118df4276","first_seen":"2026-09-02T20:37:56.151777Z","last_seen":"2026-09-02T20:37:56.151777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1066,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-80-Asof-Mar-2021.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.547Z","timestamp":1788381401547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-80-Asof-Mar-2021.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 236450\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":236450,"size_decoded":236782,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"5542cadb93a6294b2535d5b2e9e4ec7e","sha1":"dab0eaa207297b2157321e286989495eb9d3af54","sha256":"b918dce592e1d4ce6bfaaedc71a6a192acfd2cd164c288099932839204f8ac1c","sha512":"a98c449c461b1b9dfe8b2b5a1c753a0c6b1f8ddbec492d76efb96212ab068ea7d969a0d0ac2fd8655e6ae6790bfbeb914aae0e1b20eba80d1f2480ab59df7c1b","ssdeep":"6144:o0eyddtNGUxzfiKDka71v2G2X+VaZAIL5yqz:oabGIzrDH7N2zcqBLjz","tlshash":"3834122faf4a273fb0e3bd2d530fc4955b64a825cf27d985a46d44d02892fb43a640ed","first_seen":"2026-09-02T20:37:56.153342Z","last_seen":"2026-09-02T20:37:56.153342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1051,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T20:36:41.156Z","timestamp":1788381401156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nlocation: https://ichamati.org/en/\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T20:41:50.25516Z","times_seen":18521985,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/timeline.html","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.358Z","timestamp":1788381401358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/timeline.html HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 07 Apr 2024 11:57:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1810\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53911,"size_decoded":2105,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"969975e3ae98d550ae2337bca74f9a76","sha1":"ae1e5d8712268150e9103002553dd2f2e2daf683","sha256":"0e75a3ab06f3f40aff3c23643dcf9eff12f27f70d722602e1214512125e68471","sha512":"1339640f021704bddbd1422f85ad6f20c9e5298f79d3fd1e677df3c57021b9035e535be372afc4295266cc3f7b96885c3ee05ca6fd317b6943304f6a9eb15b32","ssdeep":"768:G7vnO7aDuHLg1cz2n2G0jOSAE1EkLwp32SfLp6e4ScGjuytvZIlm9lgM0DZDExL9:z2","tlshash":"5933e624acc180b5417dc44e6ab17ec9efe14e2b4505157afded8f8b2fb5e00a863687","first_seen":"2026-09-02T20:37:56.157316Z","last_seen":"2026-09-02T20:37:56.157316Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/images/1502/8202618/IchamatiNow-TimelineImage.png","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.367Z","timestamp":1788381401367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /images/1502/8202618/IchamatiNow-TimelineImage.png HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 11:58:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3546357\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3546357,"size_decoded":3546689,"mime_type":"image/png","magic":"PNG image data, 1502 x 1127, 8-bit/color RGBA, non-interlaced","md5":"4f552ecac9b7362daceeb19cb0aab4f1","sha1":"2c7fcbf0aa1a3f014f1a31766acbaf33be4ed934","sha256":"36b711332b93248f44493fbebd1e88e2b6f667d66bebee2843f34e9960aa37a3","sha512":"5b0552ee63140239f2d966f212cbe43f5954f79f52715d3ee92960bf33f61971ff239ceabc92f8e13a95495f9760158937e6b221264fe4912024a6a39351a2c1","ssdeep":"24576:iDoiJzJ8Pp1MzvQVFjBC+gozroXfq3DgV/YvCA8eFExo:i75uPp5HjBC+gofwfADg1YSYExo","tlshash":"0b253334fe147981eb938700346da145b3dd4cb27acba92a1cee90dfe97ad254c1c227","first_seen":"2026-09-02T20:37:56.159308Z","last_seen":"2026-09-02T20:37:56.159308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-11-Cleaning-Dec-2013.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.443Z","timestamp":1788381401443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-11-Cleaning-Dec-2013.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 285663\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":285663,"size_decoded":285995,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=                               , manufacturer=SONY, model=DSC-W330, orientation=upper-left, software=Adobe Photoshop CS4 (11.0x20071101 [20071101.m.190 2007/11/01:02:00:00 cutoff; m branch])  Windows, datetime=2013:12:18 14:12:57], baseline, precision 8, 1000x700, components 3","md5":"42363a61bff2815fa90bdc92cbbea625","sha1":"546bb9bb243a070d81e3d476f077f6f2be8f6534","sha256":"2e4874a84f49e75dd408307fb8e6b60eebb9faa1613a8e941e000efb8d0336c0","sha512":"27a31f9d69936edc5a2c022dd5a87ba114b07a4c04e22757f61930977ce7a5bbe359a0fa46893e2d67696ccbe79d0e14d593b69694c7cea54fe2ae084774a40c","ssdeep":"6144:8y36m+jDnBfX/MWueYuF6ZxdL8qJbR+ev7hWYVKDNrBY2TTtF:kjnB//XueZa+K7hWYVgrBr","tlshash":"69541329d1284aa6eb7cc6f5c096e01e71239f9c084dde48365ef957efd7040bbe6488","first_seen":"2026-09-02T20:37:56.161341Z","last_seen":"2026-09-02T20:37:56.161341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-22-Cleaning-May-2015.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.468Z","timestamp":1788381401468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-22-Cleaning-May-2015.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 221281\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221281,"size_decoded":221613,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=224, yresolution=232, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2015:05:09 10:37:57, width=3264], baseline, precision 8, 1200x900, components 3","md5":"6485b330cada1caabad3869ef098c093","sha1":"70e8d8b9b9246f883b0deff807aa6d2b4f56fb35","sha256":"16cbc059831d65be3ce0757be59677f2d22bd84bf31baaa821b9ea7c7267250c","sha512":"92b28988c8f76a15e26bbf16baa67bbfbafe362b7a74d8522d45a7623834c7f686dffddeae0eb67b5bb4238910d19683a22c0dfb53fd378a59c716f6be99fa6b","ssdeep":"6144:l4d4OnhDjMKgKmBQ+IxjoaRWyP5XGq0Lgfh1QjGMMQOeurT6sNMv:lWb36KmBTIVltgmhiLMn5rXKv","tlshash":"e72423ae3ba3af71cdc3fb72e6949d9b9530d530238e9b57432c87107022f495aa5643","first_seen":"2026-09-02T20:37:56.163631Z","last_seen":"2026-09-02T20:37:56.163631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":511,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-23-Cleaning-Jun-2015.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.469Z","timestamp":1788381401469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-23-Cleaning-Jun-2015.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 643629\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643629,"size_decoded":643961,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=224, yresolution=232, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2015:05:31 12:43:23, width=3264], baseline, precision 8, 1800x1350, components 3","md5":"b4c4f3c3e350decf27cf0c87ac3c9804","sha1":"106f32cde3a72294eeb7455a377fcd79559f4ea1","sha256":"5565d8c29397d5d83e85d43e8a5068edde455001b6e0147cc916552a9f491e9b","sha512":"6d4b560cfd9499faf07f2cf5cf3895eb56a0924bb8f708a051558da7fadf92749c77d2f181953642f0a893d9db6a74426ff8a92b88a51fb966eae3f98ca5a7ac","ssdeep":"12288:P2tGYWzZ0URMZ0jj7oAFY7mNKlqKiLYHIBamuGjSUvfEVPaYH/UA:0W9w0zo56K7AfEg2UHwcA","tlshash":"2ad423d5d2ea2ba9d787c632cf8f86c2b7347d5047f6da359808fc603401b609a60de6","first_seen":"2026-09-02T20:37:56.165057Z","last_seen":"2026-09-02T20:37:56.165057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-25-Cleaning-Aug-2015.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.471Z","timestamp":1788381401471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-25-Cleaning-Aug-2015.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 481677\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":481677,"size_decoded":482009,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=224, yresolution=232, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2015:08:06 13:14:24, width=3264], baseline, precision 8, 1800x1200, components 3","md5":"e3c974adf7295b11d43d1ae5a228b795","sha1":"205491a4631e55dd8abfd6f9e0ebaf6a283d09b3","sha256":"c545dac5d0dd9ebc28a02caae86a311c845076595f794fde1cd68c375bcea7f3","sha512":"b099eaf020a4b054b1c02482b7878f42fb16a48243d2792985d395aa5786dcd416369fe5a9e3355112a41c01b294eee93cb06fa497b9e4a72019642ad06ab9e4","ssdeep":"6144:sSThUbHD0pONi1FTRxUW6Yf0YdGqbVvV8nbSKUgx20pekxiMiQUU5E6:sSThUb4wNiv6BM6nbSFco8UU5E6","tlshash":"62a423bf2c242fabcb83b7f794d2df45a2945e28f327250605957bd10e97a4c0af114a","first_seen":"2026-09-02T20:37:56.16624Z","last_seen":"2026-09-02T20:37:56.16624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-27-Cleaning-Oct-2015.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.474Z","timestamp":1788381401474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-27-Cleaning-Oct-2015.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 674232\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":674232,"size_decoded":674564,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=224, yresolution=232, resolutionunit=2, software=I9300XXELLA, datetime=2015:09:02 09:05:36, width=3264], baseline, precision 8, 3264x2448, components 3","md5":"910c7c74fccfe9860a623411875f90ab","sha1":"c028c5e5b0fd2252f68b5b0fbe801820370e162c","sha256":"c3c89c6d009c218f3f48d445674031dc6747e5835da4a62fd0ac24e8167e0f71","sha512":"f751f16b6c0013160aadb0f80d98e17cd61ec73f9032557909ce8821e9f59856d8b0233452fd29fdacd5776a267bfb0447b57898ec9a262d44f481d483445677","ssdeep":"12288:Ha/UM6ubsMZjxqAPtVoxYM9DMBACwCgqx6lt0t7b6JkcSvuBO1u48vKAfuvv:HasKjcAP8qMSm/oOkc07Rvv","tlshash":"47e4238fb80c571af093b3f6de176a97cf74250d02e213da71c1aede17aa7852447268","first_seen":"2026-09-02T20:37:56.167619Z","last_seen":"2026-09-02T20:37:56.167619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-42-Cleaning-Oct-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.493Z","timestamp":1788381401493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-42-Cleaning-Oct-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 609158\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":609158,"size_decoded":609490,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2017:11:01 10:21:32, width=3264], baseline, precision 8, 900x600, components 3","md5":"d06d35fb11d41f20c92f45c5f3a8bd94","sha1":"38c122c2ea970c69bda882f54678b92bb3737000","sha256":"2da9b96b74e8c1c82e3a99b714f5429962565b2ee81edfa77903584f154b0e78","sha512":"77a4bcb05e668dd0a5271cca8d49646c93304e6eeb0d5cb0dc11bb937950c61a3e4769d5eccea0a84523f029217b858db60a4884f3460b8a067f5fbdb7d51bd8","ssdeep":"12288:AhDrp73zM9XpAumGTGKaf0oRuFqPMCf7XG5TRwiki3zrhnOFs+CR3uwiKPeT:AhDG9dEMjxii1hOj43XE","tlshash":"1cd42360c0302b30fb97693d236077e632444e7a0ba7624eb36d97727b53a67219d1bd","first_seen":"2026-09-02T20:37:56.169987Z","last_seen":"2026-09-02T20:37:56.169987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-45-Cleaning-Jan-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.497Z","timestamp":1788381401497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-45-Cleaning-Jan-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 324084\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324084,"size_decoded":324416,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2018:02:19 12:59:13, width=3264], baseline, precision 8, 750x525, components 3","md5":"dff4f0b2d95938912b56e31951973670","sha1":"ef4006254e38b865723c7b2048dc2370d6ee70b3","sha256":"1368b58b12a6bc55e089a4e1bacbdd6ac6726fe47b5fac1bb00acdbb544cd68b","sha512":"017b561a827028d241fa0ea2ded0e4462b473717a08f18e162256edfce63513d270eef8d8fc280df995c2ecb321c33cb59fc243506a4798cd3c7f685fa101b8c","ssdeep":"6144:9QlhHjD6yNePuoOFkIChtheYb8HUBAZSIP/UM0hxeItaQwEiwwAWL+jiCW:9Ql1jOgxjFkIVmeDP/vxQtRZWL+jJW","tlshash":"1c641306b725ac72d2d689b4a6a0b705da935b33e3a3750b395cb4727f35f400f4684e","first_seen":"2026-09-02T20:37:56.172625Z","last_seen":"2026-09-02T20:37:56.172625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":745,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-48-Cleaning-May-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.503Z","timestamp":1788381401503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-48-Cleaning-May-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 442109\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442109,"size_decoded":442441,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:06:06 10:08:28, width=3264], progressive, precision 8, 720x480, components 3","md5":"50f9619e1c590abf1cf7b81c2f85e611","sha1":"ada69bd13a9a8d96a0edaa4a93925dd84726614b","sha256":"7213873df326cd3044af9274588807dd2e0eac6e63463d659c63c967b6500eb7","sha512":"a350e0b938ac8d8767a7c929d23df1e476d9c070384555af1412dda7d121394727100904372df2cf73bfa2cfa976e69c3ca1bf180c681437d4ae91d31cbe1f50","ssdeep":"12288:zSJZb5DaS4wdhbmfCQEzkEo6hfanYvO6fYDmVQlaCcuM:zSJTDz4wdhC7bkiYvOBdlaCcuM","tlshash":"719423eebb01ab20c8d7187dd964d18e12322fa40af674e7790e2315afb6ec27d54711","first_seen":"2026-09-02T20:37:56.175008Z","last_seen":"2026-09-02T20:37:56.175008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":770,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-51-Cleaning-Sep-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.508Z","timestamp":1788381401508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-51-Cleaning-Sep-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 596244\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596244,"size_decoded":596576,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], progressive, precision 8, 900x600, components 3","md5":"e97d39e7e971625b647e5d6ddbcc842d","sha1":"2951efe66c646b1db2577f63de06670a29c22570","sha256":"8d6c8e1cf2db972e1b7b9b872be622bdc677b8f0641c10201f5c381d54ea8167","sha512":"e158638bda20c26dbc0a02c61c38e024bc8539aaf7e04da17167982edc2128b7e5c0610de82fde7bc78b3b86ea3524040a19be050824f2b7c533f261582f850d","ssdeep":"12288:RCFYZjIEjcDKt3W0s5MoKtLgsGwzLR4LEIkB/PsIt+77l3qw/5Lf2PZ:VZjX+U33oKFMsR9ps7l3fq","tlshash":"5dc423f15503d525e57c00be7cb4ea567a132b0391971eb7b34dab2abf364c21da4e10","first_seen":"2026-09-02T20:37:56.176531Z","last_seen":"2026-09-02T20:37:56.176531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-53-Cleaning-Nov-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.511Z","timestamp":1788381401511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-53-Cleaning-Nov-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 437990\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":437990,"size_decoded":438322,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 720x480, components 3","md5":"215d1af9481a42eafa232d6414d1e11c","sha1":"b4424723bf537aa3048db4b05509116bac06b231","sha256":"2ffff0eaf4fd0f5c712c562c664182fedb6c8378ff6b9ea3eacceec15d9d9f22","sha512":"0d49f60831dd1432b5d49d2627a57b556eea13d2ff3c0b7e8f8004e78bc29c5a082ec4b99291dd3c892f17c08901c9ebefc6a095943bcc5261f779637b5de0db","ssdeep":"12288:SsysjEN5mlY+tmyhNQ071MKBXMTJUbe04j/09pE5:SXyyCTtmyXQ2tXM8qbSE5","tlshash":"0e94236cb74484b1fbcca53f5e6607c95388a43a6b53588c738d7d222f415ca8eb906f","first_seen":"2026-09-02T20:37:56.177793Z","last_seen":"2026-09-02T20:37:56.177793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-54-Cleaning-Dec-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.512Z","timestamp":1788381401512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-54-Cleaning-Dec-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 330732\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":330732,"size_decoded":331064,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 900x600, components 3","md5":"0cfca222084b0afbb0444ce32cfdb4d7","sha1":"3fced36cba7b5b31962755f5af3ff72105864e82","sha256":"fa8ce85b0d77883d2648416eb79ea4d740352c0c540c806766cd16c856494c85","sha512":"d51f042b3be61d1d8b525f5c99bd38db0727c4516be15c0e71c628ceb9877551cd7f309289b3d5e177e95032c4c0da11b8bc1f2b3a9c18b2f20e806a92dc1c7a","ssdeep":"6144:2EGApPhS3tWXBQYO4gEQTzelBwMky7/YmloW0zGpJCF4e:0cPhstOmSQODxvoUyF/","tlshash":"6d64230053564c61e5c2533664c68beca3e7e498b5ea38597f2f7b50b3e1a80dcfe224","first_seen":"2026-09-02T20:37:56.179108Z","last_seen":"2026-09-02T20:37:56.179108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-69-Cleaning-Jan-2020.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.529Z","timestamp":1788381401529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-69-Cleaning-Jan-2020.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 467378\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":467378,"size_decoded":467710,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3120, bps=0, manufacturer=HUAWEI, model=FLA-LX2, orientation=upper-left, xresolution=203, yresolution=211, resolutionunit=2, software=Adobe Photoshop CS4 (11.0x20071101 [20071101.m.190 2007/11/01:02:00:00 cutoff; m branch])  Windows, datetime=2020:02:16 11:25:35, width=4160], baseline, precision 8, 900x600, components 3","md5":"9f129bdf141579907e21c213d3c8d66c","sha1":"1a6cc3c1e3b08734c3017df3e20d37ed98dc6550","sha256":"88366fb41b27d8b292484f09426eca9212300ca97ccc2ad24d3aad3dbee9cc68","sha512":"3aa6dba40710da83da701a17fa85dd98f4f045f75bf348830cfdc1cb6472bd8d6c9df3aed84ee96e0b458a7891141bfb6d41d2321391d5097b07060918d4e47f","ssdeep":"12288:GSHmIs4AF2I/gLXUUdtsH9QYeS/kLnMufJm9xj1Fyd:6IK9/gLNPY9kz9ld","tlshash":"f0a423620b9bc835dfd4d2b8d1a863c5d337b73b0b1278d132ce7a43a751aa15cca589","first_seen":"2026-09-02T20:37:56.180576Z","last_seen":"2026-09-02T20:37:56.180576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":950,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/g/static/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.380Z","timestamp":1788381401380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /g/static/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/g/fonts.css?family=Poppins:600,500%7CRoboto:300,700,italic\u0026subset=latin\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 07 Apr 2024 11:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8000\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8000,"size_decoded":8330,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-09-17T20:41:35.001144Z","times_seen":307428,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-12-Cleaning-Jan-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.447Z","timestamp":1788381401447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-12-Cleaning-Jan-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 380536\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":380536,"size_decoded":380868,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=CLEANING | JANUARY 23, 2014, manufacturer=SONY, model=DSC-W330, orientation=upper-left, datetime=2014:01:09 01:04:37], baseline, precision 8, 1024x768, components 3","md5":"09f69d82f5f37cf77223ad422487f558","sha1":"f76a6bba7d0850e5d469a01905226ea16f2f480e","sha256":"009535ad76f8a93d8f5051899ab2f5b26947a0128ee214edb1d45f0bf60ac1c0","sha512":"adf6df243afcdec99981d710664e2f888d3c0e86967b6fb496d3e78569f0245f9da500c1b0cb54ce4e42ad8cfa9c44794b32ef8609531c23cc67ee334fd232f9","ssdeep":"6144:uK3cpF4q2cG/P2mLZCYZKbfVQVd0E9SPoaVCgOJ57wX+4LuaxBgJhBSqWMzQ9wUs:uIsF4q2cDEhyfWD0E9SAcncCX+4Tx2JD","tlshash":"7184220ac9522902dc1f247b90cd19446216e368c7a533257f6ed7f22f8ce36da26bdc","first_seen":"2026-09-02T20:37:56.182928Z","last_seen":"2026-09-02T20:37:56.182928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-21-Cleaning-Jan-2015.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.466Z","timestamp":1788381401466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-21-Cleaning-Jan-2015.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 169363\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":169363,"size_decoded":169695,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=Cleaning January 29 2015, manufacturer=SONY, model=DSC-W330, orientation=upper-left, software=Adobe Photoshop 7.0, datetime=2015:01:29 16:01:24], baseline, precision 8, 1024x768, components 3","md5":"8dde13f241897c82674940928f4dbec9","sha1":"cadab63634603462a9c0efc565da958394c22e26","sha256":"a144e0ac8670c5c5caa0ca34805566100b10d2df8444940c44bf252b82ecd47a","sha512":"972d348f77647cc7610c3dc339b2001de0583412bf10daac8e63a008fa4473484fd7a37e333811e0f6cdd3913d1c0e4225656d29e1be729b9f2da7833925d8b2","ssdeep":"3072:UT5sWsPcjgH5gfXnx3MDnPjkSgk2CUffYd/2mFFXvTHDf9JgjkogWqI2E:q5NsPGB3MDPdNDYfyX7Hz9u4FI/","tlshash":"daf323a4b066d047ebd6f6745df4c520a823ba52c611d373bd1e84021bb6beac4f7a1c","first_seen":"2026-09-02T20:37:56.18448Z","last_seen":"2026-09-02T20:37:56.18448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TrusteeMeeting-Feb8-2016.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.478Z","timestamp":1788381401478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TrusteeMeeting-Feb8-2016.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 08 Apr 2024 16:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1918927\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1918927,"size_decoded":1919260,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 180x180, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, manufacturer=Canon, model=Canon PowerShot ELPH 170 IS], baseline, precision 8, 5152x2889, components 3","md5":"fb31566819eeedde9cf42b69dd3a71c8","sha1":"b1c5067d6a9ddf1ac86516bcf97fa365eedd70c6","sha256":"479bc0a18676a57c971ff2eaf7b43805e88c79973f3e4e1007c8f49440c53d1c","sha512":"7d29704f31b5421a4beeab08eb86ad36acc4cf7a982ba3342494045e35dcdb92d6c2a336cf9f06e60567ce61c077896eb6008ecae663ee63ee14c744d1931d57","ssdeep":"24576:FzGz2RsAYoHdEoyzi1xsGCPQ1RiAwGkg3zHKN3+fVLyHP1:F6zWNdEOZCPHWkAHKNF9","tlshash":"83252327d67101adc1735b37f9118414d0b2b78768cb289e794f5f10eba40bc3ae69e9","first_seen":"2026-09-02T20:37:56.185887Z","last_seen":"2026-09-02T20:37:56.185887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-46-Cleaning-Feb-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.499Z","timestamp":1788381401499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-46-Cleaning-Feb-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 397725\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397725,"size_decoded":398057,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2018:03:05 19:38:25, width=3264], baseline, precision 8, 750x525, components 3","md5":"2e66798c5f00290a730e8ba66489c30b","sha1":"fbcb58efd2dab94434a49ed8911e0db10827bf78","sha256":"4717153b916aa03ca832a97088368c5da44406bcd8dab8ed9aea3665508ec828","sha512":"2a235a69ba613932ebc1d7462c43776456e3904649c88330943953bf00098e735c06622f8584828162e0451aa8a47110b9fb1499c0eb7ea3a35d820d5974cbef","ssdeep":"6144:C/qI+us6Cq6YjTVoGB/Coxc4K6RyeQvSAPMtq0yhLh2EcuAQc7r913WJ+aRa:C/qXBYbB/CoZyeQHhLh2D1/","tlshash":"598423685f87fc72f217d2f054ca890a76716577d32254c9b78d6e523fe22008cab6ca","first_seen":"2026-09-02T20:37:56.187683Z","last_seen":"2026-09-02T20:37:56.187683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-60-Cleaning-Jun-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.518Z","timestamp":1788381401518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-60-Cleaning-Jun-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 366546\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366546,"size_decoded":366878,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:06:30 13:02:29, width=3264], baseline, precision 8, 720x480, components 3","md5":"ce76aa09502a2f291c4afd85bef933a4","sha1":"ed3262793cd43e73e70fb05c7c2eff5ac3e0a539","sha256":"dc66be562c5fe68d141493dcb79746e2a7c0118d42c914f651ef75b9022ab9d8","sha512":"98017bff8d267f0c2306aac7d3b70a160f2c753323ef99058b7e398afa2fda62de51e5c1a72cf18cb502abd01e98e0fbda96ffc99a92800082285aae1c161147","ssdeep":"6144:I5X4pkpsc/XfOs0hOqyB1huJFafOjJ8PXZYcCKQbbjkeiKZY0k0:I5XLpsufFTq61huWXCcCKQaKG0N","tlshash":"7174232f75410be3e1e3eb34e498ea97d34b7e6057b2548db63c29c46be3511298b40b","first_seen":"2026-09-02T20:37:56.189085Z","last_seen":"2026-09-02T20:37:56.189085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":847,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-67-FreeingFromLandGrabbers-Dec24-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.525Z","timestamp":1788381401525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-67-FreeingFromLandGrabbers-Dec24-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 447766\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":447766,"size_decoded":448098,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=4248, manufacturer=samsung, model=SM-A750GN, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:12:26 14:10:08, width=5664], baseline, precision 8, 900x600, components 3","md5":"c87f461847befab40f03db35632f9655","sha1":"a56f05bdca0f4b6d3a9496ea36040d23047ad7d9","sha256":"e37f44d7eccd17b11e9cc874c514581df54bcef086d0f125e25da46c5ebc60d6","sha512":"c20a3c985eba115690277170c08e532550657f5df70fe1b149e3226f78617781fcdd6f6050940331a848917f03779cc623aee4d7d199c9b694e9fcf0c38df3af","ssdeep":"12288:TZbPku3gAjqeeKssENT2LsrrBzXUGZvY2y6m:TZYu3ljqoi2LsrrBzEGy6m","tlshash":"7294232dd9727d73ee491432124386e03ba9267d1113e42fb41d3396bf2a68177ee385","first_seen":"2026-09-02T20:37:56.191254Z","last_seen":"2026-09-02T20:37:56.191254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":922,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-36-Cleaning-Apr-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.487Z","timestamp":1788381401487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-36-Cleaning-Apr-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 413121\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413121,"size_decoded":413453,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14], baseline, precision 8, 1200x800, components 3","md5":"b97de67320eb5aa98276cbc6ec3fc3de","sha1":"e8a6ec7ff5831145df6c9157705322b82af215aa","sha256":"ee76c37521a8c9fe276c506d721b621718443abbd38a2a0abd5cb54dd7d05f6c","sha512":"3549a3d48adddcadc850490767c0e52bebc63362da6aecc5d7e217684c739402ea77fb28d0d2afe4f4bcd1798117a9c3ed9b9b1f78a8a3f863689c9a2ed10323","ssdeep":"12288:gMShPPgq9fOKXhau+dXpMm+gOsTFn/278:gMSlPgq9f1hx+5TMsTl08","tlshash":"7b9412c9a2717a2cfbc3157a58d694a552a3cba33fda083c374d5e9c7f20f952d4a021","first_seen":"2026-09-02T20:37:56.19336Z","last_seen":"2026-09-02T20:37:56.19336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T20:36:40.717Z","timestamp":1788381400717,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 07 Apr 2024 11:25:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 156\r\ndate: Wed, 02 Sep 2026 20:36:40 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T20:41:50.25516Z","times_seen":18521985,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/js/custom.240327171831.js","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.272Z","timestamp":1788381401272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /js/custom.240327171831.js HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 07 Apr 2024 11:58:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2832\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10301,"size_decoded":3133,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"02a516dec5b447b493f41732d9eafa58","sha1":"8aa453a3f23fcf33037c7f20dfa7f25dae866fb5","sha256":"91492f090a8464e1ba92bf6f09428656dba39ca09650ad784a6608a64500cd72","sha512":"22d392769e39702cf5761dcee341232993f0c7df484b83bbfbb93c409d394d23c0ed1357c2da2864b9fc54b2c883ccebd9da9305eaf20fd61eb36db1644b7870","ssdeep":"192:pNKm51+4F5BJd+mxEJ6anQvg2U2Xlc2Me2HZ7lb2Mj2HylQ2E2AlzdDUx86ce:pNKmLBb+eTK6gJElcPe0FlbPj0ylQbd+","tlshash":"dc22a5a4fb8d31b6917b317bc44f2198313c6074e50ac999ecacb6782b8593d17c6d2c","first_seen":"2024-12-23T13:47:59.1528Z","last_seen":"2026-09-02T20:37:56.194651Z","times_seen":12,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-15-Cleaning-Jun-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.451Z","timestamp":1788381401451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-15-Cleaning-Jun-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3907772\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3907772,"size_decoded":3908105,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=11, description=                               , manufacturer=SONY, model=DSC-W330, orientation=upper-left, xresolution=194, yresolution=202, resolutionunit=2, datetime=2014:06:22 02:31:09], baseline, precision 8, 4320x3240, components 3","md5":"50c30bcbd123a3d5652293b6f662cf70","sha1":"cb604440921138392626163a0d7640d6800dc258","sha256":"d21edc5daa127414ecc9f1b99fe8be34843f038ed55e15bc26037f9af4e666cb","sha512":"0328414c99d5dd27e991260932a7da8dd951d18a3de26467b0b351576449d4baddba696520c9da8c0bb5ecc330e513421edc71dcf7911f2064039cc49c45a144","ssdeep":"24576:taf1LmhiLs4071bUvrD/hrRdDiPzuit0G26kiuaS8797bnX:e1s3+TDF/2Pz57KPRs97r","tlshash":"9625331c5853b6b4e7239d3d34942503f9163bfb8a4ad2b8c4c9f60fef372219995a48","first_seen":"2026-09-02T20:37:56.196261Z","last_seen":"2026-09-02T20:37:56.196261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-35-Cleaning-Mar-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.486Z","timestamp":1788381401486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-35-Cleaning-Mar-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1523,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-17T20:02:29.036429Z","times_seen":155498,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-49-Cleaning-Jun-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.504Z","timestamp":1788381401504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-49-Cleaning-Jun-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 366546\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366546,"size_decoded":366878,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:06:30 13:02:29, width=3264], baseline, precision 8, 720x480, components 3","md5":"ce76aa09502a2f291c4afd85bef933a4","sha1":"ed3262793cd43e73e70fb05c7c2eff5ac3e0a539","sha256":"dc66be562c5fe68d141493dcb79746e2a7c0118d42c914f651ef75b9022ab9d8","sha512":"98017bff8d267f0c2306aac7d3b70a160f2c753323ef99058b7e398afa2fda62de51e5c1a72cf18cb502abd01e98e0fbda96ffc99a92800082285aae1c161147","ssdeep":"6144:I5X4pkpsc/XfOs0hOqyB1huJFafOjJ8PXZYcCKQbbjkeiKZY0k0:I5XLpsufFTq61huWXCcCKQaKG0N","tlshash":"7174232f75410be3e1e3eb34e498ea97d34b7e6057b2548db63c29c46be3511298b40b","first_seen":"2026-09-02T20:37:56.189085Z","last_seen":"2026-09-02T20:37:56.189085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":774,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-5-Cleaning-Sep23-2013.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.417Z","timestamp":1788381401417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-5-Cleaning-Sep23-2013.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 157314\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":157314,"size_decoded":157646,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 662x496, components 3","md5":"2d0093ad47a47bb0af29a913c499d517","sha1":"e8452e075890a468bd67a1cac5555cbf1f9ab21f","sha256":"d49d5047a3231fff99e7741a21ed886a6200df755e1faf65c96557a2dd72e7ee","sha512":"6a529124b850dea3ffbbec43fb25290c1e53f607f248ef8fb937cf5ba6d60c7bb34254eed9377c973ecd31b748c2c13d39f1760e877bdc87c9deefb7d036b1b6","ssdeep":"3072:r3bAqPpwx3A88AfZ+wGZ5agUBvnFCcsigfpR2grHTcFcbqlAp6+ZSUg6br8:r3UqPp58xEtZ5a3vnwPlD2gA62ORZSUo","tlshash":"8af3122ab160c1b27451326a6edb9e0f81f70ad736d2f293cba0e1e1a753d071c06b59","first_seen":"2026-09-02T20:37:56.198546Z","last_seen":"2026-09-02T20:37:56.198546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-16-Cleaning-Jul-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.455Z","timestamp":1788381401455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-16-Cleaning-Jul-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 370308\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370308,"size_decoded":370640,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Cleaning June 22, 2014, manufacturer=SONY, model=DSC-W330, orientation=upper-left, datetime=2014:06:16 03:08:35], baseline, precision 8, 1024x768, components 3","md5":"8947d3e566862083a98f735fd2acccf6","sha1":"b9f765251faf390ec0273b2c42046918bc3b22a2","sha256":"23aace33c8ab34cb5409e4fa57ba8b61b29d3086b442bb94c0bc2d56e6577bcd","sha512":"472eb0904abbdc260587a8f68d4c371cfff3995b42e019590b76ac06c97a275e49ee2fb14c8a4c25c28c6ed8579cd95e0d21bbbb7c3907176fb231fb838f7ca0","ssdeep":"6144:+CqPF6eZwBx6/9mFLu7k66JgTDp09j6+L4wl1lqsHfttE2hfOOwvRtJS2/fW+w2H:+tF6e89y7qKpWj6+LBl1jHvEs2OaDJjT","tlshash":"d8742366797a3500d5be163982a4782be7f6f21aa31f6354f3ede9e3db0360044da740","first_seen":"2026-09-02T20:37:56.199846Z","last_seen":"2026-09-02T20:37:56.199846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-50-Cleaning-Aug-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.507Z","timestamp":1788381401507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-50-Cleaning-Aug-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 295275\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295275,"size_decoded":295607,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:08:10 10:52:33, width=3264], baseline, precision 8, 600x400, components 3","md5":"11645d45671480f2f850f810f17b064b","sha1":"f63989b461978c26ac17a8cf8c9dba2b15b70974","sha256":"153aec279289ef1e4eee536ad16be9850be9c0901247b34b30dcdb906e2a5c64","sha512":"1ba5111445969f8a72acb53223c1012a04ff760142aeff87b2787337025fa99774ac1189a4d1b28c376315dc7b2283848433b035cca0871db342bf2301b11d2b","ssdeep":"6144:sZzX0xSawqgqIFiclH8EPSOpEDZSO9zBEX0WzMlE9N:sZrCBwLQa8EPSOpEDZSgG06MU","tlshash":"9a54133db6004f7ff2d7aa34cb0a8a4e51b23b6d9a3754e5719d0365bb632021a1d1cb","first_seen":"2026-09-02T20:37:56.201224Z","last_seen":"2026-09-02T20:37:56.201224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":774,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-56-Cleaning-Feb-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.514Z","timestamp":1788381401514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-56-Cleaning-Feb-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 361213\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361213,"size_decoded":361545,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 110x110, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 660x440, components 3","md5":"754cb8e76a5d6a8dfd3e246e918ef9ab","sha1":"5b9ccb74b87240246c83fb22427be91794520093","sha256":"116466ebc889d745ef7f1d719c674138d3fdba9c1fd2b2bfc73882d21912591a","sha512":"f5fa6d5970d3bcdcf6d6cf7b0badc7fdfd94a71016bff5c785455d2dc2e7eeaaa00c90d7d0232be061158b8588728d25418c97df1e64293bb3e44f6169f4547d","ssdeep":"6144:71hZRWhboeaPvuG6oRXEd4ffSBW7G04plUk2j6gP03HfolS7:71hZKcTGGn243z6llU5PrW","tlshash":"e47423514e629b25c5c4c5b6e1dc9349db938db0dc427b47f46e3b0cafa87c11ee920a","first_seen":"2026-09-02T20:37:56.202651Z","last_seen":"2026-09-02T20:37:56.202651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":820,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-74-Asof-Sep-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.537Z","timestamp":1788381401537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-74-Asof-Sep-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 253119\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253119,"size_decoded":253451,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"da49fcf7ce10be7bfc562530b4a2e09d","sha1":"cfeef107a27e637ac309e6fbb19e8fe50f4332a4","sha256":"943db6e289981c258ab76ee1c8034c9af7ec798ae18a41e52e42fb6b836523e3","sha512":"48e0213edc3c6166306b103d987e9f686e0532bcbbbe69f16ea552f4d1bb82dabbf5279bca059a6b37ee2217be912ec1cc2d25a5a84af351f5004e65a17fa7de","ssdeep":"6144:vBJS6sJc/6N/IK/76kPZK7gxi5y5kreZdN:vBkoEn2gwxaZdN","tlshash":"673412103293b31a99a834525fa595d20000585c50baf3cbdbda3c3a69634b5eefff67","first_seen":"2026-09-02T20:37:56.204086Z","last_seen":"2026-09-02T20:37:56.204086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":986,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-83-Asof-Nov-2021.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.551Z","timestamp":1788381401551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-83-Asof-Nov-2021.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:51:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 251157\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":251157,"size_decoded":251489,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"a68349389146fd5bb404ea0a61d4f775","sha1":"76ac0eabfd43b09cb1af8aa98f168c4855090dc4","sha256":"ffd98f489496c1c24361ad6983fb9d9a35fe3d04e8e6ed5be835997b3bb8bdb7","sha512":"da184a6501049c311147380aeb876457b5441846cc5c134b0c28c7ab645f36c1ad188dd2efba1ce68320b0ce5c58cacefe60f18e91e04d55e690fe6b243e60b1","ssdeep":"6144:nYUlF+7kKvUMSe8bK97vA/od8MLWe8jbnjpV+9q5KGD:nllFOkqUQ7BQearjjf5F","tlshash":"663423c7696796a8cc186bffd034db302bcee6cfe9959489c44a30682d8567d2f0c981","first_seen":"2026-09-02T20:37:56.205553Z","last_seen":"2026-09-02T20:37:56.205553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-33-Cleaning-Dec-2016.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.483Z","timestamp":1788381401483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-33-Cleaning-Dec-2016.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 439964\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":439964,"size_decoded":440296,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=0, description=Exif_JPEG_420, manufacturer=Micromax, model=Micromax Q301, orientation=upper-left, xresolution=244, yresolution=252, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2011:09:02 13:04:05, width=0], baseline, precision 8, 1200x800, components 3","md5":"a5498ea79b2ca468a164579d3f6482af","sha1":"4641a051d05f31d3e181b9934efc09871b4a9a88","sha256":"b3452c0a464543f447a68a828c553e0c120234af3474c22ce4061e8ff1c84eb9","sha512":"a18e6195c5426b9b9eaf943f0e77e9c88d3333427363d9b87a925daf0fba0d1f75b943096884c73f2ac155eef139e20b5e2011b296f29b046cd8718838604654","ssdeep":"12288:QCpBl8+0sJDO6Tn3Je9Fdtb75UGbRl7Dat:QCJ80lTn3JKnUeD4","tlshash":"41942365556aad23e2da473419d3e0997075db33592230aa3fdd3b4f6b10bf78c8a02c","first_seen":"2026-09-02T20:37:56.20726Z","last_seen":"2026-09-02T20:37:56.20726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-71-Asof-May-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.534Z","timestamp":1788381401534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-71-Asof-May-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 231120\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231120,"size_decoded":231452,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"006a6b235446c62655d8f4d33b048f15","sha1":"affc3466618e3438ddc5883b9a270f70ec9f54c5","sha256":"b2f425157e2b41ef38b9510ff09c87e6da47000a94f13ed3606a391ffb2d9f25","sha512":"3464adea942ae7de34b5666430a1a587679cc101337a784dcbd05b0429c7747b1c627ef4ed351ca0b10a1596cf71e768fdc8df0ac1d4d2fea9a3eefdb598b601","ssdeep":"6144:OdX7RAa68eP0q87TlNo+S9rfuO1FkrtaWeTYK1J:OdXdJ68eP1875NV8LfCxaWeseJ","tlshash":"c234127cbd01ca458d2ec57cece36c3270a4c7176d9494b9e284b587f55a39f42232ba","first_seen":"2026-09-02T20:37:56.208437Z","last_seen":"2026-09-02T20:37:56.208437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":937,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-75-Asof-Oct-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.538Z","timestamp":1788381401538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-75-Asof-Oct-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 248764\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":248764,"size_decoded":249096,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"567a954cd476bde4d657e8a61b3b982d","sha1":"003c6342984ecd7735162b3b288d0745df2cf6b0","sha256":"3d0656d2083f251d44b1e57961880de531931084ada232aaf997c35987ea5ece","sha512":"1b3d2c0759c9c361cd114ae8b35d04063a48f5515c2ca63e9c26b347189f067cebad89085be1a7d5114bf2550351294abe6d75da3f3b405429da9154db3976b3","ssdeep":"3072:Ou9v3D6l1ncR4E26/i9UAQCnhBv0bZiXYwH6VkslAnR5G9OvFXs0cZPaAegUwS/u:XvzWVAiSShBv0bZKYbk3aB004ga/mR","tlshash":"d93412d78161df027cc5b3a6c984a2d1a85b2e65a8f83c6704f7238f612935cd93bdb4","first_seen":"2026-09-02T20:37:56.210074Z","last_seen":"2026-09-02T20:37:56.210074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":998,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-24-Cleaning-Jul-2015.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.470Z","timestamp":1788381401470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-24-Cleaning-Jul-2015.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 656230\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656230,"size_decoded":656562,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=224, yresolution=232, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2015:07:05 10:21:18, width=3264], baseline, precision 8, 1800x1350, components 3","md5":"a9632d323ce5616fad153b87bb6b8760","sha1":"1f1afc9a2540dd4187e2f4a925b312b60313e217","sha256":"a77b5ac735292e4cf28cc054ff970a77a8b79b436b0dd42c727c49c5f5818406","sha512":"4e42f23dfae5f61d318fea7716d78ec4cf96bafdf0029d52127120b0432f4f8947fc9fdb4b8784492caf995a0d8f7f0cb9a47143943ccace2df219720f6129ff","ssdeep":"12288:y5hd0uMBIWJEHpsUuG6IpEEsawaPcZVY+e88xd8+:mhs6paGbpprPKVlc1","tlshash":"60d42356ee5d2f43e32542f8de1a5fb1639b96450b4279cf06213aa32f0bfa41c4f489","first_seen":"2026-09-02T20:37:56.211277Z","last_seen":"2026-09-02T20:37:56.211277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-30-Cleaning-Mar-2016.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.479Z","timestamp":1788381401479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-30-Cleaning-Mar-2016.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 342021\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342021,"size_decoded":342353,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, height=0, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, software=Adobe Photoshop CS3 Windows, datetime=2016:03:05 10:09:31, width=0], baseline, precision 8, 1200x800, components 3","md5":"00827c3cbfc4ffb289089da18828540f","sha1":"1cc1eb30caaf587869c361f569fd092561795001","sha256":"f44eda37245503baf31ff1beab0a1ecb27a387019e6a6a1825964f850dbd2a16","sha512":"5dd478a65a0e4c7fe78e7ac64e65cfffb7dcce898c5d1fbec62752cc949ba7b62646024bc3cac4ab21857f8e93509bc492db7e52d10fc945251b7b2d3d2a1e5c","ssdeep":"6144:MD/a5WCR/zOrnSzxWjSiwsyofPaKGFb0ZvO3tFJiNXnfCEv5stryRNJdeBb:MDIWC1zOrnS9WjSitFfOZ3di9fCEwmvU","tlshash":"4e7423fcb315de12e293ba7adc275c6bfb2284400fa66912f35c57450b03bd29ca911b","first_seen":"2026-09-02T20:37:56.212365Z","last_seen":"2026-09-02T20:37:56.212365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-59-Cleaning-May-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.517Z","timestamp":1788381401517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-59-Cleaning-May-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 287332\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":287332,"size_decoded":287664,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:06:06 10:10:32, width=3264], progressive, precision 8, 720x480, components 3","md5":"5473b3a612ae1c348e7211ef38325930","sha1":"70e6fb8c29a665e76bb9134487752ba8a023fedd","sha256":"4e72c2ddbd2687f0b4281381376dbe0a3fc22817cfc42772e9cfaeae1b1ccfea","sha512":"0e587d79519e3285ee844f3f2df568ecb3cbe92518e4dda2eb7ed0057994c9c3a5cdd153175ff4496c3b44a5919ed354f1d9c3dec28f01006e83a7f16f56aaa4","ssdeep":"6144:TvxgBveJzQHw8ORSpVEsA7mQHDHOF+ey58eSOpXl:TovUOwLRiEDhjH+dy5ttl","tlshash":"285412f7be58aa36d0d2e375a44a94d7e3314d294763b88b730e26903b243506e6f60d","first_seen":"2026-09-02T20:37:56.213533Z","last_seen":"2026-09-02T20:37:56.213533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":837,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-61-Cleaning-Jul-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.519Z","timestamp":1788381401519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-61-Cleaning-Jul-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 333761\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":333761,"size_decoded":334093,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 900x600, components 3","md5":"daba2099965bb8997a8b43003238a96d","sha1":"23f714024ce83a19ad25f0123823c3b6c1e80dcf","sha256":"619b2efd11d510b1d32e93d1e062d380f735e9a5823826f006f05eb9ad24fb70","sha512":"0b8bf3732b66bd94e766002b8f053bc04b7ecaa2416ef98a1a213d2cb2876bde372331d79a39728e99a2301dccb24e4cf3beb274521697265949850e26867aa9","ssdeep":"6144:ycv+x6AZoVBoD7k7znCtptFD/smr63qkMKvCVtZg7yIfVFi/pHGQHYrB:yXoYoceTCtptZd63N7z9+pHGQHYrB","tlshash":"6c6423a1422546a1f7e140f98de2039582f39d1ee5b1070d717c3a716bda387ad9a3ec","first_seen":"2026-09-02T20:37:56.215044Z","last_seen":"2026-09-02T20:37:56.215044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-62-Cleaning-Aug-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.520Z","timestamp":1788381401520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-62-Cleaning-Aug-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 578592\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":578592,"size_decoded":578924,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3120, bps=0, manufacturer=HUAWEI, model=FLA-LX2, orientation=upper-left, xresolution=203, yresolution=211, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:09:15 11:22:00, width=4160], baseline, precision 8, 900x600, components 3","md5":"97c3089cbcfd68f0b07582adf3c477f8","sha1":"615bcedb321d91980ba2dd998e8950486fb4593f","sha256":"593445cd78778460306772d1a0d49ba557d69ea5f10290153ce4253b99270271","sha512":"eaa52ab63bf18be0bea704fbc3206f99262fb924be7113708df1b6265718eb39d39246609551071814d09b1ae9d058c57f46191a96d9ca8e02a868c723a6c05c","ssdeep":"12288:1VjVe5v/y/Dg6gt7e53gQPBdE5FcZUYVYkrlwWtccut28RFCxa:19wvIDgBawQPBMcZUCMcGTCxa","tlshash":"54c423336f3b9937e4c1d2b5c5d0a2ddba133abccf910b85b11e65287768b10ba2d149","first_seen":"2026-09-02T20:37:56.216821Z","last_seen":"2026-09-02T20:37:56.216821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T20:36:41.197Z","timestamp":1788381401197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ichamati.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 07 Apr 2024 11:45:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4413\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17120,"size_decoded":4708,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7469)","md5":"de1c1fe9191ca229504935b8c9fd1d70","sha1":"f3f6937129c4bdb3f2a6a85a62b8f854bc8ec3e7","sha256":"65e5528ed543307a22b6d4e6f61a0a1afd58c3e0d26b674d8112409035cda296","sha512":"c3c4d1bdaa65685b12247584cb0964e92a753ca681de2e9d046a0e11b8a73c144dc6a445e0eb492827ab34367096446cb27184527063953776289c82d7615b74","ssdeep":"384:BuYvPtJYcnPP6AEw3E2VdtsRNd2J6x8g79AT3L7avcfzLMO3:wYnuP9AX","tlshash":"4d72733750a41d3e482b6edd38a25b0c5252d71dcb875ad8b9ec03daabd7e844872d8c","first_seen":"2026-09-02T20:37:56.217941Z","last_seen":"2026-09-02T20:37:56.217941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/IchamatiNow-TimelineImage.png","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.404Z","timestamp":1788381401404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/IchamatiNow-TimelineImage.png HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 11:49:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3796215\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3796215,"size_decoded":3796547,"mime_type":"image/png","magic":"PNG image data, 1502 x 1127, 8-bit/color RGBA, non-interlaced","md5":"a0d1c44ce5d421a8a2f9acd91c6accaa","sha1":"41cd6943bf9ba69fd6de2502d44785e3549b919c","sha256":"cc2b72aad96b872716b9c26f94d1b98b9ccec5bb19959935693a7bc2798c7de1","sha512":"9bb694204cb361ddec317a2f17cd9423f51cd4db07ad658343030ac5f05b22d864633926cce053b40e7c3f28294740b4e4011a5bf3b8cb39e08628a13f7bac15","ssdeep":"24576:37M7UbUIrcEfpGr4rKS7cXxcA2ycCHvRhBxhw:372Ubbrc+pSIfcBLHvhxhw","tlshash":"822533a5183f61cb295ce509a3ebd5cb742f892ad90a1631372fe97035dc217a70b363","first_seen":"2026-09-02T20:37:56.219249Z","last_seen":"2026-09-02T20:37:56.219249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-18-Cleaning-Sep-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.461Z","timestamp":1788381401461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-18-Cleaning-Sep-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 342061\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342061,"size_decoded":342393,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=Govinda Bridge Pailanpur Side, manufacturer=SONY, model=DSC-W330, orientation=upper-left, datetime=2014:08:23 22:13:36], baseline, precision 8, 1024x768, components 3","md5":"3a8109489422881d1702ce9b514babc6","sha1":"9e443d470eafb3fbf869aea50ade84e9ae04cae5","sha256":"37137a7c6f1e7bb4029f748d6b3089511c3b64202bffeb3ce161267f86e825bf","sha512":"cab0a9e3002ae39be6f4c91587ea2a5b440c1af9d16459c720b2010ce7ac314f87bbca151a9437d10875776591e51b73e0465649111c02ae91b2881b6b1b35a5","ssdeep":"6144:DEfzT0irrBIdaASAWEKfMlS+DoqPPlnPXYxLd21LnkhY:DExlIdaPTMsxgJPIxp26W","tlshash":"0274233c0e503a74d2f69c729be8139c404d43637675d587b92e5a729bd63f2ab80b38","first_seen":"2026-09-02T20:37:56.220947Z","last_seen":"2026-09-02T20:37:56.220947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-19-Cleaning-Nov-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.462Z","timestamp":1788381401462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-19-Cleaning-Nov-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 276069\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276069,"size_decoded":276401,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=                               , manufacturer=SONY, model=DSC-TX9, orientation=upper-left, datetime=2014:09:27 21:14:00], baseline, precision 8, 1024x576, components 3","md5":"1afab5724d933b2ce7d1f09d69d44bb4","sha1":"bf49e2bee35109c598aecf5e47431e0af992911f","sha256":"bc8a053dd6100d39e3bebe38230fc74fe9ab6f9f6bee01e62f73e76dc4ac03e7","sha512":"19c2f6bf64a78695e5c6f3082e499d5b1cca29fc764563eea56cb076f2a26f8cd3eaee57d729050b5170923b1d9deda9d8d9b9d997a11483fb2f11777884c382","ssdeep":"6144:qito41ZIpffA8sUFhrS20GfCiBENTlnYcEhR5geTHr0//8L8:qqoBpHfs6DGZgX5lHr03","tlshash":"18441362db02a600c13a5eb4841b5a91e6f6951f99e33e4f351cabfc7ff22e06518dd0","first_seen":"2026-09-02T20:37:56.222224Z","last_seen":"2026-09-02T20:37:56.222224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-26-Cleaning-Sep-2015.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.473Z","timestamp":1788381401473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-26-Cleaning-Sep-2015.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 263524\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":263524,"size_decoded":263856,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=224, yresolution=232, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2015:09:02 10:33:52, width=3264], baseline, precision 8, 1200x800, components 3","md5":"2933c55e2edfa091c279a266b481077a","sha1":"9d831ca9589cba3a536345f93c35c29c89ba5944","sha256":"ee864407d6cea49ee9b8cfd967dd5106e89e029be6b002dfcc90c09e80ea1e2e","sha512":"7ce3b195189a4b9aa1d81fb61e6d3cd1da01c2f53f3f5537dea2b2f5ae7bfaddfd2129b89572791d3ee06cbc3e214c9305a5cd6993dab2d147b7565ddaef32c2","ssdeep":"6144:XTFMAhqb9OiB7Tvd9/wYr2vx7FvdhiCPK:pMAhqbgiB7TvdCpdFFhiAK","tlshash":"9c44121e8826bf22c987ceb8c104b3e753779e9e93d34cef17061f191863e5a485a16c","first_seen":"2026-09-02T20:37:56.22339Z","last_seen":"2026-09-02T20:37:56.22339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-28-Cleaning-Jan-2016.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.475Z","timestamp":1788381401475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-28-Cleaning-Jan-2016.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 467053\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":467053,"size_decoded":467385,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2016:01:04 17:47:33, width=3264], baseline, precision 8, 750x525, components 3","md5":"27f59bf9462627cd1e1b382692b42072","sha1":"b2add3f969208ba02188fea099c38c404c5e771d","sha256":"693f4c6e07e98c45d10c2d2be92c04c99629c06163f682230d854035cab58a67","sha512":"10371bcaacef95013dab9002c044fd4802d880ffc3e2d6b2cf0f9b5739fe4319ab647ec3ff7fec5eddfa430ee8e22ace6f98dbf18a318a65fa9e60adf317eec5","ssdeep":"12288:xYTFUctsXvjqWwwk39/XODrO/NGnP2gErJVdkjAD0:xY5F8Gv139/XODAMxGzdcf","tlshash":"e1a423797251cf2ffa57887c89c79b8272b0ab74fba258693b7c128c2fa13511915c21","first_seen":"2026-09-02T20:37:56.224435Z","last_seen":"2026-09-02T20:37:56.224435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-31-Cleaning-May-2016.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.481Z","timestamp":1788381401481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-31-Cleaning-May-2016.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 449195\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":449195,"size_decoded":449527,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=0, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2016:05:02 20:49:11, width=0], baseline, precision 8, 1200x800, components 3","md5":"62c7517e87401a5bc30fda70d5e83f13","sha1":"05c599848af86133ba6e5f6fb45d496a842b64ed","sha256":"f20e3dd5ececaf67ffa7ca83ad10b6304564717fd07eaee6ce529da78beb39ef","sha512":"f504baf7d06b1f78ce69eb1902b7f50dbe2dadac6326add9802c1877f60d3265605a7fbcdf9b87fde77ba2284e641300f1ca366190877f89630866d357c13b82","ssdeep":"12288:VZiMkkKFPrys9xERcne9Lqzb1AZxq2RlSMu7:V4kKFPvXccnedmb1ALRPu7","tlshash":"f0a4230b3e485632cbf38c7060e6144a89bbab6023a66b5f35cc57d5b7cdd940bd760a","first_seen":"2026-09-02T20:37:56.225529Z","last_seen":"2026-09-02T20:37:56.225529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":649,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-38-Cleaning-Jun-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.489Z","timestamp":1788381401489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-38-Cleaning-Jun-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 166341\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166341,"size_decoded":166673,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=0, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2017:07:27 10:07:47, width=0], baseline, precision 8, 600x400, components 3","md5":"8b931f0273eb2cb39a0adf7dcb69731c","sha1":"3ba984cd5197c69a13a7bc48d8dff1f655338c1c","sha256":"3afa5f7126ea2359baa2f13678810ae4f021bb746767cc992fc59a9d5e3f50ce","sha512":"388e70275c2d5ed628ccb76be6876d0af9eb395dbcd68045f2af286b558d8a88e0edcfd0246f870e4b0d112d953821fd89448a433914eaf5432f9deb8c0e3fef","ssdeep":"3072:gbnWhKG/UMo0a5pVNklka+D578F6Q9HaPApWzRHmYRXsKLtWPYsp:4nKUMsNkGBD5oF6Q93pWFH/FEP/","tlshash":"25f3124d63a1ee71dae7423492e1a6f5573087a1b39352fbb21f3363bf7b5100948286","first_seen":"2026-09-02T20:37:56.226616Z","last_seen":"2026-09-02T20:37:56.226616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":692,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/css/custom.240405171215.css","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.263Z","timestamp":1788381401263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /css/custom.240405171215.css HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Apr 2024 11:58:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12774\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154231,"size_decoded":13148,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65356)","md5":"70915582047f7c048cdbcf535511cdfe","sha1":"393472cb96d29702f12eadf9f895409fb7d300d0","sha256":"69b5be44c1a879581ee4ecd37e36690e17ac21ec4e7974e13a9e4067f2c15119","sha512":"8891a1140251650a4e54bcd63678edd51b600f303a6bdc327e178dfcd612d1b82e5184cb067bf5044edf6375230f092420c7bba24b9efa6e9fcbedccc3182ca4","ssdeep":"768:rHHqX6xnEcP9pwY1IoLEJBz43WpEzy1QCz8CBFnrVZboVqbLKBMHu9PEGKMASGIR:RIoKhcEq3omcP4Z/+Pyq2Uaal5C","tlshash":"d2e3e06035950a781499cb3e3297479c3b29f9e0c206c7dee1f15e58af97f12348af86","first_seen":"2026-09-02T20:37:56.227752Z","last_seen":"2026-09-02T20:37:56.227752Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/g/static/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.381Z","timestamp":1788381401381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /g/static/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/g/fonts.css?family=Poppins:600,500%7CRoboto:300,700,italic\u0026subset=latin\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 07 Apr 2024 11:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15740\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15740,"size_decoded":16071,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15740, version 1.0","md5":"b9c29351c46f3e8c8631c4002457f48a","sha1":"e57e59c5780995ff2937ab2b511a769212974a87","sha256":"f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef","sha512":"487ac3fd483f8ea131989857bcf1782c295ac72022bc2ebd4bf19001433d6db65000e192e58b7a6f70f627d15c58f9fed9ba5fe0216363354bec5a396299dad9","ssdeep":"384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG","tlshash":"d862d04857d76999c0f6e0840fbd1336e4acd273bb8588ee3f422256ecc70d2196a53a","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-09-17T14:53:22.603939Z","times_seen":30399,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/webcard/static/fonts/fontawesome-webfont.20fd1704.woff2","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.384Z","timestamp":1788381401384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /webcard/static/fonts/fontawesome-webfont.20fd1704.woff2 HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/webcard/static/app.min.1712100196.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 07 Apr 2024 11:58:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":77491,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-17T20:38:02.50774Z","times_seen":541992,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-7-Cleaning-Oct-2013.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.435Z","timestamp":1788381401435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-7-Cleaning-Oct-2013.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1018902\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1018902,"size_decoded":1019235,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=2448, manufacturer=SAMSUNG, model=GT-I9300, orientation=upper-left, xresolution=224, yresolution=232, resolutionunit=2, software=I9300XXELLA, datetime=2015:09:02 09:06:01, width=3264], baseline, precision 8, 3264x2448, components 3","md5":"7a39ed13d54a0bfa4c025dda77f344f5","sha1":"a228f95ed7187a481f7c11e0abb1e98b03535b0c","sha256":"36f7dce62b18c8e278511890afd4b0cbe84f036ba225a99d87dcc32892572b95","sha512":"b7591cb4ee587f806abe0acb54694a28f5d9bdc43a3670956d7b734ec00296452f506ebba8738e6a52c4878077d3fee6db4f7a3d7e67936c6b4e41386c8bb3f6","ssdeep":"24576:3mYw6z2Q0gIhv0F2f1Cu5amgLkZiHudkp2Jvy:3mYdCH9W2f1d5a6ZiWJa","tlshash":"212523eab1a235f6d58f87b8fbc413adb3d805b24b25dee5c210598e6c0f650b51d328","first_seen":"2026-09-02T20:37:56.229818Z","last_seen":"2026-09-02T20:37:56.229818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-20-Cleaning-Dec-2014.JPG","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.465Z","timestamp":1788381401465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-20-Cleaning-Dec-2014.JPG HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 153984\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153984,"size_decoded":154316,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Ichamati Cleaning - December 30, 2014, manufacturer=SONY, model=DSC-TX9, orientation=upper-left, datetime=2014:12:07 03:42:29], baseline, precision 8, 1024x576, components 3","md5":"93c77bdf4529698f04757240d0baf90a","sha1":"6de95e65d0895caeb19d609821687f295eb2c446","sha256":"111f95be4a61cd544a2fa8b85ea236ed727932739a18137e0e9bda87cd1fb0d5","sha512":"d17d798dc91141e833125249803992ded6a92a5160141ba1c970bdef0450ace219ff3cc2732e2eee58d44aeeaf721e473237b9aae5d6fe49e0145351ed0fafce","ssdeep":"3072:GrQCZ8XH4Ukz+ABLCJXYWz4kqXNeBNlx7xehnF4A+tV6vmyUt05:qQmO2z+AVwYSF+hnF4Dt/F05","tlshash":"aae312bf1687dd4ec22c49f079803a2f03f32e4a49407a59764d70ed27b35a8b9966c1","first_seen":"2026-09-02T20:37:56.230955Z","last_seen":"2026-09-02T20:37:56.230955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":473,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-43-Cleaning-Nov-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.494Z","timestamp":1788381401494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-43-Cleaning-Nov-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 287703\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":287703,"size_decoded":288035,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14], baseline, precision 8, 900x600, components 3","md5":"835e224e0ae137fb1d3648a76e2333fd","sha1":"f2975a6a4645ebc915505a0a22009dc1bdd1fa38","sha256":"98c603926f4c114889fb9aa555c2c6bd58873ea01f497785be39b4e480db10af","sha512":"c3a78f19fdbc2eeea020bf68e2511d6c6c865fb497a95567563118921b23c2a3d350544be5d1923eba76b4f37acf716a1ce35ba6105fe21fbaefd6061e3dba1d","ssdeep":"6144:fX8FidmOEA7yZdQ1j7cZl/tQ7N06IsXjOU6/WbuOkkkQXatTvlx:fwK7uQ1XcZl/a7N06TzJ6/JOkkzqtv","tlshash":"b05412c53780a8b9e6a04339dee0dab685f6ca967483775cff8e05136f227950da8013","first_seen":"2026-09-02T20:37:56.232074Z","last_seen":"2026-09-02T20:37:56.232074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-52-Cleaning-Oct-2018.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.509Z","timestamp":1788381401509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-52-Cleaning-Oct-2018.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 332182\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":332182,"size_decoded":332514,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 900x600, components 3","md5":"4f7dd9616dfd27c155c3b6ed0fc92e1a","sha1":"c04e014844b09a0351026c7c0c5b3da0f0893798","sha256":"d8c6e27160b6a03e0f5b8be413cbfe075d8471f6543f6f2b16e09213d214caf3","sha512":"ac9d69cb979e036698ce450948a04db0c114484ae53dd41e8f3c6aeb48b703427e9ba2e2c4dafbac23ffdf26e2a12be65671a505c24576276cd51a719a370c60","ssdeep":"6144:VBk6WzWXXSDdKPgNKCFCcmhvtZSwAPD8vmMTQdMHk5wGoqC5E:T/WCSZKgYphjaoOaQdMHUvC5E","tlshash":"b16423949f691834d781c3724de0d79c0b227ed9bb933195330fa84a6f266a25f9a40f","first_seen":"2026-09-02T20:37:56.233223Z","last_seen":"2026-09-02T20:37:56.233223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-55-Cleaning-Jan-2019.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.513Z","timestamp":1788381401513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-55-Cleaning-Jan-2019.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 509031\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":509031,"size_decoded":509363,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3120, bps=0, width=4160], baseline, precision 8, 900x600, components 3","md5":"4966d6bef50107cf869cae79d549d959","sha1":"7ddaf9c98df94dc7b3ee341870e9f4db8d6c962b","sha256":"655d16f0bac3d71b815c98bc12f2bb6c6d8077204e43c423dc942bc7420aff07","sha512":"b4c47231f540572fe469e9880890cc3eec3f448876649e42a6f5affd37c73b19fac3d0591f5eef12715d01e49a479631be9444c33caa564983f3a96ef43347a3","ssdeep":"12288:KpZpp22RX6KP8gb4+5NArwoTGoj/rDNnNQ97OJjPqaCZHPA/t+/:ARX6TgMrlTGoj/rDNnNQ97uqaWc4/","tlshash":"9fb4231d9b949510efe8d6367852e982332003e5935be5833a9c6b50dfb66c9c8fb03d","first_seen":"2026-09-02T20:37:56.234293Z","last_seen":"2026-09-02T20:37:56.234293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":817,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/g/static/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.383Z","timestamp":1788381401383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /g/static/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/g/fonts.css?family=Poppins:600,500%7CRoboto:300,700,italic\u0026subset=latin\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 07 Apr 2024 11:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15860\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15860,"size_decoded":16191,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15860, version 1.0","md5":"e9f5aaf547f165386cd313b995dddd8e","sha1":"acdef5603c2387b0e5bffd744b679a24a8bc1968","sha256":"f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860","sha512":"2a71edb5490f286642a874d52a1969f54282bc43cb24e8d5a297e13b320321fb7b7af5524eac609cf5f95ee08d5e4ec5803e2a3c8d13c09f6cc38713c665d0ce","ssdeep":"384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N","tlshash":"1a62d0058ba5850bf5b907fb0e1ab7ee30664b523c8c42278348073970db47a6b2b1fd","first_seen":"2023-04-05T14:47:55Z","last_seen":"2026-09-17T15:53:09.388613Z","times_seen":93010,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-40-BoatRally-Aug-2017.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.491Z","timestamp":1788381401491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-40-BoatRally-Aug-2017.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1251,"size_decoded":1523,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-17T20:02:29.036429Z","times_seen":155498,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-70-Asof-April-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.530Z","timestamp":1788381401530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-70-Asof-April-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142739\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142739,"size_decoded":143071,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 854x641, components 3","md5":"380886255df9423814e6f9e25017e28f","sha1":"3b2f0770411ab7bc611c94e97fbbd7ea7db38bff","sha256":"2e13f4881271e00387ee98b26349270fde1203e4af4204a0327427f947792311","sha512":"72dfd7ab676033b64742ba4b8fbdc43a3e72c03f91cbba056c708c192f12c57498efda62a535bf25443b79f69b68902977df063d09758549c43f44505d464141","ssdeep":"3072:HC4GgVlFjgWbDiNKNuXlRe/k1OHVDEnXOknop9JlphFzG3X1Cu:i4GgDpuXurHBExnop9JfTSD","tlshash":"4ed312efe849090b48f442be80450594d9eb02f9dddc98b3dde0b85d24a76ff424e56a","first_seen":"2026-09-02T20:37:56.236184Z","last_seen":"2026-09-02T20:37:56.236184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":927,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-73-Asof-Aug-2020-During%20Covid19%20Lock%20Down.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.536Z","timestamp":1788381401536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-73-Asof-Aug-2020-During%20Covid19%20Lock%20Down.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 218024\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218024,"size_decoded":218356,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"edd576bb5f919db2de09f3c85d0a4071","sha1":"6a5f8817192a305b959202b3e518e812535222ba","sha256":"50bbe561f09ca363088b8f0b2bd2fa3734a32a1468bc1033603093c4edcd700d","sha512":"31db71f8c526d8aa65ee647ab66944616f841eeb26fdcaca809bb4e45daab7d7134fc2e4dea865e6c44408a3517b56dbba613d9b77681b31a7446b45a4ba685f","ssdeep":"6144:s01t8JoMGEdLbxKqeFfASRLexH1zI5YWG7bVCrEjs:FqRT1Fre7RLexH5WubVCrEjs","tlshash":"842423b943cb46a3f4dee1b836e849707c421ce8326392f2b6e0f164657f56d64943e2","first_seen":"2026-09-02T20:37:56.237647Z","last_seen":"2026-09-02T20:37:56.237647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":993,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-81-Asof-Aug-2021.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.548Z","timestamp":1788381401548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-81-Asof-Aug-2021.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:50:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 236689\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":236689,"size_decoded":237021,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1200, components 3","md5":"ea4ffb6225c8b1594c5214c1a999d58c","sha1":"60058e7eb2e2976248b9f967484fac7c5833677c","sha256":"f8554119d7fd9857347ea76ff0b3319d62f0e6b000b1863ab3baac3c1fe1567f","sha512":"bb835add8c48b1824eb7c219009f8819c96399c7afe6cdcd028c604fd654d1e2b680957a4d2472556b3fc31caa38b2c5211b54444b493fe385c97a79065650c0","ssdeep":"6144:amj/EHN50nrJ2zKum48eeCJhjLdqb1hl+laD0j/OE:Fj/ET0n12Jm48eeCXdQWXGE","tlshash":"323412d209622c842ae69053c3d03154c39eab1b06594a7575d23fee78bd973373aee3","first_seen":"2026-09-02T20:37:56.238819Z","last_seen":"2026-09-02T20:37:56.238819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1059,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichamati.org/en/TimelineImages/TimelineImage-2-Meeting%20on%20Annada%20Govinda%20Library.jpg","fqdn":"ichamati.org","domain":"ichamati.org","tld":"org"},"ip":{"addr":"91.98.176.112","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ichamati.org/en/","date":"2026-09-02T20:36:41.407Z","timestamp":1788381401407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ichamati.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 06:00:24 GMT","end":"Sat, 14 Nov 2026 06:00:23 GMT"},"fingerprint":{"sha1":"5F:BE:5B:93:ED:A3:FC:9B:3A:14:16:8B:42:4A:64:03:3D:4B:E1:49","sha256":"43:AC:21:A3:27:36:79:20:99:38:F2:00:13:1E:FB:4E:40:1F:DE:32:65:2B:FC:42:34:0B:2F:2A:E4:11:4C:D3"}}},"request":{"raw":"GET /en/TimelineImages/TimelineImage-2-Meeting%20on%20Annada%20Govinda%20Library.jpg HTTP/1.1\r\nHost: ichamati.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ichamati.org/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 09 Sep 2026 20:36:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Apr 2024 11:49:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76103\r\ndate: Wed, 02 Sep 2026 20:36:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76103,"size_decoded":76434,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 768x576, components 3","md5":"bde8dc5e141700a8e194a32a77332c1c","sha1":"d89d52ad8691bb8895982beff779e61e60578afb","sha256":"848be5f3e5472b4b00ee0cf2afaba8e47d26e1e1f620201748a00be6342890c1","sha512":"eda55b2d3475fc8127937bbd2e5d662ff424be939abadb17083dfc78db6839d193935659e0f90a591c553da99a15c470d9c77b3a909644035fcf90cf60f6132d","ssdeep":"1536:YopSv6+x0vL70/oodRj9X8n+GwhubU7pllD8g36MOiz6LS:7OzyvLQfv9MnKsU7TlY8v6m","tlshash":"7a73020a7b70f5f13d6d8bbc585476b916071dd8f993ce1e2401facb163824e8e2960d","first_seen":"2026-09-02T20:37:56.239996Z","last_seen":"2026-09-02T20:37:56.239996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"ichamati.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ichamati.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}