{"report_id":"2b609ca1-0693-4ae7-ac5e-cd1548b67aff","version":0,"status":"done","tags":[],"date":"2026-07-31T12:29:37Z","url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":0,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"title":"iCloud","dom":{"size":53044,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6440)","md5":"d58c5547d2d91f9795c3b2fd820cbfbb","sha1":"0e6f266be824f355609dcc2d0361f88326d5fcc3","sha256":"d3208d16dcee215c5ac2d32ee4438bf123225e8a472b45c8ae51e7b32568481c","sha512":"49c9a29cfc2bb35412dd0cdf121eb3a85927dad6527fac2f5e3300acd0f695af789ecb0c3e9290fec0b75cf89be0eaef0b108c28c4e4446e09e87bd795a3cc0d","ssdeep":"1536:qoTU7/qMY0js50O0gBq0OMTc5PSztU2BP0X0JBnzSe2Pt/qMY0js50O0gBq0OMTQ:+/qMY0js50O0gBq0OMTc5PSztU2BP0Xl","tlshash":"3f335ee10eb4158dd2ce7f78cf674c11666ae5bbbd358f6af08d82344722de4885ac01","dom_hash":"domhashffbf3b1313aad7c5c454b0ee95640571","first_seen":"2026-07-31T12:29:42.467788Z","last_seen":"2026-07-31T13:09:33.431975Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":0,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T12:29:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-31","alert":"Detects file containing Telegram Bot API","trigger":"khaki-octopus-59420.zap.cloud/pt-PT/config.json","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"appleid.cdn-apple.com","ip":{"addr":"184.26.63.208","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-11-04","domain_rank":21465,"first_seen":"2013-09-15T17:16:35Z","last_seen":"2026-07-30T15:09:38.315864Z","alert_count":0,"request_count":1,"received_data":2758,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"khaki-octopus-59420.zap.cloud","ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-29","domain_rank":0,"first_seen":"2026-07-31T12:29:38.314267Z","last_seen":"2026-07-31T12:29:38.314267Z","alert_count":22,"request_count":7,"received_data":458011,"sent_data":2974,"comment":"","tags":null,"fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.3","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}]},{"fqdn":"www.apple.com","ip":{"addr":"2.18.173.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1987-02-19","domain_rank":743,"first_seen":"2012-05-21T16:16:57Z","last_seen":"2026-07-25T20:28:16.019591Z","alert_count":0,"request_count":1,"received_data":1080,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/assets/js/app.js","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cda69ca780b6762a11bd2d7967d6d99e","sha1":"a4ec1527a10f40927fb599ccda4a1ac16736ee1b","sha256":"24ab9438b90048c87db8016f39a8cfd9282129902ec9bcc07b63c549046465ab","sha512":"6f8aabf188fb79f9788b3a850768323f986170dead9d2840d171c13374df4de027553c84eb89cc04b82e22484e22ba48f0169922e29429e2b4a4798e2fe91fe1","ssdeep":"3072:XGAW/1HTQRHWzMmQlqAyw0/jPUMZ1RoRH+aYMwiW:2j/1zQRHrmQla1jPUm1RoRH+adwB","tlshash":"9184705a5b86147a85bba33dcb23cd04fa3749bf224401957d1c96403ff226a82d9ff6","size":388872,"data":"","first_seen":"2026-07-31T12:29:42.487517Z","last_seen":"2026-07-31T13:09:33.435874Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-18T00:37:09.784588Z","times_seen":237954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-18T00:37:09.7853Z","times_seen":745293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"appleid.cdn-apple.com/appleauth/static/bin/cb1754975187/dist/assets/privacy.svg","fqdn":"appleid.cdn-apple.com","domain":"cdn-apple.com","tld":"com"},"ip":{"addr":"184.26.63.208","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://khaki-octopus-59420.zap.cloud/pt-PT/","date":"2026-07-31T12:29:13.076Z","timestamp":1785500953076,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appleid.cdn-apple.com","organization":""},"issuer":{"commonName":"Apple Public EV Server RSA CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Thu, 02 Jul 2026 18:30:06 GMT","end":"Thu, 14 Jan 2027 18:25:48 GMT"},"fingerprint":{"sha1":"A1:15:EE:BF:E6:91:F1:40:E9:29:46:DA:C6:D5:D3:DB:1E:B7:30:6D","sha256":"F8:3D:3E:B5:AB:3D:F1:A4:58:5F:FB:B1:02:84:DC:21:C1:45:CC:28:1E:53:D4:46:03:D3:AC:B1:60:1A:77:57"}}},"request":{"raw":"GET /appleauth/static/bin/cb1754975187/dist/assets/privacy.svg HTTP/1.1\r\nHost: appleid.cdn-apple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://khaki-octopus-59420.zap.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Apple\r\nContent-Type: image/svg+xml\r\nCache-Control: public, max-age=2592000\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\nETag: W/\"2292-1783617827760\"\r\nLast-Modified: Thu, 09 Jul 2026 17:23:47 GMT\r\nContent-Encoding: gzip\r\nDate: Fri, 31 Jul 2026 12:29:13 GMT\r\nAlt-Svc: h3=\":443\"; ma=93600\r\nContent-Length: 1149\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2292,"size_decoded":1615,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fa53eeb1bdb55e85d666846245fb60f","sha1":"49f9a080582aab71cde03ba3da0df56167708a1d","sha256":"20bcfd29cf00ae9d23612c3a8ef36debf5dcdfe2ad303b77ef28854b57a9e7a4","sha512":"0c582534b9ff736c51d59bddb5059627245b3355a86fad960057dc6168d94082c381981771ded24d7bd54678571a042daefc394f48ea88f777546dd18b4f89e6","ssdeep":"","tlshash":"244134d55350d298d9cafb98cff5d5f4730bf4fab1a6568099a68720828ee88dd40c08","first_seen":"2025-01-25T14:43:20.16861Z","last_seen":"2026-08-16T08:32:47.06067Z","times_seen":43,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/favicon.ico","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://khaki-octopus-59420.zap.cloud/pt-PT/","date":"2026-07-31T12:29:13.118Z","timestamp":1785500953118,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: khaki-octopus-59420.zap.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://khaki-octopus-59420.zap.cloud/pt-PT/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 12:29:13 GMT\r\nServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30\r\nLast-Modified: Wed, 29 Jul 2026 12:35:15 GMT\r\nETag: \"10be-657bf300038dd\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4286\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.3","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":4286,"size_decoded":4599,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"c0748edbe44265afafb2dd6429bd5278","sha1":"8303ca9a9d353ebd1d4c3faf6927a505c0aeec16","sha256":"5a6d72404b654aebac300264b9465d3cced6f91a40f956722738d586e9051897","sha512":"f6fe8b151cd4269b2057b88707ecd428676c99e9218d3d508dcda916f796f6c633959ab5b2cf5e95e76ef85638c63fce49a360bc0e463e5afac8fae5edd06642","ssdeep":"96:iLRKAA6GeGQXRRzCAUr5ldil6w04fNGYI6L4u4AXRL:iLRKAA6GeGQhRo5nilL04fNGYIM4u4Al","tlshash":"219104c681c808eada674ab6ac1ced02735bfcdeb8286e5a3957f404d6731e72033417","first_seen":"2026-07-31T12:29:42.474276Z","last_seen":"2026-07-31T13:09:33.43322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"khaki-octopus-59420.zap.cloud/","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T12:29:11.671Z","timestamp":1785500951671,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: khaki-octopus-59420.zap.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/assets/css/style.css","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://khaki-octopus-59420.zap.cloud/pt-PT/","date":"2026-07-31T12:29:12.127Z","timestamp":1785500952127,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /pt-PT/assets/css/style.css HTTP/1.1\r\nHost: khaki-octopus-59420.zap.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://khaki-octopus-59420.zap.cloud/pt-PT/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 12:29:12 GMT\r\nServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30\r\nLast-Modified: Wed, 29 Jul 2026 00:32:31 GMT\r\nETag: \"25a8-657b5174cc9c6\"\r\nAccept-Ranges: bytes\r\nContent-Length: 9640\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.1.3","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":9640,"size_decoded":9949,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"96c0035a49b0935d53f59fcce21ab723","sha1":"7d3929443696657bc9c0f786265ed48715647134","sha256":"6ef8588e3165c63ca9442a12f0c4791c698302d2a9ce20f8f6f5bfe4df6f558b","sha512":"ba5922e24ff2f745381b73d293ca1bd8dc07837609c6551e3126b209cf4a916a6a6f8022b42c981da99f01fa267399a2d13ef39d6851e45ee61abb598c031f61","ssdeep":"192:ileDKHdzSqGKgMGE+o4r9OkLumXeftuClFa+EEsqkuCQcP6:w1+HkDxbT","tlshash":"c7122059ea051146b233deb87ff28716e68450638b4341bc7fd4a2858ff91289ab1fdc","first_seen":"2026-07-31T12:29:42.482225Z","last_seen":"2026-07-31T13:09:33.434819Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/assets/js/app.js","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://khaki-octopus-59420.zap.cloud/pt-PT/","date":"2026-07-31T12:29:12.129Z","timestamp":1785500952129,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /pt-PT/assets/js/app.js HTTP/1.1\r\nHost: khaki-octopus-59420.zap.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://khaki-octopus-59420.zap.cloud/pt-PT/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 12:29:12 GMT\r\nServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30\r\nLast-Modified: Wed, 29 Jul 2026 00:16:58 GMT\r\nETag: \"5ef08-657b4dfad17b5\"\r\nAccept-Ranges: bytes\r\nContent-Length: 388872\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.3","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":388872,"size_decoded":389192,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2955), with CRLF line terminators","md5":"cda69ca780b6762a11bd2d7967d6d99e","sha1":"a4ec1527a10f40927fb599ccda4a1ac16736ee1b","sha256":"24ab9438b90048c87db8016f39a8cfd9282129902ec9bcc07b63c549046465ab","sha512":"6f8aabf188fb79f9788b3a850768323f986170dead9d2840d171c13374df4de027553c84eb89cc04b82e22484e22ba48f0169922e29429e2b4a4798e2fe91fe1","ssdeep":"3072:XGAW/1HTQRHWzMmQlqAyw0/jPUMZ1RoRH+aYMwiW:2j/1zQRHrmQla1jPUm1RoRH+adwB","tlshash":"9184705a5b86147a85bba33dcb23cd04fa3749bf224401957d1c96403ff226a82d9ff6","first_seen":"2026-07-31T12:29:42.487517Z","last_seen":"2026-07-31T13:09:33.435874Z","times_seen":3,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":158,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/config.json","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://khaki-octopus-59420.zap.cloud/pt-PT/","date":"2026-07-31T12:29:13.091Z","timestamp":1785500953091,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /pt-PT/config.json HTTP/1.1\r\nHost: khaki-octopus-59420.zap.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://khaki-octopus-59420.zap.cloud/pt-PT/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 12:29:13 GMT\r\nServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30\r\nLast-Modified: Tue, 28 Jul 2026 22:57:52 GMT\r\nETag: \"135-657b3c4c6e528\"\r\nAccept-Ranges: bytes\r\nContent-Length: 309\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.1.3","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":309,"size_decoded":624,"mime_type":"application/json","magic":"JSON text data","md5":"147087fd93f031937b709a98336bced0","sha1":"2bbec4883e6556cfbf1c3022b11b7bb2e7ab8679","sha256":"2d4f2f7c7f87fcd1c7c8c486c4e5793762687d60f2e678618c35f70d89e0d4a6","sha512":"e68b1f24a775388f10f8c0b624b1d653c604867bc8b32f71e22daa2003d7b264cb0c17c678ecbb8804abc6b8c36d3b028ab7856b64113817303866627b924c47","ssdeep":"","tlshash":"0be05b06d3649ea719b6962181713385f507d21f15945c5f3a7ce21d0f36a3235d1e1f","first_seen":"2026-07-31T12:29:42.492686Z","last_seen":"2026-07-31T13:09:33.432619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-31","alert":"Detects file containing Telegram Bot API","trigger":"khaki-octopus-59420.zap.cloud/pt-PT/config.json","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T12:29:11.748Z","timestamp":1785500951748,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: khaki-octopus-59420.zap.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 31 Jul 2026 12:29:11 GMT\r\nServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30\r\nX-Powered-By: PHP/8.0.30\r\nLocation: http://khaki-octopus-59420.zap.cloud/pt-PT/\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.3","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"khaki-octopus-59420.zap.cloud/pt-PT/","fqdn":"khaki-octopus-59420.zap.cloud","domain":"khaki-octopus-59420.zap.cloud","tld":"zap.cloud"},"ip":{"addr":"87.237.54.205","port":80,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T12:29:11.808Z","timestamp":1785500951808,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /pt-PT/ HTTP/1.1\r\nHost: khaki-octopus-59420.zap.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 12:29:11 GMT\r\nServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30\r\nLast-Modified: Wed, 29 Jul 2026 00:27:58 GMT\r\nETag: \"cf21-657b506fd5e48\"\r\nAccept-Ranges: bytes\r\nContent-Length: 53025\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.1.3","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":53025,"size_decoded":53336,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6440)","md5":"6350d6c3de046a0a4f5aa2d6b7654cc7","sha1":"05686c4ea707eb8b026a8bdf9d3efa03daa4f0e2","sha256":"e99aad6bdd032c570d0a1a5e25f8777260812fea8da3d5ef30927aeaebe2b73e","sha512":"1ac185191a723fbebf1a4f85a84bf6a0e4bc2adee375b01f2ed8458b67ec0868b476c918f64c06961bd33816d1d726d60418653383fe9f44c8b9af6cedb90903","ssdeep":"1536:YoTU7/qMY0js50O0gBq0OMTc5PSztU2BP0X0JBnzSe2Pr/qMY0js50O0gBq0OMTA:E/qMY0js50O0gBq0OMTc5PSztU2BP0XD","tlshash":"44335ee10eb4158dd2ce7f78cf674c11666ae5bbbd318f6af08d82344722de4889ac01","first_seen":"2026-07-31T12:29:42.493919Z","last_seen":"2026-07-31T13:09:33.434195Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"khaki-octopus-59420.zap.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"khaki-octopus-59420.zap.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.apple.com/wss/fonts?families=SF+Pro,v3|SF+Pro+Display,v3|SF+Pro+Text,v3","fqdn":"www.apple.com","domain":"apple.com","tld":"com"},"ip":{"addr":"2.18.173.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://khaki-octopus-59420.zap.cloud/pt-PT/","date":"2026-07-31T12:29:12.124Z","timestamp":1785500952124,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /wss/fonts?families=SF+Pro,v3|SF+Pro+Display,v3|SF+Pro+Text,v3 HTTP/1.1\r\nHost: www.apple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://khaki-octopus-59420.zap.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: Apple\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com\r\ncache-control: max-age=3600\r\nexpires: Fri, 31 Jul 2026 13:29:12 GMT\r\ndate: Fri, 31 Jul 2026 12:29:12 GMT\r\nset-cookie: geo=NO; path=/; domain=.apple.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}