{"report_id":"2bee5f24-514f-4298-ac52-2fc261fa95d3","version":6,"status":"done","tags":[],"date":"2026-03-25T15:34:05Z","url":{"schema":"http","addr":"complete-update.liveblog365.com","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"complete-update.liveblog365.com/?i=1","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"title":"GENCAT - login","dom":{"size":17383,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4481)","md5":"67d2434ff3fb95db3a98a0a09b9f6ad0","sha1":"bc5d9ba8ef0234e187dc9dc5f49718eb72c97397","sha256":"7625ce69de041d7a10f5e6328594f2e7d68087bb0e21f3af9585b26f23698323","sha512":"cf8a5b65b58fc86960a9685f0803c931968d80ce0f1af8e2dc7d7cb4c198fdc9d8f5750d9a4688b696c370683cadc4eb1a635f246206471845c79348ab55ae6c","ssdeep":"192:fLRYkPaURSVLax2vmDbGep7yJRbp0gyoSVmaZmb5RM+QJbvuMFIN+D5KSNOAQrkF:IVdmdbqTb527DWoE6Fe4","tlshash":"b372c56a9ab305467903f5683feb97852735c047d41dcd283fcd97888f85588aea2bcc","dom_hash":"domhashc3fe861e58e277841a23000095227ecb","first_seen":"2026-03-25T01:57:40.218102Z","last_seen":"2026-04-01T12:54:30.271314Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"complete-update.liveblog365.com","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T15:34:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"complete-update.liveblog365.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"complete-update.liveblog365.com","ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-25","domain_rank":0,"first_seen":"2026-03-25T15:34:05.453297Z","last_seen":"2026-03-25T15:34:05.453298Z","alert_count":15,"request_count":3,"received_data":19287,"sent_data":1548,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tramits.gencat.cat","ip":{"addr":"2.22.225.66","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2006-02-14","domain_rank":0,"first_seen":"2026-03-20T05:18:33.998893Z","last_seen":"2026-03-20T05:18:33.998893Z","alert_count":0,"request_count":1,"received_data":95129,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"complete-update.liveblog365.com/","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8fa43f750bb85f925393138f6f08dfe","sha1":"5ea71925ce05862e9546b0a2df1bfae6a37bb78e","sha256":"71d09751dec3b4ffaf7abdf0a577fa1d571ddc48db234ca0b94bdf7c04c6e73d","sha512":"8fd533d53fb98ab4bac75d03477e66d07cbd8967dce26634012c46275f791f8fe68d26c6f801840c0d047998f8db0304a55801eb3d44a273f5e830764f6351cc","ssdeep":"","tlshash":"a2f00c78f030a1c98bc1105a093b954f90221aa2f953c0fbc402a36069d29ec0a8cd6e","size":619,"data":"","first_seen":"2026-03-25T15:34:06.809539Z","last_seen":"2026-03-25T22:42:04.356032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"complete-update.liveblog365.com/aes.js","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"756722c3542f271367cc3b074113a8ee","sha1":"c5c24b4cfc44d597fb7d82d79a7dcea4a8d07e2b","sha256":"ed1d3bd967abe66cff832561cb911c572a2f85fd6cffc32ef3cec68dbc60c7ce","sha512":"ec3293d425646848dc2cf5d3cebae22b91d99461d3565ed17599af961f6f0062167446f732e91ade94f7e589000cda7e85259a217c5ce571bc11c175435a4290","ssdeep":"","tlshash":"8d1150a5034607bcf6cd0ec8c40a321a21f1c04abe2112c9afb36ae77c3b8840034e26","size":1000,"data":"","first_seen":"2025-03-10T10:15:36.223346Z","last_seen":"2026-06-07T07:12:24.56416Z","times_seen":2179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"complete-update.liveblog365.com/?i=1","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1503514ab01c23ee669f9553f8c1a67a","sha1":"42aa1d2618ea845a7967ef7c91bd79b30f4cf2d9","sha256":"2647c9f343e0a2b38e53e1a75f6e5429e6ffc82432665ceb91fb9d4827e24050","sha512":"55ea5c279c13b55bd7552f669e83be41a841922a940d3ce20d2fe8e4ea5dc103b6e2f9ea362ee7d7cb1703f66590ba77e71246c48bed84295b4c3f1ca637f371","ssdeep":"","tlshash":"4b116d3a23a114f154b32ea0378b9b91353f14a320a4ee017b1d8b684f00d5b5921ed7","size":869,"data":"","first_seen":"2026-03-20T05:18:36.202463Z","last_seen":"2026-04-01T12:54:30.276716Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"complete-update.liveblog365.com/?i=1","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d81bb3a0b3cf0abc00e0fb1c7bbc276","sha1":"d135fd047d31da8de80a3b362a48cfe14adc416c","sha256":"16db2bebc060b444e589605d662817700e4a8d94b5ab6f869b319e27a901d59a","sha512":"a7831a0f9be7332947db9687105eb3c46c96ed11a30049d7e5f65b73247bfe7e5dc1aecb584cecc873862756c32c8fa8bf23ecef85e8abcb823f2fdf39da287d","ssdeep":"","tlshash":"38e07de816d360841463732893db950471c859236c0ccc563d1cc22a5f62e16edf32d8","size":385,"data":"","first_seen":"2026-03-20T05:18:36.203356Z","last_seen":"2026-04-01T12:54:30.277425Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"complete-update.liveblog365.com/","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:33:43.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liveblog365.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0D:02:79:92:81:E2:42:C7:80:C3:2D:89:D8:20:8A:52:36:F7:0D","sha256":"92:9E:99:3B:63:87:6B:E9:2F:18:A8:F6:6B:9B:78:1C:7B:E4:B9:F2:5F:B0:0F:3B:3B:B1:59:81:62:05:9A:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: complete-update.liveblog365.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Wed, 25 Mar 2026 15:33:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 858\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":858,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (858), with no line terminators","md5":"eb3a51a1a74501ca4a93887d9e60afed","sha1":"5eb69d9fe103ee6525cee060d480092ad6fb5ef7","sha256":"cf4ff58186f19fd0ff301c24dd80da310a7898e9f867bf9e70ea1915fe95c026","sha512":"090220dc91f7ac50f13a3007f35aaf797f11899d765ae7c962b65ea2819d8be7a5fdd201c6775bf0acc9788c99e82c855ef4892559107de353b3642e33968685","ssdeep":"","tlshash":"031141b9eca0e4c58fc000d51976d55f64129aa2ea42c8efc4c292a466d1bdc0e89c7e","first_seen":"2026-03-25T15:34:06.805661Z","last_seen":"2026-03-25T22:42:04.351061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":317,"dns":145,"connect":31,"send":0,"wait":30,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"complete-update.liveblog365.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"complete-update.liveblog365.com/aes.js","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://complete-update.liveblog365.com/","date":"2026-03-25T15:33:43.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liveblog365.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0D:02:79:92:81:E2:42:C7:80:C3:2D:89:D8:20:8A:52:36:F7:0D","sha256":"92:9E:99:3B:63:87:6B:E9:2F:18:A8:F6:6B:9B:78:1C:7B:E4:B9:F2:5F:B0:0F:3B:3B:B1:59:81:62:05:9A:E3"}}},"request":{"raw":"GET /aes.js HTTP/1.1\r\nHost: complete-update.liveblog365.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://complete-update.liveblog365.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"complete-update.liveblog365.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"complete-update.liveblog365.com/?i=1","fqdn":"complete-update.liveblog365.com","domain":"liveblog365.com","tld":"com"},"ip":{"addr":"185.27.134.130","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:33:44.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liveblog365.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0D:02:79:92:81:E2:42:C7:80:C3:2D:89:D8:20:8A:52:36:F7:0D","sha256":"92:9E:99:3B:63:87:6B:E9:2F:18:A8:F6:6B:9B:78:1C:7B:E4:B9:F2:5F:B0:0F:3B:3B:B1:59:81:62:05:9A:E3"}}},"request":{"raw":"GET /?i=1 HTTP/1.1\r\nHost: complete-update.liveblog365.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://complete-update.liveblog365.com/\r\nCookie: __test=b8dd12f8e62650890a087f7c792e536a\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Wed, 25 Mar 2026 15:33:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 17863\r\nConnection: keep-alive\r\nLast-Modified: Fri, 20 Mar 2026 08:54:50 GMT\r\nETag: \"45c7-64d70d67734d6\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Fri, 24 Apr 2026 15:33:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":17863,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4481)","md5":"60095d9a514d020dee4b1a93ba371745","sha1":"5d1175f1d50fc8f6bb40dd41d837dbf0b7393a21","sha256":"41209892772b7f9e48b6c2a948c835c0738b8ef1f0ab3c6ee94bf5c92846c651","sha512":"d91e8c346c8c84c99ec1a0eb7a053536665144d9434218667e0933c9b86ac2ea2687c1b2d98b98f8f59282790bdea84d103bbb22529a8f0f96118c8d04f2877d","ssdeep":"192:TLRYkPaURSVLax2vmDbGep7yJRzp0gNoSVmaZmb5RM+QJbvuMFIN+D5KSNOAQrkT:sVdmdvFTb527DWoE6FeW","tlshash":"6f82d56a5ab305867903f5683feb97852735c047d41dcd283fcd97888f85588aea2bcc","first_seen":"2026-03-25T01:57:40.226022Z","last_seen":"2026-04-01T12:54:30.274616Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"complete-update.liveblog365.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"complete-update.liveblog365.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tramits.gencat.cat/web/.content/area-privada/ciutadana/logos/Gencat_completo_B_1x.svg","fqdn":"tramits.gencat.cat","domain":"gencat.cat","tld":"cat"},"ip":{"addr":"2.22.225.66","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://complete-update.liveblog365.com/?i=1","date":"2026-03-25T15:33:44.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctti.gencat.cat","organization":"Generalitat de Catalunya"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5E:CA:A2:59:DB:F3:49:C1:F9:B2:8F:86:9A:6B:DF:DF:4F:10:89:49","sha256":"89:5E:28:FE:2E:79:10:68:EA:12:58:A6:00:3D:B4:C7:5C:77:BB:42:9B:B4:0B:38:EA:B0:B8:39:0C:30:9B:24"}}},"request":{"raw":"GET /web/.content/area-privada/ciutadana/logos/Gencat_completo_B_1x.svg HTTP/1.1\r\nHost: tramits.gencat.cat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://complete-update.liveblog365.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.4\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jan 2024 18:41:29 GMT\r\netag: \"17165-60e9bc7749536\"\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nx-proxy-cache: MISS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 28202\r\ncache-control: max-age=282\r\nexpires: Wed, 25 Mar 2026 15:38:26 GMT\r\ndate: Wed, 25 Mar 2026 15:33:44 GMT\r\nvary: Accept-Encoding\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=18, ak_p; desc=\"1774452824279_35053943_114529439_1880_13848_1_35_13\";dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94565,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8eb877c51cdc5b4ac49f6ab6ca67db2","sha1":"0b75b80cf75ec4103e8d8c5889529b1ceba2a39c","sha256":"25df8ee68e1d9b16efd6e8573ce27d130e3c21d84b2e95b257740a2abbca12c7","sha512":"1f91181e35c8f8dadbae9a1d28f4eba2d5fc67c3ad9b94c954a9623affd27e133bcc01ec173687b3b8344d1882b0089270a1a45cdfa0e0dd77fa0560f292fc43","ssdeep":"768:S7KCNeNKmK89wTM1hg0k0jNJGwiNgu/Wu4Y/bLQAUgXkfNreLzce3Q54LMU5Ooey:SJKoANJGw6WudmIsBo3kZUm8BTQS","tlshash":"a69307e503bc47e470a7b7e880231c06bea628fb76614299f4de9d947f235d0449dcab","first_seen":"2026-03-20T05:18:36.19991Z","last_seen":"2026-08-10T17:03:46.891254Z","times_seen":9,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":149,"dns":113,"connect":1,"send":0,"wait":34,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}