{"report_id":"2c84d09b-ee9c-424a-88f6-68e1dcaa2e61","version":0,"status":"done","tags":[],"date":"2026-09-26T07:56:36Z","url":{"schema":"http","addr":"content.net.ua/","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"content.net.ua/","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"title":"New International Security System and Digital Society: Social and Solidarity Economy, and Civilism - to stop wars and ensure sustainable development","dom":{"size":56950,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (454)","md5":"9e5d3a9009c6f2800bbac4f263279653","sha1":"817720a9e7e86acb264b57eee043bf73c3b0197d","sha256":"56e752a0cf67c7fa46809e5d270103e84ba2e31478a4dc07a34e5b22224bac1f","sha512":"93d44c285f2f57cdd3ba58c25d89bfb8b6e7c0ec297895bbd84d5f1ce528905f7670662f048d82dbed72ea392a05218e5f05de78d42ac2fe6bb21bbb128d4868","ssdeep":"768:SknvFj5pvvFjZ5wkIv/jW+9YX5lKq+vljGPfF2c25KDkvcrjW/9xIcxJEKo+ggPD:DI5x77mW","tlshash":"7d43953291f4a167118350e5f0259ba7cda04563a0879be1f0ac49986fc7f6ebf2334e","dom_hash":"domhash24cf3411c57f32fdfcd08a48b13fe0db","first_seen":"2026-09-26T07:56:40.776887Z","last_seen":"2026-09-26T07:56:45.197681Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"content.net.ua/","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-31T07:56:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"c3n.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":1,"received_data":31999,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"content.net.ua","ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2005-02-17","domain_rank":0,"first_seen":"2026-07-07T03:10:16.690357Z","last_seen":"2026-07-07T03:10:16.690357Z","alert_count":10,"request_count":10,"received_data":4706467,"sent_data":5222,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}]},{"fqdn":"c3n.info","ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T13:11:57.359156Z","last_seen":"2026-08-22T13:11:57.359156Z","alert_count":6,"request_count":6,"received_data":15551525,"sent_data":3494,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":4,"received_data":147500,"sent_data":2276,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":15860,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"content.net.ua/","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"d310f4a8d013e731b5a77f8a844749be","sha1":"1b18b9eb248392ee832b10ac94f27d1a307145ef","sha256":"8b4630112443c396ff53035f7bda4459bd0db565b6cd0bfa5612c7a7a5a20f39","sha512":"3c508be9d549d75e85ea988d2a1e41771a5c95fc5538afac2a6a992bec7d6dbc36ee5cc5819fd48edf04aa1aea7467b2a40a49f0914016758d169c25147f6960","ssdeep":"","tlshash":"cad0124f34d2203c56477668071e1c0834a60083ab049d04bcaca2c68f208e7893af8c","size":199,"data":"","first_seen":"2023-07-05T13:54:48Z","last_seen":"2026-09-26T07:56:45.212408Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"content.net.ua/favicon.ico","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:56:00.447Z","timestamp":1790409360447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:56:00 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 21 Jan 2014 15:52:32 GMT\r\nexpires: Wed, 25 Nov 2026 07:56:00 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":1406,"size_decoded":649,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"1cadfdc1058f6d484080c605667987a0","sha1":"2b7df87581839de5ce3660f34b7ea1b727065971","sha256":"ca786ca2ab4055e2deb9f3e91afd3caf0023a9cc81153bbc120491373b0ccc9b","sha512":"7030398fc83096490391aa17a3d2fcea7dc69d62515b1e86b122b09a37269924929e3f57030f98df569ac084c6c8021bc25a54c2de8517adcc998d11a896b156","ssdeep":"","tlshash":"c3211785e934c129c59c0f310c1adedaf6449235a0fc5a29fde0808b4b5fb8bbd14f64","first_seen":"2026-09-26T07:56:40.8017Z","last_seen":"2026-09-26T07:56:45.198548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c3n.info/contentnet-landing/static/images/Pic_Model.png","fqdn":"c3n.info","domain":"c3n.info","tld":"info"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.789Z","timestamp":1790409357789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/Pic_Model.png HTTP/1.1\r\nHost: c3n.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2477325\r\nlast-modified: Fri, 24 Apr 2026 17:00:47 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":2477325,"size_decoded":2477738,"mime_type":"image/png","magic":"PNG image data, 1021 x 893, 8-bit/color RGB, non-interlaced","md5":"e105cd68b9b128f0d3db8975cc747f14","sha1":"ebc9dd0703fc22bec025d854396f79eab3986435","sha256":"ac1830d937eee0d28f499b02adc32ec0858c0aa158bf32865656c37e4b9e2164","sha512":"54a4f10bbfa0f4699bb0166367d04908dc547243bad80f59972a127838f13648b90fc265ccaa7466124899ca0dac3a98ebf131bd836684293561ce563cfb9860","ssdeep":"24576:7nOOpVNssi+yL0zpSb8BJ2NdAnSx0GGsEnvwatI2vrNtypBXlbCj/:7TNsJ+yLqQU2NiKxGrv3v5cpBlC","tlshash":"ba2533a009ac07e9ef54b916d73582d3cbaf3a42d993fa530f5c153a79421aec24c3e4","first_seen":"2026-09-26T07:56:40.804468Z","last_seen":"2026-09-26T07:56:45.199324Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2265,"timings":{"blocked":8,"dns":118,"connect":68,"send":0,"wait":202,"receive":1936,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"c3n.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:58.033Z","timestamp":1790409358033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://content.net.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:08:49 GMT\r\nexpires: Tue, 21 Sep 2027 16:08:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nage: 402429\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-09-26T10:19:43.776668Z","times_seen":12660,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":54,"dns":9,"connect":0,"send":0,"wait":43,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/css/style.css?104","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.771Z","timestamp":1790409357771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /css/style.css?104 HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 Dec 2025 18:56:11 GMT\r\nexpires: Mon, 26 Oct 2026 07:55:57 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":14504,"size_decoded":3497,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ba77e1c0ba3a7c397bdce46e5b7bc4c8","sha1":"1a4fd5e723219c4b1538321ca15dd5e57c7e7f9d","sha256":"ec2c7b51e9349c45cb3db01d32587c48de1ff2133d5c597f2d9a11408b4599b6","sha512":"3646d3f746b22cdea294601ce5d12445ed6b5625ea49deb76e569feebe674c8c7f63f8e906300dd0768137e7defa1dac179cee92ea90c993f646bb31b867b70e","ssdeep":"384:MN7hvwJeNNgNqh5SZAeypVnqkSbtA7GPf1Q:MKEN+qh5SZ7ypVnqkSbtA7GX1Q","tlshash":"9b52fe5996026146b133ea7dbbb20705d7a84017db0b92b87eed63489ff5068c262fcd","first_seen":"2026-09-26T07:56:40.781837Z","last_seen":"2026-09-26T07:56:45.200614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/static/images/book1.png","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.790Z","timestamp":1790409357790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /static/images/book1.png HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 173555\r\nlast-modified: Fri, 03 Oct 2025 10:10:53 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173555,"size_decoded":173967,"mime_type":"image/png","magic":"PNG image data, 352 x 493, 8-bit/color RGBA, non-interlaced","md5":"115356140cc65b3fcbfa68629988d798","sha1":"0d14047c7b3a8b0ac66076833cec9d5fab71a38b","sha256":"4d2b1ad27fd40eae566b8bfa471c18a7e48940ff37dd29c780edaa0550dd0f6c","sha512":"8d451e63397ac8d41cf8f6c924ce46be8ce898d9612e41245f3e2a76bea73e63fe753d8c49b6cdc972263a29d68bbf11090a91a0353c6b8b467e71579b3b2906","ssdeep":"3072:JRfYH+fu0vKF5xR1BlceDyxqaRX7L1Sj/YZrAynFKXHEd6tus7C:JRfS+fu57NyMaRLL1SzYZMynSHEd6tuJ","tlshash":"a70412df95b2c2f23bb47d78f422f390682894c54f5d8122ab18fabb6c4070bd25c861","first_seen":"2026-09-26T07:56:40.814994Z","last_seen":"2026-09-26T07:56:45.20136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/static/images/book2.png","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.792Z","timestamp":1790409357792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /static/images/book2.png HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 115418\r\nlast-modified: Fri, 03 Oct 2025 10:10:53 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115418,"size_decoded":115830,"mime_type":"image/png","magic":"PNG image data, 352 x 493, 8-bit/color RGBA, non-interlaced","md5":"70ff66d222f0aed6a201b02fc23f3885","sha1":"622911e0aacf72ceca3700f69a6966a78387d412","sha256":"11c5aa1867d11c29bff3439598395230f471a77b070523cac4903457e0000d3a","sha512":"1bafc9a204500bb26981da8336983af375bab0180e0d752e1b08630d55f2cd63e247d81d08dd27571fc5cc6525944e2fc1b549c68171aeb8792b739576303818","ssdeep":"3072:qmInLdsqsDve1y/I//2dJj6vaAyUqK2ze:3InLbsTkyg//kIGXze","tlshash":"a3b312ea8dfc5523b71a4c77c18265343d6a4a3125321fd84c06aa80586fa9eec5bf1f","first_seen":"2026-09-26T07:56:40.784894Z","last_seen":"2026-09-26T07:56:45.202045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c3n.info/contentnet-landing/static/Books/Book_Noosphere/Book_Cover_Noosphere.png","fqdn":"c3n.info","domain":"c3n.info","tld":"info"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.796Z","timestamp":1790409357796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/Books/Book_Noosphere/Book_Cover_Noosphere.png HTTP/1.1\r\nHost: c3n.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2799440\r\nlast-modified: Mon, 05 Jan 2026 13:52:16 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2799440,"size_decoded":2799853,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"2866af27a472deb2c9f4baf51b3a36bd","sha1":"7ccd223eef3e8a5182d4bc24fe797e42aff1f7fc","sha256":"77c3c82e4e08c1a1be5eb6919f58316a0c2f026b7880f306998be38de898776b","sha512":"d7bafafea3c715905667fa5f5b30eb299a09d08ae38a3494eb335ccf79d67afa3aececf68945c137ad4d6750763c9c277c9c718cbda97283a91a8d561354a675","ssdeep":"24576:IHFYoAopYy8CiNrqdlUwLb+lDhloquRnBDZCotcMujyn2:Ibhk7rUlnGvrHan2","tlshash":"9925338480401680fb719ab76ea1cac8c9053e5a70def74a75bb85df90cebd40e4b65f","first_seen":"2026-09-26T07:56:40.816732Z","last_seen":"2026-09-26T07:56:45.20282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2659,"timings":{"blocked":7,"dns":118,"connect":52,"send":0,"wait":203,"receive":2331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"c3n.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.845Z","timestamp":1790409357845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 26 Sep 2026 07:55:57 GMT\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15176,"size_decoded":2537,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9c304af711c32552dee8b1fe69790e34","sha1":"7690dcfd236a485f6c01729d9748f7cbcda6e498","sha256":"b4e3faedf30cfb4854124e62f7c0dfa85634cd35232e7178e1974115b87bdcbb","sha512":"026cdf244cfaa4062ecca9b2591697e3ca5a791799c670da90894ef4923d82c4439a36306ad1b6e3bf3030a45f0b7d3df13648a705c5727129aa8044b1e0cf4e","ssdeep":"384:AhwCFnbL8okcCkhkx+kRkg1kUqY4nkbk3kk9fw95969W9yN9/qY4T9h9B9q:rCiFyg2UfIUk+H00YNRYj78","tlshash":"07622f91041b5444ab435ce223cf7e35fe0e92617050d1b9bbfd6babaddac62436836c","first_seen":"2026-02-25T13:30:21.757859Z","last_seen":"2026-09-26T07:56:45.203427Z","times_seen":64,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/contentnet-landing/static/images/documents.png","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.980Z","timestamp":1790409357980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/documents.png HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/css/style.css?104\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 456480\r\nlast-modified: Sat, 20 Sep 2025 18:27:30 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:58 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":456480,"size_decoded":456892,"mime_type":"image/png","magic":"PNG image data, 616 x 595, 8-bit/color RGBA, non-interlaced","md5":"ed6e7cd0c95b4bd7b8b943a58a908a9f","sha1":"24fda8ecac75d0a9545f5598ffdc8774bd985c11","sha256":"aa0a1d5c8cdadb330d781837b9ed1171814f235a924d91bdadf6225aed452800","sha512":"725fc1e0ec1e68f86e17984b1f50fca0c120de8c2f8ee16f5de191c90862c21e6db766affbd359f000c5e029c0e37473248311776462b6673aa77ead6fc50d6e","ssdeep":"6144:Bi6BI7+ebR/s5jsK3G97jm4RLibZjB3aoF9VMRYzYrYchbKTYG9wLXLKJ8F:BBc+eb1Mjs6GnRLEjB3XiYuYcRq5io8F","tlshash":"cea4330ac86721e1949ececf692d7287f23a472d67c15c8d182f8320d8d98f66614e7f","first_seen":"2026-09-26T07:56:40.819323Z","last_seen":"2026-09-26T07:56:45.203963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":726,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:58.031Z","timestamp":1790409358031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://content.net.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:08:29 GMT\r\nexpires: Tue, 21 Sep 2027 16:08:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:10:26 GMT\r\ncontent-type: font/woff2\r\nage: 402449\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39580,"size_decoded":40393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39580, version 1.0","md5":"adbb74ed85ae03bafbc689d12c4b009d","sha1":"7f3b99b45e6d2fcfc6236e972f9eca353cf0d130","sha256":"d7143d0ded43c36b8c4ff4a0df9fba2d356d27f64d38f33d962ec5977f928d31","sha512":"d91511c5a20c5b851b6363603959dc520622c0202e2c39b8bd7cacf95f597bccbfe4595cda9785639dbd216e1a45c980e8e54c94a778165b6d81b83192d57a55","ssdeep":"768:GtZDr7XQiUGTkhuSlVGpCRf0p0lBYtg8PdVc4vtSbga/azp8kAUuzqksy8G:GzP7xyhuSlwpq7R8Ve6UN/ad8kLufsyP","tlshash":"e30301c6940ca5f9dcaa027bfc5e0cfa39654cb89c0a6b9c5f89e7634165cf2425ca4c","first_seen":"2025-09-05T00:54:06.266401Z","last_seen":"2026-09-26T12:17:43.302869Z","times_seen":236962,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":55,"dns":12,"connect":0,"send":0,"wait":53,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:58.034Z","timestamp":1790409358034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://content.net.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 403413\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-26T13:44:58.966329Z","times_seen":308015,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":54,"dns":8,"connect":0,"send":0,"wait":17,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.773Z","timestamp":1790409357773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 209186\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X257jozDvWl9aRtEpVe6fM3A9TKzEzwcKeTldKpFe6iFjCp5lwDz%2BueMkPCGGvEAuDkHEqfOYwVRBGbF4k06cs9kCvQ9uGitIALoK9PPyVJZMGhInJviggIXv9CBHZZpZZPdnk59\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a410b5963f3232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5631\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":6630,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-09-26T13:45:16.679613Z","times_seen":317991,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c3n.info/contentnet-landing/static/images/Pic_Fund.png","fqdn":"c3n.info","domain":"c3n.info","tld":"info"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.782Z","timestamp":1790409357782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/Pic_Fund.png HTTP/1.1\r\nHost: c3n.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1746001\r\nlast-modified: Wed, 29 Oct 2025 15:17:39 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1746001,"size_decoded":1746414,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"bacf459ef5640f60508cf0b2ac4b4f9d","sha1":"59d39e48775f5821f602bdd28b53126e52315307","sha256":"9aab2333b549469319e72db7ebae12194b1657437af68ecc2121c5d00cf02242","sha512":"2297774e06492e2288b3539313c66318c74ab8066c1e4b4e3a24be2237b66fc2d8c1f9f2045c0f2ad2d251af1312e265a0f85fe5d39f54162eabbfdf1cadbc06","ssdeep":"24576:OWqMx6R6Psx6D56/CdxBadW8V9MwKsCO+MmLP8EkltbwGUw4:7Tq616/oBGRNFmLUVtJUP","tlshash":"a32523b673c39fc4cf0781b8a09d7a427ea642460eac01173728cfd56649fa296d3776","first_seen":"2026-09-26T07:56:40.783388Z","last_seen":"2026-09-26T07:56:45.20604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2334,"timings":{"blocked":8,"dns":118,"connect":69,"send":0,"wait":202,"receive":2004,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"c3n.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/contentnet-landing/static/images/Pic_Peace_Vic.png","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.785Z","timestamp":1790409357785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/Pic_Peace_Vic.png HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1099004\r\nlast-modified: Mon, 12 Jan 2026 11:27:57 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1099004,"size_decoded":1099417,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"a96cb7cf659ae32e9f7508217a11ca35","sha1":"4054f4aac1ee44e081fbf7b2cea6dc847116abba","sha256":"308e77210e76f28c05bb6dd2f26412d82f791eb25287f7ba1ffde24baa9cf425","sha512":"45e9f3db38d6fa8a72315718743597d373e53e8772d72c285686d77a236a6f0c6089946bf0f71dcf47eba80d737f1c7bf6115d7ad9893bff059b68d7a506601a","ssdeep":"24576:ztvkp03yStntyMLH3uoqmQAyJnnyGCxvNkuLwZt/VW+:z5kpTcyMLXucwyGCFiWENVW+","tlshash":"1b2523bd3606b1d8cfe079f24d3e8cfb56a60a6074d154a5445e4c8a8e4b349f2af32d","first_seen":"2026-09-26T07:56:40.810019Z","last_seen":"2026-09-26T07:56:45.206686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":2152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c3n.info/contentnet-landing/static/Books/Book_Civilism/Book_Cover_Civilism.png","fqdn":"c3n.info","domain":"c3n.info","tld":"info"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.793Z","timestamp":1790409357793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/Books/Book_Civilism/Book_Cover_Civilism.png HTTP/1.1\r\nHost: c3n.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2363724\r\nlast-modified: Sun, 01 Mar 2026 19:53:48 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2363724,"size_decoded":2364137,"mime_type":"image/png","magic":"PNG image data, 1721 x 2065, 8-bit/color RGB, non-interlaced","md5":"a36d104f0c6007a7b34dd27278b83eea","sha1":"4b7656499997bc0a82ccab8563c743c419501d1e","sha256":"7ec95a20b4b8ff5b19f9588e3326bac52ad551f17acb158ed8fa564885b4a2a1","sha512":"486b10f62adfad9285eadf79ad1b24ccabe7b4faf6e93802f1feca0175a549ef0d3953123509d0bfda596b7a818aa36c6d08eff78a3f32165f1c7c44f746bb73","ssdeep":"24576:7khGzXHI1k+JPuU8jB/ziEN3gqyoZsR35XR6YOU:70G7I/J2tN/24JZyQPU","tlshash":"3525230e7db5f794580b86706375ee031e83b8ac26d30b809a42e76de09ad6743785f7","first_seen":"2026-09-26T07:56:40.797104Z","last_seen":"2026-09-26T07:56:45.20756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2066,"timings":{"blocked":7,"dns":118,"connect":53,"send":0,"wait":203,"receive":1738,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"c3n.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-26T07:55:56.926Z","timestamp":1790409356926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: text/html; charset=windows-1251\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55814,"size_decoded":10940,"mime_type":"text/html; charset=windows-1251","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (454), with CRLF line terminators","md5":"b5be51a240e32aa96adcc9c234a4ec38","sha1":"2a3203ebc07d24759dd20119e6f359926defc10b","sha256":"94e4f366c85c1d5ba18dc8dcc96b9a5f8b03b0c4574c1beba9d4301bd0fd27ef","sha512":"34e11321240aee44cce53cb81b26e8538fcb80c678c4906d495720078153d39bc03e61625e47ed0d93ecc9e70dba077e01d4e3c0ed095d99b59174eaf1ae29e9","ssdeep":"768:Rtyg1k2Urg1kQcTMCgQk9YtDG8Ynbg1kKAa1VSjxKGCgGYk9FV+WHZKMJDmKwBk0:aixE8Ap2","tlshash":"1643843191d0502711b341e5e1719fa7dd704463a1839aa2f0acaa9b6ff7c5eaf2334e","first_seen":"2026-09-26T07:56:40.808647Z","last_seen":"2026-09-26T07:56:45.208275Z","times_seen":2,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":116,"connect":67,"send":0,"wait":135,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/contentnet-landing/static/images/question.png","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.781Z","timestamp":1790409357781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/question.png HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 66728\r\nlast-modified: Fri, 19 Sep 2025 17:26:40 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66728,"size_decoded":67139,"mime_type":"image/png","magic":"PNG image data, 269 x 409, 8-bit/color RGBA, non-interlaced","md5":"04379c95fe18b2db857ea821a9943850","sha1":"b622d482e93f2b986a5fa91ce938f564738b7009","sha256":"4a798c69fdb82aea24fa288923a6b5d978dc461023bbfdf57239c7e020485eb5","sha512":"0c3e2af1fdb784c854cb2ac40b0d89b256964f0ddb134ef38d1b24204de4c07d93f82bf3905f8e9029f2670d2f1b68d01d27239e2ceaba7f3655f062d82e4fba","ssdeep":"1536:A8zC9OpgPS1U5YUpbjqTFwishfiwOkwWDOlAXeX2B:HC9OpiS1DUpg+zwkwWDOlAXT","tlshash":"326302f86e743c70bcc6e3be965a2a5565e115b6a2a190f40f9c10834bc670b603bd7f","first_seen":"2026-09-26T07:56:40.803063Z","last_seen":"2026-09-26T07:56:45.208871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/contentnet-landing/static/images/Hansa_1.png","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.787Z","timestamp":1790409357787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/Hansa_1.png HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1691830\r\nlast-modified: Wed, 17 Dec 2025 10:36:37 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1691830,"size_decoded":1692243,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"47ce60531ecb86f5353649428131606f","sha1":"2e57ac38324ce14c35e7a00b02126ebd89622602","sha256":"d68d6d8a40bb2c314da9f2e040d27a292bb4d06b5172b37e5ba06df1e64546f6","sha512":"3b252c96149f8ccf1d0455bcb2552a10f70034cb839fcf1b5a05ca8ff87b084c8415da6c1ee79e86a5dd4321191a989d34d3c4e9332cc6c42437543ef2f743a8","ssdeep":"24576:sBX8FwUL1sqZXBH9AEDVJ5BVFKmorHJ3txfHJcomV9mpYix3KPY:VFwUBs6XNGE/KmIHJ3jmoaGv9","tlshash":"3e2533746197ac16ce822cf76539ac685f2207f419e5985b76838a807bfd8f05cc2b1f","first_seen":"2026-09-26T07:56:40.813718Z","last_seen":"2026-09-26T07:56:45.209501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":2148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c3n.info/contentnet-landing/static/images/Book_N10_Cover_en.png","fqdn":"c3n.info","domain":"c3n.info","tld":"info"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.794Z","timestamp":1790409357794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/Book_N10_Cover_en.png HTTP/1.1\r\nHost: c3n.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2685668\r\nlast-modified: Sun, 01 Mar 2026 19:21:18 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2685668,"size_decoded":2686081,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"fa4ecb79e42d2960a7d0b050b4103468","sha1":"62fdb00d9d0b7b4c4898092cbc02246e9edce0b5","sha256":"0e5a9b5641f1415c519c5cd9d563452fcdd977dd9b6de5ce5f943ada19d6a34e","sha512":"ef5ef57517b406a0847e9cddafc57fbd0dd68e60054ac67d0ad6210b871e0bcad86b60581927a689d75286a32eb2a8abd8735f92b2a1a9fc895dc7093334f2bf","ssdeep":"24576:YveNb5pxxgszaydO5qm5U0Qxwh5iCKWg2ffqVDyY:riK0mGu2Ub","tlshash":"622523baac72ab27cac0e4bcd97024f43d3acd30463486a4c5758455f90597a8f64fde","first_seen":"2026-09-26T07:56:40.798725Z","last_seen":"2026-09-26T07:56:45.210097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1804,"timings":{"blocked":7,"dns":118,"connect":66,"send":0,"wait":203,"receive":1476,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"c3n.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c3n.info/contentnet-landing/static/Books/Book_Constitution_Noosphere/Book_Constitution_N.png","fqdn":"c3n.info","domain":"c3n.info","tld":"info"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.798Z","timestamp":1790409357798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/Books/Book_Constitution_Noosphere/Book_Constitution_N.png HTTP/1.1\r\nHost: c3n.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 3476889\r\nlast-modified: Tue, 10 Mar 2026 12:59:41 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:57 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3476889,"size_decoded":3477302,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGB, non-interlaced","md5":"5083a6940645ae0166000f6ca4cf8e08","sha1":"ee8cdba7de1b184175256ff0ac23372de68af47e","sha256":"c143b2502d6cc0c267579f542d4eb1bb3f576d1b3adfbe38485c9bbcec32156b","sha512":"db5e618e8bd64e5f78b5db106313f663cb2c44a3a14b4b631191563a6c65b1d2485ec34bd8531fc356c1a4ecb59f445842c3fec9cb11acb1b1ca22965ac541d2","ssdeep":"24576:QsTI6DdUEEVIZWrJ54x8i6xa7//00USJAJgVn4hoPCf:zTI6WEEVIwNNgRB54hoPm","tlshash":"502523d07cba6712e9ddcef0f05e0caebed5f726346ce578024a186e99441580bd82f4","first_seen":"2026-09-26T07:56:40.805816Z","last_seen":"2026-09-26T07:56:45.210667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2538,"timings":{"blocked":7,"dns":119,"connect":55,"send":0,"wait":203,"receive":2209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"c3n.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.net.ua/contentnet-landing/static/images/bg.png","fqdn":"content.net.ua","domain":"content.net.ua","tld":"net.ua"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:57.977Z","timestamp":1790409357977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c2n.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 08:11:05 GMT","end":"Fri, 11 Dec 2026 08:11:04 GMT"},"fingerprint":{"sha1":"1C:DF:59:72:95:05:67:41:C7:67:B5:61:60:13:D6:6A:9C:D2:56:A1","sha256":"79:87:CD:98:DC:6A:F8:39:E9:24:D2:8D:F9:32:A9:8F:8C:D7:A1:7E:F2:CD:D5:DD:96:CB:18:2D:45:70:16:5C"}}},"request":{"raw":"GET /contentnet-landing/static/images/bg.png HTTP/1.1\r\nHost: content.net.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://content.net.ua/css/style.css?104\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 26 Sep 2026 07:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1027695\r\nlast-modified: Fri, 19 Sep 2025 16:32:14 GMT\r\nexpires: Wed, 25 Nov 2026 07:55:58 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1027695,"size_decoded":1028108,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGB, non-interlaced","md5":"b9f816d61d14054973c54c3f8b64892f","sha1":"291b7254c549e68064a362611e60864f053363d0","sha256":"eea34d46ce33e5a8fdfd13f44b0d8e31952b79d66a92e2f426ad543d4aee33cd","sha512":"12929c84555cbd558ea3b7c2ebb74adf4f12393b5ed5ae8c2d957ac657f1218e68cc8e7f4659b4097b4b34f1cf1175269f54f2e26f5adb0ad848cd86a34a2ec1","ssdeep":"24576:CJ0bY9k1D/eO2PR3lIRT+/+uyFIDkqqVmboan9/jm/d5h71KBuVc:CabPBefZlOT+EFqqEoan97m/d5h5lVc","tlshash":"cb25331ac71f83a5de258d1cd94abdf58d273c3caa93664c7396dc2cce998a84f058c1","first_seen":"2026-09-26T07:56:40.818036Z","last_seen":"2026-09-26T07:56:45.211365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1688,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":1470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"content.net.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://content.net.ua/","date":"2026-09-26T07:55:58.030Z","timestamp":1790409358030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://content.net.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:23 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 403355\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-26T13:45:16.641997Z","times_seen":563957,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":14,"connect":45,"send":0,"wait":32,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
