{"report_id":"320b3b36-d5b0-4289-bd1d-214e877ee52e","version":0,"status":"done","tags":[],"date":"2026-10-04T05:25:57Z","url":{"schema":"http","addr":"capikcutikkwhi.com/","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"capikcutikkwhi.com/","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"title":"C Editor - Cinema Video | Free Video Editor Online","dom":{"size":56539,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16258)","md5":"36b395be23d9bd24f8a7c2fe609aa399","sha1":"7c72d623c25c0014c94331bdd112a43ff1382013","sha256":"0db589fa5e97ad11c42760a5943722e6e305c1fa4f3fcc93f52e40ce8c898ef1","sha512":"8a945de24cef94f6abe212ed42ea92f5bc1193bf5493c09afb1e133b9b2acf0e0500e4a9340852365b5908d68f70a7c9976a08f8cb13d0aec0aae7f98b517b42","ssdeep":"768:7TthnFuhR9az9B0SM3o98Y3Zq5xLrJlKpEbQm22FOQJlJ:VhoIonYJkxLr2pCQm22FOQJlJ","tlshash":"3943fa3aa3a0026e189380f2f7427b36b62dd687eb5f85a8f5dd05506fc3d568d53384","dom_hash":"domhash3244885432ccfc0af530358617f6fd14","first_seen":"2026-10-04T05:22:17.812464Z","last_seen":"2026-10-04T05:25:59.589215Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"capikcutikkwhi.com/","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T05:25:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"capikcutikkwhi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"capikcutikkwhi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"capikcutikkwhi.com","ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-10-02","domain_rank":0,"first_seen":"2026-10-04T05:22:13.249067Z","last_seen":"2026-10-04T05:22:13.249067Z","alert_count":6,"request_count":3,"received_data":128446,"sent_data":1531,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-09-28T10:09:50.813298Z","alert_count":0,"request_count":2,"received_data":408699,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-10-04T08:34:34.60176Z","times_seen":56897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capikcutikkwhi.com/","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3adf3040a61c16b9766842f9fdf7777","sha1":"8845e40ac4781503c0eb11714aa17f24bada518b","sha256":"d61669181d425e5a8cb7c4a1e94117e65afca39b474e2c2648cf679df17ce56a","sha512":"bb0b8c84b8f51f822129d5192de3c3c4462f873c3a1f617f8aa2e4efd02c218d025d4295fc3cb44e924ce731991fd6f6105ba23853163b3b735c43cb4c5a2e1e","ssdeep":"","tlshash":"1cc09b5d4db54737051b6d55c34c4051bb5d505b6c1c7d7bbd4c10019f48108c8e9760","size":179,"data":"","first_seen":"2026-10-04T05:22:17.820977Z","last_seen":"2026-10-04T05:25:59.59347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capikcutikkwhi.com/","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff130aa8ddd8483421c483bcbc76467f","sha1":"4db0979f2a8055f3a2849143772788119725e5a2","sha256":"70ba17d888973272912f3dae29f9f6f47e817c98707d35191f23bff83cb5ec82","sha512":"5f9295054a07e77a131024003b53d9e7c02e33752945238de0389ba3f7a2160e80204d97dd32edd2edba575d7e36a985a0d3c2dfa11f555109bd1e3386044b9b","ssdeep":"","tlshash":"60f0591b7abe157945e778b9168f6b59703280014008ca0ab9b889605fa6e471db2acf","size":504,"data":"","first_seen":"2026-10-04T05:22:17.822497Z","last_seen":"2026-10-04T05:25:59.594138Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"capikcutikkwhi.com/","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T05:25:25.671Z","timestamp":1791091525671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capikcutikkwhi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 14:45:00 GMT","end":"Thu, 31 Dec 2026 14:44:59 GMT"},"fingerprint":{"sha1":"5E:E6:36:68:E6:1B:A6:8C:8A:5C:4A:06:9D:DF:01:51:A0:9E:59:00","sha256":"2B:ED:8B:12:BD:31:8D:CB:15:87:09:0C:5E:B0:2C:DC:B9:AC:6F:82:97:AB:FF:4B:19:64:11:6B:F4:74:E7:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capikcutikkwhi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 05:25:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 9179\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.4.26, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":40155,"size_decoded":9411,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (467)","md5":"6ddcc30c6090f516e561ea885be3308d","sha1":"90e59ac6ab16ecdf3f839cbbf3c8a89ed0fae26d","sha256":"b07c1ea33e48caea2015c52e7c07f4fe796547e88482b21d42e810ca28a0651d","sha512":"62eea45632f5394da52bae37ab3bfe05628415f957fdc5ae6a8e7baf0f274ed692c187d06d22a546960e2c14b8fd3474fee3850a1a7497e5af1e0b97cec3f3fd","ssdeep":"768:FTe960Sj339zYcqqfosGJQjpEbQm22FOVqlV:UlodyaosGYpCQm22FOVqlV","tlshash":"b003a735a3b0126e50d38472fb427b366a6dd60be68fc468b6ec45a02fc3c59ce53394","first_seen":"2026-10-04T05:22:17.817561Z","last_seen":"2026-10-04T05:25:59.590352Z","times_seen":2,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":4,"connect":105,"send":0,"wait":383,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"capikcutikkwhi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"capikcutikkwhi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capikcutikkwhi.com/","date":"2026-10-04T05:25:26.760Z","timestamp":1791091526760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capikcutikkwhi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 04 Oct 2026 05:25:26 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::rqmf7-1791090966619-ec47e47020ca\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 560\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FbKk2PU8Wk7WWooSztFur1AO2vsY8LoLyP1LBdTcBk00gJcCpOckeXiYesQr8b26q34WKlM0mf4KIYyJ%2F8ecp5nL0SB2DXtQmznm43nbGtAW34eSjYI7azXTRe1sXcRlNFT5Bc%3D\"}]}\r\ncf-ray: a451c41a5f3a1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-04T08:32:37.178647Z","times_seen":18821723,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capikcutikkwhi.com/images/hero.jpg","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capikcutikkwhi.com/","date":"2026-10-04T05:25:26.766Z","timestamp":1791091526766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capikcutikkwhi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 14:45:00 GMT","end":"Thu, 31 Dec 2026 14:44:59 GMT"},"fingerprint":{"sha1":"5E:E6:36:68:E6:1B:A6:8C:8A:5C:4A:06:9D:DF:01:51:A0:9E:59:00","sha256":"2B:ED:8B:12:BD:31:8D:CB:15:87:09:0C:5E:B0:2C:DC:B9:AC:6F:82:97:AB:FF:4B:19:64:11:6B:F4:74:E7:E1"}}},"request":{"raw":"GET /images/hero.jpg HTTP/1.1\r\nHost: capikcutikkwhi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capikcutikkwhi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 05:25:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86790\r\nlast-modified: Fri, 02 Oct 2026 13:06:48 GMT\r\netag: \"6abfac68-15306\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86790,"size_decoded":87042,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x720, components 3","md5":"bf3b002f3a581f445a7e5e0b9b0ea365","sha1":"0c396e261f14045f722efd8b202f97095b98a683","sha256":"1a526203f9da691e56dffb390ebb9658a1d093eae11925f5640f4b51cd4fd22d","sha512":"9a07ecf685351a0d22d4bb44075382dcbc001f5c4c57ece473d369c2e28dff49a93f70757c43cf677a6acbf66196e16dda45e7726ec6c3430b49a6f066218d06","ssdeep":"1536:wWVGsW5cUUMfO+te7AlaujOJZBdvEdJf7vaKwttLZoqZbMr9yquEFtkfcwBnkuR:7yFWqe74V+4JTGtthZb8FuEzkfcwBkuR","tlshash":"36830272a7749a23c23c527a154a3bc3519a7151f849eef963c1c207ac7aedcc70ab15","first_seen":"2026-10-04T05:22:17.81389Z","last_seen":"2026-10-04T05:25:59.591666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"capikcutikkwhi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"capikcutikkwhi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capikcutikkwhi.com/","date":"2026-10-04T05:25:26.794Z","timestamp":1791091526794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capikcutikkwhi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:25:26 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 5931786\r\nlast-modified: Thu, 24 Sep 2026 02:54:13 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWL%2FH21BD9ch8szPj8xJ05c86xr4fIPX9LMfMw3h4Y3bKFXx2qYsJNsrRC8w6mkuZGSPakfjnexGkEs8Hm3avRHfKBvwXMEbmiHcnT85rpqj28fVLmuv%2B0UDS4hl1J8RmKQJo%2Bc%3D\"}]}\r\ncf-ray: a451c41a7f691a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127120,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-10-04T08:34:34.60176Z","times_seen":56897,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capikcutikkwhi.com/%7B%7Bfavicon_file%7D%7D","fqdn":"capikcutikkwhi.com","domain":"capikcutikkwhi.com","tld":"com"},"ip":{"addr":"158.94.209.113","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capikcutikkwhi.com/","date":"2026-10-04T05:25:27.243Z","timestamp":1791091527243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capikcutikkwhi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 14:45:00 GMT","end":"Thu, 31 Dec 2026 14:44:59 GMT"},"fingerprint":{"sha1":"5E:E6:36:68:E6:1B:A6:8C:8A:5C:4A:06:9D:DF:01:51:A0:9E:59:00","sha256":"2B:ED:8B:12:BD:31:8D:CB:15:87:09:0C:5E:B0:2C:DC:B9:AC:6F:82:97:AB:FF:4B:19:64:11:6B:F4:74:E7:E1"}}},"request":{"raw":"GET /%7B%7Bfavicon_file%7D%7D HTTP/1.1\r\nHost: capikcutikkwhi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capikcutikkwhi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 05:25:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 02 Oct 2026 15:42:37 GMT\r\netag: W/\"328-65cdd61b9b4c0\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-10-04T05:26:49.043364Z","times_seen":39431,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"capikcutikkwhi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"capikcutikkwhi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}