{"report_id":"338f49f8-baa5-499d-ae45-1ce19ebb4e67","version":6,"status":"done","tags":[],"date":"2025-09-17T03:29:59Z","url":{"schema":"https","addr":"blockplat-form.net","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":0,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"blockplat-form.net/","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"title":"Message"},"submit":{"url":{"schema":"https","addr":"blockplat-form.net","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":0,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-22T03:29:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-17T03:29:38Z","timestamp":1758079778,"ip_dst":{"addr":"172.18.0.2","port":57392,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 15","source":"{\"timestamp\":\"2025-09-17T03:29:38.180714+0000\",\"flow_id\":2112510453014287,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"91.212.166.122\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":57392,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400014,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 15\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-17T03:29:38.122639+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"blockplat-form.net","ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"domain_registered":"2025-03-05","domain_rank":0,"first_seen":"2025-04-08T10:54:39.607297Z","last_seen":"2025-09-09T23:07:44.904089Z","alert_count":7,"request_count":7,"received_data":40993,"sent_data":3149,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-10T15:27:48.133327Z","alert_count":0,"request_count":1,"received_data":234055,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-09-10T16:13:36.348351Z","alert_count":0,"request_count":1,"received_data":90138,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-17T03:29:38Z","timestamp":1758079778,"ip_dst":{"addr":"172.18.0.2","port":57392,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 15","source":"{\"timestamp\":\"2025-09-17T03:29:38.180714+0000\",\"flow_id\":2112510453014287,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"91.212.166.122\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":57392,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400014,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 15\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-17T03:29:38.122639+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blockplat-form.net/","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d02f646d1b2b3d3bf8f6aa782cf25b0","sha1":"2dc44d787481911ffd90849f7a791fe94f9cfbe0","sha256":"223cd48b2d0e8516049cb2d08620546f0d1c5d430d23bc364fcb85704700be84","sha512":"a21cb5a62580384882089b0919744b5743d0c223c860caeb474bfebc9151ddccba332ec9d688d73f86c5a4d273ceb3c914580cd783cc87bbb4827dccacd23dec","ssdeep":"","tlshash":"1d7000008e328008380a2830e32820000e802c022202e800280ca0800c80082003a0cb","size":24,"data":"","first_seen":"2023-03-14T05:34:30Z","last_seen":"2026-06-06T08:56:38.544859Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/js/redirect.js","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8146555be363dc888daa479106d1afa7","sha1":"1b54605769e60ad7a6b7dec16660419b891e8eec","sha256":"6933cef133e935b36fe7c4353b273ad8826c554bf0add10adc98847d3eb3764c","sha512":"7d8a5fe533c2eeae3ceeb217cd693d3be27fbb481a7b23820e416522f591fdc8b8d954516ea3b6d8c3f0c92db57f95b900fc4bf3406d6683c94faef446f68815","ssdeep":"","tlshash":"8c41294c20fb921c711a2c783c4f09096d714013655cea967b9cc3d42f7d92faab599f","size":2141,"data":"","first_seen":"2025-02-11T17:08:01.753735Z","last_seen":"2026-02-26T15:38:43.604881Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-10T08:51:51.249786Z","times_seen":497270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0db5d65dc2008180d9fd4a64f47556b","sha1":"3d3b25c3b8a5eb667efc88f766847bddb95d9ea4","sha256":"3cbdbec9f624bd96decb49ac3edd729d644ea9063074a5258aed5f14c7020ad6","sha512":"451651bd03b71cac50788e6ef040573782bc917051b569c57aa55b7845581a32293e000772b9c2720cfc7498cc7864d03c6febccd3e2b72fd1452f694a3d21b3","ssdeep":"","tlshash":"0b51a745759632b9013ba6bba36760085a39103b385eca44b43f164c5fe2219c7b779f","size":2585,"data":"","first_seen":"2025-02-11T17:08:01.754831Z","last_seen":"2026-02-26T15:38:43.608239Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blockplat-form.net/","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-17T03:29:38.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockplat-form.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 02:30:51 GMT","end":"Wed, 03 Dec 2025 02:30:50 GMT"},"fingerprint":{"sha1":"E9:3E:6F:4C:DF:54:14:B3:46:01:7E:1E:C9:7F:19:73:C1:DB:71:DC","sha256":"0E:E6:0D:0F:41:4C:33:5C:2D:4C:7B:F8:CB:94:A0:8C:F2:1E:5A:13:82:3D:8D:85:DB:0B:E9:FA:75:F0:7C:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: blockplat-form.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:29:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":11441,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b420916b5fe2f2dae7d457350ec233cd","sha1":"ed4c21a6ab270df73b1485f71c2dc41262dc0cde","sha256":"b4c33f046c3ab6dd2adc45298795aef23b7869cb39978c644a91fc58d5c67d4f","sha512":"e2f2d9e8175f895b315fea921ff271b60c4ed8c06dbe0129adacd3dc46bdf10300c6c6fe7c8720bcb6dc40fda7abfef2651583fea4affbd3cfde0b34abea737a","ssdeep":"192:E+ieL1wf36KFrFSFl94rFSoyp+jl6C6uTrytmIZOPaM:D4FrFSFMFYQjlMunGM","tlshash":"2b326345a9f32196206380ba7bf326052fb58027d50ecaa47bbd528ccfc6599c97338d","first_seen":"2025-02-19T13:01:31.485023Z","last_seen":"2026-02-26T15:38:43.60309Z","times_seen":21,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":125,"dns":3,"connect":58,"send":0,"wait":71,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://blockplat-form.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Sep 2025 03:29:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33186\r\ncf-ray: 980585380dfe56a3-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230033-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 655293\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L59MKpZEzJVaWH7NZAvVA8b8V1FB9pVkEHqFR8cHVPlRS6mEKwci7VMelB3%2F5Nq4y3oGF0MVUK3jXbHzb9FfkXIF963GD56%2BaKyDsy2FnhDSDVv4kSwUGA6NUD5KlX1x%2Bwg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-10T08:53:46.109959Z","times_seen":18713,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":54,"dns":10,"connect":1,"send":0,"wait":11,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/img/logo_pds.jpg","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockplat-form.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 02:30:51 GMT","end":"Wed, 03 Dec 2025 02:30:50 GMT"},"fingerprint":{"sha1":"E9:3E:6F:4C:DF:54:14:B3:46:01:7E:1E:C9:7F:19:73:C1:DB:71:DC","sha256":"0E:E6:0D:0F:41:4C:33:5C:2D:4C:7B:F8:CB:94:A0:8C:F2:1E:5A:13:82:3D:8D:85:DB:0B:E9:FA:75:F0:7C:84"}}},"request":{"raw":"GET /img/logo_pds.jpg HTTP/1.1\r\nHost: blockplat-form.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:29:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3254\r\nLast-Modified: Tue, 18 Feb 2025 07:49:53 GMT\r\nConnection: keep-alive\r\nETag: \"67b43ba1-cb6\"\r\nExpires: Thu, 18 Sep 2025 03:29:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 245x45, components 3","md5":"5e1f1de3eaa072f2f2f165d2677161b8","sha1":"1b700d795a4f50386b73b5be73d6243f799dc69f","sha256":"35161097de7a97e6516ee1b8aa1fa9d6daa16195abef518242144c2c99e9a94f","sha512":"b3368f3c460632379cc43a9dc10bfde82b5924047218f1c8c304dc823b3be8324ed126ad821083603fafbf6c56abc393cc6dd95f0d04655ddbb3d0cdc206230e","ssdeep":"","tlshash":"fc612b5d2e419f27fad2de76b2ff40666356a4035d630bcd28b269845d21d2ebc9033c","first_seen":"2025-02-11T17:08:01.745332Z","last_seen":"2026-07-14T22:34:24.797825Z","times_seen":75,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":159,"dns":8,"connect":62,"send":0,"wait":60,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/favicon.ico","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockplat-form.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 02:30:51 GMT","end":"Wed, 03 Dec 2025 02:30:50 GMT"},"fingerprint":{"sha1":"E9:3E:6F:4C:DF:54:14:B3:46:01:7E:1E:C9:7F:19:73:C1:DB:71:DC","sha256":"0E:E6:0D:0F:41:4C:33:5C:2D:4C:7B:F8:CB:94:A0:8C:F2:1E:5A:13:82:3D:8D:85:DB:0B:E9:FA:75:F0:7C:84"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: blockplat-form.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:29:38 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 9662\r\nConnection: keep-alive\r\nLast-Modified: Thu, 20 Feb 2025 20:51:32 GMT\r\nETag: \"25be-62e9909f21d00\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"62f73885181b37b8b3a5321a1acb6994","sha1":"8c0aff34504b2f0b94055c56437dd62490cfaa08","sha256":"637ce20f86f025fcd5fc46d66d116ee20f639f4adb1f70fe0b31944cc997576f","sha512":"9836668fe2da669abf6a2f1314e53b55d44647612cfc191a42f65987c66c2546fd43c95d56811eac9e70702761dd89be8e5136ccec91888f09c6374f6f165756","ssdeep":"96:9F6MvBmHU6sn9maVlgqQ7jYQARZMxxJIW/0nKNcn:L6Mv8HU6sn9maA7jYQATMxTcn","tlshash":"4412f91e3521fd8de7454830db438ab12d149e39dd264d4af3aebacfa7cee388591424","first_seen":"2024-06-04T09:42:01Z","last_seen":"2026-07-14T22:34:24.793686Z","times_seen":87,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/js/redirect.js","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockplat-form.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 02:30:51 GMT","end":"Wed, 03 Dec 2025 02:30:50 GMT"},"fingerprint":{"sha1":"E9:3E:6F:4C:DF:54:14:B3:46:01:7E:1E:C9:7F:19:73:C1:DB:71:DC","sha256":"0E:E6:0D:0F:41:4C:33:5C:2D:4C:7B:F8:CB:94:A0:8C:F2:1E:5A:13:82:3D:8D:85:DB:0B:E9:FA:75:F0:7C:84"}}},"request":{"raw":"GET /js/redirect.js HTTP/1.1\r\nHost: blockplat-form.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:29:38 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 18 Feb 2025 07:50:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67b43bc7-85d\"\r\nExpires: Thu, 18 Sep 2025 03:29:38 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"8146555be363dc888daa479106d1afa7","sha1":"1b54605769e60ad7a6b7dec16660419b891e8eec","sha256":"6933cef133e935b36fe7c4353b273ad8826c554bf0add10adc98847d3eb3764c","sha512":"7d8a5fe533c2eeae3ceeb217cd693d3be27fbb481a7b23820e416522f591fdc8b8d954516ea3b6d8c3f0c92db57f95b900fc4bf3406d6683c94faef446f68815","ssdeep":"","tlshash":"8c41294c20fb921c711a2c783c4f09096d714013655cea967b9cc3d42f7d92faab599f","first_seen":"2025-02-11T17:08:01.753735Z","last_seen":"2026-02-26T15:38:43.604881Z","times_seen":27,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 17 Sep 2025 03:29:38 GMT\r\nage: 2472819\r\nx-served-by: cache-lga21931-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 1211953\r\nx-timer: S1758079779.657541,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-10T08:51:51.249786Z","times_seen":497270,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":126,"dns":21,"connect":26,"send":0,"wait":26,"receive":8,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/img/notific.gif","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockplat-form.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 02:30:51 GMT","end":"Wed, 03 Dec 2025 02:30:50 GMT"},"fingerprint":{"sha1":"E9:3E:6F:4C:DF:54:14:B3:46:01:7E:1E:C9:7F:19:73:C1:DB:71:DC","sha256":"0E:E6:0D:0F:41:4C:33:5C:2D:4C:7B:F8:CB:94:A0:8C:F2:1E:5A:13:82:3D:8D:85:DB:0B:E9:FA:75:F0:7C:84"}}},"request":{"raw":"GET /img/notific.gif HTTP/1.1\r\nHost: blockplat-form.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:29:38 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7312\r\nLast-Modified: Tue, 18 Feb 2025 07:49:53 GMT\r\nConnection: keep-alive\r\nETag: \"67b43ba1-1c90\"\r\nExpires: Thu, 18 Sep 2025 03:29:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7312,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 330 x 240","md5":"707f3d5b6149179c28cba47333d4de9b","sha1":"24ece78d1ce9d28431ed23b2efdc677cfa22cab5","sha256":"fe7c5d0e3aa0266f1b2606dea7f5fb6cb4a3527509bff5c6ce5e8e57d8d8c24d","sha512":"fb3b444a74b614a3332adcbf8f51337177bcd276a5d8a8b99694e1f9b682fedd4c9673f472424ef069ca8b7e01fc9b8f3f39ff38bdad7b6b082f1b6886f2f2da","ssdeep":"192:Hj2E/7ywlAq5BdThcWlVzlUCP88HLLo15:D2Ky+R5DLfj8+e","tlshash":"35e1af1df0c392115988bdc34da398678dae10c106e2f357988768375eb5429930bfeb","first_seen":"2025-02-11T17:08:01.744055Z","last_seen":"2026-04-08T16:12:11.338707Z","times_seen":45,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/img/btcIcon_35.png","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockplat-form.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 02:30:51 GMT","end":"Wed, 03 Dec 2025 02:30:50 GMT"},"fingerprint":{"sha1":"E9:3E:6F:4C:DF:54:14:B3:46:01:7E:1E:C9:7F:19:73:C1:DB:71:DC","sha256":"0E:E6:0D:0F:41:4C:33:5C:2D:4C:7B:F8:CB:94:A0:8C:F2:1E:5A:13:82:3D:8D:85:DB:0B:E9:FA:75:F0:7C:84"}}},"request":{"raw":"GET /img/btcIcon_35.png HTTP/1.1\r\nHost: blockplat-form.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:29:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 3280\r\nLast-Modified: Tue, 18 Feb 2025 07:55:50 GMT\r\nConnection: keep-alive\r\nETag: \"67b43d06-cd0\"\r\nExpires: Thu, 18 Sep 2025 03:29:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"5fb938d08ae4478c3d3d0f0230d0723a","sha1":"94b179486196172be6f069efd55bec371d11015f","sha256":"bb2cfc74a00c219baceef436f3c08f80ad3d414b38a9cb9d6c86f4bea511b385","sha512":"1a3937f88129974f9f5ba9cbc685fc41afd72f2ffeaab2810f59221de1977802c147c5d45b88b28820fcd933555dc17118083d6897a2bb23ca97e0150ed2a338","ssdeep":"","tlshash":"58612b01fc238e85d5639e423cd652659364c940dfe4f098628be45e2c748fa4a7d6cb","first_seen":"2024-10-14T16:49:20.308062Z","last_seen":"2026-07-14T22:34:24.788943Z","times_seen":98,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":149,"dns":6,"connect":58,"send":0,"wait":58,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockplat-form.net/img/garniterW.png","fqdn":"blockplat-form.net","domain":"blockplat-form.net","tld":"net"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockplat-form.net/","date":"2025-09-17T03:29:38.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockplat-form.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 02:30:51 GMT","end":"Wed, 03 Dec 2025 02:30:50 GMT"},"fingerprint":{"sha1":"E9:3E:6F:4C:DF:54:14:B3:46:01:7E:1E:C9:7F:19:73:C1:DB:71:DC","sha256":"0E:E6:0D:0F:41:4C:33:5C:2D:4C:7B:F8:CB:94:A0:8C:F2:1E:5A:13:82:3D:8D:85:DB:0B:E9:FA:75:F0:7C:84"}}},"request":{"raw":"GET /img/garniterW.png HTTP/1.1\r\nHost: blockplat-form.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockplat-form.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:29:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 1890\r\nLast-Modified: Tue, 18 Feb 2025 07:49:53 GMT\r\nConnection: keep-alive\r\nETag: \"67b43ba1-762\"\r\nExpires: Thu, 18 Sep 2025 03:29:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 94, 8-bit/color RGBA, non-interlaced","md5":"52042d1d7f062225127b97fe4ee8e534","sha1":"284ce6725b8d6cacb21f471271431bcdc44bb17e","sha256":"7f459004407caab96418d89ad4bc6302071b36924af3d3e72c38f1e1a0578ab1","sha512":"abacfa7c57439c892c1ea735b58d0a9e2257529902fbf3a8b31fa1e3743f010ea5fd4a42ce5549ddfabcb51143ae91dff31617b30ce258249c2d83b6d3c3d13d","ssdeep":"","tlshash":"8741f9c8e375b5bd90fd5297565cc090aae4e2c88ef85e76441996244130f0cecf9684","first_seen":"2025-02-11T17:08:01.748679Z","last_seen":"2026-02-26T15:38:43.606832Z","times_seen":38,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":198,"dns":5,"connect":98,"send":0,"wait":100,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockplat-form.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}