{"report_id":"34bd63d6-59b1-4806-af29-9220b5098b53","version":0,"status":"done","tags":[],"date":"2026-10-08T15:15:39Z","url":{"schema":"http","addr":"rberthelette.com/","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":0,"asn":63410,"as":"PrivateSystems Networks","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rberthelette.com/","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"title":"RBerthelette.com - Home","dom":{"size":15960,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (519)","md5":"f24fa76f5ee14c1d1ed398002bcde70f","sha1":"992cc56b8f0bbfca0580ce97f55cdd3fdfbbf702","sha256":"aeacac92e33d362409f5107b31950b28c04fcf6e40873777b5c8463030004eb6","sha512":"396e604c8e8e2070f05fcd2b8629e32aafaf10b9149b6889721e67b5b28a60442b8b2c6cbd08fc0ef24410bb0af17507e0f2ed9b5745bfd966773736b027997a","ssdeep":"192:DjKwZ/6ewraCLLFMmc+RtJpZL5kvFigU4wji7m6i9LQJ+0AHDX:DFZ6ewHLRwK/m7Jcz","tlshash":"f962a704a6c42b1f67120581e7155de81ad3a19bd3628904fa9f713f1f8cacbad376ac","dom_hash":"domhashfae7f81157c490ebb5d05c4eef63bd90","first_seen":"2026-10-08T14:57:12.176817Z","last_seen":"2026-10-08T15:15:41.034428Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rberthelette.com/","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":0,"asn":63410,"as":"PrivateSystems Networks","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T15:15:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rberthelette.com","ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"domain_registered":"2003-03-23","domain_rank":0,"first_seen":"2026-09-16T19:00:31.583582Z","last_seen":"2026-10-08T14:57:10.761947Z","alert_count":60,"request_count":30,"received_data":392139,"sent_data":15431,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"DreamWeaver","description":"Dreamweaver is a development tool for creating, publishing, and managing websites and mobile content.","website":"https://www.adobe.com/products/dreamweaver.html","common_platform_enumeration":"cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*","icon":"DreamWeaver.png","categories":["Editors"]}]},{"fqdn":"opi.yahoo.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1995-01-18","domain_rank":3241262,"first_seen":"2012-05-21T17:20:25Z","last_seen":"2026-10-08T14:57:10.68972Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":563,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rberthelette.com/","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"07c4c0e76590a13b87c642a52dbcc04e","sha1":"bd98b72da720ec0b66d4e7b864b2526c218d438d","sha256":"985e11de6a9f24967ca69574c583585d004c663c57433342f2e707d5c4d3d3ab","sha512":"104551f3bb70daba28dd8465eef352ffcbe9090540b4af3db0e2cabedff71ebbbba278e7e212fa9148dc5723970ffdb0e49975c07f0fb46af30b7b79da1042e8","ssdeep":"","tlshash":"8a312e48cca6303b5b2205688a2f552c35e08787423cd5007b0da0a56f11befde7eacc","size":1874,"data":"","first_seen":"2026-10-08T14:57:12.240323Z","last_seen":"2026-10-08T15:15:41.084492Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c731ef064afa3b90ce200c39d0ddbec","sha1":"fd21ef81ec293d5777ec84e612a81f6e742e74f9","sha256":"80549eaf9bc25bbe888d9d2244291afde9c7a778ea6b1ea6a137a572490cd5a2","sha512":"b2bf570748a4e8504280b5b6674ce411c810008ecbfad6f350f607d58db19ea328fd36758360b72b3553155c558dde2dfbbc289d796cb875a8bac1982cbf2c44","ssdeep":"","tlshash":"7ff09e1d42845f1d4571699f3171c50223da79a88f49f95ee073fe1a58cc20948774f2","size":493,"data":"","first_seen":"2026-10-08T14:57:12.241826Z","last_seen":"2026-10-08T15:15:41.085829Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"4067a8f6368739906272205627bdb0d7","sha1":"f1f0b5a7ae63be3c8957e0fc9c8946ffddab6ea3","sha256":"fa9f4d7c60e78b013e2e8923bf4d0b8d5632a99cc83552486177d8122f8c4fc2","sha512":"4fdd4ec5744121e6f04c2c0c8a7ae6969b4ee469c154b89f12fb73a1675a594b9dc9fa5e86c98a2a752dd0a7c6aadf153cf061d8e31108af5cdf6061d5006b2b","ssdeep":"","tlshash":"9fc02b6c87c0c42bb21093f376013d0827f2450072013000ef68d06947c4d1bc370a76","size":140,"data":"","first_seen":"2026-03-05T03:06:33.155356Z","last_seen":"2026-10-08T15:15:41.087087Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rberthelette.com/Scripts/AC_RunActiveContent.js","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.571Z","timestamp":1791472495571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /Scripts/AC_RunActiveContent.js HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-08T17:34:39.410437Z","times_seen":158257,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/spacer.gif","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.911Z","timestamp":1791472495911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/spacer.gif HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 24 Jul 2025 01:21:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":306,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-10-08T17:48:17.72571Z","times_seen":115761,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/recycle_news.gif","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.928Z","timestamp":1791472495928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/recycle_news.gif HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 24 Jul 2025 01:21:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6747\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6747,"size_decoded":7012,"mime_type":"image/gif","magic":"GIF image data, version 89a, 118 x 96","md5":"8cb767f0806ca3594a467778ef75e7ee","sha1":"b97dcfafb36fdeb613639ad3f70467f6bff124e5","sha256":"bb49735d01ab1b8e0717202a2f0805076da89b0536538044e2ca6f21be07ff2f","sha512":"dbd86d994b34405c6813f2f186970ee1daff62f3ce6141d3fc56147d7c03e2e4b7e5666a751899eb35a683e3da7c2b961c142130fa953783c6732bb5437b4b4e","ssdeep":"192:dKgcSTko7sFO1hkg7ro370ThpXMLyKyAFTL:dKgcfkhNc0lNMqq","tlshash":"dfd18e244ad384c4f523b2de3f6e09458db091b77172e49977420521e4fecb01e6ab68","first_seen":"2026-10-08T14:57:12.236955Z","last_seen":"2026-10-08T15:15:41.039491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_20.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.932Z","timestamp":1791472495932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_20.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1036\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1036,"size_decoded":1302,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 9x277, components 3","md5":"f685b8eee6dee212dd7fe6fdc111e787","sha1":"b03fdb2c9568fd765a251d99c17e0d312d214747","sha256":"ebd5b8e593bc7ca4989aa142c091cb7b5165c966e376a9ab7c9a3c404b7f8f33","sha512":"16085642e7de3b65dfd53d16d6268f0f50dc278df9b4fb02620c9f68ef6b821ac5b2acdb31e3dc10a3713a0d68e063796121a3eb5c14a62987a79e08352a4db5","ssdeep":"","tlshash":"d011c86177ad2c23dcf167b11070935d233c2819f2650f0f458076d36e56363ac65520","first_seen":"2026-10-08T14:57:12.226236Z","last_seen":"2026-10-08T15:15:41.041819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opi.yahoo.com/online?u=mauriceb_2002\u0026m=g\u0026t=1\u0026l=us","fqdn":"opi.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.967Z","timestamp":1791472495967,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /online?u=mauriceb_2002\u0026m=g\u0026t=1\u0026l=us HTTP/1.1\r\nHost: opi.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T18:41:04.501457Z","times_seen":18948806,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_08.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.901Z","timestamp":1791472495901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_08.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 323\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":323,"size_decoded":588,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x25, components 3","md5":"1fb9f93a8766ede1b4cfc0a07f910807","sha1":"304653c4853a31aba65a2004d813a2f9261a4af7","sha256":"ed5dac6cd1f256e602a5e6a3dcc45e82b7f606bac9085fba0d9c8b6138605bd5","sha512":"1266fd6cbb617e69145c2a2203adafa550f45b6e14c1e4928686def46ee334e48df21077a0775d5d573af6f9cd32a0c19980a256518a82f5cc46113cbd558ff5","ssdeep":"","tlshash":"f5e0a737bbe56513fde5193244748749231c6912b6770f0b458274d1bda47829e24d14","first_seen":"2026-10-08T14:57:12.189336Z","last_seen":"2026-10-08T15:15:41.04487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/imgMail.gif","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.913Z","timestamp":1791472495913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/imgMail.gif HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 24 Jul 2025 01:20:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1040\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1040,"size_decoded":1305,"mime_type":"image/gif","magic":"GIF image data, version 89a, 18 x 15","md5":"1bac65b6b4893f9f6c94c8e5f0864004","sha1":"d789c38c4e5896636c19f866ae607ff311f329ea","sha256":"e45ae52a98d630355dc1f369dc0dce069c79f5f07e69c8d48c27e71310e6f702","sha512":"0eae4dad94db7cffb8222b498b247742e4c4af953add44b14ddcd3df8f0fea1a19256eed41a20d02c2d80e5dd9b85d9e9505bfd2c2037ee16bda7c898d637a40","ssdeep":"","tlshash":"6e114406fd180166f7ce21346692cec074df2e2d4f68c9316ace5452e27c6cd20442ce","first_seen":"2026-10-08T14:57:12.23406Z","last_seen":"2026-10-08T15:15:41.046216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_22.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.931Z","timestamp":1791472495931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_22.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14416\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14416,"size_decoded":14683,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 593x114, components 3","md5":"7933c47a890e70b31135c2b94ba50ded","sha1":"556ef4680cec09520073b754e2d85d9c9c3732ee","sha256":"e74a0ab509cc63c1c9c7ec0a5e4ecb2e3c15e5df8c7562b23caba7eaf78f89d8","sha512":"ae55af80126db3fd6a2320a068d403bfe888c84af2892035d814b7e734f65ce54a47fefde4c691a28ff315ebafc3411e001de9b754efdd5bf8ed8176e821b66d","ssdeep":"384:p39u7iPhnhZn90Om6qVvTPJdjdvT9EKPGmzHWc:R9u7iPhnhZn9tm6qVvTPJpdvT9EOGmzr","tlshash":"3d524bde11cc1c7678f85f55fa50ba6d35fcc5907e2ef800a823c8a115b0f88ee195aa","first_seen":"2026-10-08T14:57:12.209006Z","last_seen":"2026-10-08T15:15:41.047682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_02.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.895Z","timestamp":1791472495895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_02.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2904\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2904,"size_decoded":3170,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 502x41, components 3","md5":"d017e616a7eccb8fe09a1345d3ad4ee7","sha1":"0e2bef7d8cbd52fc59b823285b42c68df88a57a3","sha256":"9b184e1463f95d3955c85bae0f3f9de42255cb29e8b83927f8f5697279977d8a","sha512":"2329e2cc514f4b8a4d14cb871df5720e9f56bac7a733e49411bc338a192025c29fd0fb30e0b6c3fec243786814dad9537e49346430941bb71e372288bd2ddad7","ssdeep":"","tlshash":"26511aae97804079feaecc3b815c011dcb8b68aee40a505618e5caf0efd3f95414de49","first_seen":"2026-10-08T14:57:12.183239Z","last_seen":"2026-10-08T15:15:41.049391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_10.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.903Z","timestamp":1791472495903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_10.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 325\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":325,"size_decoded":590,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x25, components 3","md5":"f0667d9ed63a15c0178995ba4d9bc84a","sha1":"396c8555423f6306c4f92179dedce6acc9bc4d8f","sha256":"d33fcb05c19ba88f74ed7845bb686bcc999d11e4fb394d88aa2c60ef011c44ce","sha512":"2744aed6dc79761eed945b32c994ad1198b952a082f2a37f9f7e5cafc4ea2a6028632b0b290e0d750879dde77242774781dd8e1703eb55ac340b377f986e66e6","ssdeep":"","tlshash":"22e0a772b3f47517ece5243680614745271d6a12b5330f0b408234e57da17a34a21d14","first_seen":"2026-10-08T14:57:12.212263Z","last_seen":"2026-10-08T15:15:41.052034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/imgSite.gif","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.912Z","timestamp":1791472495912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/imgSite.gif HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 24 Jul 2025 01:20:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 612\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":612,"size_decoded":876,"mime_type":"image/gif","magic":"GIF image data, version 89a, 18 x 15","md5":"cf8267ebd9cbe077d0da5a33cd85604a","sha1":"17c0aa4d73ec0422c58a0765adc70a032669c69f","sha256":"d2ae2747a62543ef404e7165f87f830bff23fd1f35b944b21c17c4129dbc887c","sha512":"9ea9103a7350d5451e814ff6b247e195ebae518a07c3f559e8fbc44b0006270ef14aec2a3757b6633e56d9f0ef293eac6ac8067249420636aafc5e7890638473","ssdeep":"","tlshash":"8bf023804c44806fe0ef38bda01d4508e3c3da270b3806cf231e913061a83e3cb4c90c","first_seen":"2026-10-08T14:57:12.187523Z","last_seen":"2026-10-08T15:15:41.053495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/red_arrow.gif","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.925Z","timestamp":1791472495925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/red_arrow.gif HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 24 Jul 2025 01:21:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63,"size_decoded":326,"mime_type":"image/gif","magic":"GIF image data, version 89a, 12 x 11","md5":"4250ef7f264ec9ef43fe963dcb15e7e4","sha1":"1e3f76a4676388b034a8a9c28946ed2433e151e7","sha256":"7905c1d743507a91a400394c3c55b04e64b8024fea0914e3bd01886a6112c1aa","sha512":"eaae4cc97c327b369bd35021dc8def1f14a8336dd8e2b72ce4df55bdb9cd4f0a461a05dcaf56ee65f51fbaf7228c8130ae3306dc3fcd8ef9dc4dbf6aac731b0c","ssdeep":"","tlshash":"40a0025ab9e8c6e9c86855741a294651320cd681450812c5540b5448699f1b3252a510","first_seen":"2026-10-08T14:57:12.195744Z","last_seen":"2026-10-08T15:15:41.054849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/imgFisherThumbnail.gif","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.929Z","timestamp":1791472495929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/imgFisherThumbnail.gif HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 24 Jul 2025 01:20:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4831\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4831,"size_decoded":5096,"mime_type":"image/gif","magic":"GIF image data, version 89a, 116 x 93","md5":"092a161ddb7c9022eb816414cc86ec9c","sha1":"ee513a9400e8590eeb0d650d2850ad1d68fb803a","sha256":"791606734c4c4edbba6e2154fa117c902fcd8cbe568f9da9917408bafadd98bd","sha512":"78dd6595dbd7573009ce38660071962db382dba1eabe43708b66aae345995fe3a427019f689270daacafbe73bd1902811adab6f4462a4b3cc24b691174b68134","ssdeep":"96:Okhu2FKZGel/QjkaXXVLjwaSX/N/4x3hYv8hW5UO29Az6U:DhurGSQtXdjVSX/Nwx+0hIv","tlshash":"bda17e3d39094a150243dcb4c4573cf7aa4bdae71af947baa25b7a1e93e78900c34d1a","first_seen":"2026-10-08T14:57:12.229883Z","last_seen":"2026-10-08T15:15:41.056286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":346,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_01.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.893Z","timestamp":1791472495893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_01.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7933\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7933,"size_decoded":8199,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 770x63, components 3","md5":"dee6d79f81e31aabaaac387f0fed09c5","sha1":"ea407220cb050e4598113bf98bdbb78cdb053c17","sha256":"ce12cdf81752c626741e53ed60bd5569395b53b5f57b1cc03920813dcc1720a0","sha512":"10207f07115fb7667bc3825d4040480be71081fc23cc3b90961db0f1a37d5ab367a3432e8dd5aa74f98efb5a049a6c05f5640e3a7bd1795657daa1be946dca22","ssdeep":"192:p0HXCiXFdedhIrHA0BNLZRTj64CDWvF4LXG7fNxwdpTWPd3Xrc:pESiXFd8SrHJBNrTUGOGfNxGWPdrc","tlshash":"bbf15c3c7988bf11bb011ab268fb34ce93c502a17c1a62dd95f227ea27138974845d7f","first_seen":"2026-10-08T14:57:12.23871Z","last_seen":"2026-10-08T15:15:41.057623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_04.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.896Z","timestamp":1791472495896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_04.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2008\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2008,"size_decoded":2274,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 243x41, components 3","md5":"73a079df6d6f03fba46c8ed34603a579","sha1":"89dbb15aabdb5f958ca749622898796ec346b0aa","sha256":"bd5bbe70994c8c0dbf24e0a5535714fa0fa13cde25f686e496092a1aac3a10e7","sha512":"ca815a701f447da90c3e964979fcb1675e99578a1caeeb92edd6ed3fb8b48f79049fb96d41503fef80ed8edc12b1b06c56362d8cdf07ae7bbb4cb1e124a1538f","ssdeep":"","tlshash":"7f41cac906c764c4fa490e7e81dd3a13ec97109ead7712439331b5d275e152f688ed48","first_seen":"2026-10-08T14:57:12.199081Z","last_seen":"2026-10-08T15:15:41.059252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/questionmark.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.915Z","timestamp":1791472495915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/questionmark.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:21:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 970\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":970,"size_decoded":1235,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 180x180, segment length 16, baseline, precision 8, 38x33, components 3","md5":"dd7554cb827a5748d8036d25b2620927","sha1":"076c5a2bc44b67b178be7624cadfce43adc90c97","sha256":"91e5bd5ef36335ba39310b20a3bb194666c7b24f27404b51c5ee2af8093a8ab7","sha512":"cdbf2173fa7cfd3a83e033b9d62bee8fb93921cdd93b06f7fc32bb0afffc5cf8018fc5ff6c1c98c882cfd7e17a7d31b0bb81fe95a17885cf15879d9b7890667d","ssdeep":"","tlshash":"451167298160fd26f4d50978cb7ed1078fccd5c7601b994f38cc74e027735969924998","first_seen":"2026-10-08T14:57:12.235528Z","last_seen":"2026-10-08T15:15:41.06053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_17.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.926Z","timestamp":1791472495926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_17.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9690\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9690,"size_decoded":9956,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 80x671, components 3","md5":"5feca4dcbe15a0969f4f3d522157035a","sha1":"9cbd8628960e38fadb102e98cb64400357fba882","sha256":"16dda9748148c0703457898479b990003cc4e103846d38fadd55e521f599952d","sha512":"c57f52b427448737fffe8cf8ab33d312eda60cef22055c41e575328c5ee8e655ab22e6e4ebd00416880508d679bfcaefb38cea93e6af608514b7c9ddf8f87d4a","ssdeep":"192:pO6QNRjjxRzjxPlKino/mQ/DEUfKQwB7QEKfbHdsI6wnUoddpRd6mws5M:pOpS4EY/KD9/U6dB6IM","tlshash":"97123b5012afff49dc76a4338c19d4353b98950afdf2b0c150e306ee6898a22a3571fb","first_seen":"2026-10-08T14:57:12.202325Z","last_seen":"2026-10-08T15:15:41.062382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/favicon.ico","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:56.428Z","timestamp":1791472496428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 08 Oct 2026 15:14:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-08T17:34:39.410437Z","times_seen":158257,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_05.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.898Z","timestamp":1791472495898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_05.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1769\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1769,"size_decoded":2035,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 475x25, components 3","md5":"46f9c0d08c763b3f71432b7bbf246c07","sha1":"5b24d304244f0dc405a81a02bac6c5547950381f","sha256":"911f5cf9e15dcae73eaa8d4a1e7c1e391bfe03ac1e885736ddf965a1fca24761","sha512":"76f73c1b9e606bf8af415eee905044d90b08d5ae921bd036b4d73edd44568fb594563087d3e884423b720070b5712d31e47ab399fd937b141ff71325ddaed6b6","ssdeep":"","tlshash":"2231f85ec3b1c471fc754c711535c412974caea3b9a18bb726cb53e48ec90416a02be3","first_seen":"2026-10-08T14:57:12.22814Z","last_seen":"2026-10-08T15:15:41.063899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_07.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.900Z","timestamp":1791472495900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_07.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 322\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":322,"size_decoded":587,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x25, components 3","md5":"07e2e416b31bb3cb02a9ef0ced1cf9a4","sha1":"33e21e78184b88abffd3b41a38639592e13de5ed","sha256":"8cca22f22ea49f4c559039a8a890c0ad345352a7558d555b8192b4a9ce6b7ea3","sha512":"6e9299796ed2d39e38262b4ff6eeca70d903c4ccf4978fe6ca7092816e5f3c707c348bb732f2b2502e9110033942783d7967a731d4ff0b6743fb5cd304d0a29c","ssdeep":"","tlshash":"76e09722f3e02807fee50533443a4700231c7a02a5220f4f008238d13ce07d30a20d24","first_seen":"2026-10-08T14:57:12.185266Z","last_seen":"2026-10-08T15:15:41.06568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_14.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.907Z","timestamp":1791472495907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_14.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1078\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1078,"size_decoded":1344,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 162x25, components 3","md5":"7b9cd46972f51efab86153f70c88ee3f","sha1":"6897672e0e5a8dded50da5cee05ac355021292a6","sha256":"0309e0f6b610d75ce65db3403b306e7920a836f36e398883e553fd650f6903fa","sha512":"c194305a0c58c55aa84247f1a68c3840b3201237dd77b619a572182590f599f5535550f525108b6a6060feec1c5677d35734273a2c96145db7d7ae7e667acbd2","ssdeep":"","tlshash":"dd110c72bc7b3941cdda51b0601dc0922f844896d1157b0742f3c1fd3e6335509cf418","first_seen":"2026-10-08T14:57:12.231638Z","last_seen":"2026-10-08T15:15:41.067074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/DSC00091_250.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.916Z","timestamp":1791472495916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/DSC00091_250.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69075\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69075,"size_decoded":69342,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 250x188, components 3","md5":"a06b0eeda51a21fbac4f8638955e029f","sha1":"84262f2f0902167dc98b4622a3d5b42f53cae1dd","sha256":"9c0502307ea1440cc06143edbc4340bd06bd5870b91d7976b00be6b3f64debb8","sha512":"9d95f70fb4be48b85386259b16a3d3dca2b48b980977cc710cd99808133d8f1b994a6d0196c185e34a8fd3950deea7359f15e5fc45d5a86931042c28707c9cae","ssdeep":"1536:4aDZEYZbx/rWhBiHa+jJ6bq5IMT3UmBIXZrndL9NeaiJW4cb:4a9TBxDWhBiV+JL9a+","tlshash":"45631234d23e6a1d770294ab062741b52a4dd74c783b12e0519ca917f3ffe052b75fa2","first_seen":"2026-10-08T14:57:12.216126Z","last_seen":"2026-10-08T15:15:41.068796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/background.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.951Z","timestamp":1791472495951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/background.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 186360\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":186360,"size_decoded":186628,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 710x495, components 3","md5":"6d5fa7ae1314dc018c8ea44fb5c56be9","sha1":"4e2dd5024c0cc94392500b61521c14d98166f39a","sha256":"1fd805a8f09d7b2ab4142479d2eb782dd20e552845b80b4dc99c6a1f4901130d","sha512":"82f50117d013beeb9065c59fc88a461446fa689f00e40b2b8c1db03a29d11f1bf9f44fd89c2717c2caa82cdc091d782558560ff1a1012a538560a552e1c40c83","ssdeep":"3072:r0HaoZ9KQ2KrH4wKgXUrVco5d40wqaOKNJZcA/jV3Ar1lnV6sh3qNwDNfUinob4A:r0yKrH4OaBmVV3CtAsVqNgpfo1","tlshash":"4604237900064009cddcf39a8896637fb47cabb76d55b12ae8b2d7d4a5d58c00ca47bb","first_seen":"2026-10-08T14:57:12.197338Z","last_seen":"2026-10-08T15:15:41.070299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_21.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.952Z","timestamp":1791472495952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_21.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2700\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2700,"size_decoded":2966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 593x23, components 3","md5":"4b3e066a8c55cf33826997d10f386f90","sha1":"0e699637e3dd960c8827f79d78708c7b8b8b5ca8","sha256":"77860348d253b6ec8f70370a6683d6b638ba350bc42e688cb65b73c9249eb83d","sha512":"0da80a3f4cfe9c06fd6f64cabbca38b461d6e7eab249d19ea5f5730cf419bc0c1ff1900e9c665775ac636423ae61039a8862c18ac702a3eefd435e7c61904ce8","ssdeep":"","tlshash":"23515c3d2c5f3866f944757367239e364707440402cb2aabf9be22c27c11bc3c864917","first_seen":"2026-10-08T14:57:12.218564Z","last_seen":"2026-10-08T15:15:41.071463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/stylesheet.css","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.569Z","timestamp":1791472495569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /stylesheet.css HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 03:49:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 270\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1250,"size_decoded":636,"mime_type":"text/css","magic":"ASCII text","md5":"a9e95f7973da1210e71ba50b25126e74","sha1":"8d588e2d57e9f764b89266e1f2569c09e8d7ffaf","sha256":"718b7a26a51480efbf85700433387bfa6eaa52b831035cd2db6114fa169c876f","sha512":"558d97ef4b59c492b1ff1f92f00e4642c6bd064bdc664ca97be3472dbefc07f2e5b0b34c23dad5862ee47d26a84d686d1650c5fb007bc342fce4b4c1fa512a76","ssdeep":"","tlshash":"1a218d05fe080152aa52dc3bf247ef3a760d894a254e57303669ad1ddcdadf2a394b28","first_seen":"2026-10-08T14:57:12.210578Z","last_seen":"2026-10-08T15:15:41.074788Z","times_seen":2,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_12.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.905Z","timestamp":1791472495905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_12.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 331\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":331,"size_decoded":596,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x25, components 3","md5":"82c32a3fb29a45300077367f5f69e708","sha1":"0e9559bce43127b603e533e584c4133296934825","sha256":"db160b48f2e8724b1b8b02c9887ad3182f759ad3eef2a523c79aeb6942dd1274","sha512":"5bd85e59f784965a5bfbf4c71c547012adc3c0ab65e2904f3d8d7fab145c6d1e8f75614097d2439c1ec8159778feea80b857a1948dca1e5494b5413952bf6f6d","ssdeep":"","tlshash":"bce02e26bbe06506ece5083284214752234c3e86a0268f0b408a21e02de0b920a70a02","first_seen":"2026-10-08T14:57:12.200823Z","last_seen":"2026-10-08T15:15:41.076087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/imgHome.gif","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.910Z","timestamp":1791472495910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/imgHome.gif HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 24 Jul 2025 01:20:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 677\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":677,"size_decoded":941,"mime_type":"image/gif","magic":"GIF image data, version 89a, 18 x 15","md5":"4a8725509ba4de0bb9e3b7f26ed60a45","sha1":"85824e9c873ff243e8395399b7a8e5e21ea3f1da","sha256":"ce582038c083a99a89ca4ca1652bd8e7a24f981535ce3dbfa885ffdce1b2073c","sha512":"b5e9a7eaf35678834e8a4c2726fa7bbdbba736492b6524c6021409a8dad52fbde5dd857a1b7ce25696bd7e77dbd6fd36d3fa324eb200dc0784d706aa2aaf9e8a","ssdeep":"","tlshash":"8901230e4f40bbe2f80c54f8a10bd4dc1a565fbd5c79248a480b64c6822b387e1dc7c0","first_seen":"2026-10-08T14:57:12.19397Z","last_seen":"2026-10-08T15:15:41.077428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_15.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.909Z","timestamp":1791472495909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_15.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9533\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9533,"size_decoded":9799,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 80x671, components 3","md5":"4232afcf5825d1c1dd0fd96f674066ec","sha1":"2468d3bfcc4d36c444dad37645fbe068f68d27c6","sha256":"a1c20775e692924c04cac6df723f6f7b2fe041bc0bbae6d4284590bb939f2bda","sha512":"27815726d208cfed2b2d84fa232781ffcc4ac4851b2eb8eb459bd277db83aa6292daa6a44a593d35d4a945cfd8edda83691982614c1a1d651d549f2e42b95cc7","ssdeep":"192:pF0gDtos45YqHytvbHiJp13fv4rpMhuxWJMd:pFxDtos45YrtvbIPv4rEucJA","tlshash":"a6125c7a5b473933c28c3feda038c242aa70e5d57c15e7f94f8582e5795888a32e9274","first_seen":"2026-10-08T14:57:12.213956Z","last_seen":"2026-10-08T15:15:41.078792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/index_18.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.927Z","timestamp":1791472495927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/index_18.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:20:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 776\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":776,"size_decoded":1041,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 8x277, components 3","md5":"61d038edfc0ed0d75c1433fab50555eb","sha1":"906eb80ddcc306bcfe12150f27bc14dd2d274178","sha256":"44271b1a6f6fa8141cbd4603a2aadcb220d0a284d3bc237926989d7edddd7d49","sha512":"2110a487ba1fe8ff291137d56bef0f408e5ea6a1cd6004d21a6deac59226fee6d977a687e4c7a0ca5e4b6984cd109b857a739202f0448a924da009469079bf73","ssdeep":"","tlshash":"e901449377d8b511e9801dba4058974163a44d9493d30f0b549735e23c40fc24792b1a","first_seen":"2026-10-08T14:57:12.224312Z","last_seen":"2026-10-08T15:15:41.080119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/images/technology.jpg","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rberthelette.com/","date":"2026-10-08T15:14:55.930Z","timestamp":1791472495930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET /images/technology.jpg HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rberthelette.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:14:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 01:21:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39142\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39142,"size_decoded":39409,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"AppleMark\", progressive, precision 8, 300x199, components 3","md5":"bcf8eb553b842437176b40a3082c3ce7","sha1":"8224799d4ecfd2c7efc267defa050aba89f80b5a","sha256":"b6da9235a1d0d77a94cbea471b042eca53f3c89abffbc7cfbaff817f5fe35c67","sha512":"d837ab67e522b17267fe5268f2ee39f3cf38691888ce597034f7c55d4302c9021210a2a00946ec0ea8545c4e0ba90890c6881f64b171d9ab33f4f75a2ee699b2","ssdeep":"768:FYyitVWMjfGnR39n6FHNol649qUeHEfjvE4ivWjIOZK/AUPMmfewXAt:F+tUefuRNnA86sqUpyv4ZcAsGwXAt","tlshash":"5103f154dbeeb073ec64563801b64aad83dd4b28fbb5a9903d3d1710035379590882ff","first_seen":"2026-10-08T14:57:12.206168Z","last_seen":"2026-10-08T15:15:41.081381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rberthelette.com/","fqdn":"rberthelette.com","domain":"rberthelette.com","tld":"com"},"ip":{"addr":"158.106.136.107","port":443,"asn":63410,"as":"PRIVATESYSTEMS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T15:14:54.356Z","timestamp":1791472494356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rberthelette.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:09 GMT","end":"Tue, 05 Jan 2027 12:10:08 GMT"},"fingerprint":{"sha1":"E3:68:48:ED:F4:34:1A:EA:E3:75:12:D4:51:6A:1E:73:94:CC:DB:19","sha256":"32:BF:5E:78:0F:62:8A:5E:0C:25:9B:B6:BC:25:CD:46:41:D3:06:6D:00:5F:62:CD:7B:35:31:64:F9:F3:58:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rberthelette.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 24 Jul 2025 01:21:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4093\r\ndate: Thu, 08 Oct 2026 15:14:55 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DreamWeaver","description":"Dreamweaver is a development tool for creating, publishing, and managing websites and mobile content.","website":"https://www.adobe.com/products/dreamweaver.html","common_platform_enumeration":"cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*","icon":"DreamWeaver.png","categories":["Editors"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15690,"size_decoded":4402,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (519)","md5":"2acf4a3b5222095e016104f55181c21f","sha1":"fc89c01ed512f0c7392b4220ac3e4864501ed340","sha256":"5905acf4804786e088baa5527620e2c06502e8c3bc89f376722111225257b5e1","sha512":"128586780056e4fd50b69bc4e35087c85a0a032905a4fac3427ad08bf596a4a2b4fd665e82014a220caa3aea23e8865b433b1c0abe4a66f49b725d400ced90db","ssdeep":"192:pfjKwZ/6ewraCLLFbPsqxjGEw7yrtFt9LIkxFiM40cji7m6i+lQJQrAHE:pfFZ6ewHLRbPsqRGEw7yJqgN8JtE","tlshash":"3a62b84caad47b0f4293d991a2136f541ae3c31ea7158b4472bf71690fc8d83953776c","first_seen":"2026-10-08T14:57:12.222201Z","last_seen":"2026-10-08T15:15:41.083223Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":7,"connect":108,"send":0,"wait":214,"receive":0,"ssl":680},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"rberthelette.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}