{"report_id":"3a686b7e-3765-4d75-82bb-1526fdc8a17d","version":6,"status":"done","tags":[],"date":"2025-12-06T02:42:17Z","url":{"schema":"http","addr":"contactbase.site","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":0,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"contactbase.site/","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"title":"ContactBase","dom":{"size":2544,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2092)","md5":"f13b3220df36d11d7a267a411b86c103","sha1":"481a032e512300723c0faf6e9bdbb59d13da7e1f","sha256":"99f7523973900e421a1f7fdf9bc138f64fe7aa398b6605a2103c96575ba3b41c","sha512":"c3b381bc2902b6989e0f2461c4b5b6688d80a0903b8c6f9cdd3d8bc86781ddc19aa171b538438834afd3269fe83ea5b823e6a77f284602b4af4ac356391c2522","ssdeep":"","tlshash":"125195212090327f8567cd1cb9d0f10a7b8ec235c537e41ba5ea116f2fd3581ca428f4","dom_hash":"domhash436b4c54754c5207eb56a45f5aabe5c5","first_seen":"2025-12-06T02:42:23.968107Z","last_seen":"2025-12-06T02:42:23.968107Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"contactbase.site","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":0,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-10T02:42:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"contactbase.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"contactbase.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"contactbase.site","ip":{"addr":"195.161.114.166","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"domain_registered":"2024-04-10","domain_rank":0,"first_seen":"2025-12-06T02:42:17.948575Z","last_seen":"2025-12-06T02:42:17.948575Z","alert_count":10,"request_count":5,"received_data":231392,"sent_data":2206,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"contactbase.site/assets/index-CHcRKC2a.js","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"66ade0452d565520ada17a906d3298ca","sha1":"aab00d11aba2dca3828b3b23e48c4fc503ccbd0b","sha256":"e6fbb65d3c83e0f11a5182fee526328d5fb15ec378f7a483a11cbd3fe544f8bd","sha512":"0bea87dc563132806cf9a7ec51469938f89b5306d71b807b256af9f6a4f2253717f0512d6af23100ed8d4887bc6ce1d5d614b87386794a94c76a0e83d490c472","ssdeep":"6144:TQo7eYWKOCWKemz1aoy8S9Smbu1LWvt8iyrkB/qOjUi:kKeYWKOCWKemz1aoy39q1LWvaQ/qOAi","tlshash":"0d143ac931ca757a5adf46d6d0768106f33d28c9740e8094f93d8dae3a2284581b7fae","size":207302,"data":"","first_seen":"2025-12-06T02:42:23.980543Z","last_seen":"2025-12-06T02:42:23.980543Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"contactbase.site/assets/index-BJAB5_j2.css","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contactbase.site/","date":"2025-12-06T02:41:57.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contactbase.site","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 14:12:43 GMT","end":"Wed, 04 Feb 2026 14:12:42 GMT"},"fingerprint":{"sha1":"A9:33:34:9A:2E:5E:C8:5F:0D:77:31:88:F0:EA:10:F9:A9:21:EF:14","sha256":"06:18:50:83:77:77:83:76:7C:F9:F8:EC:E4:3C:A5:74:E5:20:8A:C7:F3:15:B2:31:1B:F2:62:05:70:7F:87:C7"}}},"request":{"raw":"GET /assets/index-BJAB5_j2.css HTTP/1.1\r\nHost: contactbase.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contactbase.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css; charset=utf-8\r\netag: \"slcwtzg3u\"\r\nlast-modified: Mon, 14 Oct 2024 17:34:47 GMT\r\nserver: Caddy\r\ncontent-length: 20874\r\ndate: Sat, 06 Dec 2025 02:41:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20874,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20873)","md5":"85e043eab9e8c5962d877f27d218f973","sha1":"e9d42428a689631606aeb7537e51669dd9b286fb","sha256":"17ef246eeb495a78a2bbe3185d9a94b3327199be8558657993fb13967acce89a","sha512":"c220b9ad10995c9bec70a8c6d4d340272f8eab1b56746ee2d4cc1bb8a5f984120b3dca8bc3a526b09dbc8d29ec2b056908e01d761d8a22196b2efd3391f925d9","ssdeep":"384:5wJmzGoIapK0PX/hrMvC/YcN6p4CjdtgNC:XtIur4C/YcN6p4gkNC","tlshash":"0c92821aaa16653e2c1784fdc2d8b6cd7119f0c0ee3e87f67a9751213bc22b65ee7104","first_seen":"2025-12-06T02:42:23.972244Z","last_seen":"2025-12-06T02:42:23.972244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"contactbase.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"contactbase.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contactbase.site/api/user/me","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://contactbase.site/","date":"2025-12-06T02:41:57.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contactbase.site","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 14:12:43 GMT","end":"Wed, 04 Feb 2026 14:12:42 GMT"},"fingerprint":{"sha1":"A9:33:34:9A:2E:5E:C8:5F:0D:77:31:88:F0:EA:10:F9:A9:21:EF:14","sha256":"06:18:50:83:77:77:83:76:7C:F9:F8:EC:E4:3C:A5:74:E5:20:8A:C7:F3:15:B2:31:1B:F2:62:05:70:7F:87:C7"}}},"request":{"raw":"GET /api/user/me HTTP/1.1\r\nHost: contactbase.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://contactbase.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Sat, 06 Dec 2025 02:41:57 GMT\r\nserver: Caddy, uvicorn\r\ncontent-length: 4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-05T23:05:30.540298Z","times_seen":281530,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"contactbase.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"contactbase.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contactbase.site/vite.svg","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contactbase.site/","date":"2025-12-06T02:41:57.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contactbase.site","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 14:12:43 GMT","end":"Wed, 04 Feb 2026 14:12:42 GMT"},"fingerprint":{"sha1":"A9:33:34:9A:2E:5E:C8:5F:0D:77:31:88:F0:EA:10:F9:A9:21:EF:14","sha256":"06:18:50:83:77:77:83:76:7C:F9:F8:EC:E4:3C:A5:74:E5:20:8A:C7:F3:15:B2:31:1B:F2:62:05:70:7F:87:C7"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: contactbase.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contactbase.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/svg+xml\r\netag: \"slcwty15l\"\r\nlast-modified: Mon, 14 Oct 2024 17:34:46 GMT\r\nserver: Caddy\r\ncontent-length: 1497\r\ndate: Sat, 06 Dec 2025 02:41:58 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-08-05T19:54:03.091584Z","times_seen":6332,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"contactbase.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"contactbase.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contactbase.site/","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T02:41:56.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contactbase.site","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 14:12:43 GMT","end":"Wed, 04 Feb 2026 14:12:42 GMT"},"fingerprint":{"sha1":"A9:33:34:9A:2E:5E:C8:5F:0D:77:31:88:F0:EA:10:F9:A9:21:EF:14","sha256":"06:18:50:83:77:77:83:76:7C:F9:F8:EC:E4:3C:A5:74:E5:20:8A:C7:F3:15:B2:31:1B:F2:62:05:70:7F:87:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: contactbase.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\netag: \"slcwtzcq\"\r\nlast-modified: Mon, 14 Oct 2024 17:34:47 GMT\r\nserver: Caddy\r\ncontent-length: 458\r\ndate: Sat, 06 Dec 2025 02:41:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":458,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8113079d45d85974ab67a3e86c2aadb1","sha1":"9e5e81b32aa64888e682bc9d1b85b9db0ff10140","sha256":"a59409bada76876532a949e46e7f9125f9631164eee1bfce51cf884dbc2f0b44","sha512":"a78d614c59070abea577a27152b127538cf4febdd241b4b1c4c8286f47f962f32b8a9be86bedb91a831c08a47f6647cd87b98bd016fd09492cf420117dda1d02","ssdeep":"","tlshash":"42f05c4598e08a1a423043506dc1f4185946eb878349ae4875fb607d0fc4bc6cedf8bc","first_seen":"2025-12-06T02:42:23.978401Z","last_seen":"2025-12-06T02:42:23.978401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":341,"dns":72,"connect":130,"send":0,"wait":130,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"contactbase.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"contactbase.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contactbase.site/assets/index-CHcRKC2a.js","fqdn":"contactbase.site","domain":"contactbase.site","tld":"site"},"ip":{"addr":"195.161.114.166","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contactbase.site/","date":"2025-12-06T02:41:57.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contactbase.site","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 14:12:43 GMT","end":"Wed, 04 Feb 2026 14:12:42 GMT"},"fingerprint":{"sha1":"A9:33:34:9A:2E:5E:C8:5F:0D:77:31:88:F0:EA:10:F9:A9:21:EF:14","sha256":"06:18:50:83:77:77:83:76:7C:F9:F8:EC:E4:3C:A5:74:E5:20:8A:C7:F3:15:B2:31:1B:F2:62:05:70:7F:87:C7"}}},"request":{"raw":"GET /assets/index-CHcRKC2a.js HTTP/1.1\r\nHost: contactbase.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contactbase.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"slcwtz4fye\"\r\nlast-modified: Mon, 14 Oct 2024 17:34:47 GMT\r\nserver: Caddy\r\ncontent-length: 207302\r\ndate: Sat, 06 Dec 2025 02:41:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":207302,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50180)","md5":"66ade0452d565520ada17a906d3298ca","sha1":"aab00d11aba2dca3828b3b23e48c4fc503ccbd0b","sha256":"e6fbb65d3c83e0f11a5182fee526328d5fb15ec378f7a483a11cbd3fe544f8bd","sha512":"0bea87dc563132806cf9a7ec51469938f89b5306d71b807b256af9f6a4f2253717f0512d6af23100ed8d4887bc6ce1d5d614b87386794a94c76a0e83d490c472","ssdeep":"6144:TQo7eYWKOCWKemz1aoy8S9Smbu1LWvt8iyrkB/qOjUi:kKeYWKOCWKemz1aoy39q1LWvaQ/qOAi","tlshash":"0d143ac931ca757a5adf46d6d0768106f33d28c9740e8094f93d8dae3a2284581b7fae","first_seen":"2025-12-06T02:42:23.980543Z","last_seen":"2025-12-06T02:42:23.980543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":523,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"contactbase.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"contactbase.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}