{"report_id":"4c0b20eb-bbd1-4e1b-af39-21801a8198f6","version":0,"status":"done","tags":[],"date":"2026-10-03T16:42:40Z","url":{"schema":"http","addr":"case-x.online/","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"http","addr":"case-x.online/","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"title":"Кейсы — CaseX","dom":{"size":3337,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1439)","md5":"978e14555edd2632ce850de51993336d","sha1":"d38d2c720e89c2a3bae2822395f586eee054f10c","sha256":"078b0b47f7db45f63dc43fcdb7e22474f29015fa4eec1c9a516ab9678656dca7","sha512":"c57d6b4438137eb2e69f4730d13e07dfbbaeee9da9e08097a3c5ee04f8af132a31496e60a90d2530b4c8aae8bae367087fe3ba3e5f765e7ca15df3b0cda9b691","ssdeep":"","tlshash":"b661662152ee25fb373b60d6bcd66b8d70d2442bd6630e1066fc4adf5bfac18620b401","dom_hash":"domhash6b600aaafcd6643e571595cdcb5664c1","first_seen":"2026-10-03T16:42:50.616894Z","last_seen":"2026-10-03T16:42:50.616894Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"case-x.online/","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:42:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"case-x.online","ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-09-30","domain_rank":0,"first_seen":"2026-10-03T16:42:17.6721Z","last_seen":"2026-10-03T16:42:17.6721Z","alert_count":11,"request_count":11,"received_data":12699190,"sent_data":5265,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"case-x.online/assets/js/app.js?v=1790892117","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"080d21b91fcd5e11f7c2d9130aac0df7","sha1":"73c8e745170a4b0fb02553d1d0d48991e1755be7","sha256":"8be6ac35b30f56655672e0d2a91cd3be620128506dde7a3d438631f33b2c9a17","sha512":"ed76c8ae26704ada5d5fe107a32839bce82e1d9a73f728d5f5173e0eb308a7eb97f554853665fee0fed5d968f5c277f48d70f2ddd0e239a3e3ec62a5f6e25830","ssdeep":"96:R2B30OSZe+UlfOfuGrCP5prW37H2lrmAzCqhZEE+2DGEoMWEawkEdFDRJj1l6:UB32ZVfVrK5lW3TVAzhZ1KXrdwkUJjT6","tlshash":"54d152ae25bf10364277317b7bcf61423635101b7446ce9d3eac8b801fc2964a5e6de9","size":6671,"data":"","first_seen":"2026-10-03T16:42:50.620972Z","last_seen":"2026-10-03T16:42:50.620972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"case-x.online/favicon.ico","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:11.559Z","timestamp":1791045731559,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: private, no-cache, no-store, must-revalidate, max-age=0\r\nPragma: no-cache\r\nContent-Type: text/html\r\nContent-Length: 1251\r\nDate: Sat, 03 Oct 2026 16:42:11 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1638,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-03T21:33:35.023878Z","times_seen":157533,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:42:10.587Z","timestamp":1791045730587,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nX-Powered-By: PHP/7.4.33\r\nset-cookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9; expires=Mon, 02-Nov-2026 16:42:10 GMT; Max-Age=2592000; path=/; HttpOnly; SameSite=Lax\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1423\r\nContent-Encoding: gzip\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9","quoted":false,"path":"/","expires":"2026-11-02T16:42:10Z","raw_expires":"Mon, 02-Nov-2026 16:42:10 GMT","max_age":2592000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"casex_session=c96247724f5c6dbbbfe66f7fe2841fc9; expires=Mon, 02-Nov-2026 16:42:10 GMT; Max-Age=2592000; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3346,"size_decoded":2059,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1453)","md5":"5d1db73bf293b666bdca7f8aa5c2ed5e","sha1":"f042455a9a1def7fe2067effbf9785699681dfdb","sha256":"a2b9f75f25d04cb7ee684e3169ef211dcda0c4db2713ff487f3aa5a87d448c3e","sha512":"368b4f18eca0ee75e26800d12f0e053c3c3374d22d951165a4ebf5d4d58b2f14b3a1e1f5942f501647cea4c80b5d26af5e1e3b23c66ffe31de6b432347e0f8f1","ssdeep":"","tlshash":"3761672151ed25fb373b60d6bdd66b8d70d2452be6530e1066fc4aef4bfac08620b401","first_seen":"2026-10-03T16:42:50.618561Z","last_seen":"2026-10-03T16:42:50.618561Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":3,"connect":55,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/assets/css/app.css?v=1790892117","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.832Z","timestamp":1791045730832,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/css/app.css?v=1790892117 HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Sat, 10 Oct 2026 16:42:10 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 01 Oct 2026 22:01:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nContent-Length: 8539\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32219,"size_decoded":9022,"mime_type":"text/css","magic":"ASCII text","md5":"767cdcd922c5c3f2827511c6f60a8592","sha1":"4a900bb4680dd3bce41a8d054ef8d871915f7040","sha256":"9d7a2cf3e38f3fb4fb4251c5144034b322e57046a00ba6cbe8f7b897b7c8ee0e","sha512":"c34a29ac9633547a1711048a7579e13723318e04e6d555f42a3b109a6a02cdfe830235e443d316d0a11f1db2dceca22c1df006e60d25c633bef72ba6287058f3","ssdeep":"768:MH+JeDQVSFE56RdOMclFQmeFoAZ/3NFMGwGk:MH+Je8VSFEcoaZ9pwr","tlshash":"06e264b267280618b42be598b992df46a39dd053920fcf7c5be4208c8ec91ed9173f5d","first_seen":"2026-10-03T16:42:50.619708Z","last_seen":"2026-10-03T16:42:50.619708Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/assets/js/app.js?v=1790892117","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.834Z","timestamp":1791045730834,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/js/app.js?v=1790892117 HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/javascript\r\nLast-Modified: Thu, 01 Oct 2026 22:01:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nContent-Length: 2283\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6671,"size_decoded":2694,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"080d21b91fcd5e11f7c2d9130aac0df7","sha1":"73c8e745170a4b0fb02553d1d0d48991e1755be7","sha256":"8be6ac35b30f56655672e0d2a91cd3be620128506dde7a3d438631f33b2c9a17","sha512":"ed76c8ae26704ada5d5fe107a32839bce82e1d9a73f728d5f5173e0eb308a7eb97f554853665fee0fed5d968f5c277f48d70f2ddd0e239a3e3ec62a5f6e25830","ssdeep":"96:R2B30OSZe+UlfOfuGrCP5prW37H2lrmAzCqhZEE+2DGEoMWEawkEdFDRJj1l6:UB32ZVfVrK5lW3TVAzhZ1KXrdwkUJjT6","tlshash":"54d152ae25bf10364277317b7bcf61423635101b7446ce9d3eac8b801fc2964a5e6de9","first_seen":"2026-10-03T16:42:50.620972Z","last_seen":"2026-10-03T16:42:50.620972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":59,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/assets/images/x-coin.png","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.843Z","timestamp":1791045730843,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/images/x-coin.png HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Sat, 10 Oct 2026 16:42:10 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 01 Oct 2026 22:01:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1402012\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1402012,"size_decoded":1402452,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"acd3e4e365165023b0c38ffc2a4afbda","sha1":"e2706594312437aa497b5a57a0a5f35a4304df4e","sha256":"7ba6894ac6a7f142cf4e6c5e1bb9e3e9c5b6d5740e648b0a7a24328bfeb32ab9","sha512":"55e2d8d5a7b1bb93d73a7d6be5d2928f30e2fa55250271c38541df083fd4c73a04a0f6649dfba72d7f8843961fb26028d96469d1611ebc5f2f259b74ea582883","ssdeep":"24576:2dHbHr4j8uGRauesAJfqICC7NaIlFH+z66b955fR3Akglr:oL43GRaxsAJiICCRawRQ6EsN","tlshash":"d62533875d52734deaef87f0ceda0b912dc0f9b68d9060860299a7458864f4c39eb73d","first_seen":"2026-10-03T16:42:50.622194Z","last_seen":"2026-10-03T16:42:50.622194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":40,"dns":0,"connect":67,"send":0,"wait":61,"receive":501,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-x.online/","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:42:10.420Z","timestamp":1791045730420,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/uploads/c70e905370c70e9c96c64c3478f080d482d58e1a.png","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.841Z","timestamp":1791045730841,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/c70e905370c70e9c96c64c3478f080d482d58e1a.png HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Sat, 10 Oct 2026 16:42:10 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 30 Sep 2026 22:02:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2726774\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2726774,"size_decoded":2727214,"mime_type":"image/png","magic":"PNG image data, 1385 x 1136, 8-bit/color RGBA, non-interlaced","md5":"308baa80c92a64e89a07be23c4267d8e","sha1":"375b8b185034ebd6c8875156f475198701983751","sha256":"148d889cad1fb7458c9a53e37816d16c23db08a67f725ab19d479764931bd8b4","sha512":"131078c250d718ca2e5c761df266d6934cff12b1f946e720eec408f38f89ce4b5e530f260f1d81ee1804afa7d6af8aab77ae88bb39497823ba8bde7804ac72e5","ssdeep":"24576:rYOQiPg8lmH2S3coNiZVZ68z2HyFilCx5Q9:U7iPg/2S3coNiZV48eCU9","tlshash":"1425237fc280c7b5ed5342b30369a64482507b9bd3764bb0149ef37e59307abb06978a","first_seen":"2026-10-03T16:42:50.624089Z","last_seen":"2026-10-03T16:42:50.624089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":40,"dns":0,"connect":67,"send":0,"wait":60,"receive":418,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/uploads/b701109757489391ff055f6041c111657a2d0c85.png","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.844Z","timestamp":1791045730844,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/b701109757489391ff055f6041c111657a2d0c85.png HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Sat, 10 Oct 2026 16:42:10 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 30 Sep 2026 21:59:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2751588\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2751588,"size_decoded":2752028,"mime_type":"image/png","magic":"PNG image data, 1385 x 1136, 8-bit/color RGBA, non-interlaced","md5":"56419df7a58eda7364e950d22320eb6d","sha1":"d5e9ca49f579ce1857a0a7827bc93573f4c16de8","sha256":"9779ddfd97aa88ace8c614024fc53078afae1950a9a9c3aa4513a3094f57050f","sha512":"0fce4442d526af68ac947bc2cf91798ae581c4103fa07f1a27fe1dc688400ac1cff1142c79309cfe136aeafc83572357a917fca858081a8f1d862ce52bfec4a5","ssdeep":"24576:Qsq94TPBaHX/5dadETCGg3jnN00Hd8E5xaXVY58:PqaTPMhdadETC13jNBqJ","tlshash":"132533e0de80cff4dd207a60137a92484b8b5a94636b8f95c474a20d6b69b4f5ec3fd4","first_seen":"2026-10-03T16:42:50.627133Z","last_seen":"2026-10-03T16:42:50.627133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":40,"dns":0,"connect":51,"send":0,"wait":52,"receive":513,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/uploads/6a545df1f8cb69972fe3f02af17ddea7836823ae.png","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.845Z","timestamp":1791045730845,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/6a545df1f8cb69972fe3f02af17ddea7836823ae.png HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Sat, 10 Oct 2026 16:42:10 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 30 Sep 2026 20:46:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1484660\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1484660,"size_decoded":1485100,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"e208d37bc0954806df634f41e8ddf1f0","sha1":"9c4b28e85d3cfae01f19ce8a050114f5da8b2499","sha256":"eb6f2c521d303df9fbd4bbc2bee5b1b9e4c619dc3608608679d77b1efb2a6b1e","sha512":"a19831dd57da5e4800d64798cc2454d4b906f5d86ce003cfcaab3522047a1b394c912125d4d8c31f1e727506e0aae41ec6a377a68b7a75172ca85296f31a546c","ssdeep":"24576:1TED3gWNgDNoiMl440L76orngx8ccT5ZKWIZYzqzB0h6kElAUxQh6Nv:l0TNOHJ3L76orgx/WA8qzB0h6kGRfv","tlshash":"bc2533553317e969dfcf96b128608179439320b59e63afb8e43c4f8ee1e564d138a3c2","first_seen":"2026-10-03T16:42:50.628828Z","last_seen":"2026-10-03T16:42:50.628828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":62,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/uploads/7f4e54ddd71458c8a234c3a66eb1555004d79aba.png","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.846Z","timestamp":1791045730846,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/7f4e54ddd71458c8a234c3a66eb1555004d79aba.png HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Sat, 10 Oct 2026 16:42:11 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 30 Sep 2026 20:32:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3081345\r\nDate: Sat, 03 Oct 2026 16:42:11 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3081345,"size_decoded":3081785,"mime_type":"image/png","magic":"PNG image data, 1385 x 1136, 8-bit/color RGBA, non-interlaced","md5":"0147dff5f560bd9f2c895ef53f891293","sha1":"9e71f2cd3d1cdd46ab6c62fcfe4042a78659026c","sha256":"ae42889871c47c1b8d8af03fd320d876b1929647e294d3efe9d5b33b4aa2202f","sha512":"9ae2a854644d7c6f87932f2cc430c5402941aba239bc3e7b1f34ce03ecd7e0255b9989d417fedd25f9c51ea5de8d0a6b1e1aa8e45069800f6e4bc363c2d9ccbd","ssdeep":"24576:Xx/Xo60oX0O5skAKpOJlTUGgLuhCnN+K/YL:hPo6b0Otp0ZgyhLK/YL","tlshash":"712523a6d49ac6bbbd43d86f55c304c88935854a379073a30af1ce8f9e136f984b47b1","first_seen":"2026-10-03T16:42:50.630036Z","last_seen":"2026-10-03T16:42:50.630036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":59,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"case-x.online/assets/images/casex-background.png","fqdn":"case-x.online","domain":"case-x.online","tld":"online"},"ip":{"addr":"45.94.156.222","port":80,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://case-x.online/","date":"2026-10-03T16:42:10.912Z","timestamp":1791045730912,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/images/casex-background.png HTTP/1.1\r\nHost: case-x.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://case-x.online/assets/css/app.css?v=1790892117\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: casex_session=c96247724f5c6dbbbfe66f7fe2841fc9\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"casex_session","value":"c96247724f5c6dbbbfe66f7fe2841fc9"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Sat, 10 Oct 2026 16:42:10 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 01 Oct 2026 22:01:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1204767\r\nDate: Sat, 03 Oct 2026 16:42:10 GMT\r\nServer: LiteSpeed\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1204767,"size_decoded":1205207,"mime_type":"image/png","magic":"PNG image data, 1672 x 941, 8-bit/color RGB, non-interlaced","md5":"41055a0fac4fe4c2bdcc7a58c6cd3176","sha1":"5d6d265e130c4f23fbb2b0dd890e357941e07c45","sha256":"ace98dc1df7992179397704b9c43be5ff4a34b03178ca46ed7e6244758c157b3","sha512":"3ed83685516d79c2661ffcb935ef730676f73a230169141204e204f0aa9b597615eb0fe6644b0453ceb21093c2cc652425504287bab3a42f296621dbb299c810","ssdeep":"24576:lGbBTRUeKEhFYU9ywKrALtnm43XZj4tP67tGbxUlgwdtancxOyEC:Yb5RfhPKrWm4j4tPCUUlhdtancx5","tlshash":"012533d6cbe07486cd505dfc9d23747ecb01b13e7c29b6e85415d92a08b0b926c5bf4a","first_seen":"2026-10-03T16:42:50.633864Z","last_seen":"2026-10-03T16:42:50.633864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":54,"send":0,"wait":59,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"case-x.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}