{"report_id":"51da5a8c-3c68-40bb-aa45-1bfe1ed3231f","version":0,"status":"done","tags":[],"date":"2026-09-13T18:53:00Z","url":{"schema":"http","addr":"lobicon.com/","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":0,"asn":46606,"as":"Unified Layer","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lobicon.com/","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"title":"LOBICON-Heavy engineering \u0026 Business Consultant","dom":{"size":18203,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (503)","md5":"13f05d892fcff979f2ab772e4b976096","sha1":"40b4e9143d75f7122178dee958fdf8498c435bf5","sha256":"b585ad2b5d17ad7640a3f726e8c696aba4c57e34d3882129f040cc6bc89eff40","sha512":"d7809a2e9c6991da306958af9dd41de51603f161bec438bcba54ceecc5b545918a681c57560c0cfdc1295e3fa3ff0a281332cf2656c550d009d86f34720498ba","ssdeep":"384:UlXgh9wUO0OgOhvME4OL3KMW+IWQbLihRMdRM7RMRFQWXknUCfJ1PnxBj:4XxT64DxV","tlshash":"7a824365a38d4cbf020302da6561afd9b4ef8f32d76b89e1f2ff42441382c85562725e","dom_hash":"domhash47f5b79bd647e9bff891e63ad43bd29a","first_seen":"2026-09-13T18:43:03.370337Z","last_seen":"2026-09-13T18:53:03.347968Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lobicon.com/","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T18:53:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":1,"received_data":129165,"sent_data":563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":1249,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-09-07T08:45:35.661166Z","alert_count":0,"request_count":1,"received_data":87643,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lobicon.com","ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2020-03-13","domain_rank":0,"first_seen":"2026-09-13T18:42:57.652711Z","last_seen":"2026-09-13T18:42:57.652711Z","alert_count":81,"request_count":27,"received_data":3389961,"sent_data":13511,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T02:30:55.000878Z","times_seen":103147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/js/material.js","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1b203c88fcbabd498bf188630e701e2","sha1":"2f135f5a4e914c53c6b222b86d7d0a68685b9f38","sha256":"ff8332d0095be9709e726627832ce8c82ed3e36cb46339ae7d4d6d960a391966","sha512":"9f7b2e34c96764aad0e636c578992ef311e4b02b8a7063184553899082b28f40d891f08c6829c3257bf3f50a89601f23b71b76cc92a7ac77be908748f63d9dbe","ssdeep":"768:siweSLD6ptu5go+fZmDVn80R/515z4r7q2i77rnJEzNqXn4eiEZcsHZ:wYtu5go+BgnlprJEhpEZfHZ","tlshash":"e6430949b2e13062452b717a43ef410ab279449bd50ecd547c4ceac86fac93c52bbf9d","size":57072,"data":"","first_seen":"2026-09-13T18:43:03.396811Z","last_seen":"2026-09-13T18:53:03.374479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/js/bootstrap.js","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"babf4cb0330c0687d0332bce58dffe14","sha1":"aed4007e298dd94a0acf81602022f93bed44727f","sha256":"3bcd01f7e93c9000f22df7d2b451106674f1014f7566bc866d478ac313b4b773","sha512":"52cf22fae9e4b79e7fd1406f6a2f8c635c9f5786541af4eed9e28e2c60d27f2fdad7d9726e01a5c71dc5331389fed03713573fa8b1ffd13a1e50bff579feffab","ssdeep":"768:JVWBKXn4e+f7r5PX8oyjYG0Zlz/OFuEneNEKeOJdKMnnuCV2Trgb8rcz7HYq26U4:JVCJf7rZnyjYGVxSKs4rgHAq2UlD","tlshash":"dda3330a3efa2492416bf03e8bdf5005f634548b5a0dda047c5caad86fe453857adbbc","size":99753,"data":"","first_seen":"2023-03-08T16:10:38Z","last_seen":"2026-10-13T08:53:50.601489Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9aeae4579c8c12aabfd0b54c2940b3e","sha1":"96e0f8672ff3e163da3b92e20508594682b3742d","sha256":"68e9f29e764d8b9f39779cf595538539524b6e19bc76715cafb7ce46f97ef561","sha512":"42a8b4b60c626496ea132105df76c41c053e7429474ea192a977046575b51aa79214551e731788312fc0705aead56e7a9f5052c31092a6ecbd4909570726611b","ssdeep":"","tlshash":"69a00264b9ec650528172260193b5688762ebd152701507581bf70680f19625552ec1c","size":65,"data":"","first_seen":"2026-09-13T18:43:03.438318Z","last_seen":"2026-09-13T18:53:03.375331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"53135579a37ef1ffc176ab5d22f3e7af","sha1":"8babbeefec2c5163a7cd92e998954f3718da3072","sha256":"54be8a4dd0406f05e8dd4341eeb301f54bef4e92fbaad7b605330b7704e2aee9","sha512":"bafd756300ab6f8aa82f8a65453d8959955d1f2981c5cfe9bc3161e56ca0c01450d5b3411207a4eb43ea888c1f92a98b1acb18b00d5b27d12b5464ef6f49e3d7","ssdeep":"","tlshash":"44e0c20eab9cb1190eb9747b2a2a05ed31ec66444a008c098d8ac9696564fea4698b98","size":310,"data":"","first_seen":"2026-09-13T18:43:03.440052Z","last_seen":"2026-09-13T18:53:03.376183Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lobicon.com/images/orc2.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.837Z","timestamp":1789325548837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/orc2.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Apr 2020 09:58:45 GMT\r\naccept-ranges: bytes\r\netag: \"3464604cd58d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 1034553\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1034553,"size_decoded":1034832,"mime_type":"image/png","magic":"PNG image data, 1200 x 500, 8-bit/color RGBA, non-interlaced","md5":"a53cfd77445ef98fe7447bd7700612ee","sha1":"f4e764234866fd6bf03ebe7bc04e3fcdabbc8e09","sha256":"de7fb715bc2dc6d087f8b3558eeaf0f6d89910013e3ebb92f772bc3264ee2bb1","sha512":"ca997f2139bf59c0b9f977e44d4f05966931944dce0d628915b8ccd04f3444413429123b569a705be308cb400890ddb64a7c68403d94d33a0aebf95bda799180","ssdeep":"24576:PZDQ2fLwd6tYzwoV4DyKppFUe+5UC3Aw5hOL7OZpY3FpQe7:dhwItjuXe+Gq75ho90U","tlshash":"8d25337bac53d0314649e8ca3356d943a9f31f59b2e01bab19b2ccc61bc6ec5ad5c8c4","first_seen":"2026-09-13T18:43:03.388156Z","last_seen":"2026-09-13T18:53:03.350754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":721,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/green1.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.846Z","timestamp":1789325548846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/green1.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 02 Apr 2020 11:40:38 GMT\r\naccept-ranges: bytes\r\netag: \"6daaf87e38d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 11345\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11345,"size_decoded":11622,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 271x186, components 3","md5":"72cd439f2e628002c873d863aae51373","sha1":"d17abcdb45f808de2117cf815b06a6ea0f9656f5","sha256":"daf0c4af9f6bd909550d9d53e5c62e9475b8b51d85116217d6a08fa4f711c0a8","sha512":"13c9ae3d651b12aaab33ef166f35ab3cc2eb9d80377428b86b2a9178a9e1f218802c8a932c929cdd638813bd238d178a9a03f7dad5e811013e8d6c488d97ddf2","ssdeep":"192:qw3wgEmjHuKpvy0ecxxKwFhqIHjpStwzIHG23yF8w2mIIbZYyMFFKg:p3FEwvyLDwCI9SOIBCO9y6","tlshash":"d232bf0a6e9e8b078402d070d59327b4f950c5966f05dde658c7f620cbba753a30f9ce","first_seen":"2026-09-13T18:43:03.415736Z","last_seen":"2026-09-13T18:53:03.352132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/Disclaimer1.Jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.851Z","timestamp":1789325548851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/Disclaimer1.Jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 02 Apr 2020 12:17:24 GMT\r\naccept-ranges: bytes\r\netag: \"3537e2aae88d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 20227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":20227,"size_decoded":20505,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 500x178, components 3","md5":"4669847aab9c0eec039bb68649d7d234","sha1":"b39fb125e2bb2ea95f2bdfc072ec3bc3c9c7a2bb","sha256":"1c338e9c36c1d55f510ec66593dfe99cad7d9583469d9149cca1e1f6531351b0","sha512":"c39a34cfd98b4439802c2952d3c9628d6ed10ecdb62965bbf7d7884e27b8bf8953056b3ea5a984d702f893c8de30fc1d0713c0a3c6a6052fe248eaeb7aab9d5e","ssdeep":"384:i0wgm791OIQbBler0sACcjid+JB7tR19IJDeMHr50dihi/gNGcfJ3m6jWT:iH7jO7Cr0sACcji6BpR1uJvhiogcf1v4","tlshash":"e892be179a119ec2e089dbf8b7b68c924b23635ae3433df661530e96b6d46036c8916c","first_seen":"2026-09-13T18:43:03.379417Z","last_seen":"2026-09-13T18:53:03.353075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/microsun1.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.856Z","timestamp":1789325548856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/microsun1.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2020 00:58:02 GMT\r\naccept-ranges: bytes\r\netag: \"363837ed529d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 45189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":45189,"size_decoded":45466,"mime_type":"image/png","magic":"PNG image data, 400 x 200, 8-bit/color RGBA, non-interlaced","md5":"8e164898daffb1a1c1e3d7276e13e225","sha1":"52412c098ed41cfce271b494a743871a7baf5504","sha256":"f168b19c58b7b4b2b961fbe255c4948ef1a5616bfb1bf9d28f352a8539d11946","sha512":"07de4bcd50413e3407ab2286bf524b481e331e4b78ac92e774feced2147febd9b9ab155af03bbe25dc8a3c498caf3d73c9d9473b7f0722672d885c6c0864e3b8","ssdeep":"768:8uHS3x4VaI0wKobT/dCmZw7Sq8IBH2eCxXqzlAEJIMe490UjMd7O:8uHSh7w1Zu7SqP2xXqzl1Jjp0mX","tlshash":"3113f1a839428f3dce3edda81d073533844d29f548225aa7febc8997647db2048cc55d","first_seen":"2026-09-13T18:43:03.389581Z","last_seen":"2026-09-13T18:53:03.353884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/consulting1.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.845Z","timestamp":1789325548845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/consulting1.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Apr 2020 11:31:01 GMT\r\naccept-ranges: bytes\r\netag: \"81561e30e28d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 12261\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":12261,"size_decoded":12538,"mime_type":"image/png","magic":"PNG image data, 265 x 190, 8-bit colormap, non-interlaced","md5":"eb2d3781d7c5f19cc409fbfa55eff40e","sha1":"3ec0f498e2af0f448d9317abd907e8403b315614","sha256":"2fcef0a86a7c87ef07e09fd163eb083217de865985e34eda094a18ecfba05818","sha512":"f37c9c21c63f1b20422ca387b2a693fbf66281a5172bfe77c0966c22d9b2f39b89500873391e3b9b6e9c484fc2a1d223c7904786148fd98597e62ff682b30147","ssdeep":"192:2Sg/3klRuXPSMHGXnVbNPEmyZ2EAvGlsqNiQopAO15zZHtZseLObmnkCNrRtAWk8:jdRufXHenbPEmyIPvYiQ+5zZNZ3LPkCn","tlshash":"e142d09f81ce47c6ecd49335ac1b68e8a9725c1fe26add4b240ab230ec2635834f3535","first_seen":"2026-09-13T18:43:03.41279Z","last_seen":"2026-09-13T18:53:03.354675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/IT.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.848Z","timestamp":1789325548848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/IT.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2020 22:59:42 GMT\r\naccept-ranges: bytes\r\netag: \"45f8fe3a798d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 11178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11178,"size_decoded":11456,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x168, components 3","md5":"572f542d85f23fbfc47ca47f01043467","sha1":"346b6923cd52d1524dfac09b99906e837632d5fd","sha256":"341566edd642e515fa54f62f7d6736e7cbd9213a236a7ec9a31976009aa0690c","sha512":"a62037aa60fde89d7ec291b7d76225853d127062ef932a35035225b769bbac841300e090d46a05fc72da246324d046a933318fd50dec5c0e98098f61bfb8cb59","ssdeep":"192:qc7//LYnuQ7bou8vwgDDWR3aT+LW/grTs+8vph5qxjfbzFSGc1rSWcyGncwEbNzS:TBQP/+w+DWY3orY+KajfbZkrcyqcwEb8","tlshash":"4932b083aa14c90489ffa83eebb2be82e90e14e147062d1794d043549d3a5701dbe71d","first_seen":"2026-09-13T18:43:03.376487Z","last_seen":"2026-09-13T18:53:03.355513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/broadcasting2.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.849Z","timestamp":1789325548849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/broadcasting2.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Apr 2020 11:57:41 GMT\r\naccept-ranges: bytes\r\netag: \"e8badde9e58d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 109438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":109438,"size_decoded":109716,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit colormap, non-interlaced","md5":"5ef88d2602f2600b49db5ad687bae9f0","sha1":"dd95aa831f1db3688ab1850b434d3263a0de24e9","sha256":"3b82ae079deb796abf463719a526c481f6ab7e5ae64ea117d8333fb284e042eb","sha512":"673e8ccfb45b01803c9fc62d9cf491f37db66a05ac3db470714124f78f3de7aa552ad89696aaf989fd53e900048e3e75d41d77952467ab42dbeea7339f981f1d","ssdeep":"1536:v0J2RAIzeMJYOTKWk8iKjmBh1U0GlrAtboPW3mVAHan/6agWDdimn0XUL:MJRmtYlW1XqzYktboPeuAHMPgWRuUL","tlshash":"47b312bf9aecb5484a0289e81f0da9c5775417e0b494b779cb3ec22a1349317ec4f927","first_seen":"2026-09-13T18:43:03.377861Z","last_seen":"2026-09-13T18:53:03.356369Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1143,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:29.507Z","timestamp":1789325549507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lobicon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 13 Sep 2026 10:07:44 GMT\r\nexpires: Mon, 13 Sep 2027 10:07:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 31485\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":129165,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-10-15T02:33:40.853236Z","times_seen":95480,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":3,"connect":29,"send":0,"wait":18,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/MANUAL%20VIBRATOR%20TABLE%20-%20PAVER%20BLOCK.jpeg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.838Z","timestamp":1789325548838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/MANUAL%20VIBRATOR%20TABLE%20-%20PAVER%20BLOCK.jpeg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2020 00:20:45 GMT\r\naccept-ranges: bytes\r\netag: \"b521fc62bb7d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 186035\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":186035,"size_decoded":186314,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1200x500, components 3","md5":"4686af892a89f77a8149cffd6cfcb1f0","sha1":"52ecefe359fc02b09be80cb9a788204d809a9962","sha256":"f08df21e761883090442bf4a453f17142a108c0258490d0871f6bab16f8aa242","sha512":"83f99f2b2b27723d954bcd3274b0634d1caae2f1a000b8251bdea680e36d889a63bed66d0919875c6eab7f0bdc39d021d8c3a635668b5c1fa604e46c2301a8c1","ssdeep":"3072:6+n4LPBk0inoNk3Jos+oiKD9h6ZCytE27zggxln/MD3LUA+oUrJCMkoqsYB:wDzZs/XhJYE2XhMDIA9U0Iq7B","tlshash":"bf04233ae3f7db7058c9c8185ecce24a561e9db43083394833aa687677c8dd925125bf","first_seen":"2026-09-13T18:43:03.37216Z","last_seen":"2026-09-13T18:53:03.357737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/orbit1.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.854Z","timestamp":1789325548854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/orbit1.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2020 00:41:51 GMT\r\naccept-ranges: bytes\r\netag: \"1d4843aa509d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 110232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":110232,"size_decoded":110511,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x574, components 3","md5":"924d93593135e5648581556598d02ca1","sha1":"bfcca3fa0c4bc5234e13f8258eebc0f2fea47aa0","sha256":"48795c1d036535c87023a9903d7428f37835a660d6a70d478153866f4f750205","sha512":"4906aa7b9605fca7d84221eeb59e3b257304225d653d9d1edc64e622fef9c032906048df5ca47e20d64959fe089651dd05d38ee85116ebb8dc029ab24e64b336","ssdeep":"1536:pXy5tpyx/rhwQHBqwNA143SAV988hGljx2auHFATWkq6uNc3GwUAJ75r3Mhl:ZStIrhdH64iEOVlcLCbpIdIJtr3+l","tlshash":"8db301213a406c92da1ed638bb9f12c23755de80585fe767e88952143fede336c486e3","first_seen":"2026-09-13T18:43:03.418822Z","last_seen":"2026-09-13T18:53:03.358496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1139,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/monnet1.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.857Z","timestamp":1789325548857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/monnet1.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2020 01:07:15 GMT\r\naccept-ranges: bytes\r\netag: \"c0c61137549d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 12663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":12663,"size_decoded":12940,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"211c40ec2c99230e5014dd6527c41dec","sha1":"c1a29aa5c8debae14a5a1ea2180d98b405b9919e","sha256":"e87a73cdf1dd5445587a4c6557179097bb6f77c269da15bca34c7351c1a95d8e","sha512":"f50e33bcdbef29c8b77e96dcee80727b8fbf135244359de39c9d99c7136255023849ff7de763fe9ba9623eba33c9bf93be4bc3e32849370109205cbcd06b3204","ssdeep":"384:air+rQAxXuGGbZzlYMu7ho1IAyP96nojigx0cD:a6+rQAx+nbR+Mu7S1KjTx9","tlshash":"fa42bf559f7c0b846de584d4add17303f4b6ac03cc5d9b16b939abd364b087caa051dc","first_seen":"2026-09-13T18:43:03.423282Z","last_seen":"2026-09-13T18:53:03.359581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.818Z","timestamp":1789325548818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 13 Sep 2026 18:52:28 GMT\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1025,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-10-15T02:16:48.537394Z","times_seen":84707,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/hr1.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.841Z","timestamp":1789325548841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/hr1.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 13 Nov 2020 10:59:33 GMT\r\naccept-ranges: bytes\r\netag: \"6c4ba611acb9d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 173512\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":173512,"size_decoded":173792,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=550, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1600], baseline, precision 8, 1200x500, components 3","md5":"00161d2e08268184b64f9c54e04e9c80","sha1":"1bc3bc1d6cedb7fd3805fcddeb84c6c98e37f90f","sha256":"166f3983a85c536f58c5b9c19430a1b8aa67ad2abf15471390fd89086f695be8","sha512":"383c2f8d125e1e75866303a78ff9d0682195d84071ad77cfc4e8dfa8ea0bd785e2a4ece50bf9a23de2291d1f0b6303be72f559d3bd8d245c23257f2f96cd7e93","ssdeep":"3072:YeQUZMHKdoZ1IN+mFBj1bImfB6GtzdFkAHDCA59xkDIn1pPF7:HdsmI1piIkBttzdFTDCAxHn3t","tlshash":"04041260e7d5ed22e6f856b570c59de412ebcf14b3a362017d4e60153fecb29dd08a88","first_seen":"2026-09-13T18:43:03.424578Z","last_seen":"2026-09-13T18:53:03.361084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1004,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/Biogas.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.843Z","timestamp":1789325548843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/Biogas.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2020 01:48:24 GMT\r\naccept-ranges: bytes\r\netag: \"173d58a1c77d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 182225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":182225,"size_decoded":182504,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], comment: \"File source: http://commons.wikimedia.org/wiki/File:Biogas.jpg\", baseline, precision 8, 1200x500, components 3","md5":"69c4e1f2ce2c355f01569753be27629e","sha1":"a279269445d601071e5515c0e75d9f088d8444bf","sha256":"b56d37a413f0743551cc27d8413d889be156e3d06c41524c43992ceb1cedfa3d","sha512":"cb633fbaa684aa544da81385747d523e4e1e006b1d28fffcef371e6eade6e3fe8bf96263015ee9bed119b07cc6474e42665d8cd8f702f52c11602ec66fc54b8e","ssdeep":"3072:bFEEshFlU6rSX9ruZx1TN+Akz9a0DawqW1G4+BMpBa4nANcPwfw5nQqyGa:hKFu6rSgTIJaGqWGFBM6SZy7","tlshash":"64042290a5f04fd2ce37b931f1a27b1c7674879293967f8421b47d896126383eed82d1","first_seen":"2026-09-13T18:43:03.373502Z","last_seen":"2026-09-13T18:53:03.361909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1004,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/RND1.Jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.850Z","timestamp":1789325548850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/RND1.Jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 02 Apr 2020 12:00:29 GMT\r\naccept-ranges: bytes\r\netag: \"190b84de68d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 62796\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":62796,"size_decoded":63073,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x339, components 3","md5":"0ea6f1d6204bad2505234a0239718e97","sha1":"1251249ca22da4ef9a72a4fdeeb8ca962aecbe57","sha256":"b67f4cac5dad0d58af6a3c92e00111b2528b0f9cf56673f921976f0bc199f729","sha512":"251af902277df12f683965826eb71c206d9d29a700a9351b6075f895b71be1fb7f390d45ce258dbfc94ea3a9ec769d98945ac6e002733e0e7848d9ef24f882f1","ssdeep":"768:IC35SNY4r/voJBLY1kJN5KWsmgI0Zh73I4UsYweeRuDfkc6Hk8SdLGLjyqLFsPrc:DQr/wTDPtEBUcRuDoSd2yqLFI8J","tlshash":"9753e06d5220133ed38f5c2585b713c28b738baae11f89b4e066d9eb63773819b04d9d","first_seen":"2026-09-13T18:43:03.417271Z","last_seen":"2026-09-13T18:53:03.363272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/icons/face.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.858Z","timestamp":1789325548858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/icons/face.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2020 23:34:38 GMT\r\naccept-ranges: bytes\r\netag: \"ce7ae47010ad61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 1155\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1155,"size_decoded":1431,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"85fffe16f58dd4e5ee56d8d4d5a22caa","sha1":"3c381fc79b369765840e1ce1932e165f29e28e68","sha256":"35b827381356db538f177c89a2b236e2b56b42587cec749fc88bbb34a458db98","sha512":"9fcb7f53201840731b1b5fe93614a84aa29b0616aa2a3d8e8f290dee31227982845bc93fca9820cd835f3ef41c3b0016e766ad2879e075b544f99d27b3e4d7d5","ssdeep":"","tlshash":"2921a7d0d5b31dcdbb706367a7b52f0ad20414aa21f503709e4172921e2c3a45d9a323","first_seen":"2026-09-13T18:43:03.430977Z","last_seen":"2026-09-13T18:53:03.364076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T18:52:25.834Z","timestamp":1789325545834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Nov 2020 07:57:20 GMT\r\naccept-ranges: bytes\r\netag: \"8c9d3d9d92b9d61:0\"\r\nvary: Accept-Encoding\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:27 GMT\r\ncontent-length: 5953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]}],"data":{"size":18011,"size_decoded":6275,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (476)","md5":"c5a07440342f4a2b7f4af4f4ec761848","sha1":"24f74c5fa2b205a865c03644d442d78a732b71e9","sha256":"5d21dd7de894e8d612ab9081742bb630556954cfe56f16b9d73eadcb7e5cdcf0","sha512":"801d66f53a2f0fd55e505f3ade673e859ed9e94e2fd32f20947c0bba35d90087b1da92a00b46bbbda06378233618bdc21424d0b364ac8164a11025331dbc925d","ssdeep":"384:DHf/h9w1OJOgOkvML4OKUKBx+IWQbL8lRMdRMWRMRpQWekrUCditxB7:DffY6Xxt","tlshash":"7c824161638d1cbf024302da6561afdab4ef8f32d76b89e2f2ff41441382c85562725e","first_seen":"2026-09-13T18:43:03.38613Z","last_seen":"2026-09-13T18:53:03.364775Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2737,"timings":{"blocked":0,"dns":308,"connect":142,"send":0,"wait":1572,"receive":0,"ssl":716},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/lobicon.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.835Z","timestamp":1789325548835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/lobicon.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 03 May 2020 22:09:40 GMT\r\naccept-ranges: bytes\r\netag: \"d56bc88a9721d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 6313\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6313,"size_decoded":6591,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 190x50, components 3","md5":"69757818d5256b117a912f384dd53327","sha1":"4cc18bf59c92b5586959888c196bcdf0ec77366c","sha256":"69c00686eb2b9e6d6adf2e417cb3381a90e95934c292d476e6f4d26743bd4b10","sha512":"a990f66276caba97eac3f89276f8ad8e08f47152527fd743d7f821a1054065b8f77d413e7f0cb195b773b45569c9e0ab77f67c64d203675505e3c5e2374c7476","ssdeep":"96:uHEva+tuzsf+46dso/BdRfkIl8yA6NE6qg9ZZaD/c/VizAAxaDgM:4fMUsf+46dsoBdCQ8yA6NE3v4R","tlshash":"84d18c3732937e3aadf3226260c7d646416fbfd526ab66530aa32425b4608f4187993c","first_seen":"2026-09-13T18:43:03.433522Z","last_seen":"2026-09-13T18:53:03.365526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/CRUSHER.jpeg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.839Z","timestamp":1789325548839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/CRUSHER.jpeg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2020 01:09:56 GMT\r\naccept-ranges: bytes\r\netag: \"4941542c27d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 159592\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":159592,"size_decoded":159870,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1200x500, components 3","md5":"7fc60071c1f242a3b3e380381ba5d819","sha1":"5c8e547b72a44f85a32dead729485825b5b9452d","sha256":"0191097cfd03fc5028bde57affd1ca3cec25fb6edc44885b6e8744cb30fea4fd","sha512":"30ddfd7aeb3ecd0f7a959d3d2692b0e066197f346b4531ea99ca4209c8fc0ba0c6e0854b059e137ff9c5dd2c4caecf5930d7bd9526cc57a492b5d44eab756327","ssdeep":"3072:0wNlNkcltejhUpI+1/UmK3rLJ6jhNTMhaj6qCyefIBz43hGOeqpQe2pl3:0fcHpNfK3mMhO67I9UhbeqpQd3","tlshash":"2cf312758603c0855cb354f719de2ca6073eb8fbebbf869892242c3c94ea7db054494e","first_seen":"2026-09-13T18:43:03.436658Z","last_seen":"2026-09-13T18:53:03.366389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":865,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/Fly%20Ash%20Machine.jpeg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.844Z","timestamp":1789325548844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/Fly%20Ash%20Machine.jpeg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2020 01:27:35 GMT\r\naccept-ranges: bytes\r\netag: \"e2ea9b9c47d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 161739\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":161739,"size_decoded":162017,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1200x500, components 3","md5":"58d0f978afe38668662c42060f6d2d14","sha1":"e25c3445084fb37729688e21f24cf55c3d36b770","sha256":"fae4341a28692a5ec0ef1a24d2f2d90770ae9d4f6015f7eda2b7fd2fc1651482","sha512":"86ddd6930f5b44d5061efc8726397a3f27c26f04a7d86787017365c61643deedac3e0addfcd9d0d2b22ee9127327414e36b2f2e7b5e0211c030d3806defbdf12","ssdeep":"3072:WbydRZSUWDOgDHKTLcMp8iKsh+IBN2ue6KRV5LbG8VBRlrKCEGjfrpj:pjWDNYLc0J+kRVILbG8VBRlrKCEgDZ","tlshash":"56f31251bcae0ef2cd5f10c39d153538aba9020812a076961362ce3df3cc256b4a6cef","first_seen":"2026-09-13T18:43:03.426476Z","last_seen":"2026-09-13T18:53:03.367245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1014,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/FOCUS2.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.844Z","timestamp":1789325548844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/FOCUS2.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Apr 2020 12:28:16 GMT\r\naccept-ranges: bytes\r\netag: \"fdd1552fea8d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 434922\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":434922,"size_decoded":435200,"mime_type":"image/png","magic":"PNG image data, 784 x 295, 8-bit/color RGB, non-interlaced","md5":"634580de8fe73aa6578a242d72804d35","sha1":"90ac50c5acf2db073e1e49e685a27f67c6737497","sha256":"a27a955a76bf92a7202d289e035058d44d66f9f70818180b31988ad6fab4547a","sha512":"9097ccdac0f7ec811a8c81c7a83467328bbeb5156895c9827ac17f60c7730f434febe81bb0b9f831407c7c643b6c7648e81f3f9fe9b15c81a78317ac2714d226","ssdeep":"12288:0Z0kk0nqw3W6Q+PywlYCLvpkJIQonJOJwpZl9UgqbR0IXG:0Z3k0nqw3WH+PjljWJwz7Uge0IW","tlshash":"419423a7ff9b7e216e81134b7d254ea9c3020226dfb5e059133abf84baf055a51807f4","first_seen":"2026-09-13T18:43:03.398845Z","last_seen":"2026-09-13T18:53:03.368005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1141,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/css/material.css","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.820Z","timestamp":1789325548820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /css/material.css HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Fri, 03 Nov 2017 14:48:02 GMT\r\naccept-ranges: bytes\r\netag: \"03da4bfb254d31:0\"\r\nvary: Accept-Encoding\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:27 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":345227,"size_decoded":77535,"mime_type":"text/css","magic":"ASCII text","md5":"67ad1d23df038bf521a0bab2ed5cf6a5","sha1":"0280e7cb1e4a98bf52315e58f308627c6b7b8eb8","sha256":"9dbbc3a0d48f9f5ea1d23e397f844ef5c8c615fee92986c60f46c0760df1b777","sha512":"c1a76d55545f6c2c668f80b60b7b40ad3d5fc9f5aaaee52e243ec7289a262b4f723fcea951c7892afd81c50c8338249a922e6fe1630056c85486a31d399127c4","ssdeep":"1536:lgYrukFk8bJ/emIDkGAxnJRH/HGgI6fcDYP+ynHn9hUbuf98dKbOIK/PUngTwsDE:fFk8bJ/RVrbM1Tw9","tlshash":"0474316ebee115083457885c13db7ab47b7dc003860aeebb7adf2524cf4b7c48992649","first_seen":"2026-09-13T18:43:03.383568Z","last_seen":"2026-09-13T18:53:03.368711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/giip1.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.855Z","timestamp":1789325548855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/giip1.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2020 00:46:40 GMT\r\naccept-ranges: bytes\r\netag: \"1868d956519d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 57036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":57036,"size_decoded":57313,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"aad3298a7d270cef6d0cf8765701930a","sha1":"3cc92bfed56125d8d99623934152a0bf04d50135","sha256":"86123bcca2b3318c1129fa038d3ac055e1779cf0f201a20a4f7ff4a3059b2908","sha512":"3cd272d53cff0cb1be3ac92aea09ba32d849c18a439cd726f63bf9b50ac963e8667d4a448456e57c9da4740e133bb228d4f69f0abc7f0e599e67d545aa6354b0","ssdeep":"768:GlIqRTEcMoDyEZDjAPybxNgQz+26O71qcuLSj9VZcYvZ1prgEKnUCasZrfS9C3gQ:GlIPf0ZXAP0r3rAcfj7ZfSRUMf9gnAV","tlshash":"a943f2289a149d10cb6ee29f9f229d5c3b740c6f33b3979ab414e5d51944c0adfa2cc7","first_seen":"2026-09-13T18:43:03.380873Z","last_seen":"2026-09-13T18:53:03.369488Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/icons/linkedin-512.png","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.859Z","timestamp":1789325548859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/icons/linkedin-512.png HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2020 23:44:01 GMT\r\naccept-ranges: bytes\r\netag: \"af4b4c011ad61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 1896\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1896,"size_decoded":2171,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"d117c8384e24288f1e2107c851e4ffe2","sha1":"d843f48d1d21eb715aeeff2b1f8040923e7e7655","sha256":"9f7b3c6c0b9b59c12b145d354c0f5b961f88874e2840d8dba6bbd9b133216b29","sha512":"125bbc664afc357d66d3b2d58ef81274b6ced90d68bb86e61d7ae51745b1b2b44b8a55a5f007af09343427d51a250f3f28880df1442a676f99bf5c365e104141","ssdeep":"","tlshash":"8c411b6dbd1b78569912572d62b519e03d3c0cce18fb783e2f72d75760026e28560b35","first_seen":"2026-09-13T18:43:03.395311Z","last_seen":"2026-09-13T18:53:03.370409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.828Z","timestamp":1789325548828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30306\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:36 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:36 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 375652\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86659,"size_decoded":31290,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T02:30:55.000878Z","times_seen":103147,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":18,"receive":16,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/js/bootstrap.js","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.831Z","timestamp":1789325548831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /js/bootstrap.js HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Fri, 03 Nov 2017 11:44:04 GMT\r\naccept-ranges: bytes\r\netag: \"01a7bc9954d31:0\"\r\nvary: Accept-Encoding\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 36417\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":99753,"size_decoded":36751,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"babf4cb0330c0687d0332bce58dffe14","sha1":"aed4007e298dd94a0acf81602022f93bed44727f","sha256":"3bcd01f7e93c9000f22df7d2b451106674f1014f7566bc866d478ac313b4b773","sha512":"52cf22fae9e4b79e7fd1406f6a2f8c635c9f5786541af4eed9e28e2c60d27f2fdad7d9726e01a5c71dc5331389fed03713573fa8b1ffd13a1e50bff579feffab","ssdeep":"768:JVWBKXn4e+f7r5PX8oyjYG0Zlz/OFuEneNEKeOJdKMnnuCV2Trgb8rcz7HYq26U4:JVCJf7rZnyjYGVxSKs4rgHAq2UlD","tlshash":"dda3330a3efa2492416bf03e8bdf5005f634548b5a0dda047c5caad86fe453857adbbc","first_seen":"2023-03-08T16:10:38Z","last_seen":"2026-10-13T08:53:50.601489Z","times_seen":87,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/eng1.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.847Z","timestamp":1789325548847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/eng1.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 02 Apr 2020 11:46:02 GMT\r\naccept-ranges: bytes\r\netag: \"b4ecd148e48d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 11972\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11972,"size_decoded":12250,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3","md5":"85a24b9d2d09df8460af55736ddfb4d6","sha1":"ed33e6ad0b974c7722d3e8f34124d01bb44458bf","sha256":"cb41b488b77b290f0ba896791df958a22f3578ad283c5ad6c0482164c7093439","sha512":"9892b7b4b99cfd234b1146843d9a15e1ba8a5d0516de0dcbcbb8b91a5d9b8ea0ae025dda9357f7542d656b4a36ba174d6d74b0f1540a8070e8376e1bce082891","ssdeep":"192:DrPH9kptq/dB+y1zk6dBTN50H5pFruKfO0w675waZ012b+b/4uICS0YAtM0xifzp:DTH9FzB1bJ50HbFruKfPw675SblqAPxa","tlshash":"b532d07acc2287c2e5a2c2ec45126f61e9d751f94553e40f9c76fb8a51a02ff91de00a","first_seen":"2026-09-13T18:43:03.374724Z","last_seen":"2026-09-13T18:53:03.372433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/images/expertise1.jpg","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.853Z","timestamp":1789325548853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /images/expertise1.jpg HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 02 Apr 2020 12:38:33 GMT\r\naccept-ranges: bytes\r\netag: \"bb77699feb8d61:0\"\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:28 GMT\r\ncontent-length: 54793\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":54793,"size_decoded":55071,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 700x221, components 3","md5":"0e253bb845986f67c438e17f62b3a636","sha1":"2287cceee95d046d241317d0c7122a7690fa96c5","sha256":"985deb5342dc258a00e61c3cc6aaae89e4629f22aea30bf8b13391c36c36bedb","sha512":"9e968af1728daf903417fb7fb510712b36ec9d7cb7ece32d6a0b0d3e8a961be5d3f3e091ab0654fbe7119e7f03e5857b31ac6bf142fd5d318c3c00e54f6174cc","ssdeep":"1536:5Lh8K4hyTOEmhkBpP/KmUixmzLfQuTvEh75:5uhyqEmhkzPCm5gLlQh75","tlshash":"2b33f16ec3449034e51ad6e902d6e58e472082d6efc4cdba1313ae107bcc2dcd47916f","first_seen":"2026-09-13T18:43:03.422047Z","last_seen":"2026-09-13T18:53:03.37321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/favicon.ico","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:30.164Z","timestamp":1789325550164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:30 GMT\r\ncontent-length: 1245\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1245,"size_decoded":1427,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5343c1a8b203c162a3bf3870d9f50fd4","sha1":"04b5b886c20d88b57eea6d8ff882624a4ac1e51d","sha256":"dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f","sha512":"e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949","ssdeep":"","tlshash":"7b21422992983814f69384a061f277c23f078286e66f1b68a023b263e4c26e281d33c4","first_seen":"2023-03-09T23:36:42Z","last_seen":"2026-10-15T01:01:34.758995Z","times_seen":65867,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lobicon.com/js/material.js","fqdn":"lobicon.com","domain":"lobicon.com","tld":"com"},"ip":{"addr":"208.91.198.210","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lobicon.com/","date":"2026-09-13T18:52:28.830Z","timestamp":1789325548830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lobicon.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 14:51:36 GMT","end":"Sun, 25 Oct 2026 14:51:35 GMT"},"fingerprint":{"sha1":"1C:EE:54:B8:24:C8:0C:10:CC:90:E0:73:A2:DA:FE:B4:1E:4F:A0:C4","sha256":"35:1F:19:DB:3B:67:23:F6:9B:76:F2:AC:15:F2:F4:64:A2:53:C1:0C:32:9E:F0:FA:AC:1F:00:2C:BA:C3:7E:5A"}}},"request":{"raw":"GET /js/material.js HTTP/1.1\r\nHost: lobicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lobicon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Fri, 03 Nov 2017 11:44:04 GMT\r\naccept-ranges: bytes\r\netag: \"01a7bc9954d31:0\"\r\nvary: Accept-Encoding\r\nserver: \r\nx-powered-by: ASP.NET\r\nx-powered-by-plesk: PleskWin\r\ndate: Sun, 13 Sep 2026 18:52:27 GMT\r\ncontent-length: 24102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":57072,"size_decoded":24436,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12540)","md5":"e1b203c88fcbabd498bf188630e701e2","sha1":"2f135f5a4e914c53c6b222b86d7d0a68685b9f38","sha256":"ff8332d0095be9709e726627832ce8c82ed3e36cb46339ae7d4d6d960a391966","sha512":"9f7b2e34c96764aad0e636c578992ef311e4b02b8a7063184553899082b28f40d891f08c6829c3257bf3f50a89601f23b71b76cc92a7ac77be908748f63d9dbe","ssdeep":"768:siweSLD6ptu5go+fZmDVn80R/515z4r7q2i77rnJEzNqXn4eiEZcsHZ:wYtu5go+BgnlprJEhpEZfHZ","tlshash":"e6430949b2e13062452b717a43ef410ab279449bd50ecd547c4ceac86fac93c52bbf9d","first_seen":"2026-09-13T18:43:03.396811Z","last_seen":"2026-09-13T18:53:03.374479Z","times_seen":2,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lobicon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lobicon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}