{"report_id":"53ae6243-d8f3-42a0-aa24-39b11ca836cb","version":6,"status":"done","tags":[],"date":"2026-02-25T17:57:27Z","url":{"schema":"http","addr":"globalvisioncenter.org","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"ip":{"addr":"185.21.14.111","port":0,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"globalvisioncenter.org/","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"title":"EU • Стек карточек","dom":{"size":7652,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6ac291b5647db2bc0643ba7fe78278bf","sha1":"2f164c0addc25d44131198511a7ff6f70e47b3c3","sha256":"689c88b0d5725ed775cf67f8db7f82d8a6a514a123287d429874e411648fc443","sha512":"601a3d19dc653cfdc5a70d751f97928414edddf5e5172b13f97a3388c4acc083cb7cc7c4aadfc23bfd7814417a1b91239d423d8eb0badf229740ef3e88820f34","ssdeep":"192:3iqGMmlQ5LZBC11zmCMfMT266mAXLGtmzduuHxYPnWChtjNoiuhy7hyDGimeX:3iqGMIQ5nRzRJJRz2Wsoiuhy7hyKimu","tlshash":"09f19431a29211397073c1caac93d78e31f48023f51b8318b77d25969fd6adfda6660a","dom_hash":"domhashbf4987cba2fa6a9a64e19a58fe3156c6","first_seen":"2026-02-25T01:49:52.584092Z","last_seen":"2026-02-25T17:57:27.454731Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"globalvisioncenter.org","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"ip":{"addr":"185.21.14.111","port":0,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T17:57:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"globalvisioncenter.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"globalvisioncenter.org","ip":{"addr":"185.21.14.111","port":443,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-02-25T01:49:48.675728Z","last_seen":"2026-02-25T01:49:48.675728Z","alert_count":2,"request_count":2,"received_data":8188,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globalvisioncenter.org/","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"ip":{"addr":"185.21.14.111","port":443,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4911ed679bb00aeac51b25697d9eee4","sha1":"6a17b8e027b651ed82c336fbbf22b653d03c54c8","sha256":"a4984e19e42c4e6d75a9c1656f8715e0a4bbd93bae458342b439245cdce31d2e","sha512":"de20575c1c2f292bcec2e35eff5dc817aa10c9b36a00cc71297bcc229ff82f9614fd1f7bf240a40893292e754a55c116851a56fd412d31a7ca8b1d3614947a0e","ssdeep":"","tlshash":"23b012951001cec1165010a03a418f31147812558b41669014069481207054e4e85dc4","size":92,"data":"","first_seen":"2026-02-25T01:49:52.587601Z","last_seen":"2026-03-18T11:27:42.617032Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalvisioncenter.org/","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"ip":{"addr":"185.21.14.111","port":443,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e11ef30c829424ef9958a9b7dbb67d7b","sha1":"2559f37af82c6fa0a3eac797bd0841800ea36dd8","sha256":"9499669af6235dfd02c13dcf023cf73604ef91932a50808f7735aa91b2a8eaea","sha512":"6fef2cae946ac52a33917dfedaab78bdc1183cf448f93ad11292cb5a1f326d852113e5d6edffb04a9ae828b0fb76d7e1bf124d9083411a4e4eaf0f029388e5a6","ssdeep":"","tlshash":"78f02b73f39a0678839f52ff2c9667a534b440063205c35a992c10216cd8f9fb4bbacb","size":546,"data":"","first_seen":"2026-02-25T01:49:52.588744Z","last_seen":"2026-02-25T18:07:46.162127Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalvisioncenter.org/","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"ip":{"addr":"185.21.14.111","port":443,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1225d2b9f6f51c039fe1df1a8cd39a09","sha1":"1bc7905114c16db013536caf03a3dc483d0c5201","sha256":"d1923fbc8ea43b42702f8f674d93c101900db466c3998d1eb73cb9e790fc20da","sha512":"419e0273fc3eb6a574f4026a63211ba6b3668583afaa0d63405b75c402816aac9a3130e621bed663acfd650a5d0bf66f451e013f837a0b0d635cfae900cf3535","ssdeep":"","tlshash":"bb11ab1e01234bf610f36098db87b3a079f201933149c6083d1e8144af8ce5db7b1aaa","size":907,"data":"","first_seen":"2026-02-25T01:49:52.589866Z","last_seen":"2026-02-25T18:07:46.163214Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"9833995f4a1c6448e98e3e0a41602fc7","sha1":"c2cba290eaacf912b3057b0266898f0324b4ca5a","sha256":"cd74b3eb156f8c13057761c535f919eaa4c6f693c4918a1ed13c7fe4ad5d3b20","sha512":"58267430c248064f1684b3aa3ad76f7fa3c8800ca31e2dc4cdc068c22a4efb7fdf7d8e53001589f5ad12b517dcd2407cc782b7ddc3de5c50c913e338d9487298","ssdeep":"","tlshash":"848000002002300b030a288288800083c2aaa822028c2022b80b02a300833038ec8a20","size":31,"data":"","first_seen":"2026-02-25T01:49:52.590924Z","last_seen":"2026-02-25T17:57:27.45945Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"globalvisioncenter.org/","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"ip":{"addr":"185.21.14.111","port":443,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T17:57:04.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalvisioncenter.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 07:12:17 GMT","end":"Mon, 18 May 2026 07:12:16 GMT"},"fingerprint":{"sha1":"40:15:18:67:18:C1:33:2E:FD:75:6C:16:57:EF:7F:E0:B6:15:BB:FE","sha256":"48:71:0E:62:93:96:04:7C:76:FA:BC:9C:D4:08:CE:76:AB:D5:37:BA:3C:F5:85:FE:AE:7B:5A:8F:F3:2D:A2:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalvisioncenter.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 17:57:05 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 16 Feb 2026 08:32:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6992d603-1dc7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7623,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"afa0109406a7e984db21eb0efb92a978","sha1":"46ea79287d81fc3687890d59ce48a9890f6db907","sha256":"416b62dcb46683c63796529baac3543629f5168c82dcd8bc32da77e745d0ba10","sha512":"1ff9f5dedce15c40d9942af7135529b92355456fdcfbe380aadff1c68c9d8ddaa4e6d1d548596f6ec041b85e78eeafed0bdc0c5b31ef24fb141ad2f6527e7254","ssdeep":"192:YtMmlQ5LZBC11zmCMfMT266mAXLGtmzduuHxYPnWChtizoiuhy7hyDGimeb:YtMIQ5nRzRJJRz2WXoiuhy7hyKimG","tlshash":"6df19431a292113970b3c1caac93d78e31f48023f91b8318b77d25969fd5edfda66606","first_seen":"2026-02-25T01:49:52.586407Z","last_seen":"2026-02-25T17:57:27.456101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":186,"dns":130,"connect":23,"send":0,"wait":23,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"globalvisioncenter.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalvisioncenter.org/favicon.ico","fqdn":"globalvisioncenter.org","domain":"globalvisioncenter.org","tld":"org"},"ip":{"addr":"185.21.14.111","port":443,"asn":0,"as":"","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalvisioncenter.org/","date":"2026-02-25T17:57:05.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalvisioncenter.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 07:12:17 GMT","end":"Mon, 18 May 2026 07:12:16 GMT"},"fingerprint":{"sha1":"40:15:18:67:18:C1:33:2E:FD:75:6C:16:57:EF:7F:E0:B6:15:BB:FE","sha256":"48:71:0E:62:93:96:04:7C:76:FA:BC:9C:D4:08:CE:76:AB:D5:37:BA:3C:F5:85:FE:AE:7B:5A:8F:F3:2D:A2:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: globalvisioncenter.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalvisioncenter.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 17:57:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"globalvisioncenter.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}