{"report_id":"5d841a93-47b2-4b8e-979a-601c5c250023","version":0,"status":"done","tags":["wetransfer","phishing","financial"],"date":"2026-09-27T03:33:39Z","url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":0,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"title":"WeTransfer","dom":{"size":250742,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39357)","md5":"660292daeaffdd671a6e2c70b5596d2a","sha1":"e65793178db5757cf3ba5c4fda5acad5634ca085","sha256":"1d2dc086853b3905cef1968f41ea6c455c87332ae270a07a1e398af4c394c333","sha512":"fdb470c3421f04a8e74f3a2369cfd2dc04ee86285ca06563552a575d1112b17dfd2bc1469a269c1b1d260f90eb8261b254783b8dda4911dff85d8a1eec061a6c","ssdeep":"3072:V9d09xcdY8zJeCxCfwAcW8YZizScAcypdXUrnK0VzlZGmzC2f8S603t:/d09xOzAMlWVZizQcMRUTbVjIUF3t","tlshash":"2f34e1f31a8130489337d58a66d83a483c28c903d64355eef56d27accfc75ae51ebb1a","dom_hash":"domhashb06dd13ad7d9cd4fc3991f39136b26d2","first_seen":"2026-09-27T03:33:53.381428Z","last_seen":"2026-09-27T03:33:53.381428Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":0,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T03:33:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"iod-consult.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - WeTransfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with WeTransfer phishing","tags":["wetransfer","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - WeTransfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with WeTransfer phishing","tags":["wetransfer","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.redirect_globals"}}]},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":2,"received_data":197509,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kitanohako.com","ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"domain_registered":"2008-10-20","domain_rank":0,"first_seen":"2015-08-14T04:49:33Z","last_seen":"2025-10-26T18:41:19.001322Z","alert_count":0,"request_count":8,"received_data":1952,"sent_data":4392,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"iod-consult.com","ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-04-21","domain_rank":0,"first_seen":"2026-09-27T01:04:42.129579Z","last_seen":"2026-09-27T01:04:42.129579Z","alert_count":9,"request_count":4,"received_data":257139,"sent_data":2534,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Materialize CSS:1.0.0","description":"Materialize CSS is a front-end framework that helps developers create responsive and mobile-first web applications. It is based on Google's Material Design guidelines.","website":"https://materializecss.com","common_platform_enumeration":"","icon":"Materialize CSS.svg","categories":["UI frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Axios:0.21.1","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":3,"received_data":227129,"sent_data":1428,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-21T00:42:51.292364Z","alert_count":0,"request_count":1,"received_data":87515,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - WeTransfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with WeTransfer phishing","tags":["wetransfer","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.redirect_globals"}}]},"javascript":{"script":[{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"1242a724c6b12f3bcc352cb95656ae2d","sha1":"ed156a8628c6026be07035254b811aa9ed2ef07c","sha256":"5cc930909d80e0f9d91e1b5de2d456d6c56de7eb50639ba2497b714e61013698","sha512":"232692b472b757ed28e79a22207a2b0e7419a0d6b5612c5efaeadc8e24200f56eb470b9ce1b98a994375f44c9a24edae8b8d3d42e45b650b2d64990dc227403a","ssdeep":"","tlshash":"6a21a7e346eff8b5cd82bc57046d25b1e00a29ffe060f4c9de388c54c45a9a0271e42c","size":1269,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.397073Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"53dea858212694e884362b20c663298f","sha1":"a162208f40fd4a5e872636a1d7ee861312c8c33a","sha256":"501c8e52ed90a3dce03d3e5d6f8f45b938b4ae5ae0d3b09c1497f033e20878f3","sha512":"2be75ce861ba185efd4a75457e1e5244816ab74864bc5c0be6cce415dd27acd3a3260b2c98a54a25c9679f6be636f6d0ca297ca28da1c55f3b058ac0295a8462","ssdeep":"","tlshash":"bce0eb23028874310a03040030393da169b302ee085422c7f07ccc35033083947947ee","size":301,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.398327Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"2de510459243e58308e115d3d631daec","sha1":"77f3329a4a3bdae2ad7c5157c84a055550a8ce19","sha256":"611ee40c5b97d98cce46f9acb99e9315e9b99e117c4b6d4303352760e8d344f4","sha512":"29e071b6dc934c952b6da6be470306636c13850f57b181112fc1dd6ab6a5766abef13ee130767d80c3fd488941e081cbb57f9ee7a1123a97803e03993d07cdb5","ssdeep":"","tlshash":"87c02b4310cdf0715ee250ac60272d82400e94fc20504880613ccd1a273123037370fc","size":134,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.401204Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"54eec3a63b3deb14434815255e891610","sha1":"e23661c39816ff0698ce923f4233bef812259567","sha256":"9f8249c1b8f822cc62e2c86f7d63176b15c683d4c5301d0a8e1f36ab2c96617a","sha512":"1653fc61afe80c527d4f81e4a8e46b9cd00b308c690384e7bd1cebbe099188804a6dadbcaf30b057e854ff87cf6547af19439dfc9b20d87a0d532125e73d3774","ssdeep":"","tlshash":"87d0a7880078a4914ddfa013e19a9fb2900c00f3102888d0b2145d351049634174d628","size":207,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.402532Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue@2.6.12","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb192338844efe86ec759a40152fcb8e","sha1":"e55df1f7d6c288ee73d439bab26dd006ffee7af3","sha256":"29296ccacaa9ed35ed168fc51e36f54fd6f8db9c7786bbf38cc59a27229ba5c2","sha512":"04a6d247e71fcb12dd300b04d2768b45e1522e0f3fa636e07f11e1fe4fe4502f361f2eebe87b51e612e1a1b6a59f681c4efce4cb27a1add444763a6c430cb627","ssdeep":"1536:zUXY7qLtpHt2P0e1mZ8I6H82RaLPMBlo5VV2B/S/r:iYeJpN28efKMBlmV00/r","tlshash":"149308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93670,"data":"","first_seen":"2023-03-07T12:58:36Z","last_seen":"2026-10-07T21:58:33.180418Z","times_seen":4015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87d84bf8b4cc051c16092d27b1a7d9b3","sha1":"c8b4c65651921d888cf5f27430dfe2ad190d35bf","sha256":"53f7070cc4c81c278c72f7a106fd71434e766cf49b26d6ee8b0e1003d7132b3d","sha512":"3625aa6b6adc7879cddd9e63ea6480bdbc30837b62c1537188041a6923125e74510e1e42da693ffac290470f2a8d5d6f3789dff222b66b46f4e3c3e71dbcb1f9","ssdeep":"3072:SJu60GNnYpmH0I5zSMIonlnqA9kSy1UQp0kD5tgtPlF7zzc0mwEh7PnR:SbGcZYEvzc0mwEh7PnR","tlshash":"1b04e8d9b242763145e3e1a9426f260aa23721a45087c0dcb43eeddd6fbcd4821b7b7d","size":181109,"data":"","first_seen":"2023-03-07T12:08:24Z","last_seen":"2026-10-07T08:24:59.540076Z","times_seen":1996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lodash@4.17.21/lodash.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9becc40fb1d85d21d0ca38e2f7069511","sha1":"ae854b04025db8b7f48fdd6dedf41e77eae44394","sha256":"a9705dfc47c0763380d851ab1801be6f76019f6b67e40e9b873f8b4a0603f7a9","sha512":"585374e3ce3ab1d28c20fe4b28da6131a5b353b629332094db8e5eb4ade0ff601161b3caf546f5f1e1be96353deaa29109687eaae098ef279f4a6964430d4035","ssdeep":"1536:X9ylPegosd1p8X4Kx2iiC0guaihfaZgb9pL/:X9cVaizgehfaZCX/","tlshash":"6a6371c9bad3f41a93a320b504af048ff13d6ea4688c9500d1a4f4ed7db856ed263e5d","size":73015,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-10-07T17:22:53.361692Z","times_seen":80531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"297f01376511bc5bb529f2260fb35fc8","sha1":"aaac5fb7d38fad66b18e4d4ce6e248c4ae7ff7c3","sha256":"11bd6e97fe1e95e676c9180d4ffef1fe043ae42c8d5d11108f032162bb6f4c5b","sha512":"4e8a8ad3a4b55e85cd66c57492573cff853f85533170d0a58cbc4966416480bac8c1c46d9f8b66ddfd5681d9104841cd1254c1e9c865b099cff8b1ba04b4dfbf","ssdeep":"384:racIzyzRG/61jSj7jj1Rg4VctQwg6lIFRJV3spIaN6C4/EWpWptY:raxelG/61jSj7jjQ4/iE3tGIk6C486","tlshash":"a092e9a348acf8f9cc0eea6a82192d70705ec4bb916504d4a57dcc6841febb06b0f05e","size":19781,"data":"","first_seen":"2026-09-27T03:33:53.403655Z","last_seen":"2026-09-27T03:33:53.403655Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"e39988b2377415493840e67870ad96cf","sha1":"9c63d83966d1a9f0a5ad0db82e831022bef14695","sha256":"364e1ff9b0e7b63563550e52648af8ab92d0e0e7d29f657658eb4bf42c8a5865","sha512":"8a9bf37d3f1f98d1e35b1817506e2f71a3436b71e350fd68de15c54b35aebf24615bbf2d664cd57f0e67e3db19a9ce49ff65e4f2445fcb1521080b801e818b13","ssdeep":"","tlshash":"82c0125624ace5708d42311390ed2e7aa40dc4fa4050b884f63948da6af65b043d95bf","size":184,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.405499Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ab251e4e8853efb4cce43f1af7fc9bd1","sha1":"debad3ea0ba914835abecc4de628eb8d06f98ea0","sha256":"029357d420c40c1e51f1134eff34e72c85d58cae7a0bf2ab98aca9af7476200a","sha512":"a1de907bba0c860151b199d7e59d0ceb21ff17d4aeabb931a6d8e258f55423980f12ec9151c35ac5cd5d249abbed26e9e7828389ae41561f15b7da6d34463e39","ssdeep":"3072:kdY8zJeCxCfwAcW8YZizScAcypdXUrnK0VzlZGmzC2f8S603x:mzAMlWVZizQcMRUTbVjIUF3x","tlshash":"eef312b62d97fdcd3553168960193dcc9cd48d93aa62a0dabccd26def8941b08ed84f0","size":171281,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.414627Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-10-07T23:44:26.896532Z","times_seen":29240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70489d9432ef978db53bebda3e9f4c14","sha1":"f24d0bcc36027bce45c86acfba57b248edb6a3f9","sha256":"24b9a49d375465e659dbaecb3fda81fbf0d3eedbf138e29cb5229e502d8a4fa1","sha512":"6d94b8ed2eec3cec648d4ff806dd33ae112d5b1d32d02464844a7c21c9332be96d89f20813d10c20c4ee4ff984ce820c7b050836bb8304847f8c99db82ea27a9","ssdeep":"384:4tuDoBdyteApZXfgHH7MsMRrVkkaFW4Um6kxTF6T9eeM:p0kvRrVwWQ6k5F6T9eJ","tlshash":"eb5295ceb4a1b09747f721f0809f4a0fb2ba552a644dc4a0fa60e8e66c7552d8733f5d","size":14355,"data":"","first_seen":"2023-03-07T01:06:54Z","last_seen":"2026-10-07T21:01:39.471814Z","times_seen":4756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cc3c957f9370fbef398132e9c419b3d","sha1":"4f6fd596110d6f4e961f112c50c4c8ec3cd5325b","sha256":"d65d70044bd4f4012d49e24c9d366dbb5308bb20b92f4a072f1616cac12abdd4","sha512":"50d60115255e21a6d57f9b589ca985a514bfb0ece393a1fad0bf75efc80523ec2bfdd74e14539610e3ada4ddfd98c74698c3cc0a209f2108c718aeb342d37845","ssdeep":"","tlshash":"590199e71c5b02520a351c489b0b23e9f647a53b0f0a89147e70860a3ef3a238c227c4","size":672,"data":"","first_seen":"2026-09-27T03:33:53.415965Z","last_seen":"2026-09-27T03:33:53.415965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"00c53c05926f789fc6ef881882812ff0","sha1":"a97e5dd809cfb6b7bca89b157f3dae34dee8f12b","sha256":"85fb545beb9441332531abaa1189d34f1e753e04de74998f37337e5a5a6f4cfc","sha512":"95e88ca2ff74df5235b923d4bb7b632af273663df0cd669400363d046b846ecd031548b49cb077f3068ef7bcf698b77dfea567be7ead78f3ad2fe0567bea0c48","ssdeep":"192:kDNq42gYmOVmSE+ESYv4ymdwO/stwBgxo+8LdKuVtoTDJt:urVOUXr4ymFWo+ydVMPf","tlshash":"4e32100aa6f784425173b0696f5f62007562401f1d4aec1cbd3c57ccaf6ae3994b1fba","size":11517,"data":"","first_seen":"2026-06-09T12:18:24.068697Z","last_seen":"2026-09-27T03:33:53.417055Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-07T22:51:11.127254Z","times_seen":146954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"f26d308c2e74dca25ca0ed3299cf6400","sha1":"e8df5ec317342a1d27c188b0ea30e8743e9778d1","sha256":"6ffc47bdf3a708f30261a9c0f3ea679759e6b1527b5303557f035ac5d011725f","sha512":"a59257c2d55ff6472c3436dcbc794c5a2d3d5c8cb2a68ecd17afd80377e889451a1102ae32a4d559e91d4821c1dc4584b3f82193b7591ca1091f516e0dbc7b75","ssdeep":"","tlshash":"56c02b4210cdf0714fe2509850272d87400e84f860508880613ccd4e273223037270fc","size":134,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.418252Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"e6941bc7f9c77c4295303ac590d1e149","sha1":"648e66f160cd0a6918963afb44514b0f2b899f75","sha256":"a5c8b7e60554585abcd6600bebcdba3df14c903b51759494cb90aaaf2011e053","sha512":"85ca3252d7422a7f2e0f129e9fdbd1225261e875cb61b634c9cac45486cb7866ccb37faa73577e82d36d59e76c674f822375348096b0e708e84205ec8596d8a1","ssdeep":"","tlshash":"77c02b4310cdf1714ee250a8503b2d82400e84f8b0604880613ccd0a2731230336b0fc","size":134,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.41924Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"f6a708583538860ef6742614093e46b6","sha1":"d120641ef386e506779b8b0bddb715391e80ceb1","sha256":"f1a39b07fa05ae0602e893b0b3e8b437aad719fdc2b3dcbd5033b6e39f004895","sha512":"fd3998d0b3a300dcc79a67b7221f68e0f05e25150858f8699215ce2693812923c29ae8c72fa43d6575ab6110b34daa26483335fb3be075f00567445691386b22","ssdeep":"","tlshash":"d2d02e00a4bca0be8e9724d1331aba20c00f6cba94e0d081b034cc2d20bd8f0c36cabc","size":265,"data":"","first_seen":"2023-05-04T16:46:35Z","last_seen":"2026-09-27T03:33:53.420802Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:09.826Z","timestamp":1790479989826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/axios/0.21.1/axios.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://iod-consult.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 03:33:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 278451\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Dec 2020 05:22:54 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1c9raPmySdld93WiawUp%2FbW4QlxS4WbVq8Hbb%2FcHS6h2oJkgZ20oKDR7qn6cLWl%2FXhLZciX05zRViGMZMR2NqgpV2t88rH9WpfGwj%2B741XSV4e8%2B6t2uswtY%2BFkRW%2FPFLJAJepmM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a41772007f56c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14355,"size_decoded":5445,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14271)","md5":"70489d9432ef978db53bebda3e9f4c14","sha1":"f24d0bcc36027bce45c86acfba57b248edb6a3f9","sha256":"24b9a49d375465e659dbaecb3fda81fbf0d3eedbf138e29cb5229e502d8a4fa1","sha512":"6d94b8ed2eec3cec648d4ff806dd33ae112d5b1d32d02464844a7c21c9332be96d89f20813d10c20c4ee4ff984ce820c7b050836bb8304847f8c99db82ea27a9","ssdeep":"384:4tuDoBdyteApZXfgHH7MsMRrVkkaFW4Um6kxTF6T9eeM:p0kvRrVwWQ6k5F6T9eJ","tlshash":"eb5295ceb4a1b09747f721f0809f4a0fb2ba552a644dc4a0fa60e8e66c7552d8733f5d","first_seen":"2023-03-07T01:06:54Z","last_seen":"2026-10-07T21:01:39.471814Z","times_seen":4756,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.037Z","timestamp":1790479990037,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T03:33:09.342Z","timestamp":1790479989342,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /vkmhdzj/lbngaxu/gnpfmrj/.xllll?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5 HTTP/1.1\r\nHost: iod-consult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:09 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 607\r\nConnection: keep-alive\r\nLocation: http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"iod-consult.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - WeTransfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with WeTransfer phishing","tags":["wetransfer","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:09.823Z","timestamp":1790479989823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/materialize/1.0.0/js/materialize.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://iod-consult.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 03:33:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 276621\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:12:46 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FfKXbqLuk0%2Bx6RJXc75m8IPNdfQYWxeJEfmwWfUTLKhgJPX03FQWaWUKZoRcJbad145k7vXiKHRD3CSa%2FbaPB%2BvSNUiqW3vVv6TnmJ9gpwGxzqvpmLD6D91P2sNLFRWjXBtg0SI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a41772007f57c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36877\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181109,"size_decoded":37897,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65357)","md5":"87d84bf8b4cc051c16092d27b1a7d9b3","sha1":"c8b4c65651921d888cf5f27430dfe2ad190d35bf","sha256":"53f7070cc4c81c278c72f7a106fd71434e766cf49b26d6ee8b0e1003d7132b3d","sha512":"3625aa6b6adc7879cddd9e63ea6480bdbc30837b62c1537188041a6923125e74510e1e42da693ffac290470f2a8d5d6f3789dff222b66b46f4e3c3e71dbcb1f9","ssdeep":"3072:SJu60GNnYpmH0I5zSMIonlnqA9kSy1UQp0kD5tgtPlF7zzc0mwEh7PnR:SbGcZYEvzc0mwEh7PnR","tlshash":"1b04e8d9b242763145e3e1a9426f260aa23721a45087c0dcb43eeddd6fbcd4821b7b7d","first_seen":"2023-03-07T12:08:24Z","last_seen":"2026-10-07T08:24:59.540076Z","times_seen":1996,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lodash@4.17.21/lodash.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:09.825Z","timestamp":1790479989825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/lodash@4.17.21/lodash.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://iod-consult.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.17.21\r\nx-jsd-version-type: version\r\netag: W/\"11d37-roVLBAJduLf0j91t7fQed+rkQ5Q\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 27 Sep 2026 03:33:09 GMT\r\nage: 1917041\r\nx-served-by: cache-fra-etou8220185-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 26751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73015,"size_decoded":27543,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4143)","md5":"9becc40fb1d85d21d0ca38e2f7069511","sha1":"ae854b04025db8b7f48fdd6dedf41e77eae44394","sha256":"a9705dfc47c0763380d851ab1801be6f76019f6b67e40e9b873f8b4a0603f7a9","sha512":"585374e3ce3ab1d28c20fe4b28da6131a5b353b629332094db8e5eb4ade0ff601161b3caf546f5f1e1be96353deaa29109687eaae098ef279f4a6964430d4035","ssdeep":"1536:X9ylPegosd1p8X4Kx2iiC0guaihfaZgb9pL/:X9cVaizgehfaZCX/","tlshash":"6a6371c9bad3f41a93a320b504af048ff13d6ea4688c9500d1a4f4ed7db856ed263e5d","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-10-07T17:22:53.361692Z","times_seen":80531,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":14,"receive":9,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.034Z","timestamp":1790479990034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitanohako.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 19:52:46 GMT","end":"Mon, 21 Dec 2026 19:52:45 GMT"},"fingerprint":{"sha1":"48:61:7D:B6:0F:6D:26:8C:63:9C:C7:CC:40:51:1E:4D:F8:08:F1:46","sha256":"85:E0:15:A8:28:61:BA:77:2D:BD:C8:10:12:D2:CB:08:4E:C5:8C:08:CA:5A:4E:2A:13:0E:5E:CC:1A:68:01:E7"}}},"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.038Z","timestamp":1790479990038,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.189Z","timestamp":1790479990189,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitanohako.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 19:52:46 GMT","end":"Mon, 21 Dec 2026 19:52:45 GMT"},"fingerprint":{"sha1":"48:61:7D:B6:0F:6D:26:8C:63:9C:C7:CC:40:51:1E:4D:F8:08:F1:46","sha256":"85:E0:15:A8:28:61:BA:77:2D:BD:C8:10:12:D2:CB:08:4E:C5:8C:08:CA:5A:4E:2A:13:0E:5E:CC:1A:68:01:E7"}}},"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T03:33:09.223Z","timestamp":1790479989223,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /vkmhdzj/lbngaxu/gnpfmrj/.xllll?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5 HTTP/1.1\r\nHost: iod-consult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"iod-consult.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - WeTransfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with WeTransfer phishing","tags":["wetransfer","phishing","financial"],"meta":null}]}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/images/next-button.png","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:09.831Z","timestamp":1790479989831,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /vkmhdzj/lbngaxu/gnpfmrj/.xllll/images/next-button.png HTTP/1.1\r\nHost: iod-consult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://iod-consult.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:09 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 21\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":223,"mime_type":"text/html; charset=utf-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-10-07T21:39:25.598285Z","times_seen":236730,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"iod-consult.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - WeTransfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with WeTransfer phishing","tags":["wetransfer","phishing","financial"],"meta":null}]}},{"url":{"schema":"http","addr":"iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","fqdn":"iod-consult.com","domain":"iod-consult.com","tld":"com"},"ip":{"addr":"91.204.46.130","port":80,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T03:33:09.659Z","timestamp":1790479989659,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5 HTTP/1.1\r\nHost: iod-consult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:09 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 26 Sep 2026 11:10:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ab7a821-3e8c3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:4.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Materialize CSS:1.0.0","description":"Materialize CSS is a front-end framework that helps developers create responsive and mobile-first web applications. It is based on Google's Material Design guidelines.","website":"https://materializecss.com","common_platform_enumeration":"","icon":"Materialize CSS.svg","categories":["UI frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Axios:0.21.1","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]}],"data":{"size":256195,"size_decoded":146349,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39357)","md5":"fa7567870527e96aedd9182d75458771","sha1":"549b6910b5caec33033ab80f9af774f7a55e21d9","sha256":"9444a89d46ca706ed407883be8e75e82ed3886d2eeb9a56b561a9ef303d2ec56","sha512":"681a4a5cc6d5ab1f393843fe516ea5e4a56fbd0c527aa336b5056a41bb1b2fc38106bc5ceac38e57ac15244af3b65d439603f64265dd9db0bd33ab83e1914f49","ssdeep":"3072:39bp95LdY8zJeCxCfwAcW8YZizScAcypdXUrnK0VzlZGmzC2f8S603U:tbp95fzAMlWVZizQcMRUTbVjIUF3U","tlshash":"2944e1f21ad120489237d54a77d83a483c28c903d64345def56d2baccfc79ae51ebb1a","first_seen":"2026-09-27T03:33:53.393755Z","last_seen":"2026-09-27T03:33:53.393755Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"iod-consult.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - WeTransfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with WeTransfer phishing","tags":["wetransfer","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.redirect_globals"}}]}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:09.817Z","timestamp":1790479989817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://iod-consult.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 27 Sep 2026 03:33:09 GMT\r\nage: 851580\r\nx-served-by: cache-lga13622-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 24930\r\nx-timer: S1790479990.869301,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":86927,"size_decoded":30876,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-07T22:51:11.127254Z","times_seen":146954,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":14,"receive":5,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.036Z","timestamp":1790479990036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitanohako.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 19:52:46 GMT","end":"Mon, 21 Dec 2026 19:52:45 GMT"},"fingerprint":{"sha1":"48:61:7D:B6:0F:6D:26:8C:63:9C:C7:CC:40:51:1E:4D:F8:08:F1:46","sha256":"85:E0:15:A8:28:61:BA:77:2D:BD:C8:10:12:D2:CB:08:4E:C5:8C:08:CA:5A:4E:2A:13:0E:5E:CC:1A:68:01:E7"}}},"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.186Z","timestamp":1790479990186,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.187Z","timestamp":1790479990187,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitanohako.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 19:52:46 GMT","end":"Mon, 21 Dec 2026 19:52:45 GMT"},"fingerprint":{"sha1":"48:61:7D:B6:0F:6D:26:8C:63:9C:C7:CC:40:51:1E:4D:F8:08:F1:46","sha256":"85:E0:15:A8:28:61:BA:77:2D:BD:C8:10:12:D2:CB:08:4E:C5:8C:08:CA:5A:4E:2A:13:0E:5E:CC:1A:68:01:E7"}}},"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitanohako.com/video-04.mp4","fqdn":"kitanohako.com","domain":"kitanohako.com","tld":"com"},"ip":{"addr":"153.122.54.181","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:10.190Z","timestamp":1790479990190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitanohako.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 19:52:46 GMT","end":"Mon, 21 Dec 2026 19:52:45 GMT"},"fingerprint":{"sha1":"48:61:7D:B6:0F:6D:26:8C:63:9C:C7:CC:40:51:1E:4D:F8:08:F1:46","sha256":"85:E0:15:A8:28:61:BA:77:2D:BD:C8:10:12:D2:CB:08:4E:C5:8C:08:CA:5A:4E:2A:13:0E:5E:CC:1A:68:01:E7"}}},"request":{"raw":"GET /video-04.mp4 HTTP/1.1\r\nHost: kitanohako.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: http://iod-consult.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 03:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 1024\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Jul 2018 11:05:20 GMT\r\nETag: \"400-570a31b198634\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T23:41:03.676014Z","times_seen":18926685,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:09.819Z","timestamp":1790479989819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.3.1/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://iod-consult.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.3.1\r\nx-jsd-version-type: version\r\netag: W/\"e2d8-Z3j+088JWjGBQaMfRVyPRmOIW94\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 27 Sep 2026 03:33:09 GMT\r\nage: 1427422\r\nx-served-by: cache-fra-eddf8230022-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15906\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58072,"size_decoded":16695,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-10-07T23:44:26.896532Z","times_seen":29240,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":1,"connect":14,"send":0,"wait":14,"receive":2,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue@2.6.12","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://iod-consult.com/vkmhdzj/lbngaxu/gnpfmrj/.xllll/?sid=Ofg2AUjBqhqTRD7TCtHMiAloWaY8bxe8nvT9BFxrCJC8eAhABUHfy665R4hqLF4Sw1F90IKi4UCz6FdME0N6NGtTMSoUlj9VqnGTAPkwXGIisKRzeeE85Thy7AiAdWEJFzYl\u0026dispatch=bG1D1JKa66FJ5B64JKAGFe3GGG1eAF66\u0026id=32H7E7a2a2JKDgDaJc3GJ145eh2JgB2FaGCAAGcEe23JEAGb5","date":"2026-09-27T03:33:09.820Z","timestamp":1790479989820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/vue@2.6.12 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://iod-consult.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.6.12\r\nx-jsd-version-type: version\r\netag: W/\"16de6-5V3x99bCiO5z1Dm6sm3QBv/uevM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 27 Sep 2026 03:33:09 GMT\r\nage: 1879558\r\nx-served-by: cache-fra-etou8220117-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 35000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93670,"size_decoded":35791,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"fb192338844efe86ec759a40152fcb8e","sha1":"e55df1f7d6c288ee73d439bab26dd006ffee7af3","sha256":"29296ccacaa9ed35ed168fc51e36f54fd6f8db9c7786bbf38cc59a27229ba5c2","sha512":"04a6d247e71fcb12dd300b04d2768b45e1522e0f3fa636e07f11e1fe4fe4502f361f2eebe87b51e612e1a1b6a59f681c4efce4cb27a1add444763a6c430cb627","ssdeep":"1536:zUXY7qLtpHt2P0e1mZ8I6H82RaLPMBlo5VV2B/S/r:iYeJpN28efKMBlmV00/r","tlshash":"149308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T12:58:36Z","last_seen":"2026-10-07T21:58:33.180418Z","times_seen":4015,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":13,"receive":6,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}