{"report_id":"5d8cc6a5-0d78-481e-9ece-2e53e7f66fd2","version":0,"status":"done","tags":[],"date":"2026-09-25T05:33:13Z","url":{"schema":"http","addr":"bvousc.com/","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"bvousc.com/#/","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"title":"Amazon Refund Check","dom":{"size":10739,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8139)","md5":"cb24cd923e8ab87f93ec7ffc44f1903c","sha1":"63abb7ccb23104678382fabbebde7e1490335b66","sha256":"cb5e1317038d5739ecead92794d78bdf8e4fcd6f9b7d558be92fa46efc9f1a6e","sha512":"bbd57796a41b15aac35b6d952f249cf7ad2d01190fd211e1a1287148cb78b8953eb5163013460490ebf8f4bdff1f7ae1e10ed6bfa57a067a845cd69764d19155","ssdeep":"192:yvUiFItHYGCuV+TNIWXzD8/3O44gSobSZ/MIyri8UjtjDkb3wBTXk4uwNnFXrEVg:SFItHYGZweyC3TNWUrGlVBz/2oPAxpKL","tlshash":"7f229c62f04d3c662937a3d4f4636e2964f0f71a820e8c4126f84ae73ed7db1b492755","dom_hash":"domhash3d83446d126295f8b7314e4c538351a3","first_seen":"2026-09-25T05:33:19.694435Z","last_seen":"2026-09-25T05:40:11.790875Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bvousc.com/","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:33:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bvousc.com","ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":45,"request_count":9,"received_data":378352,"sent_data":4224,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-09-19T06:40:26.980703Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bvousc.com/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-09-25T10:41:26.465572Z","times_seen":26794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/pages-welcome-hub.DLzd7_-o.js","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"54d4415e673b6b90df4b569c70683c06","sha1":"c532172ab18853c53a0a649feda0da636427441b","sha256":"4bdeacc8213a09f6544c8070a7385f70e7bb70b06ea2d78d3d34ae40fc910bfd","sha512":"9b38ac6ab2b73673d47926d7094eb1c1bce4bdb1413374b464e36a4b1e3f79a03290bb5e07b58b9b7878db3750b444b39c6e5dc2221c5bd4f65a50301b6afb65","ssdeep":"192:QwUPniszX0fplTIlZPy0H5RrszntsIHZlRurZLDhRK25Ytb+a0b:T6niwmlTIzq0HPWqLDXK2abpy","tlshash":"7202848a791b8b3e4a67422a76466c1822593fff82580d1345f8cd3527e4ebc3737a5c","size":8305,"data":"","first_seen":"2026-09-25T05:33:19.699901Z","last_seen":"2026-09-25T05:40:11.791913Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d6a78ab53be5bc4a6d37c42e772760b","sha1":"32f076aec75ed16ecb874b48f3d3178d4cb46c81","sha256":"58a225a1053179435184af7a71e45ccce47bc71b3d1bbbf14cbf7135f24f4cf0","sha512":"4bb08b63cfb3a7d5c1f089aea9e41ca1094156c40d54d2d90a9a8ee123e58c35dce223748e88feda2cf532357deb184b1387b3045207766812025c714622ed45","ssdeep":"","tlshash":"26c012545838540200f820b8125f6617b4959a3b835c54e0d114ad7c09b814745e9963","size":183,"data":"","first_seen":"2026-08-10T14:47:35.81771Z","last_seen":"2026-09-25T06:13:03.587191Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"b80b72295a74ca2dadba9159c72aba23","sha1":"695382df219f401a7094f0e0c174dfc58a0819a9","sha256":"4d5b9ffcdae1ce74cd34964825cd13d877b564ad0a7893b577d41b6374c69f70","sha512":"51ce34136b745addf03103315544ffd2e111768111e88fba13ad61a20155bd78cd67ba5b904018192003d5dc29ca9b56a508c8c437bbe17a5bf8da5fd0948db3","ssdeep":"","tlshash":"11f0d49d3c51f46737fa3674c3338a6f3751170175c359358645cc3579644862446d8d","size":477,"data":"","first_seen":"2026-09-25T05:33:19.704817Z","last_seen":"2026-09-25T05:40:11.800735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/index-DMpWycCo.js","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"03b75ba9a7393f425c918fbf4112a3c4","sha1":"6d649dcb4717aaebf37c710a65967f56dc627e82","sha256":"9cb6cd3d7a833a026b1334a07dd325be31af52c47baf6fbae1dcbfde05999d8e","sha512":"c644ece7f60637bdb0cabf17351f6f47988454a93e5029fd4ad338a07c95becc58e211630260ca73765cb236ab5963b770b5551333ae3e5fbf797378510be4b7","ssdeep":"6144:/fcU6MPOn4FR2Fn+5iznhWTmycta0Veh296RZQozxcR8HH:/XR21+5iITzcta0VehA6RZQVG","tlshash":"bf3407e93282b03243e609f6507b0506f2392d55784e94d4f16ceceb3d6785a92bbf6c","size":231430,"data":"","first_seen":"2026-09-25T05:33:19.698251Z","last_seen":"2026-09-25T05:40:11.795361Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bvousc.com/static/entry/portal-brand-mark.png","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.614Z","timestamp":1790314364614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /static/entry/portal-brand-mark.png HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bvousc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 24 Sep 2026 13:01:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51f3c-382a\"\r\nexpires: Sun, 25 Oct 2026 05:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14378,"size_decoded":14872,"mime_type":"image/png","magic":"PNG image data, 542 x 165, 8-bit colormap, non-interlaced","md5":"fadb8e5d1532ae95893aced1c6ee1822","sha1":"d6859963024cdfed23cbbfa3e393b2535afb6844","sha256":"66753e608935e672d8e6b9f1d5be8d8dae426b085589e4952b7f9f93f87a14fa","sha512":"c2ab4329a4a947affc2456278657a156c493b57232fdd7c16d1b94e29bc89946a0307e43f72f6430fb32e924453953be1f284ef5a606bfecb0b1ea48925cf4a0","ssdeep":"384:PIjHPNcsdyvnAMpBnQTiJ8fr5l8YSJov4Fpac2Ly:gjFck2nAMpBnSiJkl8YSU4Fn2+","tlshash":"1652cf2b184bc860ce5ba5a58227d71ef53c835c79d16026e60bec57cf84de12c0e393","first_seen":"2026-08-18T01:32:15.528002Z","last_seen":"2026-09-25T06:13:03.584906Z","times_seen":19,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:47.362Z","timestamp":1790314367362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 20 Sep 2026 00:00:00 GMT","end":"Tue, 06 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:35:3A:96:51:3A:BA:A6:46:B8:B9:BC:97:39:74:7E:49:B4:6F:98","sha256":"F8:18:FA:28:6B:ED:A5:CC:73:11:D3:85:FB:0F:80:CA:B3:EF:76:89:C6:F1:62:90:E2:2C:5A:F5:E2:42:57:56"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bvousc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Fri, 25 Sep 2026 15:32:47 GMT\r\ncache-control: max-age=36000\r\nset-cookie: __uni__uid=rBACaWq2B39NPbOKA/m+Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACaWq2B39NPbOKA/m+Ag==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACaWq2B39NPbOKA/m+Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-09-25T09:04:38.139789Z","times_seen":20560,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":0,"dns":4,"connect":165,"send":0,"wait":167,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/uni.10eeaeb8.css","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.153Z","timestamp":1790314364153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /assets/uni.10eeaeb8.css HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bvousc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Sep 2026 13:01:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51f34-1ca8\"\r\nexpires: Fri, 25 Sep 2026 17:32:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7336,"size_decoded":2317,"mime_type":"text/css","magic":"ASCII text, with very long lines (7335)","md5":"bd585bdcd5c970cfbb39fa6a8d400a1b","sha1":"9d158c1cbc185311274d64ca639798288c1c4e65","sha256":"10eeaeb81f6fda8d0e9ef65a69d9e33f08357eafd5e8f7a6c511efe36d4b7cd7","sha512":"dc9933ceb803bfabb9f6b14ec8b1fa52619c25d9b0deb8a7609dcc35970f7ba3840b1d7dbac8d554d4ef20e464ffe7ae54ff2ba35f850b080cd7c77109c730cb","ssdeep":"96:Ubf2Vi8Lg7J0CQLnDSL9LBunNXVAG5MtmD/PFhZKw3:Ujj8LGJ0CQLnWL9MNXVA8MED/Phd","tlshash":"22e18471d440132ef51bcf3e12e2db8e312245b2dd523f28bb6534b48f9a1c6693a786","first_seen":"2026-08-18T01:32:15.533382Z","last_seen":"2026-09-25T06:13:03.586474Z","times_seen":19,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/index-DMpWycCo.js","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.154Z","timestamp":1790314364154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /assets/index-DMpWycCo.js HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bvousc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Sep 2026 13:01:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51f26-38806\"\r\nexpires: Fri, 25 Sep 2026 17:32:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231430,"size_decoded":88345,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50134)","md5":"03b75ba9a7393f425c918fbf4112a3c4","sha1":"6d649dcb4717aaebf37c710a65967f56dc627e82","sha256":"9cb6cd3d7a833a026b1334a07dd325be31af52c47baf6fbae1dcbfde05999d8e","sha512":"c644ece7f60637bdb0cabf17351f6f47988454a93e5029fd4ad338a07c95becc58e211630260ca73765cb236ab5963b770b5551333ae3e5fbf797378510be4b7","ssdeep":"6144:/fcU6MPOn4FR2Fn+5iznhWTmycta0Veh296RZQozxcR8HH:/XR21+5iITzcta0VehA6RZQVG","tlshash":"bf3407e93282b03243e609f6507b0506f2392d55784e94d4f16ceceb3d6785a92bbf6c","first_seen":"2026-09-25T05:33:19.698251Z","last_seen":"2026-09-25T05:40:11.795361Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/index-DMl9amc0.css","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.156Z","timestamp":1790314364156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /assets/index-DMl9amc0.css HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bvousc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Sep 2026 13:01:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51f25-6b51\"\r\nexpires: Fri, 25 Sep 2026 17:32:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27473,"size_decoded":4880,"mime_type":"text/css","magic":"ASCII text, with very long lines (27472)","md5":"b559022718b3f9d9b87cf0da46d9ca37","sha1":"5f5c7844dc90b2a1f9c82b9dcc703b754f5e953f","sha256":"0304ea13c631384e05bf2d61d14091a29f5259597d1855f28f29072a02507217","sha512":"867c3ced4eeb72f64cd86a5e2c01ab9b8ea35f5cf65d7979f93385ee252e5fc52f33f718ec9caf7d87ad7243f4631cad56d7def94a22d20ed8a017e78f9c9d57","ssdeep":"384:FgDzFzaGIK5jBzQxtGkH9213E9z4TYDChl:ODpOEn","tlshash":"10c2eeb2aa503d4be27d8b33ec911768351050a1936313f277a76f9a8d0d65f46633ce","first_seen":"2026-08-18T01:32:15.538392Z","last_seen":"2026-09-25T06:13:03.581819Z","times_seen":19,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/pages-welcome-hub.DLzd7_-o.js","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.522Z","timestamp":1790314364522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /assets/pages-welcome-hub.DLzd7_-o.js HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bvousc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Sep 2026 13:01:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51f30-2071\"\r\nexpires: Fri, 25 Sep 2026 17:32:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8305,"size_decoded":3931,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8290)","md5":"54d4415e673b6b90df4b569c70683c06","sha1":"c532172ab18853c53a0a649feda0da636427441b","sha256":"4bdeacc8213a09f6544c8070a7385f70e7bb70b06ea2d78d3d34ae40fc910bfd","sha512":"9b38ac6ab2b73673d47926d7094eb1c1bce4bdb1413374b464e36a4b1e3f79a03290bb5e07b58b9b7878db3750b444b39c6e5dc2221c5bd4f65a50301b6afb65","ssdeep":"192:QwUPniszX0fplTIlZPy0H5RrszntsIHZlRurZLDhRK25Ytb+a0b:T6niwmlTIzq0HPWqLDXK2abpy","tlshash":"7202848a791b8b3e4a67422a76466c1822593fff82580d1345f8cd3527e4ebc3737a5c","first_seen":"2026-09-25T05:33:19.699901Z","last_seen":"2026-09-25T05:40:11.791913Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.523Z","timestamp":1790314364523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.DlAUqK2U.js HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bvousc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Thu, 24 Sep 2026 13:01:42 GMT\r\netag: \"6ab51f36-5b\"\r\nexpires: Fri, 25 Sep 2026 17:32:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":608,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-09-25T10:41:26.465572Z","times_seen":26794,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/assets/welcome-hub-C-o_AcSb.css","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.524Z","timestamp":1790314364524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /assets/welcome-hub-C-o_AcSb.css HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bvousc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Sep 2026 13:01:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51f36-2119\"\r\nexpires: Fri, 25 Sep 2026 17:32:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8473,"size_decoded":2935,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8470)","md5":"9ff87ca3738a871998a7c28f82385370","sha1":"15673381760c844c2fb2a8a442e6c1b26a2ee3a9","sha256":"ff69b744996abdc2a806974c53741c2be6c6b712a7bde68491a1eb8ecabd8913","sha512":"4d033c8af1284550a4825bac2f201c6379bdc5bd6833de7425c1714daf00ecae1493703b0b4f4d643bfd22f7ad654017648f606d143f91b2bf47e4582cbefc48","ssdeep":"192:/2CPLhpEmkiO826WDaSSEsp6dqdgCQh5r:OChpdZO0WDaf+p","tlshash":"6502622376a5f138f97bd4b2b9a4069f7050f803a82357dacda3a215c9c72fb5761348","first_seen":"2026-08-30T21:25:42.470253Z","last_seen":"2026-09-25T06:13:03.578416Z","times_seen":18,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/static/site-icon.png","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bvousc.com/","date":"2026-09-25T05:32:44.583Z","timestamp":1790314364583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET /static/site-icon.png HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bvousc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 24 Sep 2026 13:01:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51f3a-1226e\"\r\nexpires: Sun, 25 Oct 2026 05:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74350,"size_decoded":73324,"mime_type":"image/png","magic":"PNG image data, 720 x 589, 8-bit/color RGBA, non-interlaced","md5":"4dd91911b613e8a47eefa9744c0eea7c","sha1":"3fdb6505a6674b07a69e7f200f0ffe69c51a8523","sha256":"309d3df30f5aaf77d8c6ed72ce863636634b06192254bc40b0cbed046f0c6020","sha512":"ecfc90f19961e4c2307e9074fd67236bc5c643c6784574bb74533198cf1914255a541b1b6af2fbb2eb0d51fc5f4a15e021e6672afdf6ed1d5470871d7a521ec9","ssdeep":"1536:uPYpDfeCwwCijjJ2UrjO+GEhPIYpoFjpotmNk1ok8Tm1mNN8:uOfeCNrjjsoORjEoppImNk1WmAb8","tlshash":"f0730203db018c5fd6a48d3a04d705897436eca748e6d2a47316fa470afad690cbbf8d","first_seen":"2026-06-24T12:29:43.693944Z","last_seen":"2026-09-25T06:13:03.584044Z","times_seen":56,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvousc.com/","fqdn":"bvousc.com","domain":"bvousc.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:32:43.820Z","timestamp":1790314363820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvousc.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 22 Sep 2026 11:00:00 GMT","end":"Mon, 21 Dec 2026 10:59:59 GMT"},"fingerprint":{"sha1":"79:33:96:B0:DB:F4:54:FB:D2:D0:A9:F5:AF:C4:2C:BB:9B:52:8C:52","sha256":"18:11:96:E9:96:DD:F4:E6:35:DF:46:63:21:E5:59:6B:DD:A4:DE:3C:54:5F:34:2C:64:07:96:24:69:2B:E4:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bvousc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:32:43 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 24 Sep 2026 13:04:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab51fd5-791\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1937,"size_decoded":1468,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"309b33b94c6af01811c96bb42dadc2eb","sha1":"503a210ea384f323847c9120bc7eb3d85ebb1898","sha256":"3f89d1f5750d2d8f7105415cc1eb062cb97c88a55260c6716f59741da34182e2","sha512":"f39148520fd9da17e925fe11b39d9fd78531012f4019da1035087543f9a5d1aaefc73cc64d46e7c801e085f4a784487dae261f82a94a7bdb2736a1f2ffff74f6","ssdeep":"","tlshash":"f24186479c10e80662f40774a662f61931d0d727838d9db4b0c9d03c9ed4bc64ceba6c","first_seen":"2026-09-25T05:33:19.703071Z","last_seen":"2026-09-25T05:40:11.798463Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":11,"connect":52,"send":0,"wait":52,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"bvousc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"bvousc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}