{"report_id":"5fd1e48f-0649-4968-86a0-016839a9fb75","version":6,"status":"done","tags":[],"date":"2026-04-10T14:36:21Z","url":{"schema":"https","addr":"globals-ray.ltd","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"title":"Globals Ray","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"globals-ray.ltd","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T14:36:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"globals-ray.ltd","ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":76,"request_count":76,"received_data":12864643,"sent_data":37685,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":3,"received_data":54989,"sent_data":1620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-04-04T03:31:26.869346Z","alert_count":0,"request_count":1,"received_data":1453,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globals-ray.ltd/java/YouTubePopUp.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0f26847ac4605bf99099c4f60236b36","sha1":"ff3e85dbdb2c8a77034d39dcfbe6fc83f7713931","sha256":"b1782543088ad0bbd28f744b6260c42d921560269156bb9b085f02f0e9ccd154","sha512":"3753a48c0d6102845cfcf3a554aa0ca0cbd853a8ac619b8c73e756844b152e03db4898b12a5450e8b2ddf00907caf40b362effb806669c0d9af071cb3cb4237e","ssdeep":"","tlshash":"8f216de6907220c5c9ae2989f73a403d5ab3950b984448f4b364dd67389cfcd355bb05","size":1251,"data":"","first_seen":"2026-04-10T13:06:26.759397Z","last_seen":"2026-04-10T14:36:49.498542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/custom.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45e59473bab476546906b9f01acb74cf","sha1":"3120b6841f587d233431fd17b5a9154b1d6b625b","sha256":"3da75c2aa7c3b5b896b72834828166b20a6e60006d65e20240276afcabb2e70a","sha512":"ef19e7799030d94e1177f8648da7d2fa2ae51de5ccd499fc01f153111a2c666bc43db3815e62ccb953330923d6ff4085f52eab197bbfb97342fac9aa48078e6c","ssdeep":"384:iAsoG+L+IyL+IjL+iRsEnQsj/z44zZTQ8ZnM+Mbp3:FsoRL+IyL+IjL+iRsEh/z44dTQ8ZnRoV","tlshash":"d2a23409382410ba5c7bb3759bb66304ee2d1217c102d623bdbe07841f7566d72aafde","size":21751,"data":"","first_seen":"2026-04-10T13:06:26.769442Z","last_seen":"2026-04-10T14:36:49.490344Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cb796ac99f11a254d9e9f15ce0b9870","sha1":"51bb8503b7fe625b14146193a4f31ac85a3fb738","sha256":"b190352728af320b263b7d46746b52165e46b8ecb82ce2500dff740540bc6f76","sha512":"36b13126d46eb509664f28cfbf044487be7f23365e318ad36478b181b5fe5b6ad4a0b50a974972ff94b6557e5d5f215421b23586511fc5e6edaa92fd6de82951","ssdeep":"","tlshash":"6dc08c43f030080a2886a129c386468c3234840800360d242a40608a38b3f8c030e8a8","size":151,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-05-01T03:27:50.954828Z","times_seen":2217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0ee026917c32e8a6da66642d9460cd2","sha1":"e3291127132eb79427ad5d0792e7e93bbfc4cb41","sha256":"60735758c186f54b2843614e83be903067a0a03d9feb85b26bc382a19cde058c","sha512":"80fadb46b9c1e42fc9d4fdc68282a879d4fcdcaf20ec530b4a411376dfcad5ceecc5a052b03c6db67616423494a49dee9349354881de378ff98a716cab949adf","ssdeep":"","tlshash":"8b1121ba36c764a61326a46307bf400db3e527821a2a04f0e4a4d44d6f94e85a56fb8c","size":1002,"data":"","first_seen":"2023-03-07T01:38:59Z","last_seen":"2026-05-01T03:27:50.956673Z","times_seen":1731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2aeea81b35425d35e3ec5ac5514e232","sha1":"d2fa1248ada6752dffe047e0eda95dec8d281025","sha256":"98ff69bf87d71947b85906b7408940d2fe056291f51fc96e6932256c085e71b1","sha512":"afa90d18cb02e178f9fb36a8e4c50ed0645ee159e0960711a446ec6481ff2e0e2337e4165a1e4e50e1196a8b86620fb84923e65ab16a485935416479418a2a81","ssdeep":"","tlshash":"d4e09b6a2a5a5f21c4aa387fc5cbf0a8f13171137607c525341d83e58f52518c4eb1c9","size":430,"data":"","first_seen":"2026-04-10T13:06:26.780971Z","last_seen":"2026-04-10T14:36:49.572259Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-05-01T03:40:16.133434Z","times_seen":18341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/scrollit.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c84db64854394f79b859017a00b25a3","sha1":"860adee9c5f220e1304c5ca98259ea5af773fdf0","sha256":"0e6528e8e5cbe450fbb2a902384e0fc67596b1674b137f22baa6abfd593f132e","sha512":"27a36f7222ecd1ba57c4dc24b3ef719f1ee41956a59e81cb4296ff1967c8cbf80817e1ed8173c10b69e717b409a97dd3b0cf7530aed4026649e8c689feb4df78","ssdeep":"","tlshash":"98216305f848a59197ff8190d2cf2b0781276df78c0ac5488558cc74faa5f39254bf4c","size":1419,"data":"","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-30T15:53:21.835174Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/waypointo.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2c796bc0283c990aafe100e188a55c4","sha1":"596cfb74658afc9b8bc25a159238a77fc04f0e73","sha256":"2c592d0961d8db5afc1e83a5d58a5447e6a39a48283ef9ca4829753ea440b5fc","sha512":"6b5a771e99e62ee6ff6dea2e796b92328775ac725a0c4b80e158748d98cb56c7bc3b41ba9b8b6ef32207e617c7bcea24361b33b0f4b0770a5ea5e8f8bd5f6e54","ssdeep":"192:zKSzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:zKqoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"f5027189750534221bdf90fad91f474ab337582ca40640bdb4c8d4ed28f252d676bf7a","size":8846,"data":"","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.564086Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/owl.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f80088cc8ff68f9cc0ffea0e48e04895","sha1":"21a323fae0e3a7d7f3ae176d8f7dbe31f9eada69","sha256":"c8c728d772f3ff93b5c7c65b86855f3dc0502d1bedd04a7ed1d6af06567322f4","sha512":"56854152b63423a86d7b9496aae10b1288a055cb3e8b1f91cb4d1093d11322a6a2b9163b27b9f1213161c44309c3e0c739281c00fc27fd852aff8a43500b6479","ssdeep":"768:8BA7dtMFA0fdb3kKNSRInLGhep2lcwJeL+CkbQdc71COpUQuiBt33:gAzMF3d3MxAcZ4DU","tlshash":"0b137246b3202d2a869b61e0663f160bb23a291ce414507d7d79a6de6d7dc4c213fbfc","size":42860,"data":"","first_seen":"2023-03-07T12:02:38Z","last_seen":"2026-05-01T01:17:55.408916Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery.stellar.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59ddcbcfee26de19386f1d7e30577ac4","sha1":"25c9510d69499ae3c3f0813674a65ca65866fb4f","sha256":"8ca70a34d8f596697d06753fd7305fff088a54db0bfc68fb978eee8a17ed11d8","sha512":"979d00728a5a5ccccbd491bbf176daf76dade699d80bcaf5a220b57a1ae3cee5a95b47c2b9c1a593456d08e793b30d3bfc72094ce00517c6dbb141d3d9370251","ssdeep":"192:tqYR5Z60POKYDhAbOWZTqkOhda3WH+TmFHPoMlgI9ru4QA37cmhBQbk:0YRL60POKaAbOE4QA37cmh9","tlshash":"6a42ef0c72a0242676cf733b916f238d223e74585d1284bc707dadda7b2ae997053e79","size":12598,"data":"","first_seen":"2023-03-07T13:01:33Z","last_seen":"2026-04-30T20:43:19.776186Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"efd26c4c180f2342f8c23133f4eb5542","sha1":"8c5dfd1af95d8d9dac7d9d3ad663b5120117bf00","sha256":"1af906b2e672a6ac3b3782f1214d562ab714b072e4b1c4213e81c0719d08a872","sha512":"040ceb23b175bc0c83b37892b42fb61932f2fa0cdbd1cb0e917ac0e6e33046a94390a141a5fb7efed5287243c37d8327f8ef3e27f4d0b060fab2125eda35b986","ssdeep":"","tlshash":"67618fe774f70568a837f0af7fab614523318c0be7028525786e55a01fc47a886f1b99","size":3270,"data":"","first_seen":"2026-04-10T13:06:26.782504Z","last_seen":"2026-04-10T14:36:49.574198Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c67ee363f6a460c774d3c30eb931cb3","sha1":"20b52d161a1980450c069f7aee1911236eeb85de","sha256":"d123cc580115d5d6aae232bf6103f3cc9015a7151880944682ee4c3bc912e491","sha512":"fc3d8e926495ba597302ce33d9635e3ebf92354255ac16f95a45728a19cf49d405b21ce325b313d50a4469d722f172e62b294f88f5fb4d5b4e49892fb3c6c8e4","ssdeep":"","tlshash":"1f31de6aaa630856b0ffe3029da6511d75f6f0dbcc82ce017d8c16e08f47b26f104ba0","size":1736,"data":"","first_seen":"2024-12-22T05:06:35.455763Z","last_seen":"2026-04-10T14:36:49.576087Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bb0b474dd5973727f612c6627405597","sha1":"9d9e98c8acd92ae6e6687b008af1efebcf8c3e5b","sha256":"ff4daff4061a76ea08ec48db516ebf60d57612d120e5f0d23c9089caf142c8af","sha512":"1773562ebea0803a1741a26c3cf2608a8c8494851eda814977a10b13f3eca8add9fa1936b2a136fe87b6e96a9b3485e5b649fd6baa9d61a2add5d13f84f2365b","ssdeep":"","tlshash":"6831cc6aaa630846b0ffe342ad52610d75f6f0e7cc82ce02bd9c66e04f47b15f144ab0","size":1746,"data":"","first_seen":"2024-12-22T05:06:35.457891Z","last_seen":"2026-04-10T14:36:49.57711Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/popper.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1dbc64f8b1dfe0c089dd55b09bbbc72","sha1":"a7da3b9714e3bf1f6fe61fdd30a96006431d0756","sha256":"193a81e8713370250a88db26a3b201df9f841cba4a212b567ff994693bc1bf22","sha512":"ccd711a6f662d71f238dee07fba314967df747c1f690bd4c7121e62ea5c360ef532e7b85c91310312798f26dbdc1c5f7f9506c416d7fabc3e71a1da4179b7ba6","ssdeep":"384:LCbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb96q:Wb4xGmiJfaf7gxQvVU7eziv+cSjknZ3R","tlshash":"bf82a3cc3291b07643a79167a06f960eb2339979614e9420f199f2d87c70ef9913fc7a","size":19193,"data":"","first_seen":"2023-03-07T01:30:30Z","last_seen":"2026-04-30T13:41:39.680193Z","times_seen":2837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/datepicker.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c60548477ffe2851fc526062a7f7d76a","sha1":"9ce6dc5fb0daab037f90b2f5bf6f2dd7b5f36948","sha256":"eb65b4180004822ce3cc623b33763b23a11239cb3cb4b97c2c4cf5f84678a0f4","sha512":"9ebf860f4064de163376944bc3be98ff069a2d233c922af06352c49b08e3c9f0472c22f425006f5a85313a1f00244d427b91a9fef6a650a86545e5b4d573d528","ssdeep":"1536:rnDxU+PwR9AQWuKAUrPlAXbT1P6q3qoF2ZgRc7S:rKAoWgkS","tlshash":"6273a45ab34d161e8f36122698396313ee3dc47e92429269bc9c52c836ecc1583bdff5","size":79892,"data":"","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-30T15:53:21.933769Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"01cece45c90a71db7d3616eb1b64ee64","sha1":"51ec46279d524491393c8a9d3ef1835c8947b961","sha256":"3a62321995cd73f8e559e86048958d42a12bedd237f56310881e8eff6cfb4ca7","sha512":"952bfdec446a7acfef9800e976fd6c9e12cb56c988c854644015a5b446171d2d90a8ca5c0b42b6399a57e2f952db2b83aace4f2a1b608a7aaaacaa1ee89679b3","ssdeep":"","tlshash":"8f01cb9376d41439c0ad102273bf81a6f8b126e75d3261e0541edc458db0e081faeeb9","size":724,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-05-01T03:30:48.196136Z","times_seen":3825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery-migrate.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"809b0656a1474373ca3e71d573f1b0f5","sha1":"cf29c3d8cf1ce28f65c7c1fa10b436dfaf8448cc","sha256":"a44b5727bd453959ba8f2ae37fd2359272b730ada09e80fb2a5bbffd086ef075","sha512":"fc5485c5e2d6c9263bb6828979703c9767fb1c0e2a2646acea0cc138b55ab683d2a7e08ce69a6643da3027b5016b677aa8736f6bb854a3f585e2320dc522ed7e","ssdeep":"96:VmJUmfLziQDbiTRJQupC+e8LzkgXQ9NxhpSXQTCF9FrgH4HQ8Ci8:VmJUmJARJQunFzkgg9NDKQ2HFP8","tlshash":"36e1b69db156b2b26ef675f8f17bc36f327544e82504d964a14ccae5342c898807af30","size":7084,"data":"","first_seen":"2023-03-07T12:29:40Z","last_seen":"2026-04-30T15:53:21.864889Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/pace.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"010679ddb52f015fd2459c2909d65c8d","sha1":"0cc5147b7a15d04b4b2b4b059e65e90b612e44f3","sha256":"a8b41999e50cdeff1934086a0e2cbf631d0a93f9c12574fa1e927991094dbde4","sha512":"933eff73312081522a8164ec31b449331bb14ece2ddc210cbad96d17b0cd08d3fd56d87c8ab6b75a0b66ade4bae778298c7a9a81f29b8f4a83b878d4296411b8","ssdeep":"384:N6lPvkEp9P+DELih6pMrOqcVw3or9FOJAECp+7F7LBv2SQBz:NkPvjf+gnMrb13opwGECpoF7Nvyz","tlshash":"e842c7c9b5d2b021dae7a464827f0307723e557db40e44b8e168c8e43d78a5d692bff8","size":13082,"data":"","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-30T15:53:21.827026Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery.isotope.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a4a70e9f800c3dba0c240f4d1d03b64","sha1":"85306738fa23ddcf284aa339ffd9166bffa261cc","sha256":"0fe3a736feb6cdf98ef578ecaddf6b6ac9160c7e26b3bcc363b116770fe814ca","sha512":"5b5d32c1beb7ac74e3c846a29acd8c85adaf3a954e183fb4624370feb32d656d888871631705d54640f7c748811beb99c97548002f06c4a8b007807bf4465aea","ssdeep":"768:pvLjx/Ghyc17fedVVP4eAnMQTTaubWa3sBD6PD6wokjHdWhaDzqa16dt:RPxuhj7e9P4NnbTTaub/sBD6PD6K9WI+","tlshash":"14f2c84e7340352546cbf166926f160fb137e56c6a4690acba6ad8eb1c79c0d6033fbc","size":34705,"data":"","first_seen":"2023-03-09T13:39:10Z","last_seen":"2026-04-30T15:53:21.821959Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/magnific-popup.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"480ecf294c28becf9b85e166ec46a720","sha1":"a390c2346dbf057b3c2447ac659f2010d823b0c3","sha256":"63d576b7e46477e414fccfa292d0415a192bd4a3ddb8ef4452f94d84554e18ab","sha512":"ffa20295d9a27404d15c4a771df5e1a8bd30ad704f0c381cec667f13224da0ff16852593fdfcf075fb89e49d58b0823372eaf8ca6390cde611b4865e9656b9a0","ssdeep":"768:8y+QJuEvW0bTXKMmqej6Fy1bPKwVsAopFXj2/eh:8y+QJu0W0bTVej6FMDKwVsAopFzAeh","tlshash":"cb13a6d4735f626f8be63368943a6509ee3ce131c20385beb8de206c50e49589375bbd","size":43589,"data":"","first_seen":"2023-03-07T12:01:54Z","last_seen":"2026-05-01T03:28:25.895396Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/select2.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eed1a11dd46fb577b36da33108e06d5","sha1":"dda4451183034afad7a2bb5dd105103b83d74587","sha256":"4aa4e004c1484b7f8c1d2b556deb596c4052c776878ff9fc9f354edabfa223c1","sha512":"3fec0f9301410ff6f0e84756d2377ad5d77dcae511e9ef74bc8c9429e145e03491f74134da5772e4cdc97a3ab37044100fb34dbac4f031eb68dc311ef9bee0f4","ssdeep":"1536:WVlprR31RSCgO/zMO9NsODzcgFUo3JuM6v7XvBtnAMQQ1Z1:Ulx1RSIkNtnAMQQt","tlshash":"d1e30fc86d5721744bb763bfde6a690ce729526b900582037cbc86cc5ff24209296efd","size":152145,"data":"","first_seen":"2026-04-10T13:06:26.747345Z","last_seen":"2026-04-10T14:36:49.508534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/smooth-scroll.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4498dcc0c63e490213c1528b2e86b88b","sha1":"6aac69573ee3873b3af0cde507a359829e5b6ae5","sha256":"fd60f941ffbea273e6cb1085c87755ea15ac9cf7729630b75df12d0a191d5b47","sha512":"7c9cebd4a6b12e0026010e2284d1ab0853f9f826a4146afdb9e77bc53e42806b914feaaaa6f3c6ab51eca8998153b3ecdfb8e4b82765ffd8992875a7cf9f9d8b","ssdeep":"96:s2xlFJ8Fhazw63Q2f6jkqOO161PzqdxgPtPPogHFZFKND6q440Q:3BJChGw6A2oFOO1cYgVQCFKND6q4ZQ","tlshash":"f4a1b8e53d00b57306deb1e1d46f8e4ba0388257744f6414825cecd92c7cee9a25bf2a","size":5011,"data":"","first_seen":"2023-05-26T23:40:44Z","last_seen":"2026-04-30T15:53:21.962957Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/contact.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6c7b15c77261e6912b066cc3c2f58dd","sha1":"f97c19af99034796a4edf2fb847e94dfca543465","sha256":"1d519467132ed5ee0be76e8b508fd185d55a35698fc8c44aa581b26460154b91","sha512":"daf4144f42303aa1751ce5a4d9cd38ed3e2279ebf1c3c6ca00663e12b6ec7a1fcef3604d021feb7d9f1013ad3b3d5bbc232359c88102f52722114a89301eff25","ssdeep":"","tlshash":"b461a05b36420e354ab7a7fb732b5384fd2080170e171a02b94c26b15f72e45bdb1fa5","size":3371,"data":"","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.539332Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/imagesloaded.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e99748b9e5f5092fc582badf96c74d44","sha1":"6e0142088922f09b666d725d83f53258f60acce1","sha256":"a9d5af55a8d68bcf6804f8912452601ba941a25fcedb984d14ef33946a9ae6c5","sha512":"deda3cff12876fac21928bbc9297e148d3a7bfadee99465f4432f832f4b878553f0973b07f73deeb1f3f81f6d5757fe7126ee2e66ca9a399230bca13c76bb459","ssdeep":"96:cwfN9qrHfbu49BsYrI7ZSRwJm89Q3kR0q2vRSF2ym/HRsEr44orcaJ3jv0XfLgBp:cwfKr/DbvrIEqR9AkR0xEFKsZJ3jcvLe","tlshash":"e5b1308cb76275321297b0b2a21f030f72b6506ea518819d7669ecf65cbcd492633fb4","size":5447,"data":"","first_seen":"2023-03-08T00:19:12Z","last_seen":"2026-05-01T04:11:35.273866Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/modernizer.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5215920fff7db53c1a75a7e5652d19","sha1":"cd5fc0b58908e0924e3d27ceefceda42a15e160f","sha256":"b7b33bf87e1e7b3671ecfbaeb40a261718eddc34dc08f95d1bdc03deaf319919","sha512":"66e6deae348d41d0fe58f1a6b4c0b71f37d59d2b0dceb801eb0d9208886e0600f92d186db02829b0a80188cdda3f34c7c3ad7d5106ca5354bfb1c36fb153e267","ssdeep":"384:aEPD9HW599TpJGd+xedmAnxpakrwHVXHh5pz:aiDKjecALak0HVXHh","tlshash":"a262facdb153b116839760ba61bf460ff23e9899a8184854e059c5ecbe74ce8473bf1e","size":15426,"data":"","first_seen":"2026-04-10T13:06:26.758634Z","last_seen":"2026-04-10T14:36:49.536747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"globals-ray.ltd/img/share.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/share.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 08 Jun 2023 17:43:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78452\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78452,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 826x551, components 3","md5":"9af6bd5b630a5deb5db7f3c94904f183","sha1":"9a2778271676aa8503454d35b75fcc34b5fc1aa9","sha256":"ab386d6eadb12e7bf441e33ee3dff2374fe720e8f03923a835ae46deb0b6323e","sha512":"3ee67e348fa8b7751b6715527353a48f4200f3ec3177540c3678e1b166b8ac56d6b16f4114d612b126e218fb7568b0fd49852bcf3cbe2c3ecb4dcdb95e8ddb6f","ssdeep":"1536:zBMcQ8jemLLSH7BTb6ToK9+lKLWlNhT1ucGwU1u0huOASHQlXDotdRp:zCcQ81CbB8B+JHT15MHASwlXDotdRp","tlshash":"767302122782601cd7651cb4ebd70ac3f98f32868d7ae5fe22c83dc0737b75425999a6","first_seen":"2026-04-10T13:06:26.765152Z","last_seen":"2026-04-10T14:36:49.471288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/bootstrap","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/bootstrap HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-01T03:37:09.139532Z","times_seen":122346,"resource_available":true,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/css2.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/css2.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 478\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f307687b30e6116aab70e948c6315912","sha1":"9f59d7f9e8263a91eb494f492b9efcd79fc72f66","sha256":"c330a58cb2eb1d32826b05185ed5535643cbd6ac563df76345d949e300cedef9","sha512":"5b5b35f6fcf53bc498c6105a7325fa4f3f6fe1bc5328f2c5d508a38d5bf62d200e831bf0270ee0658066cc38d125da116340153b80e26055616762bbaf675e15","ssdeep":"","tlshash":"ac51c092044ba500db535cc127df7f32ed1e62152445c67aaffe1cc4ac9ad251369b1e","first_seen":"2026-04-10T13:06:26.72575Z","last_seen":"2026-04-10T14:36:49.476522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/client/client2.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/client/client2.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 90662\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90662,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 960x1097, components 3","md5":"f8b5f144540218901eb2ed93f1bddca7","sha1":"15c78107eb219bff5c406f8a49343df5c5251995","sha256":"2b4ea8b25029e5c09bd506b465ad004e4cc9a00ee30bf9b2bd288ed56835fcad","sha512":"e09b3ac92ceef59308e6b6c0f5a5fc8659763440b31b45768cfafc0d1c87a69599f777ceaad9b8070bc8817d2e8cae383a41fb10e6dcfc0f3d3031411d7758af","ssdeep":"1536:bCV0h7rfp9BDl6wST94pEW8agnm5q+B8B2JosWA7vNV5OgMJ:bCV0h7rfpEhav8bfpAJopA7vNJY","tlshash":"8293f1b02f600d3afd289676e0861c7d62b5bfc7da8d857b22fc5ee671d89741080c56","first_seen":"2025-08-06T06:42:20.011338Z","last_seen":"2026-04-10T14:36:49.479605Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/gildadisplay/v13/t5tmIRoYMoaYG0WEOh7HwMeR3T7Prw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/gildadisplay/v13/t5tmIRoYMoaYG0WEOh7HwMeR3T7Prw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globals-ray.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Apr 2026 07:40:32 GMT\r\nexpires: Thu, 08 Apr 2027 07:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 21 Apr 2022 17:14:25 GMT\r\ncontent-type: font/woff2\r\nage: 197727\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11140, version 1.0","md5":"3503694f86f9ccdc14f6d2a3eedb6dde","sha1":"7c701512c71cb068daa744a6076bfa7ed836c219","sha256":"dae6d65a690769479a27b458a336a22572a371c90b34f00aea1e2503fbe63c45","sha512":"12f842186c0509b04b88e5c2fcd2831e87b982e13a5bba96f7c5ce2494cc3410e7bbfbad4eae65391b784c04146ed064aae01213840fbc5f1405b42d39f3f1ce","ssdeep":"192:Z6toAdOxfJ/pwAi31wvW0MB8B100X9WMyw7eFk01LfNa416oj4UG5NPf8kiGGQdR:otDCx/eRwud+X9LKdd9jArPdR","tlshash":"7932bfd2f718e5b9f13ed69537210aa1c9d0a02cd81551ae31d7c07b32dae423ce9396","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.481688Z","times_seen":6,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":107,"dns":1,"connect":21,"send":0,"wait":9,"receive":3,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/fonts/Flaticon.woff2","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /fonts/Flaticon.woff2 HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/stylesheet/flaticons.css\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21312\r\ndate: Fri, 10 Apr 2026 14:35:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21312,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21312, version 1.0","md5":"5285bb3362987c41401d934695edc1c2","sha1":"1ac675d450397044478206ac7f3a05a925fb91a0","sha256":"e446fdf3bd546a85c3f373a77b7c145040bcf6438ddc45fbe911c322ea9b6979","sha512":"1ffdd0b747d527e1b820dd6f8422a4f8db786fe11ade8beb62f79f568a4ef926ed89d2c4630954dd1197f900115bce41d5a7d9c5b986354e1c6d993ae6a9e8e8","ssdeep":"384:7KlMjKifWa7eQZB4wIY9Coxg7mDkWcpoYDqfbodXRwNz:78aew4ZY9pxgTWxfbox2Nz","tlshash":"f5a2e18c4eb88213f89b4dd560b05dc8b11d95d2b228208267d7c0edaae82af4b0f55e","first_seen":"2023-06-20T14:17:18Z","last_seen":"2026-04-29T23:57:06.187213Z","times_seen":147,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":647,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/cdnjs.cloudflare.com/ajax/libs/jquery.form/3.51/jquery.form.min.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/jquery.form/3.51/jquery.form.min.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-01T03:37:09.139532Z","times_seen":122346,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/cdn.cryptofonts.com/1.4.0/cryptofont.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /cdn.cryptofonts.com/1.4.0/cryptofont.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-01T03:37:09.139532Z","times_seen":122346,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/bear.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/bear.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 116861\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116861,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x2500, components 3","md5":"feca7250677586816714594f33ee8acd","sha1":"ed43187e3e63ef7672a35bf437eaa4ee222ddc28","sha256":"13c1bde9f13f4fac1b43e5e37d6bd06db2e151e4e4a9adcbc9263869fee6e1e2","sha512":"996d96917277f28bc7ec25ac3b9e660c2cc565c5274025cf4eb07016059aa783ff7467c537e0d05ac704d03bc993704356a7a293d470d1f74528f32bd4ffb559","ssdeep":"3072:PByyvsnfYWW2yRQiEankH+m8O42RBTj+dwq5zqSlkEijRLyOFDif:ZvcfvoEakH+m8rYBTjiD+MXgR5Dif","tlshash":"0fb302399b1b79cbd01057b8a46bb7183f0e4e16ef40e283634e22b61a7d39e9c5c55c","first_seen":"2026-04-10T13:06:26.729293Z","last_seen":"2026-04-10T14:36:49.485453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/2.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/2.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/custom.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/custom.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4264\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"45e59473bab476546906b9f01acb74cf","sha1":"3120b6841f587d233431fd17b5a9154b1d6b625b","sha256":"3da75c2aa7c3b5b896b72834828166b20a6e60006d65e20240276afcabb2e70a","sha512":"ef19e7799030d94e1177f8648da7d2fa2ae51de5ccd499fc01f153111a2c666bc43db3815e62ccb953330923d6ff4085f52eab197bbfb97342fac9aa48078e6c","ssdeep":"384:iAsoG+L+IyL+IjL+iRsEnQsj/z44zZTQ8ZnM+Mbp3:FsoRL+IyL+IjL+iRsEh/z44dTQ8ZnRoV","tlshash":"d2a23409382410ba5c7bb3759bb66304ee2d1217c102d623bdbe07841f7566d72aafde","first_seen":"2026-04-10T13:06:26.769442Z","last_seen":"2026-04-10T14:36:49.490344Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/smooth-scroll.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/smooth-scroll.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2009\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5011,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4893), with CRLF line terminators","md5":"4498dcc0c63e490213c1528b2e86b88b","sha1":"6aac69573ee3873b3af0cde507a359829e5b6ae5","sha256":"fd60f941ffbea273e6cb1085c87755ea15ac9cf7729630b75df12d0a191d5b47","sha512":"7c9cebd4a6b12e0026010e2284d1ab0853f9f826a4146afdb9e77bc53e42806b914feaaaa6f3c6ab51eca8998153b3ecdfb8e4b82765ffd8992875a7cf9f9d8b","ssdeep":"96:s2xlFJ8Fhazw63Q2f6jkqOO161PzqdxgPtPPogHFZFKND6q440Q:3BJChGw6A2oFOO1cYgVQCFKND6q4ZQ","tlshash":"f4a1b8e53d00b57306deb1e1d46f8e4ba0388257744f6414825cecd92c7cee9a25bf2a","first_seen":"2023-05-26T23:40:44Z","last_seen":"2026-04-30T15:53:21.962957Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/client/clients.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/client/clients.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 538\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1f7e1a4ac83d52f7edc54c7dffcf38a0","sha1":"2c129d18e07171ab2d6be4b32e53e0695142f612","sha256":"0f962b482a0e69e24afda0ae5de329009e655fabfef397390ea0f4b8483710eb","sha512":"3b87167faf3b248176c1c4d4419b5dd90bff50c91c3bb1025146f5dbb52d67b1089debf2bf0ffc8c09c230dfbbb719e7516d2c29284b100fe626ee3421e70d2f","ssdeep":"","tlshash":"3631c0cf01db04ad5a02c550bfd079254378a483aa0fe9a1386d75acdf8b7099bce35c","first_seen":"2026-04-10T13:06:26.737158Z","last_seen":"2026-04-10T14:36:49.494009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/pace.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/pace.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4354\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13082,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12345), with CRLF line terminators","md5":"010679ddb52f015fd2459c2909d65c8d","sha1":"0cc5147b7a15d04b4b2b4b059e65e90b612e44f3","sha256":"a8b41999e50cdeff1934086a0e2cbf631d0a93f9c12574fa1e927991094dbde4","sha512":"933eff73312081522a8164ec31b449331bb14ece2ddc210cbad96d17b0cd08d3fd56d87c8ab6b75a0b66ade4bae778298c7a9a81f29b8f4a83b878d4296411b8","ssdeep":"384:N6lPvkEp9P+DELih6pMrOqcVw3or9FOJAECp+7F7LBv2SQBz:NkPvjf+gnMrb13opwGECpoF7Nvyz","tlshash":"e842c7c9b5d2b021dae7a464827f0307723e557db40e44b8e168c8e43d78a5d692bff8","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-30T15:53:21.827026Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/popper.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/popper.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6654\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19193,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19015), with CRLF line terminators","md5":"b1dbc64f8b1dfe0c089dd55b09bbbc72","sha1":"a7da3b9714e3bf1f6fe61fdd30a96006431d0756","sha256":"193a81e8713370250a88db26a3b201df9f841cba4a212b567ff994693bc1bf22","sha512":"ccd711a6f662d71f238dee07fba314967df747c1f690bd4c7121e62ea5c360ef532e7b85c91310312798f26dbdc1c5f7f9506c416d7fabc3e71a1da4179b7ba6","ssdeep":"384:LCbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb96q:Wb4xGmiJfaf7gxQvVU7eziv+cSjknZ3R","tlshash":"bf82a3cc3291b07643a79167a06f960eb2339979614e9420f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:30:30Z","last_seen":"2026-04-30T13:41:39.680193Z","times_seen":2837,"resource_available":true,"data":null}},"time_used":1160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1092,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/YouTubePopUp.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/YouTubePopUp.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 450\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1249), with CRLF line terminators","md5":"a0f26847ac4605bf99099c4f60236b36","sha1":"ff3e85dbdb2c8a77034d39dcfbe6fc83f7713931","sha256":"b1782543088ad0bbd28f744b6260c42d921560269156bb9b085f02f0e9ccd154","sha512":"3753a48c0d6102845cfcf3a554aa0ca0cbd853a8ac619b8c73e756844b152e03db4898b12a5450e8b2ddf00907caf40b362effb806669c0d9af071cb3cb4237e","ssdeep":"","tlshash":"8f216de6907220c5c9ae2989f73a403d5ab3950b984448f4b364dd67389cfcd355bb05","first_seen":"2026-04-10T13:06:26.759397Z","last_seen":"2026-04-10T14:36:49.498542Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1084,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/4.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/4.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/animate.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/animate.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4026\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4854745194a2b0ba2fe804e932466b5c","sha1":"af04ca5b1180d0d6ac92374dcfca806e8bd80d1c","sha256":"dd21bd1a9652d7e26d12ad105e966b44177aec7369fd9c58cf83ebb58ceb49b9","sha512":"b5e13888749ad31ebe428955d08522c8f41a5d7693be8a6d9504047704b3a0fd834b3d416613f67f5a4d1da3f763c76b0354482dc0dd1d0b57e5d8abc08e055f","ssdeep":"384:Cb1E14plY5Y31k1XYEYn2W2Avlv8UXY+Y7VQV4YuYglLC37nqMOjTrm/Xi:g1E1YY5Y31k1XYEYqUXY+Y7VQV4YuYE","tlshash":"c1731b6e184111c447724f29d7de8e28eb3d91731c221eee73c2588b9fa6f6853c994b","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-30T21:35:09.728622Z","times_seen":18,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/images/globalslogo.png","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /images/globalslogo.png HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 11 Jan 2026 01:03:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22400\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 446 x 267, 8-bit/color RGBA, non-interlaced","md5":"ad3c0cc403c6079bb860ad94d923294e","sha1":"85dc0be6af21cf2670473f0dc3cd149b00eb55d8","sha256":"9db7d303e60851c2f1d6e3967dd56e910d02857c462c9a84916f9af2f31538ca","sha512":"f3222670268c62ef7e48b36be9e12618b2a0b5621c87a8fc5ca7366342c5c356ac4ff87acf81755dd4e0b82fce4a1bd88a2e2425216de28cc6a107b4cc9c6d65","ssdeep":"384:EpT9ebgc49llFFRtW2CyVjfADYkC6TsRaBXf+rlrHM9LbpRHZvWI/Y:Ep48c49PFhRjfKrFgRaBP+9abpfvj/Y","tlshash":"b8a2c1a1243736c24326a8bf8a3cb6667835abc361ad9edc5c4937c0719e5710b509df","first_seen":"2026-04-10T13:06:26.752128Z","last_seen":"2026-04-10T14:36:49.503019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/5.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/5.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/scrollit.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/scrollit.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 551\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1417), with CRLF line terminators","md5":"0c84db64854394f79b859017a00b25a3","sha1":"860adee9c5f220e1304c5ca98259ea5af773fdf0","sha256":"0e6528e8e5cbe450fbb2a902384e0fc67596b1674b137f22baa6abfd593f132e","sha512":"27a36f7222ecd1ba57c4dc24b3ef719f1ee41956a59e81cb4296ff1967c8cbf80817e1ed8173c10b69e717b409a97dd3b0cf7530aed4026649e8c689feb4df78","ssdeep":"","tlshash":"98216305f848a59197ff8190d2cf2b0781276df78c0ac5488558cc74faa5f39254bf4c","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-30T15:53:21.835174Z","times_seen":66,"resource_available":true,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/select2.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/select2.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30747\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152145,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5eed1a11dd46fb577b36da33108e06d5","sha1":"dda4451183034afad7a2bb5dd105103b83d74587","sha256":"4aa4e004c1484b7f8c1d2b556deb596c4052c776878ff9fc9f354edabfa223c1","sha512":"3fec0f9301410ff6f0e84756d2377ad5d77dcae511e9ef74bc8c9429e145e03491f74134da5772e4cdc97a3ab37044100fb34dbac4f031eb68dc311ef9bee0f4","ssdeep":"1536:WVlprR31RSCgO/zMO9NsODzcgFUo3JuM6v7XvBtnAMQQ1Z1:Ulx1RSIkNtnAMQQt","tlshash":"d1e30fc86d5721744bb763bfde6a690ce729526b900582037cbc86cc5ff24209296efd","first_seen":"2026-04-10T13:06:26.747345Z","last_seen":"2026-04-10T14:36:49.508534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1084,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/datepicker.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/datepicker.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19440\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c60548477ffe2851fc526062a7f7d76a","sha1":"9ce6dc5fb0daab037f90b2f5bf6f2dd7b5f36948","sha256":"eb65b4180004822ce3cc623b33763b23a11239cb3cb4b97c2c4cf5f84678a0f4","sha512":"9ebf860f4064de163376944bc3be98ff069a2d233c922af06352c49b08e3c9f0472c22f425006f5a85313a1f00244d427b91a9fef6a650a86545e5b4d573d528","ssdeep":"1536:rnDxU+PwR9AQWuKAUrPlAXbT1P6q3qoF2ZgRc7S:rKAoWgkS","tlshash":"6273a45ab34d161e8f36122698396313ee3dc47e92429269bc9c52c836ecc1583bdff5","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-30T15:53:21.933769Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/cdnjs.cloudflare.com/ajax/libs/jquery.form/3.51/jquery.form.min.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/jquery.form/3.51/jquery.form.min.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-01T03:37:09.139532Z","times_seen":122346,"resource_available":true,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/testi.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/testi.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 344550\r\ndate: Fri, 10 Apr 2026 14:35:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":344550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5900x3933, components 3","md5":"1d8cae689acc236ee3e0434e63c7f530","sha1":"69c390e2512d6702f52d696e2b5c7ecacc3734cc","sha256":"11f7a72e945fe4fed08939f89d29d4187f0e9a3ec2900a9723e8d30a90e457f8","sha512":"5e56a82e92c4c4638c9d048e9625248d1e31b283665f4c8fef2e5e7c458959b00d9e77a2220c17ab4241ac1dafdf3a68f946c677112964ce97c8aec664fa7339","ssdeep":"6144:C7MTR4PdLPdqY+3PMm8K97pC0Vg/YKv19zcG05MbjFsJAhkuNc6gX9Lw/rehrhGi:+m5/O47pCxv105sRzVDNWl","tlshash":"0f741239bfb9c8a3c15cf73281b53b03ab5f3f6a515a02611e0625120e273587d9a5ef","first_seen":"2026-04-10T13:06:26.743721Z","last_seen":"2026-04-10T14:36:49.511577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":538,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/themify-icons.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/themify-icons.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2699\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f559e21ac7dd73f4b2261ae6dc7309cf","sha1":"336b608f0d17194109d12e65368279973b0111cf","sha256":"28ebc5a4085a48d181ea79d666564a23f6971de7db748c1d0b95345952bbebe2","sha512":"cadfa0f2a15feb8e444d58681046ff076236aeb3cc82a64060dd4c0edfee44912d4d48c959a8b6952fa8388fdb15ddf677ae824d482d9e3cc6498c4e92c13bb9","ssdeep":"192:gRldaC7huMqJ5UmejPz35E3r4F5cvOAtH:casEDy+3HvJ","tlshash":"bb72dca49d0f3caa6795e0c16b447a195b0da738de822c6fd113bd3cbbd3a11d6c42d8","first_seen":"2026-04-10T13:06:26.728188Z","last_seen":"2026-04-10T14:36:49.513523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/client/client1.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/client/client1.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89305\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 966x1280, components 3","md5":"d243681cfacac5d2bdd4f66636a65b83","sha1":"db925eadd853deef5fcda6a2b026e77abf12e176","sha256":"73f5109e2f25ecbc8eeb17b5b564d088390ae232a07b412acb3b261ab749f60e","sha512":"44725bd2e92bc490cd9bc747bab54c4733cd18f6747fdd1d367fc4f4dfbdce24cc136cc20676c873f17d248236a07b40d5e08cced5ef7f026aadb498e819bb6d","ssdeep":"1536:GAXAs/uRA7KuX1nhEj2EOK13omLMhm5SE209pZsiCkoU/uH3dvoqwTPYAoff0FAN:EsmRU8jcK1vdBTZsu/uH9ofLYAeQTwF","tlshash":"999302518ea6d09bd954c37888ff8ad1e5a8f675ed3a0238b5fce014bb533802f4529d","first_seen":"2025-08-06T06:42:20.083441Z","last_seen":"2026-04-10T14:36:49.51573Z","times_seen":4,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":748,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/transp.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/transp.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 190115\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":190115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3600x2400, components 3","md5":"7f4de056008d67dcc6a4d12a797bb3d9","sha1":"b6686c727a9c9af88fa50411d7fce3b27d3fab09","sha256":"7c4791544c476240b60659dc6f630d4498c997bedf436e72923caf366192a663","sha512":"01450e74a47146f16dca774381fe93038029d9f91bf727ec4b0795c6440c89afb50f86497d5ea6c0cedf3aafa2d38c8ff7832f630e26305d0ca9d7e841e33639","ssdeep":"3072:kb+m4liOl5uhnnXtLRs9Vfeue9bLW1GYpBOc5fB213XbqgKtNDXFCLjEWy6UQ70g:kwli7hnlS95gZLW1GYpBd2dbqftNDXFa","tlshash":"840402619ff38cc7c80e1970895a272b36cb8970a794ddbb0a799d3864015c6cdfa6c7","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.516841Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":932,"receive":357,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/1.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/1.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/investing.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/investing.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 04 Dec 2022 00:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1056713\r\ndate: Fri, 10 Apr 2026 14:35:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1056713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 8845x4195, components 3","md5":"223493fbd8453a08ea4d3ac10e3b1260","sha1":"028cf39f05586216c0d6e9db655c7072da5212b7","sha256":"598a865754f5778fc5fe8b9c8d83118da30e12de657733868b1b3c904ade0006","sha512":"8b5494016752caa095a8004cdfc4e596800ee59c3a22a1952806ccc9c220fa39240a5f7d39f0b0e65f60200de9a30be71f5488a8021e522c778965360c37eafd","ssdeep":"12288:hGbLSCdbHJVe/ZxDv6I92qKQS7tiMRcyuDltkzKzmFdUUaHr8DEHvraB/EOzkAU2:1ujJsl9SiUcluPFdUTIIvcFGhhu","tlshash":"ae2512278b156f57c8c9033994e303287f674dba9163850b178b6932b7ba3a4fc6d724","first_seen":"2026-04-10T13:06:26.764175Z","last_seen":"2026-04-10T14:36:49.517933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":531,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/fonts/themify9f249f24.woff?-fvbane","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /fonts/themify9f249f24.woff?-fvbane HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/stylesheet/themify-icons.css\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:59 GMT\r\ncontent-type: font/woff\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56108\r\ndate: Fri, 10 Apr 2026 14:35:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56108,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56108, version 1.0","md5":"a1ecc3b826d01251edddf29c3e4e1e97","sha1":"9394f35bd2addd24666b79bfc36d4f9d247cb01d","sha256":"0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7","sha512":"2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a","ssdeep":"768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81","tlshash":"244328747f6a5b2bde839db9fe850e5160f098c61f43f123c09e98522c7b7a88979143","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-05-01T03:24:55.423025Z","times_seen":26912,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":641,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/6.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/6.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/mining.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/mining.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2260297\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2260297,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5184x3456, components 3","md5":"1a0ea75a70543016b1201dd7f8faf001","sha1":"7335d59b21cead9b29dd96f1af50dc61acfc9d68","sha256":"b90dc31c16fb8ab0e23b3eadd668a6afe966dc16878f7e871280ce78ba2addaa","sha512":"4af1733511788ba77068ccdba42ff4aa70dc28b85d65e86d7ae8ed225e9688e7703c9b4208f519ccfe59b9b7381ad2930182fe726bf12ba5fc29114dc09609d8","ssdeep":"24576:OdLx3qhA0Ii1cHRQ31+JhqjUlPoQ8Mh5I:OdLb7CcxQ3sx8MI","tlshash":"b2253343c704b2c4ee4f2a76175227f93eac9d42ec414664de6d38c17f8a3d97e85a48","first_seen":"2026-04-10T13:06:26.739949Z","last_seen":"2026-04-10T14:36:49.521197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":464,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/imagesloaded.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/imagesloaded.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1673\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5447,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5324), with CRLF line terminators","md5":"e99748b9e5f5092fc582badf96c74d44","sha1":"6e0142088922f09b666d725d83f53258f60acce1","sha256":"a9d5af55a8d68bcf6804f8912452601ba941a25fcedb984d14ef33946a9ae6c5","sha512":"deda3cff12876fac21928bbc9297e148d3a7bfadee99465f4432f832f4b878553f0973b07f73deeb1f3f81f6d5757fe7126ee2e66ca9a399230bca13c76bb459","ssdeep":"96:cwfN9qrHfbu49BsYrI7ZSRwJm89Q3kR0q2vRSF2ym/HRsEr44orcaJ3jv0XfLgBp:cwfKr/DbvrIEqR9AkR0xEFKsZJ3jcvLe","tlshash":"e5b1308cb76275321297b0b2a21f030f72b6506ea518819d7669ecf65cbcd492633fb4","first_seen":"2023-03-08T00:19:12Z","last_seen":"2026-05-01T04:11:35.273866Z","times_seen":248,"resource_available":true,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1093,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/flaticons.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/flaticons.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 737\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3692,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9b9403777219f64dc99208340a8fc57d","sha1":"4613e25f9d9401fa3098df5c23f98a6370da1442","sha256":"1e66d0209cd212355a14ffe2e3ee2ce4b1780cff29d61523af87fa1d85be5f4f","sha512":"faeb642aaf76e487106c835fd002273955b4622fbfe470d4b2f7a73fba9cd759e563cc39979c7cf763cb387df8c6a5c0d88e70a3682f8303c71f4aa00868f37b","ssdeep":"","tlshash":"7271f8f88da911da4792df41a338fda19f49b078dec0cd19c1a67d1cf5e6a140bd12d8","first_seen":"2026-04-10T13:06:26.738078Z","last_seen":"2026-04-10T14:36:49.523945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/magnific.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/magnific.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1685\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7300,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ad910fc01ceb1e494a5cbebf142128be","sha1":"6da40ea6767642ba1fea84c8d45409c14d2aac7d","sha256":"9aae795368baf56e6f23a792200fca81375a3203bbc3bf069839dbcb598d46f2","sha512":"de908f9bb9b99f386810a368826101afe21d414a44a9cea06de670a47f4668894d5b87e6a9e1187c0399e437abfc51cbf83c52f1f4316cefbacef63396b91005","ssdeep":"192:NN4yXVw9SfoRyEBpEbxHq98Z/vzz/89a7:OSUL8xHj","tlshash":"d8e1ce16db212342e537e7b5e7938729e7220063e30304abbfd15846ebfda484661fd9","first_seen":"2023-04-08T17:49:42Z","last_seen":"2026-05-01T01:45:29.685242Z","times_seen":1210,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/binano.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/binano.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Oct 2022 15:11:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 101679\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1017, components 3","md5":"2cfb56700509c0bd80dbb3307cad57c8","sha1":"1bcfde01274cb57ed05623a78c506880554a574e","sha256":"cfec5bd5ce926ff8f9f7b6fb1bce2be7c069ba3a4a24e5aaa64cb4daff594a8f","sha512":"c36e19ebd50f3b6338b5353ed5909c31f116545ced7be00b29646124f8258963250d8499e53d74e592abd9beb37bdd0ac82e3cad448d5a785f217d879da6191c","ssdeep":"3072:PEL5TSDXnDAdtSExgzYYYmXgQHtD0uZjTM:cFTSDME4QXZfjTM","tlshash":"e8a3122f9b95a9b4e7ec2d78c52147373ccb2917145ad6fec0c62c6c04c87e8a1adc96","first_seen":"2026-04-10T13:06:26.770203Z","last_seen":"2026-04-10T14:36:49.526585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/client/client3.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/client/client3.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142824\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142824,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1081x1234, components 3","md5":"6a488f44d73619b3943eddd5ff786bda","sha1":"41b11ac8c7fb4c3e04bc09f9d8bd1f187fdeef25","sha256":"67fe606516ca95ef36a0166be811d5ddcc91c2a7e8c1f2d2f0a95b60a75d9997","sha512":"c80bba2e7ded37d6b7d384dbb29a92d1967c25d507b7cb09162811c7e696ce73612b59206cc4ceffef6003f2f6ec4493fd5e38cb03014b6b625dda9b9a328c4b","ssdeep":"3072:xoBi86h0+ZEqkStasegYBMEfvTjQktF/poAuYrur7gUrS5xc/iZo:UirO+ZEqKsl3EvtlppDufNrYvG","tlshash":"c5d3f1949e884434ecada376c9894c3db356adf2febae99761fe0dd172d1134740a08c","first_seen":"2025-08-06T06:42:20.03755Z","last_seen":"2026-04-10T14:36:49.528456Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/bito.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/bito.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 719269\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":719269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4000x6000, components 3","md5":"de7f2c59754101df24a93449ef1e0963","sha1":"9488e1b5d33b3dd8fdf71cdccf80f0fbb7a2c2cc","sha256":"e5cb24b5343c5ce287e99daaf3a837b7f61bbfe9787413aa25ee89332115089b","sha512":"8199ac6fa5ccedc0694276885857193b3503e5dab5683c11e3a1a109137d73a43be8623341df1e58b21f2aebffac6767fb64a332ac4a36e09430e5b07bba67e2","ssdeep":"12288:amsPoEiQGGZOP19+M9/EHqE25OQMh3tTclEOIGh0ry/WXrTRbORqXeXDypRxtVQ:Ns6P19dSpQC9TYEOIHy/WXBbODwrtVQ","tlshash":"44e42377eb9449e3d09c3b30985b13913f9a997287d94302970e1c317ada3387c996eb","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.529425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":560,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/6.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/6.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/magnific-popup.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/magnific-popup.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12261\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43589,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"480ecf294c28becf9b85e166ec46a720","sha1":"a390c2346dbf057b3c2447ac659f2010d823b0c3","sha256":"63d576b7e46477e414fccfa292d0415a192bd4a3ddb8ef4452f94d84554e18ab","sha512":"ffa20295d9a27404d15c4a771df5e1a8bd30ad704f0c381cec667f13224da0ff16852593fdfcf075fb89e49d58b0823372eaf8ca6390cde611b4865e9656b9a0","ssdeep":"768:8y+QJuEvW0bTXKMmqej6Fy1bPKwVsAopFXj2/eh:8y+QJu0W0bTVej6FMDKwVsAopFzAeh","tlshash":"cb13a6d4735f626f8be63368943a6509ee3ce131c20385beb8de206c50e49589375bbd","first_seen":"2023-03-07T12:01:54Z","last_seen":"2026-05-01T03:28:25.895396Z","times_seen":505,"resource_available":true,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/Herobanner.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/Herobanner.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 04 Dec 2022 00:44:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95896\r\ndate: Fri, 10 Apr 2026 14:35:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95896,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1200, components 3","md5":"831399169db98583625c4092db66c929","sha1":"7b7adba4d6cad92b8f074d0089ae59dc5e19147a","sha256":"a8305b2ffc6f96f23efda9c776d1eb6bcc3c52f861c9963c5ad4134a4714eec7","sha512":"d9e91d3579cd3db42633b47fdaa7db2c8bf3ed944a07553762eee58b45819324c30ec0ca60f64f440b6150f93ec0376b439e7c42b49c39610672c6c93f6fcc7a","ssdeep":"1536:IrOlh2LzRRENLjM27QEWyRALpy9L/NrgzOmGxo21/O2BgETpfpOGWq90XNWFkL91:6M2LdAXnBWLpy9b/NXtng8fpOGANRNVj","tlshash":"de93020a5b5292a3d427adf9c48feb20ec672c74ecb65667ec064933989d305fa94183","first_seen":"2025-12-03T04:47:05.562873Z","last_seen":"2026-04-10T14:36:49.53133Z","times_seen":4,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":688,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/bootstrap.min.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/bootstrap.min.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19957\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":161796,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b728b207a427cbc0ff6f51bcabf3ff57","sha1":"b979e30095121cab3f90d2fb1901053e9563369f","sha256":"790f770bbae83b4de9d28018f902f1707b7f0fcec42b769cbda7190ec05db3f9","sha512":"245a441426f56b3b93c8a716347cc22ee2f3853e5410b3db0bad04274f42c8806bcc33280267a1e46d8d0816ee621b2dffc3f46cb550fb39949916ebc4e9f801","ssdeep":"1536:6QpcYhfPCpXNICMIp12lGvKNUbUssXMkcUnVu/5qCEbcQbbGQP8C:F/SwpCEbcQbbGQP8C","tlshash":"2ef38227f4b039185567850816807efa67be5017ea6aeff9fc233658c3c96c259f3908","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.533009Z","times_seen":3,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/news1.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/news1.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 477278\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":477278,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4000x6000, components 3","md5":"f71f808c5b95088197e87a7a5c15df4b","sha1":"b1017b9fd1bb22c932e8421197843f7cf846b282","sha256":"66c2335878fb026a4958c2514d55292654b9100987cf3ef817d4d29fab6633d1","sha512":"f738f487b34f6f936783a9f5d098fac76a5bdec6fe76b30dcf54650c6214de8ae89a4501e18123c33681c137e2a5ed7caa9d51e02e1cb44bc89e6a648f02ee02","ssdeep":"12288:hD+rj6VcsBpgZUvxo1L4Wnu9PTF0HMaLdyFBRigpbWN3dN:hD+S9pg8oRDutSpAFBRiuW1","tlshash":"f8a4023aff4c91e7c59c67b66da71b187f1388b982140911f70e2074abda758bd8e4b0","first_seen":"2026-04-10T13:06:26.754593Z","last_seen":"2026-04-10T14:36:49.534537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":896,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/modernizer.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/modernizer.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5967\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15426,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14766), with CRLF line terminators","md5":"6a5215920fff7db53c1a75a7e5652d19","sha1":"cd5fc0b58908e0924e3d27ceefceda42a15e160f","sha256":"b7b33bf87e1e7b3671ecfbaeb40a261718eddc34dc08f95d1bdc03deaf319919","sha512":"66e6deae348d41d0fe58f1a6b4c0b71f37d59d2b0dceb801eb0d9208886e0600f92d186db02829b0a80188cdda3f34c7c3ad7d5106ca5354bfb1c36fb153e267","ssdeep":"384:aEPD9HW599TpJGd+xedmAnxpakrwHVXHh5pz:aiDKjecALak0HVXHh","tlshash":"a262facdb153b116839760ba61bf460ff23e9899a8184854e059c5ecbe74ce8473bf1e","first_seen":"2026-04-10T13:06:26.758634Z","last_seen":"2026-04-10T14:36:49.536747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/contact.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/contact.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 630\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f6c7b15c77261e6912b066cc3c2f58dd","sha1":"f97c19af99034796a4edf2fb847e94dfca543465","sha256":"1d519467132ed5ee0be76e8b508fd185d55a35698fc8c44aa581b26460154b91","sha512":"daf4144f42303aa1751ce5a4d9cd38ed3e2279ebf1c3c6ca00663e12b6ec7a1fcef3604d021feb7d9f1013ad3b3d5bbc232359c88102f52722114a89301eff25","ssdeep":"","tlshash":"b461a05b36420e354ab7a7fb732b5384fd2080170e171a02b94c26b15f72e45bdb1fa5","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.539332Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlowcondensed/v12/HTx3L3I-JCGChYJ8VI-L6OO_au7B6xHT2g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/barlowcondensed/v12/HTx3L3I-JCGChYJ8VI-L6OO_au7B6xHT2g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globals-ray.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20200\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 04:11:05 GMT\r\nexpires: Sun, 04 Apr 2027 04:11:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 555894\r\nlast-modified: Tue, 19 Apr 2022 18:28:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20200, version 1.0","md5":"c8e400bbebae36502af48dcd4a30ea7d","sha1":"4ab1f2c2a30aef8c1905d94df3b199877103ddb7","sha256":"af91213cd670d6270b32ebdeb00a09625f6b74ccd780d12ff6724a14ea1efaff","sha512":"0e9eecaf8bc0c12b8fb6a389940e69dd5a962f190b5dad8c3d34a4c1620fc0848d9e57f4a5c4416b91d131449c6bd778f6ec33504f29843131cb0d0255063fac","ssdeep":"384:mmFjZyKqqs/I/tZeG547K7kCkHP5Jxc5gZz2gybZVV4EkfXjcr:myjZKqs/6veG5479hPcS2gy6U","tlshash":"9592e04bd04924efaaaa6b40a12ff342560db5c4060627cfcba5d18d22411fee9733cf","first_seen":"2023-04-16T13:20:14Z","last_seen":"2026-05-01T03:55:17.117425Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":192,"dns":1,"connect":20,"send":0,"wait":9,"receive":4,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/sajad.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/sajad.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 202218\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":202218,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5885x3923, components 3","md5":"001d551c27b47cc4c6cc542c6b9265dc","sha1":"342a02cb1aa7bc8d9dc1304995fc333072a8c055","sha256":"59985583a1e52df307886536d75873f2a38d1e38b5f84018b103e588d695ec72","sha512":"6a104258f6119035ec9ca690d73e9a2d71669088eac2ad60915d7f1311181cb8765d3dba46f6c3f53c54c303269ec9d9bf9b3589d15de712c699bac82849f4ef","ssdeep":"3072:pgYn6qPOwOC16iRze0Imew9dWX0rA09x4bDlGT/KLcljy6N1bK5guZNPsh+f:znVDOPiRqn09xiDlm/Gweg1bGgouo","tlshash":"4c14cf73db49d253c2ac1bb184cb27283f2a5ab9c71d1943979a1176f8f6368bc4c781","first_seen":"2026-04-10T13:06:26.744617Z","last_seen":"2026-04-10T14:36:49.542386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1188,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/client/quote.png","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/client/quote.png HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15824\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 211 x 216, 8-bit/color RGBA, non-interlaced","md5":"9dcd5237486ce3504d569857e3433b41","sha1":"06aa5b4d9bdb19eed2964b0e401879de2f3e1dc2","sha256":"688dab4e422dbb903b5d095b85bacabd72b4de2985dc5cbd9981c55f1dcd8016","sha512":"da4ec78d2e5ab22b39dc7f56f180ae7e8c8ab55a7059b034a33bf4556a98d0088c7af83a6cfebfbbce0791bb520d56f474433564d07d77067ceb4b9eedbfbe5c","ssdeep":"384:WPnC7QimQd6KDd6I0sY1RohNRIe64epKsHPg1qr+7jJR7f:KAmkwOYOIlAsI1E+/f","tlshash":"8262c0dbffd6cd40e15234c50aed5b91d92b0170e2c1d8dcdc9425a3ed166b36a5c9c1","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-27T17:00:57.908974Z","times_seen":27,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/client/clients.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/client/clients.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 538\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1f7e1a4ac83d52f7edc54c7dffcf38a0","sha1":"2c129d18e07171ab2d6be4b32e53e0695142f612","sha256":"0f962b482a0e69e24afda0ae5de329009e655fabfef397390ea0f4b8483710eb","sha512":"3b87167faf3b248176c1c4d4419b5dd90bff50c91c3bb1025146f5dbb52d67b1089debf2bf0ffc8c09c230dfbbb719e7516d2c29284b100fe626ee3421e70d2f","ssdeep":"","tlshash":"3631c0cf01db04ad5a02c550bfd079254378a483aa0fe9a1386d75acdf8b7099bce35c","first_seen":"2026-04-10T13:06:26.737158Z","last_seen":"2026-04-10T14:36:49.494009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":841,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/security.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/security.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1991082\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1991082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5760x3840, components 3","md5":"1d91f50ae825cf561cf6776fb5ccb4ae","sha1":"bec3df1b048b4bd78b694f2abb45cf61a9107e7a","sha256":"428aa6b35e6b6aea5a2519f8148d040dcce353d330f1e6f3a6f9de73e6e46043","sha512":"585ba35eb17f578f041c1659b37965651ed4658fcf6f0b23487527705d8a58d1cb2add66ef165c12855b0bd780dc489db5a215b478c8b655bde123de11667733","ssdeep":"12288:FcMjRYz5qUkS/yvZYX0CHLwTNmcbWQe/2Vq/MZbaHsQZaHLLxXIlNmBW6/u0Paoq:VQ5J3MmbONmzQe/2VqKbosZO6/XBRfOd","tlshash":"512533bab9b4c25e43e413325022eb5c3efdf84b495a17bb809fd3b54dd8e894a47484","first_seen":"2026-04-10T13:06:26.7724Z","last_seen":"2026-04-10T14:36:49.54509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/4.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/4.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/fav.png","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/fav.png HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:36:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 30 Sep 2022 02:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17699\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"4ecfc4bd9054f19882601305c5818a2d","sha1":"097e965b8b49805e77cd0a978ca8aded836a9063","sha256":"97e7a7498612e6b3c6afb1ea5176267ad2e91cb6413aaa92d4c8c5c15e3194e0","sha512":"9bef38ffdcb8b506f229de6fedba83b79bb2aec06609afbf66074f93e8ada2b1708b50a900680c7342e3ead692564f6681cd2f5278d090f5b8c31ed41f4489af","ssdeep":"384:TZDwUGCPCW7SXWr52ObpVd5SORbKI7M9LPrNwsSPNu:SCPCuPrRbpf5xR69jrNwsS4","tlshash":"0e82d07c5fd5c58ec71d27f21cf191546ea37147b92e14092e006525ef84c5ea628bf8","first_seen":"2026-04-10T13:06:26.748278Z","last_seen":"2026-04-10T14:36:49.546735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/5.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/5.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/owl.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/owl.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10698\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32012), with CRLF line terminators","md5":"f80088cc8ff68f9cc0ffea0e48e04895","sha1":"21a323fae0e3a7d7f3ae176d8f7dbe31f9eada69","sha256":"c8c728d772f3ff93b5c7c65b86855f3dc0502d1bedd04a7ed1d6af06567322f4","sha512":"56854152b63423a86d7b9496aae10b1288a055cb3e8b1f91cb4d1093d11322a6a2b9163b27b9f1213161c44309c3e0c739281c00fc27fd852aff8a43500b6479","ssdeep":"768:8BA7dtMFA0fdb3kKNSRInLGhep2lcwJeL+CkbQdc71COpUQuiBt33:gAzMF3d3MxAcZ4DU","tlshash":"0b137246b3202d2a869b61e0663f160bb23a291ce414507d7d79a6de6d7dc4c213fbfc","first_seen":"2023-03-07T12:02:38Z","last_seen":"2026-05-01T01:17:55.408916Z","times_seen":357,"resource_available":true,"data":null}},"time_used":1155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/owl.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/owl.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 941\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3787,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e4cd05744389be973183adc58f88ff80","sha1":"dc5aa7257a35e8750e1724df8e111ddb074e574b","sha256":"be273c8f8e702a3a71b413729a730ac626624a59df28493e52ca1875b16f94a8","sha512":"8f4ec49a50f410cbc2e19cc3d36267d78a8294987926fbfd22355348ecf56d19c5bded68f96d925e0b59f838044fc47ad715e611b58927b288369fded27bd2ab","ssdeep":"","tlshash":"4d71aaf52116114f5a0e4b611a8c9e527cbd88f29ca70989f1fb5606839fe0c912ff5f","first_seen":"2024-08-20T13:53:23.210738Z","last_seen":"2026-04-10T14:36:49.549574Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/www.google.com/recaptcha/api.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /www.google.com/recaptcha/api.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-01T03:37:09.139532Z","times_seen":122346,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/trezor.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/trezor.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 120726\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":120726,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x2500, components 3","md5":"b43336e6faa342126d12a56cc5d56129","sha1":"c787482e43195a5cd11c5d63a056c020a5602f57","sha256":"e67f8431cbabc3bafff84952129637d5a6900077da4b5062a4af70be6c28ce74","sha512":"5890ed7d310ef45d12b3afe84e2ff5cabcf2188d9437e6f430c8a0268143b893172da64da0fa66f5b8e064c25c7b1aca835a936caff3019cfa5b397e6f6bbab3","ssdeep":"3072:Okxp6Lv2eNAT18AJ10rVlw3Mmf4Lf4gr33rMsCMH4zTnxypgt:/xp6b2r8q10hlwsDsvv5","tlshash":"fac3027bfb85c167c53c4bb427e3a7162a3346b867092f21e3d649397786388ee50354","first_seen":"2026-04-10T13:06:26.768109Z","last_seen":"2026-04-10T14:36:49.550507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery.isotope.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/jquery.isotope.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9410\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34705,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32009), with CRLF line terminators","md5":"0a4a70e9f800c3dba0c240f4d1d03b64","sha1":"85306738fa23ddcf284aa339ffd9166bffa261cc","sha256":"0fe3a736feb6cdf98ef578ecaddf6b6ac9160c7e26b3bcc363b116770fe814ca","sha512":"5b5d32c1beb7ac74e3c846a29acd8c85adaf3a954e183fb4624370feb32d656d888871631705d54640f7c748811beb99c97548002f06c4a8b007807bf4465aea","ssdeep":"768:pvLjx/Ghyc17fedVVP4eAnMQTTaubWa3sBD6PD6wokjHdWhaDzqa16dt:RPxuhj7e9P4NnbTTaub/sBD6PD6K9WI+","tlshash":"14f2c84e7340352546cbf166926f160fb137e56c6a4690acba6ad8eb1c79c0d6033fbc","first_seen":"2023-03-09T13:39:10Z","last_seen":"2026-04-30T15:53:21.821959Z","times_seen":86,"resource_available":true,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1092,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/bootstrap","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/bootstrap HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-01T03:37:09.139532Z","times_seen":122346,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/style.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/style.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jan 2024 11:43:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16610\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a7892784bd36879216751ef42d87f7e1","sha1":"8799349a4cabe500fb038db4273ad3c4c9ee688f","sha256":"19e8e2fb3672b56b41c2872fa9c880bf2b70e44270db79b816d06799bd87d227","sha512":"e423eaed1563223cbb0ac09e06c003ac2ba15f88b2b0c0fcc3af56ded6f8331812648da67758d4e7490f713ea6b00129efdd307eb55d7d91c6d9d4bea1dc514e","ssdeep":"1536:kgAhZSLNKQVUAaoaZQYQbqSCbic5Ay8BnvAuQ6bmbxA4na:kgACqSCbic5Ay8Bnvzga","tlshash":"f8b360a8ea00110462339fa8a7e74755eb7c5073df0201bcbbc96209cf7766c9666fd9","first_seen":"2026-04-10T13:06:26.73909Z","last_seen":"2026-04-10T14:36:49.553272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/invos.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/invos.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Oct 2022 14:48:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 121493\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1005x989, components 3","md5":"f40d04b2a7c982df3fe68307ba0f2c26","sha1":"b2931196115980b0c01d2f3ae9af4045197688c4","sha256":"3fe105cda8c85c8c431cd8422a218aa4d6b260a2995d7f815e861c5f5b810c3e","sha512":"40a085d265b729e385cb05282dee958b0010ee6ee3fee3e2d48b5f10aca64dc0040efbfd1a05b7702c4179a468ed3391409e62770c928706b1d88242667a3307","ssdeep":"3072:Ni5jeeweivWFM5VS3ytP5sxqAUrLxre62D:NajeeHFM54GRsA5rr2","tlshash":"19c3120e720f6146f96926a6284bb723c1eadc999dd6c157e2243056748bcf9cf7c2c4","first_seen":"2026-04-10T13:06:26.75379Z","last_seen":"2026-04-10T14:36:49.554855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/stylesheet/owl.theme.css","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /stylesheet/owl.theme.css HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Oct 2022 09:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 467\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8fff53bd5643478668c59db40fbda7cd","sha1":"cb35eb57565c910b3e9c41a12a898bbbc0d71deb","sha256":"bc5d5c72a112d3144dea2f5aa11a50f917bb545034955f93c81900595c500e33","sha512":"21ee6c26e74bccb63d561c979a133a64e9abb4dd8fc6c3aec0dc75b49bde4a5d0bcc55c7c80ee5414e77e866ea395df5c8ff2ade27fc5311b9041300c51f5b1d","ssdeep":"","tlshash":"0221acc6f205120e743387e497668247ff6e283ba34949f8f69d9110cf3d804a66df68","first_seen":"2023-05-18T17:12:22Z","last_seen":"2026-04-21T09:18:19.645038Z","times_seen":31,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/3.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/3.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/worko.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/worko.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Oct 2022 16:00:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 154632\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154632,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1005x989, components 3","md5":"abb876bfb7ca5254b5d8b6f67eb1dfa8","sha1":"973e41346cf687f39db9f403a9239bbee110f128","sha256":"fc3f1b7c1ecaf2d27c077f2d30dadb09695c40507a20d9ac163feaff3ca25b8a","sha512":"2167aec47edbf8c5e415306f93b6780972c705b87e8ec13d0694b7e785a0ca38433ac2f060f44bf60fd6fa498489f4823ac69ccf6d42982f18e13c682b528106","ssdeep":"3072:+xD3TRjqRWro4VH5p6a5iAtS4d4EEL7m0nwC+SWsbRA/VlowN8HOuF:43TlxeabtS4dtg7m0nwCNqN8uuF","tlshash":"2be3129338a494b0b57a9470bf198ee8721393507b00955b1fd23aeeb3d82772d3463d","first_seen":"2026-04-10T13:06:26.757014Z","last_seen":"2026-04-10T14:36:49.557183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/1.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/1.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=BTC,ETH,LTC,BCH\u0026tsyms=USD\u0026api_key=8f168d4bfd855a28ca782d06c3b641fe7c375161c1e02cf88d3fe4035ffa2da4","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /data/pricemulti?fsyms=BTC,ETH,LTC,BCH\u0026tsyms=USD\u0026api_key=8f168d4bfd855a28ca782d06c3b641fe7c375161c1e02cf88d3fe4035ffa2da4 HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://globals-ray.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:36:01 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'none'\r\naccess-control-allow-origin: https://globals-ray.ltd\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cookie, Set-Cookie, Authorization\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store\r\nx-cryptocompare-cache-hit: false\r\nx-cryptocompare-server-id: cc-api-min-v2-26\r\nx-ratelimit-limit: 25, 1;window=1;burst=5;policy=\"fixed window\", 1;window=60;burst=10;policy=\"fixed window\", 1;window=3600;burst=15;policy=\"fixed window\", 1;window=86400;burst=20;policy=\"fixed window\", 25;window=2678400;policy=\"fixed window\"\r\nx-ratelimit-remaining-all: 0, 4;window=1, 9;window=60, 0;window=3600, 0;window=86400, 0;window=2678400\r\nx-ratelimit-reset-all: 1625459, 1;window=1, 59;window=60, 1439;window=3600, 33839;window=86400, 1625459;window=2678400\r\nx-ratelimit-remaining: 0\r\nx-ratelimit-reset: 1625459\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9ea27b3a1b8eb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4e4cc0729f58ffe051782e8bacaf6433","sha1":"73c7ea62e81ee646e70eb8d81b0c07c27bd16bb7","sha256":"8f6c088de188fc045757c4fe8f9fc0e0aa4bada4cb2013061fd25ed657cbfeee","sha512":"3d8d847b3af0e0ae2120c37da42537182c02b294aad71bfe60f258cff98f4f0e7b985de81ef21026e31d737580f29ec6fd10ea1fada9041c33dfbba07901b130","ssdeep":"","tlshash":"2fe0722c89054e0a5bcaf24e62467500dd45b240db8c4fcd1abcf9e650cae8c232a20f","first_seen":"2026-04-10T14:36:49.558542Z","last_seen":"2026-04-10T14:36:49.558542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":55,"dns":34,"connect":1,"send":0,"wait":618,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:35:57.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/5.6.40\r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=f268141114ef443bb55f289b6eec49a7; path=/; domain=globals-ray.ltd; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":93397,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (490)","md5":"1737a99dc81aeb16a763243e87509531","sha1":"7c65db794d599dc02a02133eecce16f72b96f113","sha256":"6b5338b1c7bddbb179b46ef961d506085c9daf7a821fb231482b5181d333c962","sha512":"1dd74dab376d4db9bbc30ef344afdebe880763096d79253c8b953e323b98ff13cc5a2aa371999ef519a1a982e4241c757f9df42dbe0a37da8e08b381df70a738","ssdeep":"768:xg1N0vnrMGGleFkdgW/zExs+VChacG1NnJpi:xQNurMv/onl1Nq","tlshash":"8c935f2164f2253b0093d0d6aa761b6b7fe1924bc71b9a4472fc0be90fc7d96de13609","first_seen":"2026-04-10T13:06:26.771496Z","last_seen":"2026-04-10T14:36:49.560318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":974,"timings":{"blocked":182,"dns":1,"connect":88,"send":0,"wait":605,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/images/globalscert.png","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /images/globalscert.png HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 11 Jan 2026 01:02:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1289337\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1289337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1458 x 1009, 8-bit/color RGBA, non-interlaced","md5":"51ab18e68abbdfd70bc5ef0276135377","sha1":"6f6d571eadac880bf32d22841521dc0e5a730845","sha256":"521711f46f257430c587934d144d33784b31d5f05b67dc3d1c9a7d3afbf52a91","sha512":"a0123dc568349a10ee9955b438b7d881ca1b10d26cff7951f0155455c51028d17f9dbae167003d379083734e2e244b0daf3c80461e365111286ff55aea0adf90","ssdeep":"24576:z9tusnpUfizSxveWE7cdDqS2QHWj7s9i7m1FoAYS9+PeQ5OLg03QR/:z9JpUoSxmuYo2j7sl1FUSAWQKNu","tlshash":"fb253399700f272e4f039f5e5aa9de62cb50a12d19df8007ab5a731d14b7cef2635328","first_seen":"2026-04-10T13:06:26.750112Z","last_seen":"2026-04-10T14:36:49.561949Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery-migrate.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/jquery-migrate.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2580\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7084,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6986), with CRLF line terminators","md5":"809b0656a1474373ca3e71d573f1b0f5","sha1":"cf29c3d8cf1ce28f65c7c1fa10b436dfaf8448cc","sha256":"a44b5727bd453959ba8f2ae37fd2359272b730ada09e80fb2a5bbffd086ef075","sha512":"fc5485c5e2d6c9263bb6828979703c9767fb1c0e2a2646acea0cc138b55ab683d2a7e08ce69a6643da3027b5016b677aa8736f6bb854a3f585e2320dc522ed7e","ssdeep":"96:VmJUmfLziQDbiTRJQupC+e8LzkgXQ9NxhpSXQTCF9FrgH4HQ8Ci8:VmJUmJARJQunFzkgg9NDKQ2HFP8","tlshash":"36e1b69db156b2b26ef675f8f17bc36f327544e82504d964a14ccae5342c898807af30","first_seen":"2023-03-07T12:29:40Z","last_seen":"2026-04-30T15:53:21.864889Z","times_seen":469,"resource_available":true,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/waypointo.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/waypointo.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2564\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8846,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8668), with CRLF line terminators","md5":"d2c796bc0283c990aafe100e188a55c4","sha1":"596cfb74658afc9b8bc25a159238a77fc04f0e73","sha256":"2c592d0961d8db5afc1e83a5d58a5447e6a39a48283ef9ca4829753ea440b5fc","sha512":"6b5a771e99e62ee6ff6dea2e796b92328775ac725a0c4b80e158748d98cb56c7bc3b41ba9b8b6ef32207e617c7bcea24361b33b0f4b0770a5ea5e8f8bd5f6e54","ssdeep":"192:zKSzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:zKqoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"f5027189750534221bdf90fad91f474ab337582ca40640bdb4c8d4ed28f252d676bf7a","first_seen":"2023-06-27T19:44:59Z","last_seen":"2026-04-10T14:36:49.564086Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1089,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/stranger.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/stranger.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 30 Sep 2022 02:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 541675\r\ndate: Fri, 10 Apr 2026 14:35:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":541675,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 6000x3376, components 3","md5":"14dda72e90b144bc01dd3a64ece1467a","sha1":"66ced069ffc987b0787e4a53d13feee6748aea59","sha256":"7801503951deafb130df1ca11eff1f23da82f9515b917779e49f45b74393954a","sha512":"33da2b43a44f18df2d54238118bb2b585a4f5d5f27f3584a78d7fabf0b551f89782a681fdd5f5ae8d05320d00fed16274d7c60acc236ea433618564b434b536d","ssdeep":"12288:lapgcn7bG1JnHVnH7xhGi9GGHwcUbGDvE3K1/cozDhIyAbEb+AUChqj:xs7bS1bxD9/HTUGbdFzdIib+AUGS","tlshash":"03b42344fb63abbef8e23c74091c95011019ab34f22e775acd93261bf2196b6651723f","first_seen":"2026-04-10T13:06:26.752963Z","last_seen":"2026-04-10T14:36:49.564808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1010,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globals-ray.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21144\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 16:00:56 GMT\r\nexpires: Sun, 04 Apr 2027 16:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 513303\r\nlast-modified: Tue, 19 Apr 2022 19:43:23 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21144, version 1.0","md5":"2bc7630144496092dc786ce63109e560","sha1":"723df3658078cfed03c85e47f15fc439eb4331be","sha256":"7c9c80a6c32c0619d61c28f28723e68c5f8f75163e77ee5cf64c39e640e0d71e","sha512":"754a5961176362bff5265b0adcb5265635080ca863aa48361b74aceee98db55814fdaf56ed56ab146b896f4454a5f6882d227557b88e06a1b24424a3b1f25db5","ssdeep":"384:FGsBF/l0XPCCdAj5mRQmkj5uAbKgz1SKYo8a8eo0tcwJsCPT5qJl/z1X:FVF/l0/CCI5mRw4hgz1SDhe7tcwJHAJj","tlshash":"2d92d0b95535a50f0b1f9cd777212a4fa75c02034f622d30ea82e369c1a944d73e74bb","first_seen":"2023-04-07T08:38:17Z","last_seen":"2026-05-01T03:17:04.207169Z","times_seen":6483,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":108,"dns":1,"connect":7,"send":0,"wait":9,"receive":2,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/jquery.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30268\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-05-01T03:40:16.133434Z","times_seen":18341,"resource_available":true,"data":null}},"time_used":1159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/2.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:36:00.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/2.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:36:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/realestate.jpg","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/realestate.jpg HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Oct 2022 15:57:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1027009\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1027009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 5184x3456, components 3","md5":"75fb87e1ac8f0b13cea76080817c70ac","sha1":"e343c17d57097c5b6a6b1fe097531dc880c25a91","sha256":"09e0081c1785c1c34314846ff1ca36b06499b1ddc25ab96496dbee781c7dfe88","sha512":"15a1c26586d3e47c3222590fda7f669a0dc4ec4011d41eb89a7851530d108cb0adaab6f660942fc5c5554a2aa2ea43dbd9ec8a99aa1698ebcd32afb2ddad7f60","ssdeep":"24576:Sc9qU6TPNpFWQU84Ygf6F9WX2HiYGkplThLIIPAZaf6kAc7:JJUz4YK6FDHiYGkFEIPAZaikAc7","tlshash":"fb2512138c88c343e52a87ecbe930d990f4a3a2c64c636fe41635f9f7d915616d2e25e","first_seen":"2026-04-10T13:06:26.757778Z","last_seen":"2026-04-10T14:36:49.567341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/The%20Cappa%20Luxury%20Hotel_files/3.html","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /The%20Cappa%20Luxury%20Hotel_files/3.html HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 25 Dec 2023 07:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-04-28T21:18:25.590318Z","times_seen":6806,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:58.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-01T03:37:09.139532Z","times_seen":122346,"resource_available":true,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/java/jquery.stellar.js","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /java/jquery.stellar.js HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 30 Sep 2022 02:05:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3184\r\ndate: Fri, 10 Apr 2026 14:35:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12598,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12453), with CRLF line terminators","md5":"59ddcbcfee26de19386f1d7e30577ac4","sha1":"25c9510d69499ae3c3f0813674a65ca65866fb4f","sha256":"8ca70a34d8f596697d06753fd7305fff088a54db0bfc68fb978eee8a17ed11d8","sha512":"979d00728a5a5ccccbd491bbf176daf76dade699d80bcaf5a220b57a1ae3cee5a95b47c2b9c1a593456d08e793b30d3bfc72094ce00517c6dbb141d3d9370251","ssdeep":"192:tqYR5Z60POKYDhAbOWZTqkOhda3WH+TmFHPoMlgI9ru4QA37cmhBQbk:0YRL60POKaAbOE4QA37cmh9","tlshash":"6a42ef0c72a0242676cf733b916f238d223e74585d1284bc707dadda7b2ae997053e79","first_seen":"2023-03-07T13:01:33Z","last_seen":"2026-04-30T20:43:19.776186Z","times_seen":625,"resource_available":true,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1089,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globals-ray.ltd/img/coach.png","fqdn":"globals-ray.ltd","domain":"globals-ray.ltd","tld":"ltd"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globals-ray.ltd/","date":"2026-04-10T14:35:59.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globals-ray.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 00:58:03 GMT","end":"Thu, 11 Jun 2026 00:58:02 GMT"},"fingerprint":{"sha1":"DE:D6:D6:D4:3A:92:57:90:6C:45:D1:F4:D6:B5:61:A9:09:11:71:97","sha256":"DE:39:20:54:C3:57:0C:3A:85:91:E5:DE:B8:A1:61:1D:7A:01:9B:C6:03:D5:07:C6:15:C1:E6:F5:86:23:1F:F4"}}},"request":{"raw":"GET /img/coach.png HTTP/1.1\r\nHost: globals-ray.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globals-ray.ltd/\r\nCookie: PHPSESSID=f268141114ef443bb55f289b6eec49a7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 04 Dec 2022 00:44:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 418331\r\ndate: Fri, 10 Apr 2026 14:35:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":418331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1248 x 809, 8-bit colormap, non-interlaced","md5":"1c09dc298de618a7fb6d196a9ed28944","sha1":"0385b62010c7187893ae1443748108cefcdbfbe5","sha256":"78fba150b7db61765526a10681fc8d3757c6caaea8c15a288ce753242df8d68c","sha512":"804444ffa1eeb426e11e19aced705671ae13d7e5db621aad16a0d375153a251da41897b92dd165688928c6d7580bead2aa3b8189b7bdc7ff95ae72e9c7908f23","ssdeep":"6144:gD8TNKGE5n2Lz+lc/2fZOECWPVrhENefIeNMmYf5HsBAFRlZvEze7bdcL8FkpbXE:g4TNMQYO5eVrhENzey5kze7bdlk5XE","tlshash":"33942376d4df23252ee5c258b108cd3e210d3a4f5badf2d1af7e0d41d9992eb21a4386","first_seen":"2026-04-10T13:06:26.778513Z","last_seen":"2026-04-10T14:36:49.569131Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":900,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"globals-ray.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}