{"report_id":"63ae7514-f8d9-46cf-97eb-c317a1f383e2","version":0,"status":"done","tags":[],"date":"2026-09-10T20:01:14Z","url":{"schema":"http","addr":"ifes.ro/","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":0,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"ifes.ro/","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"title":"Institutul de Formare Economica si Sociala","dom":{"size":36424,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7289)","md5":"992fc05912a4cf81350ae5d3fb9fc2d2","sha1":"4e3671a9605f6e5dd7fad0c50e1ec56f9bde82f3","sha256":"74de97e97a9a47a84de21a5ec91a347f6f01413eb8119e13cd67e347054125b7","sha512":"47ed2b95a65e60a7b1215dcb36da1424891a1343eed09312d90a98ac682e96fc73b5d84f30218754b5e1b5b962e9d83c091ecf48037aa749ef31d95fe1893fd2","ssdeep":"384:nCb8p8dd99TV4OVmjweM8tmcHWdyFxw63uZLyx2qKIlY1ZUVNo5hAXwJ3vJD2ZLY:Cb8p8dd99TVF61M8/2Al280UGO/1il","tlshash":"73f2c61081a65c37226341deb03c9aeba4df5a75e30a5f45f3f61af9b2c8cf9601315a","dom_hash":"domhash46ff093da7421e6fb098a3ca39146ad0","first_seen":"2026-09-10T20:01:16.524282Z","last_seen":"2026-09-10T20:01:16.524282Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ifes.ro/","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":0,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-15T20:01:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ifes.ro","ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-26T19:30:42.620387Z","last_seen":"2026-09-03T22:11:25.588721Z","alert_count":72,"request_count":24,"received_data":217158,"sent_data":11800,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-07T00:38:34.167303Z","alert_count":0,"request_count":1,"received_data":90118,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ifes.ro/","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"introduction_type":"domTimer","is_inline":false,"md5":"e70ebd440da3cdd16baa79cd9b5a7e6b","sha1":"edaf2c3dd9e31a90468949a18f1f15986ed49544","sha256":"d78ba048b74c4b0ed1f8c29b355f970cae490cde92985e7a5876b3e8a88fae44","sha512":"6609a8520ebe643530a4eed43c64d4e81634f63a12f0e6f9b3635d65e01c366de0f6532f5f9b0fbe275a530df1cda272182d83b327e694417746f5ae2946ee06","ssdeep":"","tlshash":"b7c00000c8200883088a80308802c28080000002ce0220a0020008280000228200a000","size":170,"data":"","first_seen":"2026-09-03T22:11:25.026163Z","last_seen":"2026-09-10T20:01:16.551467Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"c80c629e422dfe90f827fd8afdcb770e","sha1":"5fcb6b38f45f03b8a92f0cad57e191f687b6ad0d","sha256":"c6987d235c33e66eabadbf3cba16e41fa0af814451cce4d908c9103714342f24","sha512":"109e64df5d7d8d3ac406142cb5707a988f44f5cc82304ecb1247bce3d42659719c12cc4b19ed8da5f29569859e52519561fd817c8c423709d0efce901279b422","ssdeep":"96:/uKnt5Vd9um91VSntrvOt4bQM0VYLjwstHDMoJRuN2YLc/96c+bTv9YT:G8vVd99Tev84bp0VmjweMobtmcFJAG","tlshash":"c2c19544533f44e885ea63b6762db8e9d47e4b72910d6c81becc40bc774dca722e0975","size":5831,"data":"","first_seen":"2026-09-03T22:11:25.030799Z","last_seen":"2026-09-10T20:01:16.552913Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/js/agenda.js","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1438d16b8d992c94cc74a8e9da3ff1ed","sha1":"78bcd1ef6eaeb338fecb5c92f8c9e2e2994174a7","sha256":"961a15fb38c1572b6583a43cc23991a239079cb76f7c9f1339f95ea95107354e","sha512":"afc4148f09f45fb4a7c4b050449bcaa968c2fe521f4dec96e63437027b9369b85bf548cd30cca1515c554165b868b5ad10d4de38f2f53883d5fbd6f4966944a8","ssdeep":"96:/Pk/fXEwbHGa/H3vEHhYIMdTtOTZnVvicxuM08T:0/fXtbHGsqUTtOrV5T","tlshash":"5e9178423627c136cb7b569799b8e80bf915c1b0a214cee1f2aca59934d1d14b1f5cf2","size":4559,"data":"","first_seen":"2026-06-27T16:24:15.433278Z","last_seen":"2026-09-10T20:01:16.54148Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"introduction_type":"eventHandler","is_inline":false,"md5":"de9d06db7e682c0dd147d89f12452d7c","sha1":"4e2910e2e0802cd5af521471964232717f198c7a","sha256":"426a6aee57bb4ea458971217e594b14d5dd10739c19ed0a0061d0fa0a5d1bcf6","sha512":"3bacbc9397c7cdc4c4e3c28d833eb92768f6c152e85ff8aac394dd496b2c244f88d9fd010e90df4572d62ca224055dd664926ad58b3f0bcc8ec575db4241d359","ssdeep":"","tlshash":"2ab012687c65595340a4056c145d8ac1127f16030b03d330552d016c30212fab2ec20d","size":90,"data":"","first_seen":"2026-09-03T22:11:25.022002Z","last_seen":"2026-09-10T20:01:16.554104Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-13T02:33:24.728388Z","times_seen":271552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/js/prototype.js","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f1a3b63fe59ce5ec9de7a86f825b787","sha1":"c9664029b47f98b41c1606e387605561006c50b7","sha256":"dd41772c0acd55998c8794377169422227238bf06a705fe1fd2b5cfcb92ab4f0","sha512":"b5497d8ffc072d5e3425fc540a45e0b3dff0495e7f4d35d2a0e941ca55da041ee71b9063bcf40ba005169bfd138c1fac29bb0d897150dfbfc66996e77f7cebd4","ssdeep":"1536:LUGe94udcN+UPMfy1fuyAZDjvaSMIifQxSOsoLtE8HBxd/E3n6Uh0GQ+eVxs5C13:AGruHUoxLLjpcX629Q+eVxmC11pHQVmj","tlshash":"33931e887de72029521bf13e6a9f414df279400b1409ed51b9ac46e46fa1d3862fefe8","size":96046,"data":"","first_seen":"2023-03-10T00:21:01Z","last_seen":"2026-09-10T20:01:16.530373Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ifes.ro/","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-10T20:00:45.275Z","timestamp":1789070445275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31400,"size_decoded":8271,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7377), with CRLF, LF line terminators","md5":"1ddf548b6eddd022166a2b8aa3d1529c","sha1":"cfc48adfc258d42ad440e8b49b39cd9fed865ead","sha256":"e235adc3504087610b73b5843acade3a4ac4773325d4c4e58bdebf8f8eabb729","sha512":"1e4d309151de6e20099782e6ddff9a01bee5a8a86d84f19cd737cb071b8e4a3208d141055af39869d29224f8c1c2de501453f114898e81cec185abb5db51aea7","ssdeep":"384:IGOp8dd99TV4OVmjweM8tmcHWFyFGv2Yq9ciAUI0RsANKwYqmoyjm2AxjOR54hNJ:IGOp8dd99TVF61M8/2Ia2bISd","tlshash":"9ae2fa1062ba4c27625341edb275dedbe09f5c39e2051c16fbf71eecb2c8ca70225266","first_seen":"2026-09-10T20:01:16.525698Z","last_seen":"2026-09-10T20:01:16.525698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":20,"connect":40,"send":0,"wait":161,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/styles_agenda.css","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.954Z","timestamp":1789070445954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /styles_agenda.css HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Dec 2008 07:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 444\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2681,"size_decoded":752,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"266c694aae0be9cb5cce6451a7fbf7c6","sha1":"d459ab574c8d415cae247a2bd2688f2d8f22af99","sha256":"17e08ea0c3057e2bd3ec5e73135e4bc8162d5df4e4e4f3cd60086b0692a6083f","sha512":"90e57c44b8fd8bc2bd8e6126071a14b154b905e3ba1e8dfd630b618382515af251769f98738c7416dddec95cfc5a4b9ce59b4e3e229bd7ce930c14413e75ea57","ssdeep":"","tlshash":"51515c5ad919034576172b83f253faa3789081a9ab7b237035c57e9ac8cadfc6740384","first_seen":"2026-06-27T16:24:15.42943Z","last_seen":"2026-09-10T20:01:16.526885Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/banner_ifes.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.068Z","timestamp":1789070446068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/banner_ifes.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16319\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16319,"size_decoded":16586,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 725x95, components 3","md5":"08b1d950210ac13034dc414dc1b01643","sha1":"fd5cf54a4a6f900db45412ada9e24cd0db1e2ff1","sha256":"58580955e0db1463343cbe148b681fe20e8d33c304498f07747658ecd657c11d","sha512":"03b7a8182839ec59fc37f6d4100723db77438a8d1be3a84fc3ba1399e0a14aa0ff5dcbb9f6d939a16e9cc45a3da88cd9d42d8a3656b890e7c34d51b6647914d5","ssdeep":"384:citO2Fr6QqGxJfg/mM0QI91NqnCVxDgyJdxXfYwfp3qGm:citOor65GxW/90l9LqKJJdVQwh3U","tlshash":"4072c00871750b39e9218cb9e1f535d251be21192413ba005b7576eb0c3aa257f8fbee","first_seen":"2026-09-03T22:11:24.997393Z","last_seen":"2026-09-10T20:01:16.527949Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/menu_submenu.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.076Z","timestamp":1789070446076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/menu_submenu.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 322\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":322,"size_decoded":587,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x23, components 3","md5":"b7305f2c81d0b11b88e28ccea6f98f23","sha1":"25e72bc1bba0d120629f50e40b86a12321fcb48c","sha256":"0685bd1a7df59813ae87b365461c8ad845e99cd26ac7d83fb1682fa3c393fae0","sha512":"562bd10368dd11b90e6c919a1bb1a73b7b236bda9bdf71feee1f0e064ad50f2f6aed2886aa53ac1a7c7b7a953b709e0f88c5a9525418d2d2732b45683d64b719","ssdeep":"","tlshash":"12e022332341ef2bede021306ab6d32c0fad26cb90176f4d15f9bc607ca92e40891048","first_seen":"2026-09-03T22:11:25.000961Z","last_seen":"2026-09-10T20:01:16.529057Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/js/prototype.js","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.957Z","timestamp":1789070445957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /js/prototype.js HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 12 Dec 2008 07:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21204\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96046,"size_decoded":21442,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3f1a3b63fe59ce5ec9de7a86f825b787","sha1":"c9664029b47f98b41c1606e387605561006c50b7","sha256":"dd41772c0acd55998c8794377169422227238bf06a705fe1fd2b5cfcb92ab4f0","sha512":"b5497d8ffc072d5e3425fc540a45e0b3dff0495e7f4d35d2a0e941ca55da041ee71b9063bcf40ba005169bfd138c1fac29bb0d897150dfbfc66996e77f7cebd4","ssdeep":"1536:LUGe94udcN+UPMfy1fuyAZDjvaSMIifQxSOsoLtE8HBxd/E3n6Uh0GQ+eVxs5C13:AGruHUoxLLjpcX629Q+eVxmC11pHQVmj","tlshash":"33931e887de72029521bf13e6a9f414df279400b1409ed51b9ac46e46fa1d3862fefe8","first_seen":"2023-03-10T00:21:01Z","last_seen":"2026-09-10T20:01:16.530373Z","times_seen":20,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/brosura-ifes.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.967Z","timestamp":1789070445967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/brosura-ifes.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 11 Jan 2013 10:53:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3268\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3268,"size_decoded":3534,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 120x24, components 3","md5":"2ac63f7c3e9257c0cbf38597ee8361b1","sha1":"7b1c24454200af2ff1dfe6d23dcebc39515b59b5","sha256":"3ea8906ec0d3b9a2409ede9d8998acaabd0a17ac0ae0f5ec22d44745920d4863","sha512":"dc8cba09726ad013ed8c5d7ac4965982c5f464de8f1ae7effd8206ed2d0c213991c0261c602202ade977957c42976e4c346724cfe993255fe34c6290575d8808","ssdeep":"","tlshash":"9e613c4726071d1ae0fc1439852ce93ab51b6941732ba9b1316ceda9b1f80764ab054f","first_seen":"2026-06-27T16:24:15.446233Z","last_seen":"2026-09-10T20:01:16.531561Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/menu_selected.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.256Z","timestamp":1789070446256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/menu_selected.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 673\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":673,"size_decoded":938,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 103x22, components 3","md5":"aa78a0d2bda270697ec6417a7123a856","sha1":"27d1e0e3d1c6e04c0c535bc2df6ebf5f68bb5234","sha256":"667c5bc894c471261756760b057c9c22e78d368bbb231559ab0e8198dcea70f7","sha512":"07d2bf022e61171a909b389eae519ce63dc2b4e769eaa0a995841e3de997b93a96dff10770f99f989aac98debf39a8eb19990ad3b4cbb3332157473cc9780ce2","ssdeep":"","tlshash":"e50196ebd2839b0bfc50223313b84f457bec148b7003ab0c4ab5d4206c046590c500bc","first_seen":"2026-09-03T22:11:25.008488Z","last_seen":"2026-09-10T20:01:16.532576Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/proisnvlogo.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.971Z","timestamp":1789070445971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/proisnvlogo.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2015 09:49:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18851\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18851,"size_decoded":19118,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 190x150, components 3","md5":"63249df773b0b928ebbd8ee094f65f7e","sha1":"e81f9c75fcc2f8122769f6e727a469183c304b03","sha256":"e30bc1a6f8f74455d480abe0e1c16f7f1d5ef5e1314d9c6f5eae7054c144ceed","sha512":"a1fddeded51afa9f27b139cad3117601ccd2408ff1753b07a65cb49d8a33f275d9d4d58ce1ee7708a56fa18d42502aa92f0d8a30323e1297ef39086b7016f7d2","ssdeep":"384:9YQN4UxqEZawd+OHH67sWCWrDqyMBP2tOoDUpv28gTCsLwyFh1f:CQDx5ZaWJYXJ9ZtOGiu8g5LwyFh1f","tlshash":"8482e15997ab0fe3ebc5d4710292d433f4494c0b74934a8378bec98dbf5d214c892a2a","first_seen":"2026-09-03T22:11:24.989642Z","last_seen":"2026-09-10T20:01:16.534072Z","times_seen":4,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/shadow_left2.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.073Z","timestamp":1789070446073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/shadow_left2.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 407\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":407,"size_decoded":672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 17x95, components 3","md5":"a7766438ea3c5e32a71fe17a404a968d","sha1":"29b14022881d2637f8b5f90b95e93e11c7db7348","sha256":"ee6a0d03e9af44be9647beabfaab179349a0431961184dcb8c4b97884cf7d723","sha512":"093987c301115137914ac6a93afddfdd40ffb4b678c687e4a4f557431c2c00b4bfffbedc4f21b39b514342dbe2d2f72868c78052fc351da153bbd5df9c7385ee","ssdeep":"","tlshash":"9be0cdb63704df02ef9224317170476e47ad60c96027bb3d14f035a96c881b8158440c","first_seen":"2026-09-03T22:11:24.964493Z","last_seen":"2026-09-10T20:01:16.535088Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/shadow_right2.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.079Z","timestamp":1789070446079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/shadow_right2.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 406\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":406,"size_decoded":671,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 17x95, components 3","md5":"409993c7c3d759af84b5d462e0b1c31b","sha1":"7f4750790fc664f650b5f6da1c3e02c75a849dea","sha256":"0e4b92be59c3db99bc86d476f49f607e074ed498e1dcf9d0731ad8ca612b60bb","sha512":"1794235dfc17d4e031855d906c37bd525f282a1ec96d87200009a889ecd1123bdaa54407fd06da71ae54afd0da8ca59cb555ec08607ee752626b337fd9093e8b","ssdeep":"","tlshash":"00e0c2bb36268b33fc9290f0357be75c0f7d1b4990834f0c46f3a0a268721c00510256","first_seen":"2026-09-03T22:11:25.003326Z","last_seen":"2026-09-10T20:01:16.536173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/styles.css","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.952Z","timestamp":1789070445952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Apr 2012 11:54:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 872\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6957,"size_decoded":1358,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"56920858a3bf561c35cbdab45bf92c80","sha1":"4ef2293b48ae62379ce077c3a4917a0e25293060","sha256":"811fb54e35ca071dc347291b6f4d55654ac1c91413a0ce60553bb3eff4330e8c","sha512":"91c4c4f5e5a1d826d994fed3d332ea70b73e8448ea2cebb58fcb78bd37f6852195388f8907dc2ab38d44141578eb4e131c372ed40e221d3ed6ff4ac27004aa6f","ssdeep":"192:r3axiapJJ5iHiVSYkDMWViTVKnEwoiWAwRP5FCm9/jjZFUNzMzY+Ix:uBO7","tlshash":"51e1be47d5055381f50b3bc6b22376d3bc5485b6aab783a076c8bbd1c8dbc74a391398","first_seen":"2026-06-27T16:24:15.432313Z","last_seen":"2026-09-10T20:01:16.537307Z","times_seen":5,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/eza.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.968Z","timestamp":1789070445968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/eza.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Aug 2009 14:39:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3194\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3194,"size_decoded":3460,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 110x61, components 3","md5":"62ca9bdeaaa48603b6677578b7f41425","sha1":"3a88555c710fe88863b256f5d2a8b88d661ef2c2","sha256":"43cae77d1dc70aa6623a880db824e963dffed910e6ff2426be55de963813d3bc","sha512":"d63505d8c52d642dbc3ccd528cbada42992c4e451ad24fb069e984b5b838e9e2d8bf4ee7c07039ac30f88d789ce750063729f8507e7d023ef96f1eb61a24214a","ssdeep":"","tlshash":"61613d2e3f50d707fcb4397551388a6ef600f885411fce2a14ba6c5785795ad08d4d58","first_seen":"2026-06-27T16:24:15.44353Z","last_seen":"2026-09-10T20:01:16.538452Z","times_seen":5,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/airue.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.969Z","timestamp":1789070445969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/airue.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Aug 2009 14:40:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3343\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3343,"size_decoded":3609,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 93x58, components 3","md5":"aa9d13053de31dfc3e8326b4a5d36d4a","sha1":"6815cd954bc760db5d55b011be3a64cd9fe9f6f1","sha256":"ea4f5f287b46c6367e1705466a030d5c8c764b7c1bf4c109393c3500d68c7615","sha512":"5f1888ba94acf03e86e994d5c1c42f1456d47d6f24983c119e1a92e6abc3a16500a1220cfde23c3adc03232509bbc566dff74568c63adeeaf03be7dc75f49ea4","ssdeep":"","tlshash":"a1613ad06f095b2fe6fe107655f02fa1e20c8c48d10c8e8a9bbe2941b935c650ed595c","first_seen":"2026-06-27T16:24:15.43792Z","last_seen":"2026-09-10T20:01:16.539443Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/v_bar.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.243Z","timestamp":1789070446243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/v_bar.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 362\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":362,"size_decoded":627,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x23, components 3","md5":"916c8cf33174c765b2eb3c5cbc99f2e1","sha1":"8bbbc29a4e36d9397243c96b5cd18153fb94e529","sha256":"0aa3336bfd012929551b8de52fb90fcb9d821954a630ce82967795875994c029","sha512":"4e88478682d517835263506af11cd7753c4c17acd0a5209a6c4b4dd14a2375f4f5ec40d40eeeadc5eb679d3a324d40f9d66241ca40f10731d4d4b529e7ce440c","ssdeep":"","tlshash":"64e02e336201ef2fcdd222322ab4c3182fac258a70039b0d0af96811b9aa2e00d8108c","first_seen":"2026-09-03T22:11:24.947579Z","last_seen":"2026-09-10T20:01:16.540442Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/js/agenda.js","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.958Z","timestamp":1789070445958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /js/agenda.js HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 12 Dec 2008 07:43:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1475\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4559,"size_decoded":1712,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"1438d16b8d992c94cc74a8e9da3ff1ed","sha1":"78bcd1ef6eaeb338fecb5c92f8c9e2e2994174a7","sha256":"961a15fb38c1572b6583a43cc23991a239079cb76f7c9f1339f95ea95107354e","sha512":"afc4148f09f45fb4a7c4b050449bcaa968c2fe521f4dec96e63437027b9369b85bf548cd30cca1515c554165b868b5ad10d4de38f2f53883d5fbd6f4966944a8","ssdeep":"96:/Pk/fXEwbHGa/H3vEHhYIMdTtOTZnVvicxuM08T:0/fXtbHGsqUTtOrV5T","tlshash":"5e9178423627c136cb7b569799b8e80bf915c1b0a214cee1f2aca59934d1d14b1f5cf2","first_seen":"2026-06-27T16:24:15.433278Z","last_seen":"2026-09-10T20:01:16.54148Z","times_seen":5,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/sigla.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.966Z","timestamp":1789070445966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/sigla.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 08 Oct 2011 13:54:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7611\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7611,"size_decoded":7877,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 120x75, components 3","md5":"ff0f44d5df6449b51094e147385c2ee8","sha1":"251557fde114c6ada7e964658ca1671c68918b7e","sha256":"fd08c6f7b79ea6b62c15cf00dac59da5151e16234e2f88c75b7504628cb61e13","sha512":"76f25fb824d3afe9f924bd83d9bc22bfeb84f74dfd6979b82811a45b52bc3798ffd8bd2014166e278df6a755475f40f7cba0c7ede773bbb45356f89fe3752ba4","ssdeep":"192:QWP7dnciO4bpi7Vo6D5aSXBJMRQopkwDSBGcc:QWPmilpi7VooYSXURNu9c","tlshash":"49f19d217b41bd26c9d9f6300715d231ee9cd412aba74bd53c97387ab1301eb1a41bdc","first_seen":"2026-06-27T16:24:15.437015Z","last_seen":"2026-09-10T20:01:16.54235Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/menu_unselected.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.075Z","timestamp":1789070446075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/menu_unselected.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 349\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":349,"size_decoded":614,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x22, components 3","md5":"05f40aed04ec7f32ca8693729f22a3a6","sha1":"00d94b120b81b66016bc477bb4d2297317966033","sha256":"879e5c04a3f2382a1995b72c69f8139c51735f44e526dc1a86bc3608799e84d7","sha512":"9c2581684022e1a718bee05399a90d09bcb3f3521c8a6aafaa554623f142b079f13f02e95ac5c0ac90e3d61524e31b9f35c53e34c35b59f6b4dd498ac3303fc5","ssdeep":"","tlshash":"1ee05e7a2341db27dca0103025b5c7581aac6686b1069f9e1af2656168ae3a88a91159","first_seen":"2026-09-03T22:11:24.953756Z","last_seen":"2026-09-10T20:01:16.543577Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/spacer.gif","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.964Z","timestamp":1789070445964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/spacer.gif HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 12 Dec 2008 07:43:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":306,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-09-13T01:36:52.536227Z","times_seen":113661,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/shadow_left.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.065Z","timestamp":1789070446065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/shadow_left.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 400\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":400,"size_decoded":665,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 17x95, components 3","md5":"a3e84c4ef75906711a2e562ad3e34661","sha1":"b92cdb13bb58d3b74038baa04681b98de3e34d1a","sha256":"627c96b8e905c41b3c27e15dc7bc395d0c4a5b02f392b64b17ba17ae70108f78","sha512":"9b981eeaa572aa1e81a9d52853188e99480c6d36313f90d842095d569edd0e44e603c8176b2713a1d856e8aaf773a53192f6428b1483723b1c62119c74b7d63a","ssdeep":"","tlshash":"e7e0c263ab00cf2beca6503421b2470d5faca382a0030e8e24f2b3506e581e404da104","first_seen":"2026-09-03T22:11:24.960791Z","last_seen":"2026-09-10T20:01:16.545038Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/shadow_right.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.070Z","timestamp":1789070446070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/shadow_right.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Dec 2008 07:43:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 403\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":403,"size_decoded":668,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 17x95, components 3","md5":"43aa6de10e31f62ea1e9aa26e27d35da","sha1":"88a46ba761b3c570482ffbd6e6b2e223632bf93c","sha256":"9b06a4ba157b1e3fe901c74f912f35e51d0cc984de9ae5592fecaa27c44dcd06","sha512":"25855ebbf78f2f298b03dadb068dadd357f8b62928f55f736adeb044b28647b24a2bfd80eb3b9043877611880a6cc10a29f38c52bc9d2d785d1174c9ad614421","ssdeep":"","tlshash":"a6e0722a3390bb12e8f1043032b2924c1afc93cb040f1f8e26f0f2203cd17c01a06094","first_seen":"2026-09-03T22:11:24.962789Z","last_seen":"2026-09-10T20:01:16.545957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/rightarrow.gif","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.078Z","timestamp":1789070446078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/rightarrow.gif HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 12 Dec 2008 07:43:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":312,"mime_type":"image/gif","magic":"GIF image data, version 89a, 4 x 7","md5":"ce7d62e54e2e90e741258e6d2479c64f","sha1":"460039382b82d0321c8e7d6301e87df1c83840c3","sha256":"2b4600f0e980a760a13e943703584cebe21ca4717ae0a3fee3d6d9942bd57ec5","sha512":"be8c838aacfd952122818d750a1139bdad405c4fe6a96888a93c019fa2544b138e7cb4c1a52824e210b88207e713d6dc1bdfd1b7b4dea5d00a96e99d98f137fb","ssdeep":"","tlshash":"d3900411f5f04310c055d130451747d03314d300dd443f411455304cfcd575d0143470","first_seen":"2023-11-08T17:54:20Z","last_seen":"2026-09-10T20:01:16.546934Z","times_seen":8,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/favicon.ico","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.131Z","timestamp":1789070446131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:46 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 12 Dec 2008 07:51:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 912\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1406,"size_decoded":1224,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"426a18c12b901e07c4ee0a1ab1f408a9","sha1":"e2c0f580894060757144b0a2af1fa8dbf069ba53","sha256":"b1898eda6648c1cf96d88b3c029fbe7f6842e9474acf253d1812bc82c8da1fef","sha512":"8ab9c6d7d78e7151fdc3ae848d4a3bf4a2507564e50a619622fecc91276dacc92a5835f9f67a33e651cabf3a8820868157396c75decd65d6cf73ba66b91b6ddf","ssdeep":"","tlshash":"8321894a6b10c65dd10d69b0e4a0d6fc7b404d3c42b91fabde16bd433d8d383c05ad0a","first_seen":"2026-09-03T22:11:25.004857Z","last_seen":"2026-09-10T20:01:16.54787Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/php/build_agenda.php","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:46.136Z","timestamp":1789070446136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /php/build_agenda.php HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, text/html, application/xml, text/xml, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nX-Prototype-Version: 1.5.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 24\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 10 Sep 2026 20:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":200,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"61dec9c59b928d523f2e52db7a55793e","sha1":"51197e565321f5a4ffc4e7c8b86a0b506ac0389a","sha256":"24eb6455132e25d5682ae2df23ce9a23404e6fb02f19c54190ea05b59ee7d19b","sha512":"5d25303d2f3ca919aa6bd5b6ff11e8ede118abd8ebf40457cb49139e9fc74c15a092c8ceac4875a3dad66fd3d44edd56e8de2e5b97bd5a0de335cd0186916e1b","ssdeep":"","tlshash":"9ca00030000000c030c0030003c0c0300c0000303000033c33c0c0cf0c030030000003","first_seen":"2026-09-03T22:11:24.966565Z","last_seen":"2026-09-10T20:01:16.548784Z","times_seen":4,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifes.ro/images/hairnet.jpg","fqdn":"ifes.ro","domain":"ifes.ro","tld":"ro"},"ip":{"addr":"91.213.188.241","port":443,"asn":49468,"as":"Magit'st Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.972Z","timestamp":1789070445972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ifes.ro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 05:59:46 GMT","end":"Wed, 11 Nov 2026 05:59:45 GMT"},"fingerprint":{"sha1":"0E:B8:D1:0E:66:DC:B6:70:6E:8B:BC:E1:44:08:79:92:C1:1E:81:C1","sha256":"52:10:F1:A5:2F:3B:3C:87:3A:C7:DF:FC:4A:13:F1:52:15:AB:F9:43:DC:9B:A1:52:DE:9F:A2:62:80:34:B8:2D"}}},"request":{"raw":"GET /images/hairnet.jpg HTTP/1.1\r\nHost: ifes.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 20:00:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Jan 2013 08:44:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11414\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11414,"size_decoded":11681,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 190x94, components 3","md5":"7af2885c1b2c7e094aa60ce6a7e8e909","sha1":"57cb18fa070b5f28f4f57e4a998ae40b31f270d0","sha256":"8d8ff1ce5e777ac07dafc2d011e966210b07f9778a139a6280f806aafe2de891","sha512":"c67620099d4ab6da1ad333e3bc08b294905751f82c09fd476406fe86de1b948010d3216328d524eb5f899942441c93f3ef5a28ba52ad1bdf333020117343c55a","ssdeep":"192:mnEfuOAUhBEsB+Vsru8i91ZC/2Mq4LqFTrehq906MA4lOh0ygAFvej/k48CUp:mEfUUhBEi+2SJa2Mq4IIqK7i0ygAMg1V","tlshash":"38329e2df7186716f07c007a497e111772f70a93952efc4aacf518d32720b6eab948d6","first_seen":"2026-09-03T22:11:24.980349Z","last_seen":"2026-09-10T20:01:16.549759Z","times_seen":4,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ifes.ro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"ifes.ro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ifes.ro/","date":"2026-09-10T20:00:45.955Z","timestamp":1789070445955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.5.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ifes.ro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ifes.ro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d84\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 10 Sep 2026 20:00:45 GMT\r\nage: 3924065\r\nx-served-by: cache-lga21981-LGA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 61209, 284435\r\nx-timer: S1789070446.996034,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30879\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89476,"size_decoded":31521,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-13T02:33:24.728388Z","times_seen":271552,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":12,"receive":5,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}