{"report_id":"7082ebe4-aeda-4748-9971-dd7f2f382654","version":0,"status":"done","tags":[],"date":"2026-08-01T08:21:35Z","url":{"schema":"http","addr":"hgser.closer.website","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"title":"Веб-пошта","dom":{"size":79829,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4902)","md5":"6d9997c2d252f88f15549790f9795f38","sha1":"5afca4ade3b443a266006ef9592d3cc6a0173d1f","sha256":"f82d531ec010fc5dde1f4e0569915f82acf8ed0f5efcecde82f05dd3b3a474c8","sha512":"09ac23439386fa5817af014f44028bf2e87a969c71c8e5b81104a3a77fd1482e9e797ff28f7a7a07d1195dd20f22693bcde58d43e273d29ff12784a14a645dad","ssdeep":"768:ocGNadaFUFT+STQtHpBN0Cs4Hluk62mUkzdKV7aQblioJmgK4e2Fuzh4gJcXE:6Na4WQSTqHpB5lJ62mUUkF524nFuBc0","tlshash":"ae735b5f68a356251c53b0b8a7dbb242bbb0c213c30edc443dac67a4ef85d91856a7cd","dom_hash":"domhash7131efc78e8f5da984af5c49d12447a3","first_seen":"2026-07-22T20:25:12.312911Z","last_seen":"2026-08-01T08:22:16.256488Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hgser.closer.website","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T08:21:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hgser.closer.website","ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-08-05","domain_rank":0,"first_seen":"2026-07-22T20:25:10.243412Z","last_seen":"2026-08-01T03:05:18.628825Z","alert_count":80,"request_count":20,"received_data":784903,"sent_data":10898,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Outlook Web App:15.0.1497","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-26T23:00:42.445991Z","alert_count":0,"request_count":1,"received_data":86979,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hgser.closer.website/box/box-flex.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ed9820ce0ceb9ab90e8373b6aec410d","sha1":"4663cab1e85cd70ba66f40ff39d8bf8da0fa9f53","sha256":"90bbb367dd61591de215ff7f3a75e1460c559efc5cc92e759d48b49fe7859eac","sha512":"280c7edbe1d4e31006581546a0c2bf31547065bd3fc9063d8ed93051060512994126300d12096b096f440d2fd111ade63399fb167e0e9097fec91fea5cd9efda","ssdeep":"1536:L5f9G+qindJyT3V+fII+7iQjdeB8HZvKPCjXonmehKHzBvsK6LfoNZo8hq3+FTdF:L5+peFmiqjXumfZp8ZTyl","tlshash":"1ce3088832a2303208db62b6d45b53457173300f2449d49cb97dd9c7afb8dae35a7bb9","size":152842,"data":"","first_seen":"2025-06-30T02:57:40.76474Z","last_seen":"2026-08-01T08:22:16.267867Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/scripts/glide/glide.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"765287e1bbd0fe0d28a652092b23e2d9","sha1":"75af935102d6aa480e7e7b8c9148b03479ea5dc4","sha256":"715d3ce8b0e92012fdcc7edf098f37ae638584c5de7dd45dc53dedac5a4764f5","sha512":"fd66de2b4ebb4418feec4ccf59742af7b10aed5cb6d732a67c99db5a17dd9ef5af60633fa4ba1c21394c7e2302f16d06c0ea71851d06e54081e3d699efbd6c67","ssdeep":"768:E/W0tpceIrFBJQ7ArLGZ8eCGxZ+mlDLBmW0/LC0cZ3nkQTsPEg9dG1mVThGvmIk8:brFcFh+MDtmUsPEg9dG1mVThGvmIkjp+","tlshash":"7483508d7cf620465463303c579f9486f1b6820b55599d84bcae87f85fa0f3806eabe8","size":86574,"data":"","first_seen":"2025-06-30T02:57:40.759653Z","last_seen":"2026-08-01T08:22:16.261963Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/scripts/navbar/navbar.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc8fc9c06ee934ec778d32509b179041","sha1":"375ad9e094901530c83c961f6f5256d2a7fe7fb1","sha256":"cabac6e030097443d4a7103132edad438f9870328d94a7b6791f95b7102c09a4","sha512":"5c6e04b1dc9d5387a39264edbe06fb3210c4c1052ee7b2a37911438e05f2bfe6fa4d72a7e4f1561254b2fdfa9b1b5245a85c82310b1c6cbe68034500184f079d","ssdeep":"192:5UZYug3WSnnhfwWajhj46nczJXV1C2cc66p44p6oNUWSCPUvZvyfwDB+SBf0wE3t:5UKznhfwWajhuzZV1C2Zr6+UWSCeVyf3","tlshash":"53220e702065c9b614ef0b9f22f09ac0b2a464def54561b7742d4c2e5a69cc372a0bff","size":10259,"data":"","first_seen":"2025-06-30T02:57:40.760987Z","last_seen":"2026-08-01T08:22:16.262477Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/helpers/common/cookie.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"15ed8a19c638da87c546d8bf5efd96dc","sha1":"6cfa4d01b6eca726e80b3789d9515a5a89314edc","sha256":"baba8b7d2826fdb03b98aaae3465221673a55296577c2315990ae24d2f126f03","sha512":"dd24328cd51e5a8fe9d15f57fead4c7cacb20fa30827d7c6f690a67fc9b779faeafddc19a4b3eeac647e03d8be8a1067b8cbab6971ca5e47f829651dafbe0063","ssdeep":"","tlshash":"02f02b10b774fc2bc24402920cb843a6b9208afa1599b12cd976ae613550e8266f6966","size":497,"data":"","first_seen":"2026-01-18T13:13:01.487966Z","last_seen":"2026-08-01T08:22:16.264262Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/helpers/common/helpers.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bba03f5f6277f124197365ccafb3767","sha1":"d242f1e657a283797b36e1609bd29ba717f73fc5","sha256":"7792ee016db97d1fe6f1aaecd42f9ecdcf169e74fed7102526f11fd6083f8fa2","sha512":"5cd48fbb135168e64ec9d7240f43eabd76d98cb771315c60b037d40d45528721b1c8018f0aa13bd0975e33fa4103e4c38e77c9cc604d3a0a7c74fa8119eb5b44","ssdeep":"","tlshash":"9f21202ca11878721c6740c68143b657fb4ba0fb91464020c06a5828f45dedfe8a6ff9","size":1237,"data":"","first_seen":"2026-01-18T13:13:01.495983Z","last_seen":"2026-08-01T08:22:16.268393Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/contact-form/common/contact-form.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"80a1690e86cc75e79b70118d026ded39","sha1":"43e15d390b294a9663ad932673b05f70fe9d4c73","sha256":"b854ce66a91e595f9f946422d1348267989ceb8c8d68b33470793099435e69d2","sha512":"9c8e9f730802931f456ad2e59ffac5339c8be7ccfc655eb1ae3f5725ad204478e528a22be7d4b3247d5d29edfd6b08e213db72a37c641309338fdfa59455c258","ssdeep":"96:4XetBGAMyd8Ug4ifKsO1ssiAZrw/G1ioSjXF:vCyd8HfCd1qAZ0/G1ioSjV","tlshash":"cd9172b1676548b00dbe029bd8ca66c1e63175fefc1e8433945c8d4939acec1f661fa1","size":4396,"data":"","first_seen":"2026-01-18T13:13:01.505666Z","last_seen":"2026-08-01T08:22:16.264824Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d29d3796bbc10c453fa991ac574c24dc","sha1":"56f506c675285eea139674c688406daf78458052","sha256":"a5c5cc748f5eb2d673df5127c66284b7c62d04e228ecd5b55fdf40248525ba3d","sha512":"c77f839e4babe33e440d86c2f58a5eb25b41008d74bbe9c23d66d71bd97b338076a50cd51361e6f68e1b9e0a4948a1fbbe17fe132ffad87a34f0fa3e3b21195c","ssdeep":"384:hWNYSTknQPi9MeRoCNcAQi2ipBpfL0CspidFHFZ:I+STQtHpBN0Cs4HlZ","tlshash":"47a2642da8b696b10ca3813a478fb295f375c6279319dc447c6fa361bf4144281be3db","size":22792,"data":"","first_seen":"2026-07-22T20:25:12.348884Z","last_seen":"2026-08-01T08:22:16.270182Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8619074b1a27a3c612443576c12dfce","sha1":"f473c00dd73661c95dd4d528e22698af24e4162e","sha256":"58efc283926a0f9f57a2aa419df0d1f92c8cdb22698dfc0faee7aaa22942c3b5","sha512":"ff9445744fd58e25654e2b0c81b3916fa02396348e7801fab5b783813f22439795c1ca6a8972be91a4d826240b9d223da755202f77bbf241b2fdeff594114dfc","ssdeep":"","tlshash":"4c51cf4de5611ab07d06893f97dfb06097958617c21edc5971ae9bb63f82009013a3ab","size":2547,"data":"","first_seen":"2026-07-22T20:25:12.350312Z","last_seen":"2026-08-01T08:22:16.270742Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"efa11d16a595b5286bbd037f1eadf91b","sha1":"822f3f0a042414923df563f9d7134af50fbc03e0","sha256":"da0d5c15cd5294fbaa9896750c8caad9521e58735cd8bd22b99b65be0cb60fea","sha512":"08e72aba160964878d755944f59b9e36da82647febc2177406025c6bf21a309e3b84af32ba6ef321eb57478dcb5d0ce1ca993b56bceff920596078d4c7ee0238","ssdeep":"","tlshash":"cb41e96b701b496079dfe62d125b66583a38c113450699003efc961b7f36e87c0a5fee","size":2149,"data":"","first_seen":"2026-07-22T20:25:12.351383Z","last_seen":"2026-08-01T08:22:16.271338Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"09b7df02cc58ca42a28e7ea8d4f61e92","sha1":"986f0c5cc51eb72094858c0a28c7946e8b0ec055","sha256":"e1b9c8a84910586cb67b5312a0af015c0e65fcbfe845a5693c34aea347a02caa","sha512":"d225ee802453e84fdadd400ab477247c24b1efba4bd178285015b68f9e776b202420f39d62199d44d30039dbb1c9dde7a1f118bbff766aa8115c1adf4d20920c","ssdeep":"","tlshash":"d2600008800003c8b028802b008222302220008ac02888000008202000000080000020","size":16,"data":"","first_seen":"2026-07-22T20:25:12.352878Z","last_seen":"2026-08-01T08:22:16.271934Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"02941bc1d6bb923c56757fe804cebe0a","sha1":"484ed52f198f03bca970ead8249e32c56bd6c25b","sha256":"15d2834151adcd8c0f2b8503ca02c0f756a1fe79127b9c624b884a2e7904a5fb","sha512":"78f018265f1c802a8c743f4df34d61e4d8a924ad5c8510cae56fdb5b823ed7c4f8c4e9564a6d105e9cc8368091b2070dc3493c4b365d0758e127b8c7d1fb3512","ssdeep":"","tlshash":"5ac0922a3b4206a40bb6f75d32df22013b42c0435f05b88cb87de102c7109c38878f4c","size":142,"data":"","first_seen":"2026-07-22T20:25:12.353965Z","last_seen":"2026-08-01T08:22:16.272529Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d1ad1222f988812acabc0a1d7bf9234","sha1":"c3695e4f428fb34cb789440d4a279eaedb95f6d1","sha256":"70f787fa8f338524552d1b322c37eb6112761a8e2eca33171725cf35b0d7ac92","sha512":"279dc7ad0dc2475fa98f8420d4dbf4e434c2dbe92f303d4b3fc67efa8f79b49b0b60dae7ac3de0808b6f735fc03b65fd8cf51f43c7c9050a35b4279ea8038f61","ssdeep":"","tlshash":"7fb0020d247f5361ce1bd97d6127c9242752144381e6db00348c11024f01c8080611da","size":98,"data":"","first_seen":"2026-07-22T20:25:12.35738Z","last_seen":"2026-08-01T08:22:16.273117Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hgser.closer.website/modules/contact-form/common/contact-form.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.984Z","timestamp":1785572457984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /modules/contact-form/common/contact-form.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: application/javascript\r\nvary: Host\r\nlast-modified: Tue, 07 Jul 2026 07:54:19 GMT\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4396,"size_decoded":1868,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4396), with no line terminators","md5":"80a1690e86cc75e79b70118d026ded39","sha1":"43e15d390b294a9663ad932673b05f70fe9d4c73","sha256":"b854ce66a91e595f9f946422d1348267989ceb8c8d68b33470793099435e69d2","sha512":"9c8e9f730802931f456ad2e59ffac5339c8be7ccfc655eb1ae3f5725ad204478e528a22be7d4b3247d5d29edfd6b08e213db72a37c641309338fdfa59455c258","ssdeep":"96:4XetBGAMyd8Ug4ifKsO1ssiAZrw/G1ioSjXF:vCyd8HfCd1qAZ0/G1ioSjV","tlshash":"cd9172b1676548b00dbe029bd8ca66c1e63175fefc1e8433945c8d4939acec1f661fa1","first_seen":"2026-01-18T13:13:01.505666Z","last_seen":"2026-08-01T08:22:16.264824Z","times_seen":20,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/scripts/navbar/navbar.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.965Z","timestamp":1785572457965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/scripts/navbar/navbar.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Sep 2024 07:18:53 GMT\r\netag: W/\"66d6b85d-67cb\"\r\nexpires: Sat, 08 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26571,"size_decoded":4355,"mime_type":"text/css","magic":"ASCII text","md5":"f630c78ee9f98443b9b072bfc6c66374","sha1":"e5a6363bed4496e5aad0397dc4bcb1585736473c","sha256":"3dc8ec3fc7e2b9b23d4253fe3a9350719985645a9148a5664763b883eba46789","sha512":"f279fa96581a0a8a0435795547f12ebd7e0acd83c8bedcdb26cc47d31854b712036ba5ca158b4fe2aae16270bdfdd44b18c17a9f7820dd506c8e9163255ddadb","ssdeep":"192:FjIX3UmLmm2gzT/TF1TgTvTtT/TlWfzVe9DrD9U/KgvsCKgKMKOkOQ1:qHJmDgn/J10T5b19DrD9Us","tlshash":"97c2dd42f1c22e20542b804f54d2d869bb7a9241afc72f7e746e3629df8c2df95e1d21","first_seen":"2025-09-12T06:32:02.901192Z","last_seen":"2026-08-01T08:22:16.257197Z","times_seen":23,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/contentbox/common/contentbox.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.971Z","timestamp":1785572457971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /modules/contentbox/common/contentbox.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 902\r\nvary: Host\r\nlast-modified: Thu, 21 Nov 2024 11:55:18 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":902,"size_decoded":1235,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"7a798e0cd2d8050c30c7fae27419a248","sha1":"c4d54cef32b9e8baeebea7a1adc0ecf49b70f954","sha256":"cc4d96ac669b06076d5efd6f8ea97b7e2cf6db33f3dacc75a5e11c47ac8392c0","sha512":"d20cee616c94cebf636346d53b8405d1ef7806624ea4d839665f8e1f8153ee84a230858ac85b14b762a7f557b71facf12f85a3f8024c4eadc6dc5207500b8b34","ssdeep":"","tlshash":"11119c1797f74c34913e89ae4ba3774c5f098877baef9c97a440b62cc1c424e19a0e0c","first_seen":"2026-01-18T13:13:01.485757Z","last_seen":"2026-08-01T08:22:16.261367Z","times_seen":20,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:58.074Z","timestamp":1785572458074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 13383\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"14f73-BDozLk9VXMC/015FG+lVtLk5ZqA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230028-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 356203\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzV8%2BrPBjNMJQSj8I373yhH7Qp9XaX7Du%2BJlNxZGhBqY74Fex8rj16adYWusJ7%2B6iVyyNCt8hbYb5F5ecQ2PeYUiv5H2JpUeuYJ9DiXo9IHvOKb98ll9foEL8J5%2FhDmqd1A%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a2436d3719d0723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85875,"size_decoded":14487,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65354)","md5":"5605c44f8b24ea5de37a959955b71eb6","sha1":"043a332e4f555cc0bfd35e451be955b4b93966a0","sha256":"f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62","sha512":"74f5d8703b9bfda79bd3c73ade346afe4e8668a71c976e7a250cbf0273aaec2027119f45cd22fdc126dc664329e11dbabc1b0c2c5607e2443aeff6db57c5da09","ssdeep":"768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz","tlshash":"9383fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-01-11T04:35:50Z","last_seen":"2026-08-11T14:26:08.512265Z","times_seen":10211,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":6,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/scripts/glide/css/glide.core.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.957Z","timestamp":1785572457957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/scripts/glide/css/glide.core.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Apr 2024 08:27:21 GMT\r\netag: W/\"660bc169-423\"\r\nexpires: Sat, 08 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1059,"size_decoded":663,"mime_type":"text/css","magic":"ASCII text","md5":"6bfc658c2ffe8f51523e0653d933a210","sha1":"97ba5af6a580f1365f78a10272c769859539812b","sha256":"3b98696013f1d1ab23b2661be00b4a1297e6d061f819bd265430610de846be05","sha512":"a42c2eb6ab89c344f85e76594b1059ed8c205efa910cccccfc7cdf3b3467565887bed9163c851bd6ff6d94484f28a033df3ae368d653f1927c946acc10af20d5","ssdeep":"","tlshash":"7c11ce1b99635004301ab6e61baeda0c22b6d017dd13dde87bea9501cf0afd911c23e3","first_seen":"2025-06-30T02:57:40.794245Z","last_seen":"2026-08-01T08:22:16.263714Z","times_seen":87,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/contact-form/common/contact-form.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.967Z","timestamp":1785572457967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /modules/contact-form/common/contact-form.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\nvary: Host\r\nlast-modified: Tue, 03 Sep 2024 07:18:53 GMT\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1691,"size_decoded":958,"mime_type":"text/css","magic":"ASCII text","md5":"b055078be194446925458db483934f92","sha1":"989a0c4e643da0c31f5c5a05615376de1821175d","sha256":"4520a10782824f3a678ca9fe195faabf82677c4f8458fb6555afaccd3f54ca46","sha512":"116af84f4ffefd80e8ddc4a43282fd940bc3256aa63b65d71055d1812e30f40c604d9dd8be8799eef255256077b9a21ed3b20a2f98b8b9b0dd0e9d2715fe9013","ssdeep":"","tlshash":"0f31ff0557240c60441bc4587ac98bc67b2f65105f0f8d77b65268adc3cd2fc5d63b89","first_seen":"2026-01-18T13:13:01.502054Z","last_seen":"2026-08-01T08:22:16.257758Z","times_seen":20,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/box/box-flex.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.977Z","timestamp":1785572457977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /box/box-flex.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Sep 2024 07:18:53 GMT\r\netag: W/\"66d6b85d-2550d\"\r\nexpires: Sat, 08 Aug 2026 08:20:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152845,"size_decoded":36624,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27496)","md5":"5ed9820ce0ceb9ab90e8373b6aec410d","sha1":"4663cab1e85cd70ba66f40ff39d8bf8da0fa9f53","sha256":"90bbb367dd61591de215ff7f3a75e1460c559efc5cc92e759d48b49fe7859eac","sha512":"280c7edbe1d4e31006581546a0c2bf31547065bd3fc9063d8ed93051060512994126300d12096b096f440d2fd111ade63399fb167e0e9097fec91fea5cd9efda","ssdeep":"1536:L5f9G+qindJyT3V+fII+7iQjdeB8HZvKPCjXonmehKHzBvsK6LfoNZo8hq3+FTdF:L5+peFmiqjXumfZp8ZTyl","tlshash":"1ce3088832a2303208db62b6d45b53457173300f2449d49cb97dd9c7afb8dae35a7bb9","first_seen":"2025-06-30T02:57:40.76474Z","last_seen":"2026-08-01T08:22:16.267867Z","times_seen":39,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/scripts/glide/glide.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.979Z","timestamp":1785572457979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/scripts/glide/glide.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 08:27:21 GMT\r\netag: W/\"660bc169-15230\"\r\nexpires: Sat, 08 Aug 2026 08:20:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86576,"size_decoded":17364,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"765287e1bbd0fe0d28a652092b23e2d9","sha1":"75af935102d6aa480e7e7b8c9148b03479ea5dc4","sha256":"715d3ce8b0e92012fdcc7edf098f37ae638584c5de7dd45dc53dedac5a4764f5","sha512":"fd66de2b4ebb4418feec4ccf59742af7b10aed5cb6d732a67c99db5a17dd9ef5af60633fa4ba1c21394c7e2302f16d06c0ea71851d06e54081e3d699efbd6c67","ssdeep":"768:E/W0tpceIrFBJQ7ArLGZ8eCGxZ+mlDLBmW0/LC0cZ3nkQTsPEg9dG1mVThGvmIk8:brFcFh+MDtmUsPEg9dG1mVThGvmIkjp+","tlshash":"7483508d7cf620465463303c579f9486f1b6820b55599d84bcae87f85fa0f3806eabe8","first_seen":"2025-06-30T02:57:40.759653Z","last_seen":"2026-08-01T08:22:16.261963Z","times_seen":62,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/ionicons/css/ionicons.min.css","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:58.072Z","timestamp":1785572458072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/ionicons/css/ionicons.min.css HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/assets/minimalist-blocks/content.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Apr 2024 08:27:21 GMT\r\netag: W/\"660bc169-c854\"\r\nexpires: Sat, 08 Aug 2026 08:20:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51284,"size_decoded":8378,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50802)","md5":"6798564e1f2e3291ed7e11eb291d282b","sha1":"cc8043b90c2a0962ecae08e62298d3ebb894eabb","sha256":"8c01c3cb08ae66fdf817221b3a79245fcdb94ea59a3fce2093894d6f4bb6ccf8","sha512":"bec80201e8e3317b1bd57782dbb715f3d4265dec398e53f321cd333c55887a31ef52e4a0537b900a39870e75abeda684282bbdc7a7b1b99df28c13bfaa00d459","ssdeep":"384:048lBhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:048hhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"cb33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-04-07T04:59:13.012522Z","last_seen":"2026-08-11T14:22:03.424494Z","times_seen":25643,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/owa/auth/15.0.1497/themes/resources/favicon.ico","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:58.330Z","timestamp":1785572458330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /owa/auth/15.0.1497/themes/resources/favicon.ico HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245,"size_decoded":366,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"ec2f5379fca1c36dd7ffb3aa172c93a6","sha1":"12742f772da711c7d5c024412dfe66344aba1dc6","sha256":"0c0a80045dd8f96b057b8a81663638fa36bf8564e2cb724a2ae728d5481dcef9","sha512":"3c36edcdead47f762ec0fc29cd8dcaa39c8a247d2598c6ee945f9694fd125a5caeb962a5339f04019f548c052e77325be9bf8729921dc79844c507a66434346b","ssdeep":"","tlshash":"4cd0978e8083224bc523268039c200e2968d23a2f93a01ec7c83a88a9118d7cc1ca6dc","first_seen":"2026-02-20T00:05:23.638116Z","last_seen":"2026-08-01T08:22:16.259259Z","times_seen":16,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/udata/custom/isGlobalRecaptchaEnabled.json","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:58.332Z","timestamp":1785572458332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /udata/custom/isGlobalRecaptchaEnabled.json HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hgser.closer.website/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 78\r\nx-robots-tag: none\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 0\r\nset-cookie: PHPSESSID=cr6nnhqbdvagkruipb8m12oq40; expires=Sat, 15-Aug-2026 08:20:58 GMT; Max-Age=1209600; path=/; httponly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":78,"size_decoded":517,"mime_type":"text/javascript; charset=utf-8","magic":"JSON text data","md5":"9cfc15bee42cc6917ac143a3d3337c6f","sha1":"a06be74f818ab6ea3cbaf2d49f8a2fd90dbbde03","sha256":"7d59e9b9b063a39c4a0e3525e6f37d98b6ade2d2b9350bf19ddce31f15e09af7","sha512":"ead3f4df104ec1da2b85d8de93a81cf68a98e459dbb0ac7880075b75b054afa4a114766dca37e65c95c64504a742c14461991c73296acda66380a3e52eef5d60","ssdeep":"","tlshash":"03a022a0203f20a30c0ccf0cf8ae00cf0c8ca8b2b20cc820088c2030c0ec838e303a08","first_seen":"2026-01-18T13:13:01.482437Z","last_seen":"2026-08-01T08:22:16.265376Z","times_seen":20,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T08:20:57.223Z","timestamp":1785572457223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/html\r\nexpires: Sat, 01 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Outlook Web App:15.0.1497","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":79812,"size_decoded":29470,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4902)","md5":"6b176dd9711680673cb3a63a5addce1d","sha1":"016f7c68e8d46df63244f4e2bdf2341603cae455","sha256":"0aced1e5e1d939a12d8ccc723c8800f306c68f1261cce4ada622517275a2971f","sha512":"cadd7c567f4ef556dd1f3500489f94b7bf9468cb0015fb79be90edb0e533f6930eb73de721dd1e0f8a93d0ff8c86d056d3047aff4c77192ea615796000d82048","ssdeep":"768:3c6odaFUFT+STQtHpBN0Cs4Hluk62mUkzdKV7aQblioJmgK4e2Fuzh4gMcXE:1o4WQSTqHpB5lJ62mUUkF524nFu0c0","tlshash":"e7736b5f58e356251c93b0b8a7dbb242bba1c213c30edc443dac67a4ef81d91856a7cd","first_seen":"2026-07-22T20:25:12.346865Z","last_seen":"2026-08-01T08:22:16.259866Z","times_seen":4,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":296,"connect":36,"send":0,"wait":70,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/minimalist-blocks/content-custom.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.954Z","timestamp":1785572457954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/minimalist-blocks/content-custom.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 105\r\nlast-modified: Tue, 02 Apr 2024 08:27:21 GMT\r\netag: \"660bc169-69\"\r\nexpires: Sat, 08 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105,"size_decoded":397,"mime_type":"text/css","magic":"ASCII text","md5":"7710d5fd581788beb2d525c5a6426b95","sha1":"f42c34b6147d83b421bc8a96c749b257e6c4f03a","sha256":"279db7df3e1a97b17a04522f29607e5c4b832b98f32e4ee98b31aff2ae355a3c","sha512":"e3fc99201eec9b8cd800703fc9f6cad4ae3012029f274913ca4b9f4791d4afa9c0503f468177b8178f9c8f8becbd6f7de6d6aae5b9117eae6d757f94edf180f0","ssdeep":"","tlshash":"d6b012096bb2bd24640dc49065af13a39b0740131ed3f91c3d2a17868fd28f2c152f70","first_seen":"2025-11-27T05:04:13.259721Z","last_seen":"2026-08-01T08:22:16.2632Z","times_seen":22,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/box/box-flex.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.956Z","timestamp":1785572457956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /box/box-flex.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Sep 2024 07:18:53 GMT\r\netag: W/\"66d6b85d-24334\"\r\nexpires: Sat, 08 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148276,"size_decoded":18693,"mime_type":"text/css","magic":"ASCII text","md5":"10607bf1dc533aad2816d574b2d570a0","sha1":"1b362bcbeb799c7b1cde77134beabe536ce9a0db","sha256":"ae103409defcba37508c7ca8c344aef50af4829ea92b4174338a9fe81f321bd1","sha512":"f7310daed8c7d035af26f05fbe65f2e58e6310a1bde118c8bef30e7e21689a77b72e2bb21ef65b7f7df72b6e3e15b92804f11bbc52a4e10d2be9bfa00e67b74c","ssdeep":"1536:0S2rvTvZv/P3Zrv7H/sDLNb2GW2LOwa6NYFsWI/RZwsvj8jmdV9Xi+lhlQ97tqNX:LRZejmdVJzrncc","tlshash":"7de3df933640284c6ea7412b14df761c293ca152f3379cedbd656188cfc8ee569e3ba4","first_seen":"2025-09-12T06:32:02.971882Z","last_seen":"2026-08-01T08:22:16.269507Z","times_seen":36,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/scripts/glide/css/glide.theme.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.964Z","timestamp":1785572457964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/scripts/glide/css/glide.theme.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Apr 2024 08:27:21 GMT\r\netag: W/\"660bc169-20ae\"\r\nexpires: Sat, 08 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8366,"size_decoded":2288,"mime_type":"text/css","magic":"ASCII text","md5":"bb78bc5a45b81f22f3a2eaa009341e20","sha1":"60d08857acb3ccbafc2ef1221221c8c0f1cffa02","sha256":"dd5178e9a00e7124d26e69885da55d8ca214f3e278614c29b83ebce8ff657e7a","sha512":"8adee0e290680c0fed0c7e6b15530c1cdf8cf7aec07abf8102f4181acb6b97139d2886327fcd410cd5d4cb0f7a19dfa9d1e846b09675f043653da45ea511c5fa","ssdeep":"192:n5ulGrX1wZ/bpiVsAYcggYcWPvUZtXe2hI2mOk:wAKZ/gWPvQp7h2","tlshash":"86022216a6e15509884bb1192c96cb5dfbec8102934accfdf9db7018cf8d1c9a732bd9","first_seen":"2025-06-30T02:57:40.785624Z","last_seen":"2026-08-01T08:22:16.266588Z","times_seen":83,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/static-menu/common/static-menu.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.968Z","timestamp":1785572457968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /modules/static-menu/common/static-menu.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 581\r\nvary: Host\r\nlast-modified: Tue, 02 Apr 2024 08:27:21 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":581,"size_decoded":914,"mime_type":"text/css","magic":"ASCII text","md5":"4b6595804171433d03cc77d9aafb3eaf","sha1":"9d7aae973c682451211d750014874a2a206b3aad","sha256":"c8e7b9581dc60d0ddf8905a24488ba7ab1061551a7c5ab1021f8ff4c9506e379","sha512":"7810e02ddfd92d1e4b745245f024c08671d6cf2ecd6d192bee859f4757f55a92f7729f382c323d1c413428176f2666a3a8738a3c22689c967c619f8d8c6814e9","ssdeep":"","tlshash":"d4f0420157c2db00fc0b80fd5ca5a778cfa48990df24579bd0b28864d79e18c12d7048","first_seen":"2025-11-27T05:04:13.285924Z","last_seen":"2026-08-01T08:22:16.260427Z","times_seen":22,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/scripts/navbar/navbar.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.981Z","timestamp":1785572457981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/scripts/navbar/navbar.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 08:27:21 GMT\r\netag: W/\"660bc169-2813\"\r\nexpires: Sat, 08 Aug 2026 08:20:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10259,"size_decoded":2365,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10258)","md5":"fc8fc9c06ee934ec778d32509b179041","sha1":"375ad9e094901530c83c961f6f5256d2a7fe7fb1","sha256":"cabac6e030097443d4a7103132edad438f9870328d94a7b6791f95b7102c09a4","sha512":"5c6e04b1dc9d5387a39264edbe06fb3210c4c1052ee7b2a37911438e05f2bfe6fa4d72a7e4f1561254b2fdfa9b1b5245a85c82310b1c6cbe68034500184f079d","ssdeep":"192:5UZYug3WSnnhfwWajhj46nczJXV1C2cc66p44p6oNUWSCPUvZvyfwDB+SBf0wE3t:5UKznhfwWajhuzZV1C2Zr6+UWSCeVyf3","tlshash":"53220e702065c9b614ef0b9f22f09ac0b2a464def54561b7742d4c2e5a69cc372a0bff","first_seen":"2025-06-30T02:57:40.760987Z","last_seen":"2026-08-01T08:22:16.262477Z","times_seen":48,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/helpers/common/cookie.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.982Z","timestamp":1785572457982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /modules/helpers/common/cookie.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 497\r\nvary: Host\r\nlast-modified: Tue, 07 Jul 2026 07:54:19 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":497,"size_decoded":844,"mime_type":"application/javascript","magic":"C++ source, ASCII text, with very long lines (497), with no line terminators","md5":"15ed8a19c638da87c546d8bf5efd96dc","sha1":"6cfa4d01b6eca726e80b3789d9515a5a89314edc","sha256":"baba8b7d2826fdb03b98aaae3465221673a55296577c2315990ae24d2f126f03","sha512":"dd24328cd51e5a8fe9d15f57fead4c7cacb20fa30827d7c6f690a67fc9b779faeafddc19a4b3eeac647e03d8be8a1067b8cbab6971ca5e47f829651dafbe0063","ssdeep":"","tlshash":"02f02b10b774fc2bc24402920cb843a6b9208afa1599b12cd976ae613550e8266f6966","first_seen":"2026-01-18T13:13:01.487966Z","last_seen":"2026-08-01T08:22:16.264262Z","times_seen":20,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/minimalist-blocks/content.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.953Z","timestamp":1785572457953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/minimalist-blocks/content.css?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Sep 2024 07:18:53 GMT\r\netag: W/\"66d6b85d-31938\"\r\nexpires: Sat, 08 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203064,"size_decoded":23469,"mime_type":"text/css","magic":"ASCII text","md5":"81045e7e576ca96cf29d3bc076a86f3a","sha1":"a4d41020fe573d937cff89d87fd7fddfce1a1cfd","sha256":"86bfbe08e26dd44cc8e91c8004082a77bc3d82b22f618e3e22fc9975fd1980a0","sha512":"e282330a13a440bf9b0ba7de4b38e7f89e71258ca42377a2355b649c7fe0da86b38e8b0c648fcf6bba4a430906f5455e9b88fbf89c575802c539b0301635e0d5","ssdeep":"768:KYUdSFDrW5DutOsk7ucjG8l3es+R3fuZiIwG2AlW93l2iEnevvuEjNP68FAxEEl7:m6kcJ4CGIbBgevvuEjNP68UEEllijvnA","tlshash":"f0148b17f7c501263c5908f5b94ab3fdba7d6486db28adba7484b360cf496f309a211c","first_seen":"2026-01-18T13:13:01.499035Z","last_seen":"2026-08-01T08:22:16.265927Z","times_seen":22,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/assets/styles/type-system-ui.css","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.973Z","timestamp":1785572457973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /assets/styles/type-system-ui.css HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Sep 2024 07:18:53 GMT\r\netag: W/\"66d6b85d-495\"\r\nexpires: Sat, 08 Aug 2026 08:20:57 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1173,"size_decoded":617,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"e158d62592fb9f96328fe3a01301caf5","sha1":"751d239997dc3bf2d0f5676bbd9600d4f3f3928d","sha256":"0933603b0cf8f885fa714a5202d75109c75300ce7ac2014c10bb2a0e1f057f45","sha512":"d2de78b10870fb2cf9557a3782f29b466681077a4127eddf907d0986e872f6b733a3767bd3f484d1903efc21fe020180bec5e0da1bc695f9915156343d22e074","ssdeep":"","tlshash":"7b213b0b075a6205ec518cd07a112f8aa928a4064d45e1fe67c37be4cd5bc3dab70f2f","first_seen":"2025-12-22T05:52:22.966971Z","last_seen":"2026-08-01T08:22:16.267251Z","times_seen":23,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgser.closer.website/modules/helpers/common/helpers.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44","fqdn":"hgser.closer.website","domain":"closer.website","tld":"website"},"ip":{"addr":"94.130.129.186","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgser.closer.website/","date":"2026-08-01T08:20:57.983Z","timestamp":1785572457983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.closer.website","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:47:15 GMT","end":"Mon, 24 Aug 2026 19:47:14 GMT"},"fingerprint":{"sha1":"88:FF:99:5E:5C:55:59:A4:F6:ED:DC:F4:BD:5E:20:04:A6:39:AF:2C","sha256":"C2:60:4B:89:B3:A8:32:27:7F:AD:FD:42:95:80:68:AD:98:F0:3A:74:84:A4:A0:88:07:EC:C0:30:16:D0:5B:64"}}},"request":{"raw":"GET /modules/helpers/common/helpers.min.js?17706314811c62c1bb26b33a0054b32e808e39bb441c62c1bb26b33a0054b32e808e39bb44 HTTP/1.1\r\nHost: hgser.closer.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgser.closer.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 08:20:58 GMT\r\ncontent-type: application/javascript\r\nvary: Host\r\nlast-modified: Tue, 07 Jul 2026 07:54:19 GMT\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1237,"size_decoded":957,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (657)","md5":"3bba03f5f6277f124197365ccafb3767","sha1":"d242f1e657a283797b36e1609bd29ba717f73fc5","sha256":"7792ee016db97d1fe6f1aaecd42f9ecdcf169e74fed7102526f11fd6083f8fa2","sha512":"5cd48fbb135168e64ec9d7240f43eabd76d98cb771315c60b037d40d45528721b1c8018f0aa13bd0975e33fa4103e4c38e77c9cc604d3a0a7c74fa8119eb5b44","ssdeep":"","tlshash":"9f21202ca11878721c6740c68143b657fb4ba0fb91464020c06a5828f45dedfe8a6ff9","first_seen":"2026-01-18T13:13:01.495983Z","last_seen":"2026-08-01T08:22:16.268393Z","times_seen":20,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"hgser.closer.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hgser.closer.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}