{"report_id":"75823e46-434b-4860-a105-c6188083afea","version":6,"status":"done","tags":[],"date":"2025-08-19T18:46:08Z","url":{"schema":"https","addr":"app-aawe-gho.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB","fqdn":"app-aawe-gho.eu.com","domain":"app-aawe-gho.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.11.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app-aawe-gho.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB","fqdn":"app-aawe-gho.eu.com","domain":"app-aawe-gho.eu.com","tld":"eu.com"},"title":"Cosmic Exploration Hub - Arctic Skies Observatory"},"submit":{"url":{"schema":"https","addr":"app-aawe-gho.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB","fqdn":"app-aawe-gho.eu.com","domain":"app-aawe-gho.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.11.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-23T18:46:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"app-aawe-gho.eu.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-19","domain_rank":0,"first_seen":"2025-08-19T18:46:08.131459Z","last_seen":"2025-08-19T18:46:08.131459Z","alert_count":0,"request_count":2,"received_data":134638,"sent_data":1215,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-aawe-gho.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB","fqdn":"app-aawe-gho.eu.com","domain":"app-aawe-gho.eu.com","tld":"eu.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28aac8dacb616d0ff7f14a07e2e8ff92","sha1":"54a355de79c5c14adb4227971e853f4101d3d751","sha256":"8028c7123815fc705096b46bd3a38488935358ca4d457b13835f02b09ae2842c","sha512":"2185df4f2296ef044b263738ff88fcebdd98b7ea446959519cc95be5c47c198d7400ca594c4321f0514bffc8748cf77292a999312e5c479cce31023975a0c886","ssdeep":"","tlshash":"cf810f1f20f621384173b1baabdf4250723121473006cb593f2c97550f82a666eb2edb","size":3936,"data":"","first_seen":"2025-08-18T20:51:10.334848Z","last_seen":"2025-08-19T18:46:10.619013Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-aawe-gho.eu.com/static/hero.png","fqdn":"app-aawe-gho.eu.com","domain":"app-aawe-gho.eu.com","tld":"eu.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe-gho.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB","date":"2025-08-19T18:46:01.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe-gho.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:24:25 GMT","end":"Mon, 17 Nov 2025 15:22:56 GMT"},"fingerprint":{"sha1":"D4:9C:18:43:EB:F2:B1:E8:A5:4E:4E:14:74:53:CD:79:07:36:19:D9","sha256":"30:AD:F6:C2:FA:3B:0E:91:10:02:03:EC:65:EF:5B:B4:B4:46:15:10:EB:1E:C9:45:5F:10:83:5D:48:F5:B8:47"}}},"request":{"raw":"GET /static/hero.png HTTP/1.1\r\nHost: app-aawe-gho.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe-gho.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 Aug 2025 18:46:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 72316\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 16:58:27 GMT\r\netag: \"11a7c-689cbaef-1605d0;;;\"\r\nlast-modified: Wed, 13 Aug 2025 16:18:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6453\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPuEItZebvSvxIy08fbhJbnkbyaAkteunHTYU6zdsLZQbXNMBc9poV4Bkj1oDZkfeATVCjnMn5OemrelnzK55qJdjYRs124Ycf4jI%2BPnehlCELw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 971bcfb51e2238b7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72316,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1177x714, components 3","md5":"830c9567fbeecdf67b10a50edb5338e6","sha1":"008a7816152d30dbc85732aa94032cae7d0bd072","sha256":"fa7ec3b07e2143af02f20db063e1250eb87b992df28eaa628d22c80e4331c7b9","sha512":"2f172e9aa3ddfacc2436726d4e8e93cb6fe99280a9723988d0158a09e228de77a0979717bf1350bcc9c724293c3126e62fbf52f0f2453c8544688af61b0693ef","ssdeep":"1536:9OuLlT8bni+gFkwnfKBFvgr64iA7T71jfksyAcG2Wo:9OuN8r2kwnfNrFt3o","tlshash":"f963021262d2ad18fd17c77b4f2a65b4518bed75c605a5afec0e582788ec275acc80c4","first_seen":"2025-08-18T20:51:10.324169Z","last_seen":"2025-08-19T18:46:10.613934Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-aawe-gho.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB","fqdn":"app-aawe-gho.eu.com","domain":"app-aawe-gho.eu.com","tld":"eu.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-19T18:45:45.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe-gho.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:24:25 GMT","end":"Mon, 17 Nov 2025 15:22:56 GMT"},"fingerprint":{"sha1":"D4:9C:18:43:EB:F2:B1:E8:A5:4E:4E:14:74:53:CD:79:07:36:19:D9","sha256":"30:AD:F6:C2:FA:3B:0E:91:10:02:03:EC:65:EF:5B:B4:B4:46:15:10:EB:1E:C9:45:5F:10:83:5D:48:F5:B8:47"}}},"request":{"raw":"GET /?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO1bGl9l-O3BR4Gx2AynjXkFFoJACY3WLQdJHAPjavU5rpemWk91jV4aAp4EEALw_wcB HTTP/1.1\r\nHost: app-aawe-gho.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 18:46:01 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AhO7ay8zLiJAxQ%2FVAJ42ylj%2BNlUVocgYXNE%2FGtGghqgxmOKFZTwvL%2FceOmKHUc6%2FauARQd068U3VRScwMyQNvkLj5Dvu0ZHUFjTU%2F7cQZ6fBZc%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 971bcf530c88ae05-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":60899,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1697), with CRLF line terminators","md5":"7eea967b20603d5652ed43c7dce0368f","sha1":"d43616220a2f3428faa8d3d3cde3be2ee8388a65","sha256":"ee762d82b94b1871a834a0c7d14139a4a64cbf45661fa4971cc80b1e40ec3fbd","sha512":"24c9c46bddf79557529e445d8f2928ba9179d6804520b96753f111939a6e28d2901872a7f54275666dea15db1537df8df7f45fad484cb3947089a4e904da3ebe","ssdeep":"768:32VhqKHc5GNQxWF5qhVfvQkOpJwNhyMplGzCH:GVyUPKhVfviKZ","tlshash":"b853c43266c11226047383a65fa3479afbb9d057d24282583aed13da1ff3c50ca77f99","first_seen":"2025-08-18T20:51:10.330148Z","last_seen":"2025-08-19T18:46:10.617014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15670,"timings":{"blocked":91,"dns":49,"connect":8,"send":0,"wait":15486,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}