{"report_id":"7b5470c9-bcb4-4f0c-9a71-911b214bad28","version":6,"status":"done","tags":[],"date":"2026-03-25T01:19:53Z","url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"title":"Internal Revenue Service","dom":{"size":248,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"471abe383e0fba2efd0c4b0fa62aff2a","sha1":"a180734beb8612622414834e79b736d67b0230dc","sha256":"cd28803c7bb00e12d082b3d67d5037d127b07d402338e2d779fc9361c6e71e59","sha512":"12e334a554f591275d367f74075a92eeaf166d29d15efc824334eb06bc5ac5606282974e4f3a0f0ad380365e8e88726607450441031633fb64a0f268525bbe0f","ssdeep":"","tlshash":"2cd0a762f08299b5d80d6561e7d3f1c50f1853b452f265811a49a846ec593dc88fdfc2","dom_hash":"domhash2bed4ddbf4cbc4adc9bff31c97143861","first_seen":"2025-12-08T15:29:37.663432Z","last_seen":"2026-03-25T01:19:53.840714Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T01:19:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"epdocambodia.org","ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-11-01","domain_rank":0,"first_seen":"2026-01-09T00:15:15.632947Z","last_seen":"2026-01-09T00:15:15.632947Z","alert_count":7,"request_count":7,"received_data":65587,"sent_data":3632,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"s2.googleusercontent.com","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":185201,"first_seen":"2012-07-08T11:51:25Z","last_seen":"2026-03-14T02:59:56.392333Z","alert_count":0,"request_count":1,"received_data":1204,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t1.gstatic.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T22:57:20Z","last_seen":"2026-03-18T21:37:58.774848Z","alert_count":0,"request_count":1,"received_data":1022,"sent_data":516,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/js/windows.js","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0228b4ab1f95b7260e6a0c18eda741fd","sha1":"351f61476c797da15f43e3a409868ddb3ec27296","sha256":"80fa495c9934e3991d6d33f24e7f2e13f67fe76b6920a0d5e75ebd4401d9ea64","sha512":"183cfc571d3ff8ef63b32febe9af46ab480caf2992a1e2316067753314bbd133be5276b801b5d17cbd2885cec06f6eef75e5167caa6f6c63929b2b0e96b89279","ssdeep":"","tlshash":"068142a8b01b223686b52705cb3723843d7216f5677a9878f5dd84c93a3621fb7306dc","size":4027,"data":"","first_seen":"2025-12-08T15:29:37.686821Z","last_seen":"2026-03-25T01:19:53.847487Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/js/inputSharedSecrets.js","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b851715afb2268dce6b4c429c823e4","sha1":"3e6d71c2f7ea14fc533492f63c3b0bcc5d618694","sha256":"95466e90dc19353fe56c1a0e243c80cdc40f25d861feeb771dae9eee218e38df","sha512":"a3772ad2f18096c6672be21036c8d8ddae6a8c10b7c68789d3276bff69f6b868011fb27e6d321c5b4d8028bf33e0a6522aa95d700cc1c664e25a854365f370dc","ssdeep":"","tlshash":"c6c08c9a701b331142ed7339007b87c42c7040292640aa0e2488c4603434a857066580","size":141,"data":"","first_seen":"2025-12-08T15:29:37.669792Z","last_seen":"2026-03-25T01:19:53.842114Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"11e5272899b4c234794f75fdc103644d","sha1":"b19629cf074dd0670af2a374fb49def6bcffa493","sha256":"acb3adf840d57cf510cebe671f2ec46a07e0859fd6491030baa156269040670c","sha512":"5e4ceb2eb40b899272abff8bdbdcbdfe1d0eed6527e9ae57925895112434f2221c407c3e0f857a6d630bbc34f81a36df19e42e136c1a75ff666e755d065b58a3","ssdeep":"","tlshash":"88d0a7572a577e24014d12559b2a6f662d3043041f3c8cb35c18813284f6de2322f7e9","size":234,"data":"","first_seen":"2025-12-08T15:29:37.689862Z","last_seen":"2026-03-25T01:19:53.857998Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5181510029c7bb2909726e73feb4cc1a","sha1":"2055d283efc58650e6c76ffce6170e7a6a279631","sha256":"9335299a3a3729b722c7105967756cfcc85861a1ea166966faed76e0c85bcddc","sha512":"d181ba7c8f8537b3feea440d690bc0f21a7249f100044c6f4bd960198aab14cc6e8b36aac620bfdf2c5efa4ee3cbc048ad15a053a302b9833dc4f2562fc21ec7","ssdeep":"96:U+z0vsz0GiLUZ2CEh3CcVm5+RqLqpq3qHquWBQ0U2k4+vf7yTRN4NyIbyx8yU/yG:L7gGosa39jSEcgvJx7yTQNyIbyx8yU/B","tlshash":"60c15597b78f2c30da66a3ea7d1d57a5397c05701416888aec7c483611f1de1a32fa72","size":6017,"data":"","first_seen":"2025-12-08T15:29:37.694408Z","last_seen":"2026-03-25T01:19:53.859694Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac1fa2aef331022842ac5bb11aee901f","sha1":"d87b08a92556d575ede9dec70f8a3b5ff97506f4","sha256":"7530bf732b63ecbd213b735c0fdcac8915cd430db56cb4f75bfde37e999f8a7e","sha512":"a28a9f35b98ad9e32daf8313d40efab1764f795e5137e8800b04c048a00ed5ca9861b342110c89078f50d8a0d5f8c1c71d7c5a165871763bcf7ca8a8a760a033","ssdeep":"","tlshash":"07f0d82e98b714708e9f307a490ed3883c118883aa55ed017d7c56908f41da29ab57a4","size":564,"data":"","first_seen":"2025-12-08T15:29:37.6979Z","last_seen":"2026-03-25T01:19:53.861001Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e8705f366e07878962dd202ffb92fcf","sha1":"b606ff69d2415498d3283872a4bd0a6a39b29b0a","sha256":"3c84ce360882a6d4a5e802d469434e709114ed602a502a991dbcda5839559960","sha512":"b57ec4e390f0105a81bc27165b55be4ab8049ce81b2c09c384dccd97b69c9d3953440da8af10338e529213674e66bd6fb3038540d87d097306c6870d8357f6d6","ssdeep":"","tlshash":"f7e02bad25bf0c690b13213029ebc09172e8890f544d9c04b45c41e36fe4f7826bf754","size":413,"data":"","first_seen":"2025-12-08T15:29:37.69962Z","last_seen":"2026-03-25T01:19:53.862496Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/js/inputSharedSecrets.js","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:30.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epdocambodia.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 03:40:50 GMT","end":"Mon, 15 Jun 2026 03:40:49 GMT"},"fingerprint":{"sha1":"43:FF:22:0A:F4:74:53:8C:24:78:06:DC:CA:1E:F3:5F:01:19:AB:09","sha256":"01:C2:6E:13:FA:36:5D:9E:6D:78:35:6E:E8:EB:A9:31:CD:4E:AD:C9:92:5A:9C:75:3C:11:FC:D4:1A:6E:B1:2D"}}},"request":{"raw":"GET /components/com_user/img/bin/js/inputSharedSecrets.js HTTP/1.1\r\nHost: epdocambodia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://epdocambodia.org/components/com_user/img/bin/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Mar 2026 01:19:31 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Jan 2015 13:54:28 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 141\r\nKeep-Alive: timeout=5, max=30\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":141,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"f6b851715afb2268dce6b4c429c823e4","sha1":"3e6d71c2f7ea14fc533492f63c3b0bcc5d618694","sha256":"95466e90dc19353fe56c1a0e243c80cdc40f25d861feeb771dae9eee218e38df","sha512":"a3772ad2f18096c6672be21036c8d8ddae6a8c10b7c68789d3276bff69f6b868011fb27e6d321c5b4d8028bf33e0a6522aa95d700cc1c664e25a854365f370dc","ssdeep":"","tlshash":"c6c08c9a701b331142ed7339007b87c42c7040292640aa0e2488c4603434a857066580","first_seen":"2025-12-08T15:29:37.669792Z","last_seen":"2026-03-25T01:19:53.842114Z","times_seen":3,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":68,"dns":1,"connect":33,"send":0,"wait":33,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/images/qMarkNew.gif","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:30.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epdocambodia.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 03:40:50 GMT","end":"Mon, 15 Jun 2026 03:40:49 GMT"},"fingerprint":{"sha1":"43:FF:22:0A:F4:74:53:8C:24:78:06:DC:CA:1E:F3:5F:01:19:AB:09","sha256":"01:C2:6E:13:FA:36:5D:9E:6D:78:35:6E:E8:EB:A9:31:CD:4E:AD:C9:92:5A:9C:75:3C:11:FC:D4:1A:6E:B1:2D"}}},"request":{"raw":"GET /components/com_user/img/bin/images/qMarkNew.gif HTTP/1.1\r\nHost: epdocambodia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://epdocambodia.org/components/com_user/img/bin/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Mar 2026 01:19:31 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Jan 2015 13:56:56 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 223\r\nKeep-Alive: timeout=5, max=30\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 15","md5":"4a3532419761836ad485a89e0b13745d","sha1":"01b8d356305518aeeba430a5e50127857a83c608","sha256":"fd857e3d1447b8ca7fe8bbab145784b7bd85e142e2c6a68960e6df1549cf1e3d","sha512":"0015d8c8bc05e1270f004bfcba11c7695e4d38a3fb55ec1e16ed62c47d41394b23c3b6eb0e430396a527f48a3a4fbf8815dcf6f677ce3ba1fd74fb495781ad47","ssdeep":"","tlshash":"97d0221adca4c032c130e8f2881d5f62288add204520270668b2b301e1601490128338","first_seen":"2025-12-08T15:29:37.681941Z","last_seen":"2026-03-25T01:19:53.843507Z","times_seen":3,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":100,"dns":1,"connect":32,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/jsp/IFormPage.jsp","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:31.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epdocambodia.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 03:40:50 GMT","end":"Mon, 15 Jun 2026 03:40:49 GMT"},"fingerprint":{"sha1":"43:FF:22:0A:F4:74:53:8C:24:78:06:DC:CA:1E:F3:5F:01:19:AB:09","sha256":"01:C2:6E:13:FA:36:5D:9E:6D:78:35:6E:E8:EB:A9:31:CD:4E:AD:C9:92:5A:9C:75:3C:11:FC:D4:1A:6E:B1:2D"}}},"request":{"raw":"GET /components/com_user/img/bin/jsp/IFormPage.jsp HTTP/1.1\r\nHost: epdocambodia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://epdocambodia.org/components/com_user/img/bin/index.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Mar 2026 01:19:31 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Jan 2015 14:00:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 244\r\nKeep-Alive: timeout=5, max=29\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":244,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with CRLF line terminators","md5":"6a1b4560ca388f7c520505db2ecaadb3","sha1":"80b39ff0d808479fceb2ce1602b9f2ae68d25d41","sha256":"f2ceef08943aefd733afeed01a0e1f99ba1e5e438d9c6efddecc86010df5ee40","sha512":"c16579074e7b19e5af0e0acdadd035ebcc5b53bbca0b195cf8e452e78ac32e4c559b1948020fb2b9dd01d5a33534e7f8669adb5569ffa2c3cde2c5620f42eb64","ssdeep":"","tlshash":"b4d05e1a72035978d75a401196b3d8901e182374c5f51281364a4213f61928c19a9bce","first_seen":"2025-12-08T15:29:37.683608Z","last_seen":"2026-03-25T01:19:53.845061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/index.html","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T01:19:30.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epdocambodia.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 03:40:50 GMT","end":"Mon, 15 Jun 2026 03:40:49 GMT"},"fingerprint":{"sha1":"43:FF:22:0A:F4:74:53:8C:24:78:06:DC:CA:1E:F3:5F:01:19:AB:09","sha256":"01:C2:6E:13:FA:36:5D:9E:6D:78:35:6E:E8:EB:A9:31:CD:4E:AD:C9:92:5A:9C:75:3C:11:FC:D4:1A:6E:B1:2D"}}},"request":{"raw":"GET /components/com_user/img/bin/index.html HTTP/1.1\r\nHost: epdocambodia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Mar 2026 01:19:30 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 04 Jan 2016 16:24:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 47842\r\nKeep-Alive: timeout=5, max=30\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":47842,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (394)","md5":"9d877cd691f9c1b8c7d3e8814ab39d15","sha1":"e3d5772defadd30ff8901bac7bc2ddb2fff120de","sha256":"bba59f28759e63964a160d056f33806d442c870664be94637fcf3e9404f2e263","sha512":"ceaa078ee2c154447500a662cd4e3df10a9c4515de2a1fef6060777985a7cdd461772358b2988a5f3ef927cce7993e2480d5ee3a6c6bd7e7f8e304ade94d3c20","ssdeep":"768:BOyUYh7N3l7E2HUyy6iaVus8ujB19+08oX3:csh7N31HeVBo9","tlshash":"9b23fe01aa9c9c2551db09da58669a3028fe5770d12488cdf86f8ff703bbd6cd7371a8","first_seen":"2025-12-08T15:29:37.67953Z","last_seen":"2026-03-25T01:19:53.846178Z","times_seen":3,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":174,"dns":102,"connect":33,"send":0,"wait":34,"receive":65,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/js/windows.js","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:30.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epdocambodia.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 03:40:50 GMT","end":"Mon, 15 Jun 2026 03:40:49 GMT"},"fingerprint":{"sha1":"43:FF:22:0A:F4:74:53:8C:24:78:06:DC:CA:1E:F3:5F:01:19:AB:09","sha256":"01:C2:6E:13:FA:36:5D:9E:6D:78:35:6E:E8:EB:A9:31:CD:4E:AD:C9:92:5A:9C:75:3C:11:FC:D4:1A:6E:B1:2D"}}},"request":{"raw":"GET /components/com_user/img/bin/js/windows.js HTTP/1.1\r\nHost: epdocambodia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://epdocambodia.org/components/com_user/img/bin/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Mar 2026 01:19:31 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Jan 2015 13:54:20 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4027\r\nKeep-Alive: timeout=5, max=28\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4027,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"0228b4ab1f95b7260e6a0c18eda741fd","sha1":"351f61476c797da15f43e3a409868ddb3ec27296","sha256":"80fa495c9934e3991d6d33f24e7f2e13f67fe76b6920a0d5e75ebd4401d9ea64","sha512":"183cfc571d3ff8ef63b32febe9af46ab480caf2992a1e2316067753314bbd133be5276b801b5d17cbd2885cec06f6eef75e5167caa6f6c63929b2b0e96b89279","ssdeep":"","tlshash":"068142a8b01b223686b52705cb3723843d7216f5677a9878f5dd84c93a3621fb7306dc","first_seen":"2025-12-08T15:29:37.686821Z","last_seen":"2026-03-25T01:19:53.847487Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/images/irslogo.gif","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:30.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epdocambodia.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 03:40:50 GMT","end":"Mon, 15 Jun 2026 03:40:49 GMT"},"fingerprint":{"sha1":"43:FF:22:0A:F4:74:53:8C:24:78:06:DC:CA:1E:F3:5F:01:19:AB:09","sha256":"01:C2:6E:13:FA:36:5D:9E:6D:78:35:6E:E8:EB:A9:31:CD:4E:AD:C9:92:5A:9C:75:3C:11:FC:D4:1A:6E:B1:2D"}}},"request":{"raw":"GET /components/com_user/img/bin/images/irslogo.gif HTTP/1.1\r\nHost: epdocambodia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://epdocambodia.org/components/com_user/img/bin/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Mar 2026 01:19:31 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Jan 2015 13:54:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2483\r\nKeep-Alive: timeout=5, max=27\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2483,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 354 x 72","md5":"6d5353de4d377c0371b687ffeebfcd5b","sha1":"2325a437c8342ce9bfc44787fcbe39c5fda4d917","sha256":"c3c2be650f8b26f1440136df0eb1d3f7c37dfa69c77dd86cc42d8cd9013d4640","sha512":"02ca2bb99c198ca9cf2e3ed0ca6dbe8fd61e40aed58028745ade58e822af729331da0634dc9af32c0bcb639fc85866468b66623d5c7339fd3ed70b3d7ac332f0","ssdeep":"","tlshash":"ee514d39d5ba117aef350d3dbe578fc15275c9030251bf2486a844c69896332d074f7d","first_seen":"2023-06-03T02:57:02Z","last_seen":"2026-03-25T01:19:53.849204Z","times_seen":19,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.googleusercontent.com/s2/favicons?domain_url=http://irs.gov","fqdn":"s2.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:31.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:03 GMT","end":"Mon, 18 May 2026 18:21:02 GMT"},"fingerprint":{"sha1":"D5:4C:55:53:5C:5D:C1:A3:FA:C1:27:6F:AE:57:64:8B:B8:5D:E7:9A","sha256":"D8:0C:09:4F:C1:93:08:62:A7:B0:35:AB:9C:D7:45:57:FA:9F:FF:CB:47:CC:07:9A:03:2A:0C:2C:22:DE:C4:2D"}}},"request":{"raw":"GET /s2/favicons?domain_url=http://irs.gov HTTP/1.1\r\nHost: s2.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://epdocambodia.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://irs.gov\u0026size=16\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Wed, 25 Mar 2026 01:19:31 GMT\r\nexpires: Wed, 25 Mar 2026 01:49:31 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 327\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T07:57:31.65745Z","times_seen":17832625,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":34,"connect":21,"send":0,"wait":30,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://irs.gov\u0026size=16","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:31.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://irs.gov\u0026size=16 HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://epdocambodia.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Wed, 25 Mar 2026 01:19:31 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-08-11T02:04:05.019616Z","times_seen":7315,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":34,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epdocambodia.org/components/com_user/img/bin/css/efp.css","fqdn":"epdocambodia.org","domain":"epdocambodia.org","tld":"org"},"ip":{"addr":"46.4.102.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://epdocambodia.org/components/com_user/img/bin/index.html","date":"2026-03-25T01:19:30.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epdocambodia.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 03:40:50 GMT","end":"Mon, 15 Jun 2026 03:40:49 GMT"},"fingerprint":{"sha1":"43:FF:22:0A:F4:74:53:8C:24:78:06:DC:CA:1E:F3:5F:01:19:AB:09","sha256":"01:C2:6E:13:FA:36:5D:9E:6D:78:35:6E:E8:EB:A9:31:CD:4E:AD:C9:92:5A:9C:75:3C:11:FC:D4:1A:6E:B1:2D"}}},"request":{"raw":"GET /components/com_user/img/bin/css/efp.css HTTP/1.1\r\nHost: epdocambodia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://epdocambodia.org/components/com_user/img/bin/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Mar 2026 01:19:31 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Jan 2015 14:03:20 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8935\r\nKeep-Alive: timeout=5, max=29\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8935,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"abbc11fb0cc709d25ba804a00c8ffb92","sha1":"e6b4fa61121c25aadd12674a6a142413e4ea34c0","sha256":"6b8d097d0f3b0a49a85f2cd82bd899d22b7457788abf3cae8d63adcb18f4cb49","sha512":"81869255b16b716d7158d4762d0d1b84fb5856b59c3db354de8735ce3cef70fbda34f7d9edabd925f7edc19525776afdc5ce18e4ddce8076be2957f9260426c0","ssdeep":"192:lI+F5FBw8TLv9zvS73KPQVGfLp321oCcgYHyrBQaDqnD:ySJ7LvxQ3KPQVGfLp321oCcg4yVoD","tlshash":"1602ae68bfcb1849e30fa9e9fbb11fa5af0444701b4f917af4a46369a1c5970327138d","first_seen":"2025-12-08T15:29:37.685207Z","last_seen":"2026-03-25T01:19:53.852745Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"epdocambodia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
