{"report_id":"86707c59-7025-4a17-bebc-0975c93eccce","version":6,"status":"done","tags":[],"date":"2026-02-10T13:45:20Z","url":{"schema":"http","addr":"disha.nanopix.in","fqdn":"disha.nanopix.in","domain":"nanopix.in","tld":"in"},"ip":{"addr":"216.10.252.35","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"disha.nanopix.in/","fqdn":"disha.nanopix.in","domain":"nanopix.in","tld":"in"},"title":"nanoDisha","dom":{"size":11977,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4109)","md5":"7d26086d3bdf22b3ebb9d1789e9aed03","sha1":"1b1effbf4126988919ca0f32890c1262de5ce75c","sha256":"8c8c9f6c6841146224ff8a449dc2585de5de43f9e795b58f6a9aaeffd5963726","sha512":"ad3fe766c7be688919440aed79b8706d88b17415bdfb8b955c0bba96b15ead9defa1e343f35c2fe70d685f7d2527ccc6d609054ee8c43fdc0ee07b1d998e9dc6","ssdeep":"192:mhO+l8FGcIJAHH10ItHS0FOM+6bMsi1xOlTNV2q24YlNuXqPu5OB8OCSs7oXbHEJ:mk+l8FGcIJAHHeItH3FOMDk3wTNV2IYo","tlshash":"a332f9e35fb2e5391745e610fd7f72a1e25e901a108cd809b2dc4bad2b8bc4591b3b31","dom_hash":"domhash822be2a9fa05dad2aee9ab7ee257720f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"disha.nanopix.in","fqdn":"disha.nanopix.in","domain":"nanopix.in","tld":"in"},"ip":{"addr":"216.10.252.35","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-17T13:45:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-10","alert":"Hunting_JS_WebAssembly","trigger":"disha.nanopix.in/","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-10","alert":"Hunting_JS_WebAssembly","trigger":"www.gstatic.com/flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"disha.nanopix.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"disha.nanopix.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"disha.nanopix.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-08T22:29:54.459767Z","alert_count":1,"request_count":2,"received_data":7257921,"sent_data":1015,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"disha.nanopix.in","ip":{"addr":"216.10.252.35","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-09T20:30:51.536992Z","last_seen":"2026-02-09T20:30:51.536992Z","alert_count":7,"request_count":2,"received_data":2257400,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"disha.nanopix.in/","fqdn":"disha.nanopix.in","domain":"nanopix.in","tld":"in"},"ip":{"addr":"216.10.252.35","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2b83d3c2f91c0c9d5303bad6a5c54df","sha1":"516001dfc6439251de7b72e2ce0baa3ccb19a388","sha256":"b71cf9c6eb4fbcc55a6e7c3875b41ea32d1f0cb0b6c8a3d954c3a170ab68d94c","sha512":"1aba2310a9d130a956e8e932dd0799d24efda025861ce58e4c3bab15d8721c1bec095f584aba31c7ffa75aef28d26c01fdbf8d6cc512c285712c15aa86659672","ssdeep":"192:qi1xOlTNV2q24YlNuXqPu5OB8OCSs7oXbHELCqFRaAFw55a3d6xp0GNZ2PzRS:D3wTNV2IYlAau5OB8OCToX2CKBSTVZQ0","tlshash":"1922b6e61fb6e6391745e600fd3f23a2e29e515a108cc40ab2dd4b6d2b8fc09a571f71","size":10008,"data":"","first_seen":"2026-02-10T13:23:44.664865Z","last_seen":"2026-02-10T13:45:22.569462Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-10","alert":"Hunting_JS_WebAssembly","trigger":"disha.nanopix.in/","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abc50ff042ebdbb3d308fe39744bb280","sha1":"7e20321ded36767b990be7bb2f51b0e3839a5d57","sha256":"99ee3794b55b32c65c1d33a952f04afa941c21daa14346e6bc75dfe2852319ae","sha512":"eb052b411a3c378e0f726f21dca9cd384fcf8eaf28031d321dac591365309cd0fdcf71357504f1e2fccbff7c4a7ebbff960f6e4aee5cbbd7c92c2f4341fb41df","ssdeep":"1536:fMMknbRDpGWD4azy+d4DMD4/HzhN2uyCG+yPqBnCPNYdni/3m1:f2G/mbQNz+uyBe0m1","tlshash":"0d834ccab2a67045035350b5542f100af23eddb8e1488c98e686fde97cf99d8527bf39","size":86859,"data":"","first_seen":"2025-12-17T22:23:04.916084Z","last_seen":"2026-02-10T13:45:22.566333Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-10","alert":"Hunting_JS_WebAssembly","trigger":"www.gstatic.com/flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.wasm","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://disha.nanopix.in/","date":"2026-02-10T13:45:00.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.wasm HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://disha.nanopix.in/\r\nOrigin: https://disha.nanopix.in\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncontent-type: application/wasm\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"flutter-team\"\r\nreport-to: {\"group\":\"flutter-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/flutter-team\"}]}\r\ncontent-length: 2249371\r\ndate: Tue, 10 Feb 2026 13:45:01 GMT\r\nexpires: Wed, 10 Feb 2027 13:45:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 02 Nov 2025 02:14:47 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":7169355,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"3209b708809a09dbc003f1b45c976551","sha1":"0204ccbf211b5077594dca73226d3750f3bf38dd","sha256":"fe7196b85ef8febaec2abdc09c913bad26664ce0c8cb87ae86701effff6f449f","sha512":"052fb0674cf0de849a502e5ac4269040979eb03e06af93422815a9728f6a59bb7b14cd888a973a41015fac31c4364d2ab38699d27ca3581e383f702d09ef233c","ssdeep":"12288:fDLc3p8cJk+CFT5P5iVKAa86E6n5xi5f1HVDle:bLc3p8Mkt5B5AaLKpe","tlshash":"fc25d707f61b98aef400b9771a0da1362717998071a87176df9d28eb7cbfc05249bb70","first_seen":"2026-02-10T13:23:44.661577Z","last_seen":"2026-02-10T13:45:22.565364Z","times_seen":2,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":116,"dns":2,"connect":23,"send":0,"wait":56,"receive":199,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://disha.nanopix.in/","date":"2026-02-10T13:45:00.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://disha.nanopix.in\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://disha.nanopix.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"flutter-team\"\r\nreport-to: {\"group\":\"flutter-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/flutter-team\"}]}\r\ncontent-length: 24354\r\ndate: Tue, 10 Feb 2026 13:45:00 GMT\r\nexpires: Wed, 10 Feb 2027 13:45:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 02 Nov 2025 02:14:25 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86859,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1046)","md5":"abc50ff042ebdbb3d308fe39744bb280","sha1":"7e20321ded36767b990be7bb2f51b0e3839a5d57","sha256":"99ee3794b55b32c65c1d33a952f04afa941c21daa14346e6bc75dfe2852319ae","sha512":"eb052b411a3c378e0f726f21dca9cd384fcf8eaf28031d321dac591365309cd0fdcf71357504f1e2fccbff7c4a7ebbff960f6e4aee5cbbd7c92c2f4341fb41df","ssdeep":"1536:fMMknbRDpGWD4azy+d4DMD4/HzhN2uyCG+yPqBnCPNYdni/3m1:f2G/mbQNz+uyBe0m1","tlshash":"0d834ccab2a67045035350b5542f100af23eddb8e1488c98e686fde97cf99d8527bf39","first_seen":"2025-12-17T22:23:04.916084Z","last_seen":"2026-02-10T13:45:22.566333Z","times_seen":4,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":88,"dns":1,"connect":20,"send":0,"wait":59,"receive":8,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-10","alert":"Hunting_JS_WebAssembly","trigger":"www.gstatic.com/flutter-canvaskit/677bdc8e09dcb32b5d0f670f0441eaffc6bba580/canvaskit.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"disha.nanopix.in/nanoDisha.png","fqdn":"disha.nanopix.in","domain":"nanopix.in","tld":"in"},"ip":{"addr":"216.10.252.35","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://disha.nanopix.in/","date":"2026-02-10T13:45:00.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disha.nanopix.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 01:08:27 GMT","end":"Sun, 10 May 2026 01:08:26 GMT"},"fingerprint":{"sha1":"78:33:3B:C3:65:03:84:C9:D5:05:29:E2:82:B3:F4:66:32:61:1C:4D","sha256":"1C:81:EF:62:C9:EA:90:70:AE:02:B3:15:BF:55:4E:F1:48:7B:71:4F:22:0E:7B:00:3C:44:20:B7:DE:37:B1:B7"}}},"request":{"raw":"GET /nanoDisha.png HTTP/1.1\r\nHost: disha.nanopix.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://disha.nanopix.in/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 11 Sep 2025 05:36:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2245017\r\ncontent-type: image/png\r\ndate: Tue, 10 Feb 2026 13:45:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2245017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4054 x 3240, 8-bit/color RGBA, non-interlaced","md5":"f1a5534d21959d5af576287bc3dda8bd","sha1":"cf399828a983b462a61a888f59bf114f0ea02740","sha256":"4381b856efca160d088d2ce0504893eb684b4ed1e8d19ebf1b44519744bce58b","sha512":"47c139f7b7255a9b1d3544bb44d9947f653ea32b1babee4c8465bb8f671b40f0685a5f79c296ebfdf7f45499f77aa11d24c17ccc3960786a9104e9b7ca965645","ssdeep":"24576:78Fx+GsFEmfy1ij4hAJXm1iJttQLKcqBIpWTKXCc:7A++1jqJAytqL5qSpWTKV","tlshash":"c22512d85c3fdaedee9f84795155ffb311aba107a0c32c50c9e5624cec1ae2998c442e","first_seen":"2026-02-10T13:23:44.663369Z","last_seen":"2026-02-10T13:45:22.567364Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2385,"receive":11021,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"disha.nanopix.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"disha.nanopix.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"disha.nanopix.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"disha.nanopix.in/","fqdn":"disha.nanopix.in","domain":"nanopix.in","tld":"in"},"ip":{"addr":"216.10.252.35","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-10T13:44:59.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disha.nanopix.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 01:08:27 GMT","end":"Sun, 10 May 2026 01:08:26 GMT"},"fingerprint":{"sha1":"78:33:3B:C3:65:03:84:C9:D5:05:29:E2:82:B3:F4:66:32:61:1C:4D","sha256":"1C:81:EF:62:C9:EA:90:70:AE:02:B3:15:BF:55:4E:F1:48:7B:71:4F:22:0E:7B:00:3C:44:20:B7:DE:37:B1:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: disha.nanopix.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 09 Dec 2025 14:34:35 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5170\r\ncontent-type: text/html\r\ndate: Tue, 10 Feb 2026 13:45:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11923,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4109)","md5":"3ae1a324f48e9ed80521aeeea0ed2cfa","sha1":"bc2de66e694fd403429260524a63e7f57997062e","sha256":"c57fce6c2ff284803bef20d13c91ffce3a10d571fdae3d7d5ff52eade846612d","sha512":"82708099cca7582e4085a25ddc95c3f3279e6b2e918916bc971b454b9c224ca25f2c3a270b63d710716c99726ed00e2f0cc276595fc00aaff87a08e0e3d2f15b","ssdeep":"192:QhO+l8FGcaMAK1IxTmbM7i1xOlTNV2q24YlNuXqPu5OB8OCSs7oXbHELCqFRaAFD:Qk+l8FGcaMAK1IxT073wTNV2IYlAau5J","tlshash":"553208e35fb2e5392645e610bd7f73a1e25e905a108cd409b2dc4bad2b8bc45a1b3b31","first_seen":"2026-02-10T13:23:44.664178Z","last_seen":"2026-02-10T13:45:22.568245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2178,"timings":{"blocked":853,"dns":0,"connect":401,"send":0,"wait":472,"receive":0,"ssl":448},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-10","alert":"Hunting_JS_WebAssembly","trigger":"disha.nanopix.in/","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"disha.nanopix.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"disha.nanopix.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"disha.nanopix.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
