{"report_id":"8b1da3f2-8cae-44b5-ac44-4c0712ae31e9","version":6,"status":"done","tags":[],"date":"2025-08-06T02:48:57Z","url":{"schema":"https","addr":"connects.co.com/","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"connects.co.com/","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"title":"connects.co.com - Professional Cryptocurrency Hardware Wallet"},"submit":{"url":{"schema":"https","addr":"connects.co.com/","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-10T02:48:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"connects.co.com","ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-06T02:48:58.090614Z","last_seen":"2025-08-06T02:48:58.090614Z","alert_count":8,"request_count":8,"received_data":114988,"sent_data":3562,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-30T15:19:50.250092Z","alert_count":0,"request_count":3,"received_data":323649,"sent_data":1572,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"connects.co.com/js/script.js","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7cdc691a99f991c92e65cb27fee6939","sha1":"920506a09ebf412fca9261f9c9ae2292217bae81","sha256":"42cf175418b18bbcf2da7d0b2ad81db9bafd0ab94d34d3346a0cb618f9212ef1","sha512":"f317b65ef472bc49d690016c449a410fc763745d36aaab138fb8198fbe7256e3e08bd4b33cb11a86a5ebcd6d3adb2c4e40fffb47e017219f1005a56ca4e5f868","ssdeep":"384:jgIf2cznsceamvpPjYIYKHDr/jeL26QEPS6CBXvwR:RfVYceZ/6LVvSlBYR","tlshash":"c582945931f325b6417760b9571f638a3621100ba904dd483e9dc3d40fd2ea9aae3bef","size":18781,"data":"","first_seen":"2025-08-06T02:49:01.656478Z","last_seen":"2025-08-06T02:49:01.656478Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"connects.co.com/","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T02:48:36.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 05 Aug 2025 19:09:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2162\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10950,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"75dd6c4f4fc25f309b1935afe9bd617e","sha1":"031467b5175a7fb8cad3540aab1c354c1c8f0471","sha256":"7b70e463ee8b0d939bdb8e3393ca8e82254d6d4efc6497917767721a5f98b547","sha512":"1101ff28266d63b2fc5bcdf710cf0338190591c66365d5aa9d65d434da1e69566bf189e23398ccc2c5f7ed159e57a2df10acd854dec9a20dd80a6933e0c7f607","ssdeep":"192:84D51aMtRRuuxQqZNcrfhpstGac1C0I5UiWabb0XoR:84D51rPRuuxQqcrfhpsT5UiWw04R","tlshash":"4a32eb2674f020734297869aaa356b2b7f92d543c61b1a0077bc8b986fd3e86cc4715f","first_seen":"2025-08-06T02:49:01.628867Z","last_seen":"2025-08-06T02:49:01.628867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":167,"dns":85,"connect":37,"send":0,"wait":37,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects.co.com/images/logo.svg","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 02:48:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 05 Aug 2025 19:26:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 897\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3797,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e606a754168c03321a66f96e268279e8","sha1":"ef56ae159c9d104468d8baf1071b597427639a24","sha256":"45d0ca08cb777050e7a8ce0dcf87a937aaf5689994e7554db84d90144343ee07","sha512":"30e7e4d60fb67d14669208aac584306a75e44139754caff92c7b7825a6d260fdb5c03dc873a129997451f14d27516307eee1c8c5cd6b08e2fdd3328cea51291b","ssdeep":"","tlshash":"c771ec2896ed7433f155c298e786a03a671e86c767a98650b0481f1c2fa14e3276f3a4","first_seen":"2025-08-06T02:49:01.632755Z","last_seen":"2025-08-06T02:49:01.632755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects.co.com/images/device-portfolio.webp","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET /images/device-portfolio.webp HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 02:48:36 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 05 Aug 2025 18:48:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17106\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17106,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f935ff3123512bbff1151dc6c8e2a782","sha1":"7946844fa029441d59942b53fc8be30a5fa4f205","sha256":"ed4649046f35ad3d9306350d14852f6094b795b2801a58c6babef9762d6cdced","sha512":"9dcd1258a09375df7e761fc4ba7219ccc8667eae64c6fed1e360eff60af85943c895b1644432e99642184917caca454bc07a871c73da17a7272b748ecd31e772","ssdeep":"384:zXIc+1YyhBg/qDfg6bkGR57QV9DlLkrl7SJ7tbhtndzbras4e3eYT1xFMzu:Lw6yh6/qDfgORRQ7JoSJB1tZrasRHTFV","tlshash":"3d72cf30a91e986bec998cbbfa51e83e67e3a9cd3d524a55142157e0101ce0cf42e655","first_seen":"2025-08-06T02:47:38.207415Z","last_seen":"2025-08-06T02:49:01.636008Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://connects.co.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 104544\r\ncf-ray: 96ab375e6f6ab4f7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"620188b3-19860\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 166843\r\nexpires: Mon, 27 Jul 2026 02:48:36 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bczuCWhXmEz2PdZb9%2FnXcobySeqDBrTVPw43%2BUAozgfQwBS4%2FyV6mPgP2iWg6MtEhpd61ru7QjJ2Ely5J4dTiOEFfH6ugJRESz22K5Z1KzW0DB9qQEMqyZRPeeWsmVKVStgbllBn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104544,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 104544, version 768.256","md5":"a9afdb72826cde196ddf29eb8f9d0f8f","sha1":"69fc982ace0b9fdd2cfa68c6628bcaad00f407fd","sha256":"29bc44694c394921d1f00271128a2e4cd8293516216e24eac07a73fa821fc1f5","sha512":"91414027bbd6fc01d2ee035d519530d017f34f9c8b9150a2e4a45386e3cfee2f4ecd07ab8f658b426e965536be75b3c6b396e8e65ab4fa33031779d3b0873dcd","ssdeep":"3072:V3ZSTBmqhFEpJTbnHMg1FZTRB/CClfbzXcW0FC3y0ew:ZZWBXwpFbsg1FZTRBbFMlFCDew","tlshash":"85a3128faa6fa70a2a1c79c5341418acf3102fd5c51e0be01474d9fff2385aa57685d6","first_seen":"2023-04-07T13:45:16Z","last_seen":"2026-08-05T08:36:28.640872Z","times_seen":5630,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects.co.com/favicon.ico","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-05T20:44:54.109388Z","times_seen":145915,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects.co.com/css/style.css","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 02:48:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Aug 2025 19:26:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5842\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33676,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c4ece1423885496a31eccfe7a9f64837","sha1":"87e39987098831fff18e4ae8bc22a697c4b7b3e5","sha256":"c24d613445b7fb5ead469541632adb996e456697c8e50487f9618a4b886f7644","sha512":"ee90cd078bca4bd8d7e423289df41fadf2fab86857a25382fa57b29799eebbc536a0b6457bf4467135cdda6755cbfe224950dd11c7a282fae106f9bcfd83cde8","ssdeep":"384:ZTw4gZdCeDZb7RjKi0t3wzr0U3jf1VADKNYoxPOXD6OJj:hwF/plKi0t3wzQyPYgy6o","tlshash":"67e2445956631801a41bd4a86bb7dbc4631cd087cc0ece7d7bca6248cf8e2a8b5b5f5c","first_seen":"2025-08-06T02:49:01.645072Z","last_seen":"2025-08-06T02:49:01.645072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\ncf-ray: 96ab375d4ffc0b4d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-3b90\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 513406\r\nexpires: Mon, 27 Jul 2026 02:48:36 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z%2BkOs2Q2ji81j4tCtV23IGHVglcS%2Bx0rbQYt4eCHrgnKIaIPfvRSCRyFl0BMFgj%2FMxhbv2n2qGDyHptuo0S7NXWLPdJsGVllt0a7S%2Bw2KbroMRzpWUsvGNDE7McH8s%2BxwNBJoZkD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-08-05T18:37:14.665635Z","times_seen":13286,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":31,"dns":21,"connect":1,"send":0,"wait":13,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects.co.com/images/device-main.webp","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET /images/device-main.webp HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 02:48:36 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 05 Aug 2025 18:48:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19448\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"522fcdab5426156f830a33b88476d9c4","sha1":"2b85a5ed8ac9512ce02805ea56a50bc50852eaa3","sha256":"83f36bb0e909852c4577921a9c46b43a31ea1e7a0857cbe5641578e8ac5341f9","sha512":"060e369105b7d3271334c22af173f1ebda4b935b731869b74a05b9a14a6246697851c4bf9426456c46d105f669bc1222326173837322bb8cfda0ab11d1ae310b","ssdeep":"384:TEJE0NXCb4DyaQPmaE8uR4I3lgDQU41YKCUolVfh2vJF1NHG:Tkg2smku+7QU4OK0XhihNm","tlshash":"0892d09e234aa30ae66ee66efab043400772d85d7c22810d813553a255437fbcd5fa3a","first_seen":"2025-08-06T02:47:38.216536Z","last_seen":"2025-08-06T02:49:01.654114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects.co.com/js/script.js","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 05 Aug 2025 18:57:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4929\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18781,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"b7cdc691a99f991c92e65cb27fee6939","sha1":"920506a09ebf412fca9261f9c9ae2292217bae81","sha256":"42cf175418b18bbcf2da7d0b2ad81db9bafd0ab94d34d3346a0cb618f9212ef1","sha512":"f317b65ef472bc49d690016c449a410fc763745d36aaab138fb8198fbe7256e3e08bd4b33cb11a86a5ebcd6d3adb2c4e40fffb47e017219f1005a56ca4e5f868","ssdeep":"384:jgIf2cznsceamvpPjYIYKHDr/jeL26QEPS6CBXvwR:RfVYceZ/6LVvSlBYR","tlshash":"c582945931f325b6417760b9571f638a3621100ba904dd483e9dc3d40fd2ea9aae3bef","first_seen":"2025-08-06T02:49:01.656478Z","last_seen":"2025-08-06T02:49:01.656478Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects.co.com/images/device-pin.webp","fqdn":"connects.co.com","domain":"connects.co.com","tld":"co.com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.connects.co.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 21:35:16 GMT","end":"Fri, 31 Oct 2025 21:35:15 GMT"},"fingerprint":{"sha1":"D1:C0:AF:62:27:B4:3C:4C:45:22:FB:17:3F:26:49:34:75:86:8D:ED","sha256":"A0:1C:2A:17:3A:8F:E7:FF:06:8C:34:CF:BF:9B:F2:6B:7A:8E:10:82:D9:E2:19:E3:20:38:AD:0C:42:88:3C:AB"}}},"request":{"raw":"GET /images/device-pin.webp HTTP/1.1\r\nHost: connects.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 02:48:36 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 05 Aug 2025 18:48:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7482\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f30a2ccd409be3a41b5515b8b5d445cd","sha1":"3405d16b059cf9c08c323c1f79651f289c081b60","sha256":"3aae794f849e630b430ab2683168b2da17feafaa56cc98b10dd93c9761476147","sha512":"324eb74331a724a7947029e5ead43936526bc8de7146ebfa9adc9c9c3a0044ae4d5cdd0c40178fe4b0722315d6f959aeb0749b3b30270b1ca632e364cd9da945","ssdeep":"96:78eZrjlcgrIeAIQsOYASg9zcX1/nxaY0862BPkh3xsIYTFRi+YZqA8AJRoQd5fd6:78eVjqVeasng9zLck3rUyoAL5V","tlshash":"fbf18ec486b0258fcd714178651769d9924dfa7b53a8a98c2db92704b73f2e08d1c099","first_seen":"2025-08-06T02:47:38.221227Z","last_seen":"2025-08-06T02:49:01.659471Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"connects.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connects.co.com/","date":"2025-08-06T02:48:36.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://connects.co.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 02:48:36 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 126828\r\ncf-ray: 96ab375e5f62b4f7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"620188b3-1ef6c\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 598090\r\nexpires: Mon, 27 Jul 2026 02:48:36 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UD1230b7qEWuWAFWtRJyCTQY0l7P0CYY%2Ft09BB7mlS6dM6QZ8r60uHL%2FpMCHDMuwckC%2Bq3VFoIWwqgjUjhHoxZQlE2HrRpuptN5w2RJmerB3Y8cIz4T%2BmUTcKqBPmWXlqHt0zBy5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126828,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-08-05T11:28:08.277632Z","times_seen":10827,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":24,"dns":2,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}