{"report_id":"9896641c-1e19-42de-99d4-c52c4e9d9b83","version":6,"status":"done","tags":[],"date":"2025-10-13T16:52:03Z","url":{"schema":"http","addr":"valealupilor.com","fqdn":"valealupilor.com","domain":"valealupilor.com","tld":"com"},"ip":{"addr":"85.120.18.2","port":0,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/login.php","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"title":"ING"},"submit":{"url":{"schema":"http","addr":"valealupilor.com","fqdn":"valealupilor.com","domain":"valealupilor.com","tld":"com"},"ip":{"addr":"85.120.18.2","port":0,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-17T16:52:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"u.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"valealupilor.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"studiowebcore.top","ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-07-31","domain_rank":0,"first_seen":"2025-10-13T16:52:04.485244Z","last_seen":"2025-10-13T16:52:04.485244Z","alert_count":55,"request_count":11,"received_data":137678,"sent_data":5918,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"u.to","ip":{"addr":"186.2.165.57","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":32993,"first_seen":"2012-05-21T19:16:51Z","last_seen":"2025-10-10T17:43:35.520762Z","alert_count":1,"request_count":1,"received_data":5668,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-12T22:15:22.841346Z","alert_count":0,"request_count":2,"received_data":1538711,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":3,"received_data":106633,"sent_data":1610,"comment":"","tags":null,"fingerprints":null},{"fqdn":"valealupilor.com","ip":{"addr":"85.120.18.2","port":443,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"domain_registered":"2022-03-07","domain_rank":0,"first_seen":"2025-10-13T16:52:04.483976Z","last_seen":"2025-10-13T16:52:04.483976Z","alert_count":8,"request_count":2,"received_data":1572,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-12T22:16:17.945241Z","alert_count":0,"request_count":2,"received_data":236158,"sent_data":925,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":8690,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-10-12T22:16:17.088796Z","alert_count":0,"request_count":1,"received_data":90256,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/login.php","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31ddc78d105f8d80b4790c550a29ea04","sha1":"c09915441c74ee924b519a230f733437da3f1c6c","sha256":"f137da9d1a757631bda8a0e2893d710808790d976f2ed8aebb7520181a35671f","sha512":"38ec4d12562af4b14a874b0a0beeb1ecaa4960aad366a3bc2333a96bb18492cee036eefc255ac03a912b522684cbf9949bc89a62ec531149c587e2830793be58","ssdeep":"","tlshash":"3b01a7d661915c06ed3ba1345b9fe1241d220a672a439f40fd1c0184af45fdedc99a99","size":745,"data":"","first_seen":"2025-10-11T14:04:11.48949Z","last_seen":"2026-06-02T15:17:34.612274Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc290e6c3aeecf5021dd82ad8df2512a","sha1":"fb983aecd3940e8ebbfe5e74c8099cee9223c957","sha256":"2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995","sha512":"a47546a57ec5ff6ef267421263e5558f250b0296c3943d3f5f4ae019b4ea084ed6156e4c7b3353586fdd9e1b5b06e202cec7745903e0a44e111012eff94a8287","ssdeep":"192:cd227YJcI/iarixR4aCSfZrkiqVNReFevZA8A/A:cdaJ39e74boZrkVVjeFexA8AY","tlshash":"b502e8d5329670b253b371e901bf020bebb7afa156de4814d61a94e0ae74f890053f7e","size":8327,"data":"","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-07-26T22:43:32.117176Z","times_seen":12316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/js/js.js","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19b21a2bc54e98f8ddd9251812a5940f","sha1":"e358391328bf826c640d35f4a4c15879346c3c30","sha256":"f6ecae9999b4d4c78226a09e14df1c6ec8bcdf3473377d4e49327e6c9b6b957c","sha512":"7501c1ad6db0155a54b3faa74096c232625741730fb2dc9b6b58a395d3186fcaae94e141cf67ca1811c56d9436a8f2c02e1a177f43a5b869f9ff1e3bfd41e25b","ssdeep":"","tlshash":"13f08c1df31865aa85b333361cb79248ed5a647b04050620fcac28a02ff80818e22d2f","size":496,"data":"","first_seen":"2023-03-08T15:46:00Z","last_seen":"2026-07-23T17:43:06.11939Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aa8d64e726c4a57adb5c88f9115996b","sha1":"901169527507ff9e662cf64d8e361f359308970d","sha256":"7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe","sha512":"ef6583f7684bb3b4f91405e7def90d65f9561baa609540c3a66f3b4de4267d283c2a7af298bd86df447b6ace05993c2182ef47ede4b30c25f79a38ad49e70a9f","ssdeep":"1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV","tlshash":"a573d6493254b87309ee55a68037460bf3255994b14b802cb9bdadde2b3dc8272b7f78","size":78743,"data":"","first_seen":"2023-03-07T01:03:37Z","last_seen":"2026-07-26T23:52:27.907475Z","times_seen":23948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-26T23:22:54.782142Z","times_seen":33803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/login.php","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"526c802c62d9e421a80aa2d6ae6eeb71","sha1":"10d6ae6b0dbb296a5294042d28fbd6c12921bfd0","sha256":"188808a547c0dcfb185c209565069f481f3cf5d5bfbed9942b007a2a17649d47","sha512":"ee5627113203893111d589619de981623410199242ddeda3ff95dc6c0a57213297c811986a1cae9e64e886a18f84119994892029c062749dbd40efe626f84b5a","ssdeep":"","tlshash":"94b00112be46020c46bb8d9a42738050ee48325b03f08a4c313eac901f64788b414145","size":116,"data":"","first_seen":"2025-10-11T14:04:11.492265Z","last_seen":"2026-06-02T15:17:34.613061Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5beb8fa265f90be5ccadd6b32b8672f","sha1":"7bdc23c06b51e7e42c05de486680a3c18aa5ce5a","sha256":"6a769e18b06859751eaa2259044a6ff76e3ddcd6572a516d8ce3a2d7b8c7538e","sha512":"9daba447b23e364ea0a7ba794cc038c9c81fc5a64127b30ee620b7169eb2490c8a1473867e9912664615595e51eeeedc7c089cc5a9f0610e43d5ed7b11f25c30","ssdeep":"6144:JTrRrD1LXomaR3Ls8FBHHcKqgyjjGpGxcrK69aRYRMtsDo6ug+1MdZvdj/drgVFT:JCsqHSgyfB69ARYXDooYMdjdW/7jr","tlshash":"8065842cd365a3bc9da6c7f5ca2130b46d8f51ee71e09328a278c5b072621dcd5d9cca","size":1528342,"data":"","first_seen":"2023-03-09T05:04:22Z","last_seen":"2026-07-25T12:38:13.450513Z","times_seen":5778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/js/js.js","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/js/js.js HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: none\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 199\r\ncontent-type: application/javascript\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"19b21a2bc54e98f8ddd9251812a5940f","sha1":"e358391328bf826c640d35f4a4c15879346c3c30","sha256":"f6ecae9999b4d4c78226a09e14df1c6ec8bcdf3473377d4e49327e6c9b6b957c","sha512":"7501c1ad6db0155a54b3faa74096c232625741730fb2dc9b6b58a395d3186fcaae94e141cf67ca1811c56d9436a8f2c02e1a177f43a5b869f9ff1e3bfd41e25b","ssdeep":"","tlshash":"13f08c1df31865aa85b333361cb79248ed5a647b04050620fcac28a02ff80818e22d2f","first_seen":"2023-03-08T15:46:00Z","last_seen":"2026-07-23T17:43:06.11939Z","times_seen":270,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u.to/iiNdIg","fqdn":"u.to","domain":"u.to","tld":"to"},"ip":{"addr":"186.2.165.57","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T16:51:42.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u.to","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 21 Oct 2024 00:00:00 GMT","end":"Sat, 01 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"15:F6:48:E3:8D:91:B9:20:82:2B:27:7F:2F:7B:63:61:E7:73:55:EB","sha256":"9E:E1:5B:9D:2E:41:0C:62:01:E8:12:6B:D8:9A:05:49:6D:C6:3B:4F:D2:53:2A:62:A6:EB:78:8A:E6:B8:11:1A"}}},"request":{"raw":"GET /iiNdIg HTTP/1.1\r\nHost: u.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=COvW3cC5VDaACLf5; Domain=.u.to; Path=/; Expires=Mon, 13-Oct-2025 17:11:43 GMT\n__ddg10_=1760374303; Domain=.u.to; Path=/; Expires=Mon, 13-Oct-2025 17:11:43 GMT\n__ddg9_=91.90.42.154; Domain=.u.to; Path=/; Expires=Mon, 13-Oct-2025 17:11:43 GMT\n__ddg1_=VW6Fqdgzb9prQYDfOU70; Domain=.u.to; HttpOnly; Path=/; Expires=Tue, 13-Oct-2026 16:51:43 GMT\nlng=en; path=/; expires=Tue, 13-Oct-2026 16:51:51 GMT; domain=.u.to;\r\ndate: Mon, 13 Oct 2025 16:51:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://studiowebcore.top/inges/inges/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5045,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T23:51:00.35555Z","times_seen":17552102,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":155,"dns":2,"connect":19,"send":0,"wait":122,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"u.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T16:51:43.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/ HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d; path=/\r\nlocation: ./login.php\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 13 Oct 2025 16:51:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5045,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T23:51:00.35555Z","times_seen":17552102,"resource_available":true,"data":null}},"time_used":1476,"timings":{"blocked":635,"dns":349,"connect":137,"send":0,"wait":207,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.0.2\r\nx-jsd-version-type: version\r\netag: W/\"260c5-fByeBXPlzqi603M74vxjqoxo6o0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nage: 2355480\r\nx-served-by: cache-fra-etou8220159-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24303\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155845,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"abe91756d18b7cd60871a2f47c1e8192","sha1":"7c1c9e0573e5cea8bad3733be2fc63aa8c68ea8d","sha256":"7633b7c0c97d19e682feee8afa2738523fcb2a14544a550572caeecd2eefe66b","sha512":"bac54101debafcda5535f0607b5f60c2cda3e896629e771ad76ac07b697e77e4242d4f5f886d363b55fc43a85ea48a6bfc460a66f2b1fc8f56b27ba326e3a604","ssdeep":"1536:d0bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fM:d0bwlyVUpz600I4fM","tlshash":"09e3a3d7f581241dd4a7c259a0d1bffd052f4586e3025babb0277bb88b8a6c70963e4c","first_seen":"2023-04-05T03:16:49Z","last_seen":"2026-07-26T23:52:27.906903Z","times_seen":98716,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":46,"dns":1,"connect":18,"send":0,"wait":22,"receive":12,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/imgs/header-right.png","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/imgs/header-right.png HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1885\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:44 GMT\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 113 x 20, 8-bit/color RGB, non-interlaced","md5":"a2896ca3faed7f6c4842f755ab3ff1d8","sha1":"c1b00cf53b32ad9e858f39192388f6b015c03195","sha256":"81fe436944e76fa50e9c5519610860b9ff270fbdb1d0a3bba8eeff6bb8c84d3c","sha512":"4f9c811502598ae29f4330aebc6e79ef69dcabdd8a44391636cd91dcc20b191c4018adf34a0917089a568e7e48680d24d3c9075aa30eddd3f824df7dcc77db38","ssdeep":"","tlshash":"8e410a854b842b2548816b63f824b222d5518efac83901b9001979ee0807e4fb4ae0c9","first_seen":"2025-10-11T14:04:11.455509Z","last_seen":"2026-07-23T17:43:06.120068Z","times_seen":144,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/imgs/help.png","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/imgs/help.png HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 501\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:44 GMT\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"fa126bc1a8614e98a2d0fac157369c7e","sha1":"c7345d18423863862d2b8ae0793c4c76201c4c44","sha256":"7eb9a1772525fea4e394b19050a165f7060e4b15a51f292be59c25816e99b7bc","sha512":"86a020090cedbc5bc4a3cf67f25b4e10a295875bbe43a4d79f7fe88a963c0029bb31b0148f6af91fc4330a0a9be1064287a954985c92b0aa2b566324a2884eec","ssdeep":"","tlshash":"13f0c057b38b13bdda06d322264f4950d0571b9a976216dd7fb1c0e385460a04696d63","first_seen":"2025-10-11T14:04:11.477601Z","last_seen":"2026-07-23T17:43:06.112362Z","times_seen":143,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.0.2\r\nx-jsd-version-type: version\r\netag: W/\"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nage: 2892913\r\nx-served-by: cache-fra-etou8220154-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23224\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78743,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"0aa8d64e726c4a57adb5c88f9115996b","sha1":"901169527507ff9e662cf64d8e361f359308970d","sha256":"7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe","sha512":"ef6583f7684bb3b4f91405e7def90d65f9561baa609540c3a66f3b4de4267d283c2a7af298bd86df447b6ace05993c2182ef47ede4b30c25f79a38ad49e70a9f","ssdeep":"1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV","tlshash":"a573d6493254b87309ee55a68037460bf3255994b14b802cb9bdadde2b3dc8272b7f78","first_seen":"2023-03-07T01:03:37Z","last_seen":"2026-07-26T23:52:27.907475Z","times_seen":23948,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":32,"dns":1,"connect":18,"send":0,"wait":22,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.2.0/js/all.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 418541\r\ncf-ray: 98e057eb1c1656c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"630e6e62-662ed\"\r\nlast-modified: Tue, 30 Aug 2022 20:09:06 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1683317\r\nexpires: Sat, 03 Oct 2026 16:51:44 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JQfwiaIyJhXDkoJAm5C06UJuO%2FiiIUlz0XoOGSROrcT3tqcoAxkAt%2FeIIsPmogecz39q5Db9bZLcjSrmCOGHW02X8gCaNUJSc3jKk%2F2joSDkbUD9h2MxJxGr%2Fgf08X3%2F%2BFO%2FJv1C\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1528342,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"e930893a97a9ae1545bc1d4b7691ba57","sha1":"99c343b1d1c9331cd1a0778abfac9b7aeaffb108","sha256":"f648f1b49b22316288499e6f323156c4ccd9b0fd310bd58fddf482ec179d1016","sha512":"ef1e1641e478b378d6265daacddbdea5362221a45adbd6a993a1a416cba81740fc9de399f9bf1f45393657120f2a91a3f1710d13e7eb6589a0f178de3b187339","ssdeep":"6144:JTrRrD1LXomaR3Ls8FBHHcKqgyjjGpGxcrK69aRYRMtsDo6ug+H:JCsqHSgyfB69ARYXDooI","tlshash":"6425832cd36593bc9d9687f5ca2120b47d8f51ee75e0a328e278c5b0b2620dcd5d9cca","first_seen":"2025-07-26T17:28:19.15574Z","last_seen":"2026-07-25T12:38:13.443893Z","times_seen":941,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":21,"dns":0,"connect":5,"send":0,"wait":15,"receive":16,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/login.php","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T16:51:44.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/login.php HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=7200\r\nexpires: Mon, 13 Oct 2025 18:51:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccept-ranges: none\r\ncontent-length: 1600\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5045,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1c6e8ee4a170a97c287d773a93fc5595","sha1":"a486e8425a1d00aa6036d2279f42635c71136e69","sha256":"9ca8ee1293995dd0ffcbb8a8216ed10384e3e4e22b2e5505cc33b11167b6222d","sha512":"8c26323eec12ea3bf4402e0a0a2e6bdc0c2b7917b221d7da9d8f4db495f53e21f0659e3a2a69fa773d1fca898bcfb69ef48f52f19aba9125fcca16b40d6c428e","ssdeep":"96:7wFSJABnFmBXuVfMprtNCJR80u8SY9VkmPD:EFSmUtuZMJnCJ+P8SY9VL","tlshash":"99a10e1178c0897750738a98e9b5a65dfe168217a34b498871ac3b971ff2d98cc13994","first_seen":"2025-10-11T14:04:11.461162Z","last_seen":"2026-07-23T17:43:06.121567Z","times_seen":110,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3074\r\ncf-ray: 98e057eb1c1856c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec3-2087\"\r\nlast-modified: Mon, 04 May 2020 16:11:47 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 750554\r\nexpires: Sat, 03 Oct 2026 16:51:44 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CcfW9qJPaydMdHuXLHgVN0nO002Buff%2FbgEMJ2xMMWZD5Z4vtgiyErrjCDipcAumwUPt68DSGWmReLSBnGBXxQuWSXwVzbPLLacvpnFsqyk06RGETvtenTk%2FmWzRiLGKduzpCuwp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"cc290e6c3aeecf5021dd82ad8df2512a","sha1":"fb983aecd3940e8ebbfe5e74c8099cee9223c957","sha256":"2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995","sha512":"a47546a57ec5ff6ef267421263e5558f250b0296c3943d3f5f4ae019b4ea084ed6156e4c7b3353586fdd9e1b5b06e202cec7745903e0a44e111012eff94a8287","ssdeep":"192:cd227YJcI/iarixR4aCSfZrkiqVNReFevZA8A/A:cdaJ39e74boZrkVVjeFexA8AY","tlshash":"b502e8d5329670b253b371e901bf020bebb7afa156de4814d61a94e0ae74f890053f7e","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-07-26T22:43:32.117176Z","times_seen":12316,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":22,"dns":0,"connect":3,"send":0,"wait":31,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Ubuntu:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Oct 2025 16:51:44 GMT\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8004,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e05b0cb22b3789a5c72aeef4f1b22893","sha1":"1642b373351455bf8334c30cec2bec1834c01d09","sha256":"e6b653e35fedf32193c15bf8660dd5587cda4f6b0b022c1c6a63d60e69a67394","sha512":"fea9f8d8456a6a33269b58adf47af7d0c1cfbc2c41bb62af53c269475c522b4218d6156726961bb1c1d24b01f202384da7e5729eaeb1dd9cd409f43362bde34a","ssdeep":"192:hbRA3HLg3bg8i5xq7eMVDUn5ZKdgWlR66HZ7H:J2aJl","tlshash":"0bf1bf93145b9404ea434cc223cfbf369d8f61956445c5ba6ffe18c8ace6c3a436ab4d","first_seen":"2025-09-03T21:57:59.125839Z","last_seen":"2026-07-26T16:27:30.521637Z","times_seen":959,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":79,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://studiowebcore.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:49:54 GMT\r\nexpires: Fri, 09 Oct 2026 11:49:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 363710\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-07-27T00:01:45.39576Z","times_seen":21178,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":58,"dns":1,"connect":7,"send":0,"wait":10,"receive":8,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://studiowebcore.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:53:49 GMT\r\nexpires: Fri, 09 Oct 2026 11:53:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 363475\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-07-26T20:48:33.470079Z","times_seen":11335,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":65,"dns":1,"connect":20,"send":0,"wait":9,"receive":3,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/css/style.css","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/css/style.css HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: none\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3411\r\ncontent-type: text/css\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12577,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9a426193ac8edb13f9e8e9b2087fb5f6","sha1":"73d9255a72ea975d95b815ba62a9b735f822273f","sha256":"ebad6c6eff2c4f146203413910d04d8312e7612d73ce52a8f0b4def43c4db5c6","sha512":"105ea412e7c4fb75f50bd726cf2309a874914fcdede81b9c2e34b0a3cedd2f276cb7ed2d78aa0909265dc8133bedaa9e6c9ffdf9d71c9d836c876f0db3e72602","ssdeep":"192:rLXli8X/F/J/cpHkcYAQkDyJk+oSkeTdh/Uh/4Tm0Kf5UbWuyN+y+BJ:rTE8spPYAQkSkeUOa0Kf5UbtyOJ","tlshash":"d04205a65e950f04be57e88835c18f22335d5063404fceba7fb5a428dfc7ad985b2358","first_seen":"2025-10-11T14:04:11.466279Z","last_seen":"2026-07-23T17:43:06.11514Z","times_seen":149,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/imgs/logo.svg","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/imgs/logo.svg HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38293\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:44 GMT\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":38293,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3f40009f3551a33351ee943b8654cbb","sha1":"2416af536a34a5c50e1475e0bebcd9bbbe0d3b9b","sha256":"1a77d762d62e1948dd5c2346672422e68cea346657fe350c42a30705721100cf","sha512":"ed90f8e94f8e39c94f926754d69737bdd9deafa408883ee3c195634d7f48fe55567c30d0c70a9906efb995dab66f41c9eb93eb279f2d7ca165b825daa9863dd5","ssdeep":"384:ci2qHIKsxh2UXzCo1E1q+Px9DVoJrkxRFYqkEX:coIKQDE1q+Px9DGJrkxkEX","tlshash":"a10343cc4fe09bad9235aa30735750ca39fb89bf0b8d8646ba7850a0c5154fd1e75ac3","first_seen":"2023-05-10T12:42:04Z","last_seen":"2026-07-23T17:43:06.117509Z","times_seen":214,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/imgs/lion.svg","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/imgs/lion.svg HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/Assets/css/style.css\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27717\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:44 GMT\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcc1889b9ff054ccc3edbca148a17426","sha1":"3a4a3246a94e32c6eb92dfff62763dead15dda22","sha256":"6b3c4d3e255d73ca9e57959f5860c8357dbfad51249a6ee5a969c0d75f38f462","sha512":"aeca32c89d224efe74d1b856bf415916af6e223e846840b9c006908679da9a360cd810e377a10de75edc7464469ff4b76918779b6a9e26eafe3303cf22a6bb2c","ssdeep":"384:+c5sZYEnKB0/Nj/VZ/vuok1sucBiFNBNqRkcPssTOe8dD1X3IFiBHP2DDk:KZYKj/Pu+GiVPssv85F3jOs","tlshash":"f4c2c4e65770d2e0a5c78f9eff225ca8794bb4fe4f6642c4a2bdaa4827d39c4d504c10","first_seen":"2023-05-10T12:42:04Z","last_seen":"2026-07-23T17:43:06.118504Z","times_seen":210,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoC1CzjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoC1CzjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://studiowebcore.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38696\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 09:43:41 GMT\r\nexpires: Fri, 09 Oct 2026 09:43:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371283\r\nlast-modified: Wed, 27 Aug 2025 19:19:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38696,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38696, version 1.0","md5":"a4381ce82ba65b2cf160c1cfccd701e7","sha1":"2ce152f62257a3cb5609b92a10cd100bc407ad33","sha256":"998fb9fd2f2845f623afa3fad936a4c832f7213cbb153450ff2908088ca418b4","sha512":"246d2806edf76584f26e3a37c4d834c7fd2756baa04307fe5b4558197bab978b40ebfa4412ded734e0bc7d31160d4e93fc465765890493214e1a4dcae094da7a","ssdeep":"768:+txitgyfNkvIteknSdt7kUWrkN96Z6KT0aM4jDY2b9GUmC9:vtVN67dt7Yw/+YaM4jEuGrC9","tlshash":"2303f1f3788b54198b47841e9a30677a383ae125b15b4a80173dd37bde201c49adbb3f","first_seen":"2025-09-02T23:26:08.224396Z","last_seen":"2026-07-26T18:46:17.112739Z","times_seen":5306,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":68,"dns":2,"connect":25,"send":0,"wait":12,"receive":5,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valealupilor.com/","fqdn":"valealupilor.com","domain":"valealupilor.com","tld":"com"},"ip":{"addr":"85.120.18.2","port":443,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T16:51:41.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valealupilor.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 Nov 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"92:14:8F:8A:14:CE:D0:D1:4B:72:87:92:72:EB:FE:28:1E:A3:FF:0B","sha256":"FD:82:FA:DA:70:1C:39:E3:3B:67:1F:A4:AA:A2:07:E8:78:27:54:27:D3:F8:12:57:20:35:F9:EA:42:ED:5A:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: valealupilor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 12 Oct 2025 17:32:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 155\r\ndate: Mon, 13 Oct 2025 16:51:41 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"33b3bc3d9ff2507d83d574b397c921a2","sha1":"3296fcfab921026b35dddfa7dfb85abedf89f67b","sha256":"311addd90ac3a868fad7f395ba7fb73c9826ffc7cdedcae9149154721cdade4f","sha512":"7dae5af23de71fceb0bcc26a3986ef145aa2af21dd5f0eb1e7670917953dd147e33c46aafbf3ed02fbf59a2c509d0502cff554cbd20bbc36df1e897b97dc9ae4","ssdeep":"","tlshash":"e1c08cb304002c174331a93067c13051a0b32649b54b1610e080d07f2ad8f10cdc3204","first_seen":"2025-10-13T14:10:34.251788Z","last_seen":"2025-10-13T16:52:07.310923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":407,"dns":237,"connect":46,"send":0,"wait":49,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"valealupilor.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valealupilor.com/favicon.ico","fqdn":"valealupilor.com","domain":"valealupilor.com","tld":"com"},"ip":{"addr":"85.120.18.2","port":443,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valealupilor.com/","date":"2025-10-13T16:51:41.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valealupilor.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 Nov 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"92:14:8F:8A:14:CE:D0:D1:4B:72:87:92:72:EB:FE:28:1E:A3:FF:0B","sha256":"FD:82:FA:DA:70:1C:39:E3:3B:67:1F:A4:AA:A2:07:E8:78:27:54:27:D3:F8:12:57:20:35:F9:EA:42:ED:5A:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: valealupilor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://valealupilor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Mon, 13 Oct 2025 16:51:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-26T19:08:54.169483Z","times_seen":52340,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"valealupilor.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"valealupilor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/css/helpers.css","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/css/helpers.css HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: none\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5552\r\ncontent-type: text/css\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41899,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41897), with CRLF line terminators","md5":"726c60fc192383fbcf04e19677ad0959","sha1":"e2e966c2b6164806392449ced617227c27d36ab8","sha256":"1c7070cf33da6adcb7a6b9ff7eb6e06fd8f64958622d61569b990e8b92c58615","sha512":"a45a01385d32c455b8e7601876a4e8cd2444993bb3a25b9b58937b19c767a23764a6a2b99c11fabe6d405ff3a4ceaf137c62ec2c9e142ce1207b0876bb87eb2f","ssdeep":"384:g8xTEBmqsHWJo+Fl9feef03Fvn6cxwkqsZ4JayZkQqLZNPdP/s26Olk9KIYRQ4T9:LOFsOYkcbQcxre9r0QTVcN","tlshash":"921339c7fad514d8a11b4252c6823bfcfdfb1814136aaefb91167b22db046fb4a1451c","first_seen":"2023-04-07T07:05:39Z","last_seen":"2026-07-25T12:38:13.448774Z","times_seen":4029,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15e40\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nage: 4701427\r\nx-served-by: cache-lga13629-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 20, 102548\r\nx-timer: S1760374305.537696,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89664,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-26T23:22:54.782142Z","times_seen":33803,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":58,"dns":3,"connect":21,"send":0,"wait":15,"receive":5,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/status/update_status.php","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:44.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"POST /inges/inges/status/update_status.php HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nContent-Type: application/json\r\nContent-Length: 39\r\nOrigin: https://studiowebcore.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=7200\r\nexpires: Mon, 13 Oct 2025 18:51:44 GMT\r\naccept-ranges: none\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 13 Oct 2025 16:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T23:51:00.35555Z","times_seen":17552102,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studiowebcore.top/inges/inges/Assets/imgs/ff.png","fqdn":"studiowebcore.top","domain":"studiowebcore.top","tld":"top"},"ip":{"addr":"192.185.129.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studiowebcore.top/inges/inges/login.php","date":"2025-10-13T16:51:45.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.studiowebcore.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 11:01:13 GMT","end":"Thu, 01 Jan 2026 11:01:12 GMT"},"fingerprint":{"sha1":"F7:F3:77:94:04:BD:70:66:71:FD:2F:F2:65:59:5A:F8:C4:05:17:13","sha256":"B1:A0:51:21:92:AD:06:E9:E1:FA:6B:1F:72:76:E6:CB:20:11:4C:F6:1F:B8:A9:37:3A:05:09:E7:56:61:2F:2E"}}},"request":{"raw":"GET /inges/inges/Assets/imgs/ff.png HTTP/1.1\r\nHost: studiowebcore.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://studiowebcore.top/inges/inges/login.php\r\nCookie: PHPSESSID=c874397c1ea91684a7bc7c1c58a7c87d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Oct 2025 17:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 987\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Oct 2025 16:51:45 GMT\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 16:51:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"866340aa9e7c2b8446ba13c9a7bbfa16","sha1":"b4a4e1a7c6c0762e38f19ec1f1321a8517082df6","sha256":"10d3386d29d27ce2b601d3de5ed21f422a90ff4bd7384b13263c36e9f1ebc203","sha512":"e4210bb0abefee8f8a1df4712017e1881221da11c2714f221d93ae636c4289881015db19248ad92010b7b1563a5b086059d6204d673063e8528f8e893694f87a","ssdeep":"","tlshash":"7a1108fcba05c87ed8ae773228900501f6bbd1935f448e79a41dc6b1b735f400456e03","first_seen":"2023-06-12T13:39:20Z","last_seen":"2026-07-23T17:43:06.120995Z","times_seen":170,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"studiowebcore.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"studiowebcore.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}