{"report_id":"a4dd29d4-b5bb-4403-9e22-30109399f344","version":0,"status":"done","tags":[],"date":"2026-08-31T09:00:01Z","url":{"schema":"http","addr":"veniceinvestment.co.uk/","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":0,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"veniceinvestment.co.uk/","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"title":"Venice Investment","dom":{"size":2844,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d7e19e545e84d2004c2f02254672a2ec","sha1":"aa47b92a7205ff3a3a6b737440f735f45604f60e","sha256":"17fc76b8e0efa19c903140471f630127e4134d25c3bd986f7413261e3b6e9530","sha512":"21084c2deb8c070598de47ecf3b32f7f2221f23a3ed0e6d87af0b9d9bc7279212fa3d99b7ae45edb79b8ebba0e52cdce08351da6836b1df3b8c72d988022d458","ssdeep":"","tlshash":"7751b72084f69823439194c0e9a09a2b1fc1db0bd667594432fd5bf52fdae89ec6b168","dom_hash":"domhash37e8e6f13fdca3c0da0e0a7d9f5dd0a3","first_seen":"2026-08-31T09:00:06.70747Z","last_seen":"2026-08-31T09:00:06.70747Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"veniceinvestment.co.uk/","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":0,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T09:00:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"analytics.archive.org","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1995-12-14","domain_rank":695424,"first_seen":"2017-01-30T07:39:12Z","last_seen":"2026-08-16T08:36:02.38925Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":627,"comment":"","tags":null,"fingerprints":null},{"fqdn":"veniceinvestment.co.uk","ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":48,"request_count":24,"received_data":754880,"sent_data":12731,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/analytics.js","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f21b87abf1c871b6b5385247250742","sha1":"dd9e4efd1e21d7a63088778a7502b3ae015d8d87","sha256":"719f911d3d95d3cd12eb2ae402f213e4f82b0067e52657df87eaed4094ac4feb","sha512":"2b0a03b588d707032d944e24dadbca1182feb975dfe6bda620358a21047fdb84d68edcf96bd256265eaf708efd4226d699bbb601ecf35039009db57040d1ff63","ssdeep":"","tlshash":"695152297ca790326967607b97ef5200637843430c04e9a83a4e4b846fb6f1f42f79e8","size":3043,"data":"","first_seen":"2026-08-31T09:00:06.746621Z","last_seen":"2026-08-31T09:00:06.746621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"veniceinvestment.co.uk/favicon.ico","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.913Z","timestamp":1788166771913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93,"size_decoded":318,"mime_type":"text/html","magic":"ASCII text","md5":"2ee79387d61ae8589c138cb1f98cfb7a","sha1":"5cc2ad8c94a62fae967f6ec333f4aa96b32b013a","sha256":"3ff6168aa4f0c43738f6f3d3d6162554d558131febdb3c49517f1f661bb6f25b","sha512":"b338b9e6197a531e55bbf6888c885ec3f45cde50a2cd9f9ec4a37693c56d974ec6201fbf91e108e0208b65aa79bdd1df30f6869714610804bb9ffbc9507bbf1a","ssdeep":"","tlshash":"74b0124f32d1073c21f0001622944354044a0226c912d0114041652923207269b314d9","first_seen":"2024-08-19T19:05:08.097766Z","last_seen":"2026-08-31T09:00:06.711255Z","times_seen":168,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.archive.org/0.gif?kind=pageview\u0026loadtime=180\u0026timediff=0\u0026locale=en-US\u0026referrer=-\u0026version=2\u0026count=7","fqdn":"analytics.archive.org","domain":"archive.org","tld":"org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:32.245Z","timestamp":1788166772245,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /0.gif?kind=pageview\u0026loadtime=180\u0026timediff=0\u0026locale=en-US\u0026referrer=-\u0026version=2\u0026count=7 HTTP/1.1\r\nHost: analytics.archive.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T08:24:35.506294Z","times_seen":18439249,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:59:31.335Z","timestamp":1788166771335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 Jan 2026 21:00:29 GMT\r\netag: W/\"bb1-647e6b2e0d4bd\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2993,"size_decoded":1086,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3dda628a8f1968488d65ee0384e67b32","sha1":"751d43b299d6d6bf46eb0d851c1b7e85bb349d8e","sha256":"e119b4a0da329e1c45ad3cfbc894aee0fd42ae241e413895cec37890cabb2db8","sha512":"b07ab242786ca1d83c2544ab5ecc87847fd37fea77e188dbc4052d7dade6039a18fd73d86338b4f0476d59ee3108ed656392eed58374e795f06ccba68b44956a","ssdeep":"","tlshash":"bf51da2084f688234351c8c0e6e09b2f1fd2db0bd6a2594432ac5bf12fdbec9ec5b158","first_seen":"2026-08-31T09:00:06.714746Z","last_seen":"2026-08-31T09:00:06.714746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":54,"connect":18,"send":0,"wait":43,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/iconochive.css","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.737Z","timestamp":1788166771737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/iconochive.css HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Sep 2020 15:41:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f62322a-16c1\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5825,"size_decoded":1578,"mime_type":"text/css","magic":"ASCII text, with very long lines (556)","md5":"aadbcc29c209482b1adf0f4cd1a0255e","sha1":"bdeceaa51becb05161016e10ef65550198747f6e","sha256":"bc2ff0a6b9cf9b088c61c1eefb303f3e9e592a66d37b699d751fcdfc1fcef560","sha512":"49c3fa060cee6b763f1b92e7a3be23232e7bc016847994119ad63cce40410dc64035b55887cb1c467a3f51674d99f89ec8ada65b14c8f8ee1f02be7c8c97c170","ssdeep":"96:lxeufez6hTFIl28us/XbnS4E5hlpOfuHMuG9pu/EFD1rFX93QFCAI87H2CHzmYu7:/pFIlHus/LnS/5zpOfuHMuMpumD1BX95","tlshash":"17c12ba5fb6e00d03764cc43a34126de9a97f2a5bd4a48a2f10f145c1ff064b2bd5fa9","first_seen":"2023-04-11T11:00:12Z","last_seen":"2026-08-31T09:00:06.720595Z","times_seen":110,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/jquery.htm","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.740Z","timestamp":1788166771740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/jquery.htm HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 16 Sep 2020 15:41:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f62322a-3df\"\r\nexpires: Sat, 27 Feb 2027 08:59:31 GMT\r\ncache-control: max-age=15552000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":991,"size_decoded":777,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ddc9d7ffef91e82be441acbd2b295067","sha1":"0a2088c3f5ac7c49849ead02ad686560c1ec6017","sha256":"b9d8c1d02d0dd5f017650a0f672c380169cbb1b7de9c0f8853b701377b0a275f","sha512":"020deac260935625fa58c7bb8ac0a385c8683c64bf967d41adb2a737e05af2132542969d3a5ab35b948d023433d6455f711865dc11e5b3e89ca4812031bcf34c","ssdeep":"","tlshash":"7e11ed4fbc42d40b882006d4d8d5e468c79ce2e6d620cce099d800aba398fae599f9cc","first_seen":"2026-08-31T09:00:06.725972Z","last_seen":"2026-08-31T09:00:06.725972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/repeat.jpg","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.807Z","timestamp":1788166771807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/repeat.jpg HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1368\r\nlast-modified: Wed, 16 Sep 2020 15:41:32 GMT\r\netag: \"5f62322c-558\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1368,"size_decoded":1739,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 38x42, components 3","md5":"438e9a19082a93d7c4cd8309f5f58f38","sha1":"9217608eb691c53241b3e6f676a75d0797c82bef","sha256":"221893412f40d0ebb9ffb2948a65c97328e2be63989e80487857e3a972563ec0","sha512":"db801a943b3a3317756d8a35a2629b54c4b263cf08f18fa9eddd57b9db6912df2225737809ff0564e4315b8fcdc0e279bb9b1cfcb0f3928135aa4d9f53256cfb","ssdeep":"","tlshash":"77219549ee803b02d999ea3128f7815b1f55c4c0b8c0d949f8fdd00298b50f90d5e5db","first_seen":"2026-08-31T09:00:06.732066Z","last_seen":"2026-08-31T09:00:06.732066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/shadow.jpg","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.819Z","timestamp":1788166771819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/shadow.jpg HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 190958\r\nlast-modified: Wed, 16 Sep 2020 15:41:34 GMT\r\netag: \"5f62322e-2e9ee\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190958,"size_decoded":191333,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1119, components 3","md5":"9c25850b90b540d1287e94ba3fdfd8fc","sha1":"f4275b9e9e92345c5a7aaf1da8bbcbf57b9c8892","sha256":"ccd2ba9f9bb185de23ece4fbd4177b2875377f1ba605ec3bb566e27ee379fbf4","sha512":"fe3b6c60e53f207e8ac1712cc5de14af5261746c85443550587ec6a6444e9180e1e19998fbc6e85700cca8878968e05794990e8db3b080270f6cec345704583d","ssdeep":"3072:znV8bJlmAkMQqrs4U1Av0dXwf111tG5y1vu11115pS8O6m11dajXBDu8TMq9lFDN:zJVMQWTUyh111cT11115pSX11cUSVL","tlshash":"d4149e5e3b0ebb50fd4afde283f665cd9daf87bae5a883006c451f81b54055a2530c8a","first_seen":"2026-08-31T09:00:06.737271Z","last_seen":"2026-08-31T09:00:06.737271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/venice_investment.jpg","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.820Z","timestamp":1788166771820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/venice_investment.jpg HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63540\r\nlast-modified: Wed, 16 Sep 2020 15:41:34 GMT\r\netag: \"5f62322e-f834\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63540,"size_decoded":63913,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 957x369, components 3","md5":"ab7a7cf09ce1ec4b94012a0949e6072a","sha1":"68d75ebee5c521fc25da332838ad4c6678a3ce44","sha256":"563074c2bd0e27051de1400c31039b8b82ed157351c3d5ec3d3e634d5a24e036","sha512":"382aaca60b3ce41bb4daeb298c552501214b44143cbda10a407f70948f9de47d48c22b8302461200ba673fb96a4fb301cfd111f67f3aabc045769d3be02a067d","ssdeep":"1536:Ukg2PalsBymwMW6P6fS56mj5cShlyz01wEsd2d4:N7hb0USSQ2m","tlshash":"9a530289fd153712c65eca2589a2ce2d45f2008e46f3f724ae718b75c5e21618bdc78e","first_seen":"2026-08-31T09:00:06.74014Z","last_seen":"2026-08-31T09:00:06.74014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/input_bg.png","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.826Z","timestamp":1788166771826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/input_bg.png HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1429\r\nlast-modified: Wed, 16 Sep 2020 15:41:30 GMT\r\netag: \"5f62322a-595\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1429,"size_decoded":1799,"mime_type":"image/png","magic":"PNG image data, 207 x 30, 8-bit/color RGBA, non-interlaced","md5":"fe71c582b55bcf54f9103c88c543c638","sha1":"7ce52be1eaaae98557ccdad8de80569fc0912a26","sha256":"0b81a74b7f7b641357d34eef955c8749b5e9d53de66358791ce173097bc5a167","sha512":"bd757bc40c0c35543a0e90f2fe869338bec03ae5d5c7d36a0fc112b3857b4f80baecf01306b4446ef69819ba706d2e7adc19db6af9ab2e65ad1abcf9dd4b88b0","ssdeep":"","tlshash":"2221b65df7c0b5909798de6218f7802f9c56c881e8e0f85ef4cec8074a951fa45880cb","first_seen":"2026-08-31T09:00:06.742757Z","last_seen":"2026-08-31T09:00:06.742757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/web/20141228160305im_/veniceinvestment.co.uk/font/calibri.woff","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.834Z","timestamp":1788166771834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /web/20141228160305im_/http://veniceinvestment.co.uk/font/calibri.woff HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83800,"size_decoded":84062,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-09-13T07:12:39.657736Z","times_seen":1863,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/analytics.js","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.732Z","timestamp":1788166771732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/analytics.js HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Sep 2020 15:41:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f623226-be3\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3043,"size_decoded":1300,"mime_type":"application/javascript","magic":"ASCII text","md5":"31f21b87abf1c871b6b5385247250742","sha1":"dd9e4efd1e21d7a63088778a7502b3ae015d8d87","sha256":"719f911d3d95d3cd12eb2ae402f213e4f82b0067e52657df87eaed4094ac4feb","sha512":"2b0a03b588d707032d944e24dadbca1182feb975dfe6bda620358a21047fdb84d68edcf96bd256265eaf708efd4226d699bbb601ecf35039009db57040d1ff63","ssdeep":"","tlshash":"695152297ca790326967607b97ef5200637843430c04e9a83a4e4b846fb6f1f42f79e8","first_seen":"2026-08-31T09:00:06.746621Z","last_seen":"2026-08-31T09:00:06.746621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/banner-styles.css","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.733Z","timestamp":1788166771733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/banner-styles.css HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Sep 2020 15:41:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f623228-1796\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6038,"size_decoded":1965,"mime_type":"text/css","magic":"ASCII text","md5":"f78d43865c5369f9520575bbc30c2017","sha1":"d4239eabc1e63b3b78acdd2b31ad3a42e0534048","sha256":"919317f1905e4453239101a5242d1b52f21afea19ff3075a43966a3f719922b2","sha512":"fbd9c6744ca460996b4f9443cfc13232ae27e396097439573e3d38b5ac6d14010be66b5e3ec44e2f2d2b723f9077ebdb67843ce29a6b7c09154dd3a5c1253196","ssdeep":"96:y6g3Je1z50O58ib48/t4eFGi/GndDwCbW2b2iLD48iGqKRCl59DyV1frW7tsjJOr:OSz5fRsPVnpwcWWFVEo+09peD","tlshash":"26c102f6dbe30916b026f096245276a8373f400e994fce389772752dae05fe51222e1f","first_seen":"2026-08-31T09:00:06.748892Z","last_seen":"2026-08-31T09:00:06.748892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/script.htm","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.742Z","timestamp":1788166771742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/script.htm HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 16 Sep 2020 15:41:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f62322c-3d8\"\r\nexpires: Sat, 27 Feb 2027 08:59:31 GMT\r\ncache-control: max-age=15552000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":984,"size_decoded":774,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7e655f881a9c01b64aefd7edb65776f6","sha1":"5d06a2556eb0cee5e607e753203b12e36d4fbc86","sha256":"478098f41c5808d5491246d3da2da762c0f8f116a4a699a026101912fc72981e","sha512":"5fa8d74a633d143c6339a0857bab8fa19988a30b586d94af7a6aab2bbac4eff224b385a66b46a441db01f2abe12deb245a18efdc4ff112e616c17272559344cf","ssdeep":"","tlshash":"3011ed4fbc42d407881006d0d899d418c35ce2e6d520cce099c850aba398fae599f9cc","first_seen":"2026-08-31T09:00:06.750929Z","last_seen":"2026-08-31T09:00:06.750929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/loading.gif","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.747Z","timestamp":1788166771747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/loading.gif HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 913\r\nlast-modified: Wed, 16 Sep 2020 15:41:30 GMT\r\netag: \"5f62322a-391\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":913,"size_decoded":1282,"mime_type":"image/gif","magic":"GIF image data, version 89a, 20 x 20","md5":"feb463f3270afee4352651aac697d7e5","sha1":"5e5a327ab6775341662529f6bd07726dd96ff141","sha256":"5a3bb1567ffd3cf6269b276f47563078b2d0a846156bca648d9624eb9ef6af1d","sha512":"6cc388b70daabecf51a20bb0f7e6b75c5ba020d08e48fe3672d4e39d61adeb6a6566ee91c64fa42d9bf6b5feff48b761a4ac4aebc95192ed8ee35a64acd1fb36","ssdeep":"","tlshash":"a61180eb8d7190abd841eab1d65e9d9d2364be58720c1a8c0066ba6d29720d7bd03912","first_seen":"2023-04-12T10:59:48Z","last_seen":"2026-09-11T02:46:49.746922Z","times_seen":1533,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/record.css","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.771Z","timestamp":1788166771771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/record.css HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/banner-styles.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":83800,"size_decoded":14396,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-09-13T07:12:39.657736Z","times_seen":1863,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/tel.png","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.824Z","timestamp":1788166771824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/tel.png HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1787\r\nlast-modified: Wed, 16 Sep 2020 15:41:34 GMT\r\netag: \"5f62322e-6fb\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1787,"size_decoded":2157,"mime_type":"image/png","magic":"PNG image data, 28 x 27, 8-bit/color RGBA, non-interlaced","md5":"61df9d880a35e666d46785f0df73580f","sha1":"88f61f96dc88c586f424a59e837b0998eb110705","sha256":"d5793d4f8ecc4ed3179d9801215437f132c6f0adc06a4f0ed7505391dbd12ae2","sha512":"6a57db1658dcf925bb891c9b4c361964e34c5c185c85fef5b829d6834669ec140a37d8dcb4e9ae07f619a00a195061b6944bf766f01afcf72e61e8fada02b871","ssdeep":"","tlshash":"1a31b788ae80a552628ee69224d7401f896a888079d1e4b6dccec5039ab95f409dd9db","first_seen":"2026-08-31T09:00:06.754965Z","last_seen":"2026-08-31T09:00:06.754965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/button.png","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.828Z","timestamp":1788166771828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/button.png HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2040\r\nlast-modified: Wed, 16 Sep 2020 15:41:28 GMT\r\netag: \"5f623228-7f8\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2040,"size_decoded":2410,"mime_type":"image/png","magic":"PNG image data, 116 x 31, 8-bit/color RGBA, non-interlaced","md5":"b7125f415ecf136ebc4b5f568d8f3e2b","sha1":"de372b647959cdd3824aa30867f3e5c9f122abff","sha256":"5bddf57ee2cc79e0a9f71744d103e20bee06bc69f6e8e2310e86cb443c25e3cd","sha512":"bb1d639ba9d3a1912545371fad89093bbcdba04de9e7c0d76b1cccfdb823a5ce93149f01bacb1dec9b69a19826842c2d9fc86f1d240e18521c4c84284f66ec0e","ssdeep":"","tlshash":"5e41b84ce6c0ad82415dd94224fb883ba417c84094d4e4f9ac9ac956d9b23f885ed6cb","first_seen":"2026-08-31T09:00:06.756589Z","last_seen":"2026-08-31T09:00:06.756589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/style.css","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.738Z","timestamp":1788166771738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/style.css HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Sep 2020 15:41:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f62322e-d9c\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":1350,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"fbcb04899abb348a44b0b0e5ed3eeb1b","sha1":"ec399e5e8f76a901b02baf14f7b946a06fc3b16e","sha256":"4b7a7f376fc157dc32978ff7b4f7a9615ca173dd1bc086bbb7ebe9fda4215669","sha512":"8523e07f5f94261f6bdd6daad43785bb105cfc466c1f87d3cf2090121d9deeea3dd4b9e7b4b77b2614f3dba70e035ffd4e57955e593e14935be54ab746b10479","ssdeep":"","tlshash":"b2712f362ba23c2f321790a9a68286b81b1e50c72b1e5e07f40c7f2def98400b56274d","first_seen":"2026-08-31T09:00:06.758281Z","last_seen":"2026-08-31T09:00:06.758281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/logo.png","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.748Z","timestamp":1788166771748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/logo.png HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 33417\r\nlast-modified: Wed, 16 Sep 2020 15:41:32 GMT\r\netag: \"5f62322c-8289\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33417,"size_decoded":33789,"mime_type":"image/png","magic":"PNG image data, 263 x 249, 8-bit/color RGBA, non-interlaced","md5":"8f5857efdd1d6328b6c84f7b5f8ab9dc","sha1":"e4d15698ba04073e97ce26301bbdebda44ef92e3","sha256":"730827c066c4f7333fa00637cc50ae171fb73af00a2a2c3741f18649f48a9de3","sha512":"f780650037391dba1de2003a1ccfd4dec6e7a902c716d74baa34d33bf1437d681f974d960da6c9ef6e29c29d2c54d45c2d3d9f90f070fd47dbd85c5ac098738f","ssdeep":"768:Ej6ZTIZ7yf15Af+oVhUa8pwbzpgKMBUwdL8bTY6S:Ej6pIo+8GbzbMBUwlqst","tlshash":"63e2f147db499f21bdd267da1365ee3ea8db18d01c215f201057b8261fb407e6dcd09b","first_seen":"2026-08-31T09:00:06.760115Z","last_seen":"2026-08-31T09:00:06.760115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/icon_address.png","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.823Z","timestamp":1788166771823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/icon_address.png HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1803\r\nlast-modified: Wed, 16 Sep 2020 15:41:28 GMT\r\netag: \"5f623228-70b\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1803,"size_decoded":2173,"mime_type":"image/png","magic":"PNG image data, 28 x 27, 8-bit/color RGBA, non-interlaced","md5":"c470f9b4950ec193eba3d34dbdd9865f","sha1":"4dc2e906832779312743a1b65f99459246158737","sha256":"540de6797d76df447345ef47a9fdd70680181fe7bd09f5b829fcd9af0aeeb8ee","sha512":"f8ba8ebe46160a6be1ea0cbb9affe8835fab2feffb46be3b2c16ec56d6630d91774d120d4386967603b823342368f940cc92d2e2d2473a0e72322fc4a8f40bb8","ssdeep":"","tlshash":"7c31e7c9fbc47c025681e81120e68126fee7ca8164d0e46dbccec4868ee81f9462c9e7","first_seen":"2026-08-31T09:00:06.761863Z","last_seen":"2026-08-31T09:00:06.761863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/web/20141228160305im_/veniceinvestment.co.uk/font/calibri.ttf","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.915Z","timestamp":1788166771915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /web/20141228160305im_/http://veniceinvestment.co.uk/font/calibri.ttf HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":83800,"size_decoded":14396,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-09-13T07:12:39.657736Z","times_seen":1863,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/separate.png","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.822Z","timestamp":1788166771822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/separate.png HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 5217\r\nlast-modified: Wed, 16 Sep 2020 15:41:32 GMT\r\netag: \"5f62322c-1461\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5217,"size_decoded":5588,"mime_type":"image/png","magic":"PNG image data, 28 x 306, 8-bit/color RGBA, non-interlaced","md5":"4b282dd361fdb586f0dbe04ec3b047b7","sha1":"c6dee0525a33989cd5778e1fef0e5cb4377b86eb","sha256":"162e29b0f018e5541e6096bad035d6beaf6699abad537a7beb70cc13f1f7dbf4","sha512":"a8c8b6263040c24927292d3e853d0c3cdf64dbd8340c545d5ee0715328e4e8810ba1996f967a1a847db99fc8cdbbd2d0321d0ccce422412fad10b5408129bb3a","ssdeep":"96:k6MFn09UFVAcJ3fml7IBfvimL3cGfLRcXM1aTbsutKapLLoxQvJtKA0p:kaKVAcJ3OYfqwcGfLSMcDKa1Lox8Jcp","tlshash":"acb16dabbac0bd5213656a12a8deb0cee490d4c8e8e4c056f8ded401df241b5a5d94ff","first_seen":"2026-08-31T09:00:06.763316Z","last_seen":"2026-08-31T09:00:06.763316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/index_files/email.png","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.825Z","timestamp":1788166771825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /index_files/email.png HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1689\r\nlast-modified: Wed, 16 Sep 2020 15:41:28 GMT\r\netag: \"5f623228-699\"\r\nexpires: Tue, 31 Aug 2027 08:59:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1689,"size_decoded":2059,"mime_type":"image/png","magic":"PNG image data, 28 x 27, 8-bit/color RGBA, non-interlaced","md5":"ef07eed9e41b82884555f8ae65f5975a","sha1":"2366235e622a8a9672f977e4347d78492ac1dd4c","sha256":"18ff1d1179b7c436f86ec91800326baf6d3ce6da0e9963ee5726c15954c83500","sha512":"b4b0035e3b067804709fb6df0ef1214c04637c3a40406d0c998a07fcb556179b00cc0634cef3951bc684defe39a0e8f1aabe5352deb215ad94c60de3fabf7b01","ssdeep":"","tlshash":"a431b68dfa51ad01a784c5a134d2462bee9e8c44dce4f465bcefc82b45d42f54c8c9db","first_seen":"2026-08-31T09:00:06.765121Z","last_seen":"2026-08-31T09:00:06.765121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/web/20141228160305im_/veniceinvestment.co.uk/font/bellmtbold.woff","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.838Z","timestamp":1788166771838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /web/20141228160305im_/http://veniceinvestment.co.uk/font/bellmtbold.woff HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":83800,"size_decoded":84062,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-09-13T07:12:39.657736Z","times_seen":1863,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"veniceinvestment.co.uk/web/20141228160305im_/veniceinvestment.co.uk/font/bellmtbold.ttf","fqdn":"veniceinvestment.co.uk","domain":"veniceinvestment.co.uk","tld":"co.uk"},"ip":{"addr":"35.214.105.152","port":443,"asn":15169,"as":"GOOGLE","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://veniceinvestment.co.uk/","date":"2026-08-31T08:59:31.910Z","timestamp":1788166771910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.veniceinvestment.co.uk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 00:53:18 GMT","end":"Sat, 28 Nov 2026 00:53:17 GMT"},"fingerprint":{"sha1":"89:EA:EF:88:A8:0F:E8:1B:44:4F:8D:9B:94:8F:32:2C:A3:F2:CD:B9","sha256":"18:FD:95:E3:C3:21:13:8C:4C:51:B0:FD:DB:48:39:F5:93:C6:37:0D:C0:F4:9F:B8:30:02:01:F0:4B:BF:8D:7D"}}},"request":{"raw":"GET /web/20141228160305im_/http://veniceinvestment.co.uk/font/bellmtbold.ttf HTTP/1.1\r\nHost: veniceinvestment.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://veniceinvestment.co.uk/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:59:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83800,"size_decoded":14396,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-09-13T07:12:39.657736Z","times_seen":1863,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"veniceinvestment.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}