{"report_id":"b871b05d-b889-4ea1-96d2-a7502ad2ab94","version":0,"status":"done","tags":[],"date":"2026-10-03T16:44:01Z","url":{"schema":"http","addr":"connect-x.info/","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":0,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"connect-x.info/","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"title":"Modulares Raum- und Kommunikationssystem | CONNECT X","dom":{"size":22829,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1082)","md5":"04cacab73e8de6fe4a8bf9f718c5bb65","sha1":"3a4c6df53c5ae3898a81e598e6795d967e8b9af7","sha256":"b60aa3da62e656eb5015e1c2499b6dcabdbd5fa54c335514c329539264b9b9d3","sha512":"ac936b1691e74d22e723697c6e8d3719d7af9f6dabb18120ef5e5b30eac0886e131a3096a2f7d22258fafe046259d056233b8eadeea88a82b96a164df776ed91","ssdeep":"384:/TVPmTK79i7SfRu/+fzuyL6Y0CksYD8M68n8T8b8O86Z8xAC2FD5aTdaiazX:/UTc9i7SfRu/+fzuygbbD8h8n8T8b8O5","tlshash":"64a2a433c0da343752a361d9e2317b2ea0f2d618e7c7592581f5c5e847c6d138e2a55e","dom_hash":"domhashbd26b6c2523227dc5e54ef0cea98fb47","first_seen":"2026-10-03T16:44:09.823801Z","last_seen":"2026-10-03T16:44:09.823801Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"connect-x.info/","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":0,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:44:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"connect-x.info","ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-03T16:44:04.113343Z","last_seen":"2026-10-03T16:44:04.113343Z","alert_count":20,"request_count":20,"received_data":8074047,"sent_data":11830,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MODX","description":"MODX (originally MODx) is an open source content management system and web application framework for publishing content on the World Wide Web and intranets.","website":"https://modx.com/content-management-framework","common_platform_enumeration":"cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*","icon":"MODX.svg","categories":["CMS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/scripts.js","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d94b33839067b1fe6a4882c5cd955716","sha1":"e6da7422ae418e6fe966f5d613f2543849c734a2","sha256":"9b516d3a5d6b2be9ae641d3cd754bc49e178db89f811609027fd44fa377b6948","sha512":"a504233e42430a03c2d10bfd7bbc68f41d0c2beaa51dd0d2cd20c00678416504ed9adb570cc5214ec18c98c6718e7f01a8b7c34854aa2263290955f1ca47d30c","ssdeep":"6144:0fDLGmPCMyGgnwHadvLt4dz2kT7dP9MrkrQmCJ6rTUaxjBq6egLPfH6CGXL2tFDo:SLGmxyGgnwHN2kT7dP+QJT6OajxUW","tlshash":"99d44c8d7291707643e721e5515f520672366928b40ac0a4b07cc8eb6dbde8d22bffbd","size":617707,"data":"","first_seen":"2026-10-03T16:44:09.838431Z","last_seen":"2026-10-03T16:44:21.336349Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fb41c6676a22060908937e6534068ad","sha1":"b61ba86e103a6655b8394455e9fb3cf65db3a23c","sha256":"1ec1939e01b59a7627f60ea5079504b70f26cafc3fd4bd35afd1d62b8de165bc","sha512":"4588b8b571ec4087492b7116edfe9cc0314b6415a4ca0ebcf3b1f12a4ab7235110d306968f677b0e963684dd959faf59fa179de1ed5c8b24de3485ccf411b56a","ssdeep":"","tlshash":"5bd0a7e7d08d98832db379af591f80681b33201d2d82641245cd70b8281951cd303ca8","size":221,"data":"","first_seen":"2026-06-21T06:07:52.805413Z","last_seen":"2026-10-03T16:44:21.350516Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"connect-x.info/","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:43:28.696Z","timestamp":1791045808696,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: MODX Revolution\r\nSet-Cookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e; expires=Sat, 10 Oct 2026 16:43:29 GMT; Max-Age=604800; path=/; HttpOnly\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e","quoted":false,"path":"/","expires":"2026-10-10T16:43:29Z","raw_expires":"Sat, 10 Oct 2026 16:43:29 GMT","max_age":604800,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=620ba0071d3feded6e33f24042df8d4e; expires=Sat, 10 Oct 2026 16:43:29 GMT; Max-Age=604800; path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MODX","description":"MODX (originally MODx) is an open source content management system and web application framework for publishing content on the World Wide Web and intranets.","website":"https://modx.com/content-management-framework","common_platform_enumeration":"cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*","icon":"MODX.svg","categories":["CMS"]}],"data":{"size":20100,"size_decoded":5480,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (334)","md5":"a2ab573a16371a7fe866763300be2a82","sha1":"dbcbcc183b36a41feb1f8ccb5a821be5a3163ba8","sha256":"81cc33cd1e76f01c1b34f10512af8aa3590eccbd71cc82248e3c3266a5c7aac5","sha512":"c2dce225fe1c7fbb42328ca83ec915faeca9b2ec67805b0ccdab445960868c02e2f2103245ed6c6d2691c15c696a0fa0fdfa60888ff1baf3b5feea47fa623671","ssdeep":"384:aTKPsTK79i7SpR7/lfmuvL6dsYD8M68n8T8b8O86Z8xS+FD5aTf:apTc9i7SpR7/lfmuvCbD8h8n8T8b8O8A","tlshash":"c2929437c0ab353352a3a0dae1327b6ea0f2d618e697993551f2c5e897c2d138f3605d","first_seen":"2026-10-03T16:44:09.825257Z","last_seen":"2026-10-03T16:44:21.349567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":838,"connect":26,"send":0,"wait":65,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/components/phpthumbof/cache/raumtrenner.5aac262e8a261bf5a3e62533d6231675.webp","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.943Z","timestamp":1791045809943,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/components/phpthumbof/cache/raumtrenner.5aac262e8a261bf5a3e62533d6231675.webp HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1450\r\nLast-Modified: Thu, 01 Oct 2026 08:14:24 GMT\r\nConnection: keep-alive\r\nETag: \"6abe1660-5aa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1450,"size_decoded":1683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc7e10a16d530416ed27a029f43b25c9","sha1":"66b81662641a47dab1cd25901211fc24f9c1a282","sha256":"9322115dde17561746c6a7873948be5a464316dae57f7d14c64f55bfb687d7eb","sha512":"e3043e130600e5236c7c20379937e5148577717e74c67e0e2fd1ce4f206c5ee07ad5a21ee0e9e12da6529fd398a110d209cc4480a330af74597861314c6f38b6","ssdeep":"","tlshash":"e231e9d9578d07cbaca67badfb793ce081845d019680f4c4137010d671bbfa6857b314","first_seen":"2026-10-03T16:44:09.826381Z","last_seen":"2026-10-03T16:44:21.333259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/apple-touch-icon.png","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.380Z","timestamp":1791045810380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e; dp_cookieconsent_status={\"status\":\"open\"}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: MODX Revolution\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MODX","description":"MODX (originally MODx) is an open source content management system and web application framework for publishing content on the World Wide Web and intranets.","website":"https://modx.com/content-management-framework","common_platform_enumeration":"cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*","icon":"MODX.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4920,"size_decoded":2166,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (334)","md5":"3b6caa80a2ea177df848c8a0b702426a","sha1":"de62bd4010e392936cbaf2723aa396662e53f99f","sha256":"6beb611d85d21ae2d0c9cdfaccbf1244081d55c27cf593566d16f9a24de7ecb0","sha512":"aa4a26395873344d83ec238f5d9a70f4c122035f9d08f6ca05158742154b0ce78749b960f7ca8ed552f44d7aecf6d8b6d904076a71d9e9d1ac7d66262e1f9ca3","ssdeep":"96:WIVPLfS5+xuT6JwkOGb8NmN4JLrhB5aV9zW4JpD:ZVTfPssw2omA/hB5aVJJt","tlshash":"faa15412a8c46827a27353ddf630af5da4f3c10ae6c35d5481f5d6294bd2e52ce0783e","first_seen":"2026-10-03T16:44:09.827624Z","last_seen":"2026-10-03T16:44:21.337824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/favicon.svg","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.385Z","timestamp":1791045810385,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e; dp_cookieconsent_status={\"status\":\"open\"}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: MODX Revolution\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MODX","description":"MODX (originally MODx) is an open source content management system and web application framework for publishing content on the World Wide Web and intranets.","website":"https://modx.com/content-management-framework","common_platform_enumeration":"cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*","icon":"MODX.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4920,"size_decoded":2166,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (334)","md5":"3b6caa80a2ea177df848c8a0b702426a","sha1":"de62bd4010e392936cbaf2723aa396662e53f99f","sha256":"6beb611d85d21ae2d0c9cdfaccbf1244081d55c27cf593566d16f9a24de7ecb0","sha512":"aa4a26395873344d83ec238f5d9a70f4c122035f9d08f6ca05158742154b0ce78749b960f7ca8ed552f44d7aecf6d8b6d904076a71d9e9d1ac7d66262e1f9ca3","ssdeep":"96:WIVPLfS5+xuT6JwkOGb8NmN4JLrhB5aV9zW4JpD:ZVTfPssw2omA/hB5aVJJt","tlshash":"faa15412a8c46827a27353ddf630af5da4f3c10ae6c35d5481f5d6294bd2e52ce0783e","first_seen":"2026-10-03T16:44:09.827624Z","last_seen":"2026-10-03T16:44:21.337824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/styles.css","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.932Z","timestamp":1791045809932,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/styles.css HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:29 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 01 Oct 2026 07:51:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6abe10eb-18424\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99364,"size_decoded":19575,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"4cf63a453c05b992c51e4bd018756168","sha1":"3281f26f9e1263ae219edba537c27d5993028e51","sha256":"852076eeae2d5e8301ad33461700ca040ad751789d32415e0e769be363714457","sha512":"0b2f5520df26da6e66249cf0a1c724481cc128d2c56275506f8e0046ac2706e1b06b7e2d9909645d2cc4b71a336ffd285a0bb35b44065f54c579ba36263d97f9","ssdeep":"768:xzvss6zI/nNz1h+H34BeBtQjRXwEvw2/LSSawVg/gzyg/ytasxq6vitcd5/LhKux:qU9TVQpk/6pKadVZxJFlvn","tlshash":"eba3b721665c2139a13fc966f9f3b29822388407d2671bfffd65b518c9c61e603a374e","first_seen":"2026-10-03T16:44:09.828798Z","last_seen":"2026-10-03T16:44:21.327385Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/components/phpthumbof/cache/tooltip-size.31bbd19b5fd6685a06682363b7d56a98.png","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.942Z","timestamp":1791045809942,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/components/phpthumbof/cache/tooltip-size.31bbd19b5fd6685a06682363b7d56a98.png HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1703357\r\nLast-Modified: Thu, 01 Oct 2026 08:14:23 GMT\r\nConnection: keep-alive\r\nETag: \"6abe165f-19fdbd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1703357,"size_decoded":1703595,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"072480b4d10bd86a5ec6eb6e17924b62","sha1":"4c6d0ac8c4d5f2b87b376def4677796660ab4e97","sha256":"88e26988f8c1797388e6c57d5dd527190d9cc6ab76ce684c7610679caf681ff2","sha512":"d6ba2eeb831b821807182305d5ebd8350146400b87cdab4770316b6ec76058bb9e7f931e5b57a5f6b4fb1f1fb9f60e0265343b0dfc0086b6c3005cafa5964cdd","ssdeep":"24576:+Qx6AK32OZpd7ScA8UTd/nfBtSdydU2VHiA69ZjDG:H6A82I9SCUd/ZgwUOHi9DG","tlshash":"0a2533c7cf86ad9228b8f7a1dfea39e9c407718bdd55146037802f94d0abe0bd59052b","first_seen":"2026-10-03T16:44:09.829933Z","last_seen":"2026-10-03T16:44:21.328237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":63,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/components/phpthumbof/cache/insel.5aac262e8a261bf5a3e62533d6231675.webp","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.947Z","timestamp":1791045809947,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/components/phpthumbof/cache/insel.5aac262e8a261bf5a3e62533d6231675.webp HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1654\r\nLast-Modified: Thu, 01 Oct 2026 08:14:25 GMT\r\nConnection: keep-alive\r\nETag: \"6abe1661-676\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1654,"size_decoded":1887,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fa6ec47210deeeb34122ff7657f9da3","sha1":"d00de83915d09cb24e951f860de46fd29b38b97a","sha256":"d52dfdb2ea41dbea69c484b8b9a6050081d5f84a4a963316930c712f12e6ff3c","sha512":"64097b12b3d6af4c59ae44caa25b1b796586408d74d09a48a2efb305c5e7085c5ff2c1ea66708452c2e75253de5e1b8a9013299929f8cd004aa3ae07153cc93b","ssdeep":"","tlshash":"5f31c868ec850e6c058d1675213ce4021ada156e3061ded941916eef44ceb742873de3","first_seen":"2026-10-03T16:44:09.831239Z","last_seen":"2026-10-03T16:44:21.334356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":35,"dns":2,"connect":30,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/components/phpthumbof/cache/corner.5aac262e8a261bf5a3e62533d6231675.webp","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.949Z","timestamp":1791045809949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/components/phpthumbof/cache/corner.5aac262e8a261bf5a3e62533d6231675.webp HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1368\r\nLast-Modified: Thu, 01 Oct 2026 08:14:26 GMT\r\nConnection: keep-alive\r\nETag: \"6abe1662-558\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1368,"size_decoded":1601,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f32bcee18bfc187cac1ba7a1330e90b1","sha1":"299d5b2a3db2156f4a5452d4ad97f77f1d14baed","sha256":"f8898d75a0b8648ea719f477d86ca7c62a88bea4caf5183d38d361c7cf486df0","sha512":"0d69eefa0b47783b3038e297e32a37fd4e04876bfb2fdcd624bf9a1ba564af0baeeebe9832c04307731f09cb34beb2f4af2536f395307964a6199214af33017f","ssdeep":"","tlshash":"55212b83e45e863ca79a27d7ce7410748182ac219500da642e3ce473b7d103f190b641","first_seen":"2026-10-03T16:44:09.832409Z","last_seen":"2026-10-03T16:44:21.341253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/components/phpthumbof/cache/einzelelemente.5aac262e8a261bf5a3e62533d6231675.webp","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.950Z","timestamp":1791045809950,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/components/phpthumbof/cache/einzelelemente.5aac262e8a261bf5a3e62533d6231675.webp HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/webp\r\nContent-Length: 948\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Thu, 01 Oct 2026 08:14:27 GMT\r\nETag: \"3b4-65cc301250fd8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":948,"size_decoded":1208,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 40x30, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f8471905628ac27c5f91977bda618128","sha1":"6de7d62e3db65ec378a0f29b631ad6917dd132d4","sha256":"f67beaff90a505667d9b605526d53956695b1e43162689318ac5ea20ac13fc9c","sha512":"14011ebf5b51679810b6cfdad669b6c9f47dd385e3ef4764cebc0a60e4162bcacbd01e2f62d49b158950abe15023a4e1cf1d8cd7ff5a37c3e116d39f74a64f61","ssdeep":"","tlshash":"b511c8ca5d255886c97602886ef046c18fc07452a3ede99b59abc7fcac741f70d1205c","first_seen":"2026-10-03T16:44:09.833514Z","last_seen":"2026-10-03T16:44:21.33164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":35,"dns":2,"connect":26,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/resources/Bilder/parallax-contact.png","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.954Z","timestamp":1791045809954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/resources/Bilder/parallax-contact.png HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Powered-By: MODX Revolution\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MODX","description":"MODX (originally MODx) is an open source content management system and web application framework for publishing content on the World Wide Web and intranets.","website":"https://modx.com/content-management-framework","common_platform_enumeration":"cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*","icon":"MODX.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4920,"size_decoded":2166,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (334)","md5":"3b6caa80a2ea177df848c8a0b702426a","sha1":"de62bd4010e392936cbaf2723aa396662e53f99f","sha256":"6beb611d85d21ae2d0c9cdfaccbf1244081d55c27cf593566d16f9a24de7ecb0","sha512":"aa4a26395873344d83ec238f5d9a70f4c122035f9d08f6ca05158742154b0ce78749b960f7ca8ed552f44d7aecf6d8b6d904076a71d9e9d1ac7d66262e1f9ca3","ssdeep":"96:WIVPLfS5+xuT6JwkOGb8NmN4JLrhB5aV9zW4JpD:ZVTfPssw2omA/hB5aVJJt","tlshash":"faa15412a8c46827a27353ddf630af5da4f3c10ae6c35d5481f5d6294bd2e52ce0783e","first_seen":"2026-10-03T16:44:09.827624Z","last_seen":"2026-10-03T16:44:21.337824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/assets/css/cssreset.css","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.001Z","timestamp":1791045810001,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/assets/css/cssreset.css HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/assets/templates/codekit/styles.css\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: text/css\r\nContent-Length: 439\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Fri, 13 Feb 2026 22:22:53 GMT\r\nETag: \"36b-64abc0bd3c940-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":875,"size_decoded":749,"mime_type":"text/css","magic":"ASCII text","md5":"2fe49c33b4f0c601da09c864704ee616","sha1":"0aa08447eeebd12acb89dc9d6f1e0682be2ddffd","sha256":"934dc08686bbbfb4c7e776ce687c1d9e6b9a1eb0362097c651e4fcfc3b37d394","sha512":"4ed1c0cafec2a7c87cb0f172ff72085f38e6dc04824659558729d821c49f2187b76ab6fc91574c59bbb33c3be2d049af3ea54b3d9737425ba7d3e26b7f077996","ssdeep":"","tlshash":"4b11ef1d7c211d91468d9430ff0cdfb8ab9c02787d9a4ab6a58ba92e41910f243d23e9","first_seen":"2026-10-03T16:44:09.834473Z","last_seen":"2026-10-03T16:44:21.347735Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/assets/fonts/inter-v20-latin-regular.woff2","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.157Z","timestamp":1791045810157,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/assets/fonts/inter-v20-latin-regular.woff2 HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/assets/templates/codekit/styles.css\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 23664\r\nLast-Modified: Tue, 29 Sep 2026 13:34:56 GMT\r\nConnection: keep-alive\r\nETag: \"6abbbe80-5c70\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23664,"size_decoded":23899,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-10-03T18:14:45.008581Z","times_seen":20029,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/resources/Bilder/raum.png","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.940Z","timestamp":1791045809940,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/resources/Bilder/raum.png HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 2199101\r\nLast-Modified: Wed, 30 Sep 2026 13:27:07 GMT\r\nConnection: keep-alive\r\nETag: \"6abd0e2b-218e3d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2199101,"size_decoded":2199339,"mime_type":"image/png","magic":"PNG image data, 1672 x 941, 8-bit/color RGB, non-interlaced","md5":"02d5cb260980c3f9037505fae20ce5fe","sha1":"327de203aef2c47023c3b41688bda573c10c0e00","sha256":"6bf6210370c2a97aa5b677d7c5575ef60c1c92c11a4644f4b281a2b633714a12","sha512":"9063d3b8d881607056681615c71a905fa1edabe0d4ae5e2d25d7f0e56fc46428ad2c6d89e29693cb7ca0218dc1718d4fba987aef2471869f21ecf832389e8fbb","ssdeep":"24576:aPh84jcKYGIcQA5+xmU49yPYU+IjNVBriNZYxqWDE:Ai4jMpjnmgYWjNf3xq4E","tlshash":"e025334beef51666f02c0b750f09f653f8a8b9cacb951ab041df4406babee68395140c","first_seen":"2026-10-03T16:44:09.836172Z","last_seen":"2026-10-03T16:44:21.337159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":36,"dns":2,"connect":26,"send":0,"wait":56,"receive":177,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/assets/css/swiper-bundle.min.css","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.003Z","timestamp":1791045810003,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/assets/css/swiper-bundle.min.css HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/assets/templates/codekit/styles.css\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 06 Jul 2026 14:14:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a4bb83b-3912\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14610,"size_decoded":3472,"mime_type":"text/css","magic":"ASCII text, with very long lines (14356)","md5":"a607b26b0a0892b59207f00cb4c5d2e2","sha1":"791094adb98311792365693b2ffa96f3364e78c3","sha256":"0076380aa571950071e5632738ba04bdd912014cc2cf31ab78592abd4ffd0d11","sha512":"8a7452201c1aa08cc0143e5b4713df9470d45945a61109b4e6050920eb7c6f9d999b81eb194e39d55f59ef5a21c0899bc548d758c1a01febe98fdf1fdecfa141","ssdeep":"192:jrInJI8pXuCzSOepi5TJDdG27RAXGT+2JOzEf77LODKtVTYDSeSBeZJMPPIx:jrAJFpXr4pETJDk27yXc8YT7uRvTx","tlshash":"636252945310282b86334f3a67a0cbbce17458914fd39aa990c1ae5cd3fadf9076f395","first_seen":"2026-06-29T20:27:27.737223Z","last_seen":"2026-10-03T16:44:21.332498Z","times_seen":90,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/assets/fonts/inter-v20-latin-600.woff2","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.163Z","timestamp":1791045810163,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/assets/fonts/inter-v20-latin-600.woff2 HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/assets/templates/codekit/styles.css\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 24452\r\nLast-Modified: Tue, 29 Sep 2026 13:34:56 GMT\r\nConnection: keep-alive\r\nETag: \"6abbbe80-5f84\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24452,"size_decoded":24687,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24452, version 1.0","md5":"2ede57db1a3a5f41f40467e7a43a1dd4","sha1":"e0d61f6dc511d64a072b2f4dc94e155ecf1bb6f6","sha256":"f9a06e79cd3a2a20951c0f0e28f66dd0e6d3fda73911d640a2125c8fcb78f21a","sha512":"a30d204efb2a66231f29804b8c1e467d61a741b0252eccb40aea60206bd4d5cdb0a32a76cb01d1ba8ba0c73469d10fc55df1d8e54ea3b55b6b75b17e94afc80b","ssdeep":"384:WuaNAiwkOHiuWl18daDX7+rEvHG297z5lzWMTSbXhVR7ebvio772036BhuJJRiVF:zaKfkOHiJEdWX+svP5m7R7eTio7JKWHC","tlshash":"79b2e03132ea530e5b14c43c9537287e5eca2fe78aa93e5e9fd5d004b2104d6836fe06","first_seen":"2025-05-30T14:20:15.679609Z","last_seen":"2026-10-03T19:13:52.656335Z","times_seen":8060,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/scripts.js","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.936Z","timestamp":1791045809936,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/scripts.js HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: text/javascript\r\nLast-Modified: Thu, 20 Aug 2026 20:09:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a875f02-96ceb\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":617707,"size_decoded":194097,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31987)","md5":"d94b33839067b1fe6a4882c5cd955716","sha1":"e6da7422ae418e6fe966f5d613f2543849c734a2","sha256":"9b516d3a5d6b2be9ae641d3cd754bc49e178db89f811609027fd44fa377b6948","sha512":"a504233e42430a03c2d10bfd7bbc68f41d0c2beaa51dd0d2cd20c00678416504ed9adb570cc5214ec18c98c6718e7f01a8b7c34854aa2263290955f1ca47d30c","ssdeep":"6144:0fDLGmPCMyGgnwHadvLt4dz2kT7dP9MrkrQmCJ6rTUaxjBq6egLPfH6CGXL2tFDo:SLGmxyGgnwHN2kT7dP+QJT6OajxUW","tlshash":"99d44c8d7291707643e721e5515f520672366928b40ac0a4b07cc8eb6dbde8d22bffbd","first_seen":"2026-10-03T16:44:09.838431Z","last_seen":"2026-10-03T16:44:21.336349Z","times_seen":2,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":57,"receive":75,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/resources/Bilder/totem.png","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.951Z","timestamp":1791045809951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/resources/Bilder/totem.png HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1521445\r\nLast-Modified: Thu, 01 Oct 2026 08:37:58 GMT\r\nConnection: keep-alive\r\nETag: \"6abe1be6-173725\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1521445,"size_decoded":1521683,"mime_type":"image/png","magic":"PNG image data, 1024 x 1536, 8-bit/color RGBA, non-interlaced","md5":"894c53b2e89f17ab4980ce931de8710f","sha1":"d88592f8e6b773c6e353bb1e06fab496113eb690","sha256":"dcf9ffe27cc0b28146144849fdedd858017afb1a79d5d3f1a30286afb15ced3a","sha512":"3c6a83b88fe3a3d11764a916ccc6ee85f3257c298b686d43c92c085833f5c4781a6368952e8cc1545040f62ed38c8e7849e014ed81e92ec78e619ac4e676e645","ssdeep":"24576:zstzT9S8EW4O2CtRjiv0B+Iiq2EzQS3osRE/NChMmg9a:CT9S8KO2CfS0WKxRh1Aa","tlshash":"fd25338dff695442ebdd49b294d1b60e8826b6ec8e92570cf25de093c58fb15c8c06f8","first_seen":"2026-10-03T16:44:09.839546Z","last_seen":"2026-10-03T16:44:21.342477Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":30,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/components/phpthumbof/cache/connections.31bbd19b5fd6685a06682363b7d56a98.png","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:29.953Z","timestamp":1791045809953,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/components/phpthumbof/cache/connections.31bbd19b5fd6685a06682363b7d56a98.png HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1785777\r\nLast-Modified: Thu, 01 Oct 2026 08:17:38 GMT\r\nConnection: keep-alive\r\nETag: \"6abe1722-1b3fb1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1785777,"size_decoded":1786015,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"22e15c72aeca7eccbc8519ba14697a04","sha1":"94c307c46a894f3e4fab8ed6da857dc5e2d3a156","sha256":"15a226c5ff0da7e4b505fffdafff9c048a11c6fb71d02d1d3bcd134c39b2e7dc","sha512":"d6378fb580d3d44fd341fef143bdd16be7b73133703e4f71162efd689292a57915689662786475d131780a7daccd2a649a374f55fad1634801e3bcf02025eeb2","ssdeep":"24576:A0UKjlCUuCmgKBH2QIqW00RkwxKM+FUuO724Dx3ghdfg:A0UKjECmgOW/VTCtM+FBEF3Afg","tlshash":"b8253344a3f9e6611e8e1b264fad528431e42617f02bcb2c4cdd9e9bd0de17961f3d06","first_seen":"2026-10-03T16:44:09.840585Z","last_seen":"2026-10-03T16:44:21.335032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":35,"dns":2,"connect":31,"send":0,"wait":65,"receive":187,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/assets/css/dp_cookieconsent.css","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.000Z","timestamp":1791045810000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/assets/css/dp_cookieconsent.css HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/assets/templates/codekit/styles.css\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 13 Feb 2026 22:22:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"698fa43d-3cc9\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15561,"size_decoded":6229,"mime_type":"text/css","magic":"ASCII text, with very long lines (8734)","md5":"9e9a1ca6e4e4d3481c03113514d04881","sha1":"9e6f6e1e75b1a77ec61b387b5acf8c5402a4d65d","sha256":"42809c3bbec12b2f83765a6bd7ddec8a9cd31e848f7ba2ba9d3a5515fb49317f","sha512":"28a4e61ad2bf8c40d25afa001ff857b4e005f6192e95570bfb0b85cd9105d44f115e0b1485c8c585e135ce81c11fa50cbdc96f86f01e84b0240d458ec031ee77","ssdeep":"192:o0STUEXcP0STUEXclmPvKjk4dMKTypR6NfRox3Cj5f47TavHPkkbxr:ohTUEMPhTUEMoSjkjKTyeRoM47GvHPDr","tlshash":"0a6217327e03ecc6933b29849e0d3b812e5c5e975b4e4999fe85646420cd44ecb76af8","first_seen":"2026-10-03T16:44:09.841631Z","last_seen":"2026-10-03T16:44:21.345595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect-x.info/assets/templates/codekit/assets/fonts/inter-tight-v9-latin-300.woff2","fqdn":"connect-x.info","domain":"connect-x.info","tld":"info"},"ip":{"addr":"212.25.26.173","port":443,"asn":8758,"as":"Iway AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connect-x.info/","date":"2026-10-03T16:43:30.159Z","timestamp":1791045810159,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect-x.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 11:34:12 GMT","end":"Tue, 29 Dec 2026 11:34:11 GMT"},"fingerprint":{"sha1":"A6:44:B4:CB:C4:7E:CE:13:7A:9F:07:9E:99:D1:E3:7C:E2:D9:32:FC","sha256":"8A:2B:ED:4C:11:06:0C:4E:D1:B3:46:C3:9D:80:87:05:49:4A:9D:92:4B:39:5A:80:CA:9C:8D:68:6B:7F:1C:66"}}},"request":{"raw":"GET /assets/templates/codekit/assets/fonts/inter-tight-v9-latin-300.woff2 HTTP/1.1\r\nHost: connect-x.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://connect-x.info/assets/templates/codekit/styles.css\r\nCookie: PHPSESSID=620ba0071d3feded6e33f24042df8d4e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"620ba0071d3feded6e33f24042df8d4e"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:43:30 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 22480\r\nLast-Modified: Tue, 29 Sep 2026 14:31:38 GMT\r\nConnection: keep-alive\r\nETag: \"6abbcbca-57d0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22480,"size_decoded":22715,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22480, version 1.0","md5":"888e991ca142b0c8fc25a296d7467844","sha1":"f600a7b5d98b19f8cb08d018d8f8c2e785ffe00c","sha256":"e21cecec3a6775da6800fb4d5700809500f1b6cdb63e36b8a83e37b579c7ae88","sha512":"af7a7e92888d1168da4a1a878989905485f50d7a5492292fd3878452ea37a446cc5f30c0e1822306006881febea67ea49f0d493b05ecafc8ae4a73c633807a47","ssdeep":"384:1LFWkQXyYWFsZDHD13ThPg8aFyeDpXNnNf4fUvX17cg49t+G:rUCARjhiyIf4A7wZ","tlshash":"85a2e155114fb11ff94485a04df2bfcfef904292ba04e4ad04986da3cc89d59bd62fb0","first_seen":"2025-07-12T07:52:59.034969Z","last_seen":"2026-10-03T16:44:21.335668Z","times_seen":19,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"connect-x.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}