{"report_id":"b8d5d64f-db15-40cc-8eb1-d2d8d2f0fd29","version":6,"status":"done","tags":[],"date":"2026-01-31T14:41:13Z","url":{"schema":"http","addr":"app.cuvrance.com","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"app.cuvrance.com/","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"title":"Curvance","dom":{"size":21793,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (754)","md5":"a020e86179fca281a06dd4cb12df9c52","sha1":"0c902dec72db3f2bb75f7839aa0cfa54369b72ea","sha256":"aac4bc58c26ddb15e09fb5441f326631cbaaea65f3b1f1921c402941de7dc696","sha512":"fbc78307bdded5c24ee492008426652b7430a36c25af0c7960e047fe25869f3831729782d3fd2acb84f83dcc65578195b81a3f0c1c7c6be3bff6797c720c7c3c","ssdeep":"384:qQV/MxInsR7iNCxMrEZlta4ivobXEUGvHcw5Y:qQVVai4MIl04igb0JvcqY","tlshash":"24a2e91397832120062352772bd7eb99a728d117d701cdacb2ad118cdfc6ae9c2fb759","dom_hash":"domhashefff14184823ae273bfabafb9449f9e5","first_seen":"2026-01-31T13:58:03.642204Z","last_seen":"2026-01-31T14:41:14.079988Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app.cuvrance.com","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T14:41:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.cuvrance.com","ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2026-01-17","domain_rank":0,"first_seen":"2026-01-31T13:57:59.372768Z","last_seen":"2026-01-31T13:57:59.372768Z","alert_count":7,"request_count":7,"received_data":680767,"sent_data":3159,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.cuvrance.com/img/curvancexwormhole.png","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.cuvrance.com/","date":"2026-01-31T14:40:52.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cuvrance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 06:43:35 GMT","end":"Sat, 18 Apr 2026 06:43:34 GMT"},"fingerprint":{"sha1":"54:E2:04:7C:C9:60:4D:30:CF:C0:EB:47:F0:0A:0A:47:78:E2:BE:36","sha256":"C5:31:9E:72:79:C3:72:8C:03:4C:9F:1F:8D:5F:31:D0:A0:32:35:BA:7B:D5:B0:49:1E:23:83:70:B1:AB:44:83"}}},"request":{"raw":"GET /img/curvancexwormhole.png HTTP/1.1\r\nHost: app.cuvrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.cuvrance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 31 Jan 2026 14:40:52 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 18 Jan 2026 07:21:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"696c89e4-3c713\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 675, 8-bit colormap, non-interlaced","md5":"8b897425c9be216e1475304e27681d38","sha1":"ff727ec6a07e4e89f20ec892675bfa6390c2be7d","sha256":"818ca3020717b3d1e9c38ab9bd69572efa4f69317e13e4de86e087691ce25646","sha512":"7793bd8f0a3f7abb69dd9b4c8d412fbbe54f193df0c820f7f9a13b5b6c677af827e75e993cfb2519cb8c7e2a03434bd6e09ef65a5c0586afd4300c2a2a54b40d","ssdeep":"6144:gqDBrkmopqwUX9v9Ga4SU6LzRAlYs7KWHqGB7SMb8G:Vovc1x4SAlR7zF/IG","tlshash":"c034233ae14d5935d2826b5a7d1e508b3b485c8e6f33f66077020613ee7d88ac2f7253","first_seen":"2026-01-31T13:58:03.647409Z","last_seen":"2026-01-31T14:41:14.081125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":47,"dns":1,"connect":17,"send":0,"wait":39,"receive":54,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.cuvrance.com/logo512.png","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.cuvrance.com/","date":"2026-01-31T14:40:52.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cuvrance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 06:43:35 GMT","end":"Sat, 18 Apr 2026 06:43:34 GMT"},"fingerprint":{"sha1":"54:E2:04:7C:C9:60:4D:30:CF:C0:EB:47:F0:0A:0A:47:78:E2:BE:36","sha256":"C5:31:9E:72:79:C3:72:8C:03:4C:9F:1F:8D:5F:31:D0:A0:32:35:BA:7B:D5:B0:49:1E:23:83:70:B1:AB:44:83"}}},"request":{"raw":"GET /logo512.png HTTP/1.1\r\nHost: app.cuvrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.cuvrance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 31 Jan 2026 14:40:52 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 18 Jan 2026 07:20:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"696c89c6-21b8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1dc12db2e3605ea1df3919647ede979e","sha1":"196282fc2399da1e9a089224aa52a3fde86e7c03","sha256":"cbd3e877e33b5d4f10184b68064e14f1489349260ec2c5c751c44d1d8d758d0e","sha512":"88db5b202b5d4f06e3e991e72d680aa0954ff2830189b958035deacb7fb3ad1c5cebe97ac050009275d9d113b2f786ed7c91c2cbe3a5d8f831f5f2714ec24e94","ssdeep":"192:OuPS2fF0hfrQWjeCMZM+IiXN7G+Lu+LQJ:cmKiceBzQJ","tlshash":"d502e99ed4284836ff5a6202dda3d6451091adee3370d1160e27921feb43fb82f70ea1","first_seen":"2026-01-31T13:58:03.650285Z","last_seen":"2026-01-31T14:41:14.081951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.cuvrance.com/favicon.ico","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.cuvrance.com/","date":"2026-01-31T14:40:52.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cuvrance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 06:43:35 GMT","end":"Sat, 18 Apr 2026 06:43:34 GMT"},"fingerprint":{"sha1":"54:E2:04:7C:C9:60:4D:30:CF:C0:EB:47:F0:0A:0A:47:78:E2:BE:36","sha256":"C5:31:9E:72:79:C3:72:8C:03:4C:9F:1F:8D:5F:31:D0:A0:32:35:BA:7B:D5:B0:49:1E:23:83:70:B1:AB:44:83"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app.cuvrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.cuvrance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 31 Jan 2026 14:40:52 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4030\r\nLast-Modified: Sun, 18 Jan 2026 07:20:10 GMT\r\nConnection: keep-alive\r\nETag: \"696c89aa-fbe\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4030,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 30x32, 32 bits/pixel","md5":"707ce5d0d1876fa674c9214d13b3fd7a","sha1":"4df65b35d79795cb3f844e7d1e5f1b77798f1607","sha256":"0b53fc3143a00a0020d93f01ae932f0f68d8f9181adfb8e510edc2976d7f6d3a","sha512":"418704886be100df94a1f70ff9f400d0e16a35ccdf294332f4d2bde5944926c968ce58505e14644cd0e919ef72411f06647f60b20490f823ed56b23c1ea288d1","ssdeep":"","tlshash":"b4811d917171c3c1cd29a174a666a10c232da67f9081b91fa8c5f11be28ecdbdb7d07e","first_seen":"2026-01-31T13:58:03.653745Z","last_seen":"2026-04-20T16:45:08.635583Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.cuvrance.com/","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T14:40:51.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cuvrance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 06:43:35 GMT","end":"Sat, 18 Apr 2026 06:43:34 GMT"},"fingerprint":{"sha1":"54:E2:04:7C:C9:60:4D:30:CF:C0:EB:47:F0:0A:0A:47:78:E2:BE:36","sha256":"C5:31:9E:72:79:C3:72:8C:03:4C:9F:1F:8D:5F:31:D0:A0:32:35:BA:7B:D5:B0:49:1E:23:83:70:B1:AB:44:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.cuvrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 31 Jan 2026 14:40:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6080\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21810,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (754)","md5":"baf28104b1c46cb1a02df9cad2f5f55d","sha1":"9349dc0a6cb814935145d170667aaa642e417c28","sha256":"7d168b252fc428b6c92467167f62ef713c4d646bf1626f4b9b2fd903d976607d","sha512":"28c4e088b709364b02d60b2c4bc044a42e748681d9a1cde4dca14d73ac1a6931958ffa8bf7dbb0daea8b6ddfc933425ed85ed9a8752810134b00bd6521619a59","ssdeep":"384:4QV/MxInsR7iNCxMrEZlta4ivobXEUGvHcw54:4QVVai4MIl04igb0Jvcq4","tlshash":"e9a2e91397832120062352772bd7eb99a728d117d701cdacb2ad118cdfc6ae9c2fb759","first_seen":"2026-01-31T13:58:03.656542Z","last_seen":"2026-01-31T14:41:14.083681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":85,"dns":43,"connect":17,"send":0,"wait":24,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.cuvrance.com/img/curvance.png","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.cuvrance.com/","date":"2026-01-31T14:40:52.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cuvrance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 06:43:35 GMT","end":"Sat, 18 Apr 2026 06:43:34 GMT"},"fingerprint":{"sha1":"54:E2:04:7C:C9:60:4D:30:CF:C0:EB:47:F0:0A:0A:47:78:E2:BE:36","sha256":"C5:31:9E:72:79:C3:72:8C:03:4C:9F:1F:8D:5F:31:D0:A0:32:35:BA:7B:D5:B0:49:1E:23:83:70:B1:AB:44:83"}}},"request":{"raw":"GET /img/curvance.png HTTP/1.1\r\nHost: app.cuvrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.cuvrance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 31 Jan 2026 14:40:52 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 18 Jan 2026 07:20:51 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"696c89d3-5d0f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"81243f7374e91e67b68cdcde7e5206cb","sha1":"3fb05877cafa06a8c0497a798fad6e30eba1d1d1","sha256":"86060faf9aa009de184abc8bc9572c03e2290a18a9f1df264659469da1ec8d0e","sha512":"c21b0745f0092c7b4af3abef22cf5c269f11302d1503013a749eb982d0aea90d790a6f575293c8dff91a600dff49dfdfc6dcea3a7e24220eb5d8e551be89d2d4","ssdeep":"384:8omFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFtFF8W1hcG8:zEZqoVreFhidPS","tlshash":"21b260a4e87690acd508113728cb2fbc27718f161851b356fb34ea10edfa3bf9e49491","first_seen":"2026-01-31T13:58:03.659285Z","last_seen":"2026-04-20T16:45:08.633528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.cuvrance.com/img/ecosystem.png","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.cuvrance.com/","date":"2026-01-31T14:40:52.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cuvrance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 06:43:35 GMT","end":"Sat, 18 Apr 2026 06:43:34 GMT"},"fingerprint":{"sha1":"54:E2:04:7C:C9:60:4D:30:CF:C0:EB:47:F0:0A:0A:47:78:E2:BE:36","sha256":"C5:31:9E:72:79:C3:72:8C:03:4C:9F:1F:8D:5F:31:D0:A0:32:35:BA:7B:D5:B0:49:1E:23:83:70:B1:AB:44:83"}}},"request":{"raw":"GET /img/ecosystem.png HTTP/1.1\r\nHost: app.cuvrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.cuvrance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 31 Jan 2026 14:40:52 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 18 Jan 2026 07:22:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"696c8a2a-50087\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 675, 8-bit colormap, non-interlaced","md5":"a758e13f1334edfc4e6cdfdfc3c872d2","sha1":"3ad04845b85d7acdc04f186f17a383d5be423e01","sha256":"230b7665d268598e3971f5cffb6bd798eda30b34c5651f549c4e46d74f34ffc2","sha512":"9a0e640e59ea0bb31bfc53ba63a59cdd1fd7a8bc97011452c8185be0cc2b675ad31454161f9d1f4c173c247ae1b8db5a5baf0694fc1a0e159bab0f479a24ee89","ssdeep":"6144:tsRqcUQ/11fbPlcFYtUCv6Hh2AYZxxfXEI+yZSbeDx/Bqp3NgXMf:tsRtHNdtcYWpHkAoxxfXX9ZSbeF/Bqp9","tlshash":"6b642300ef7fc193b49a228958d48b1c17841fa05f6f790de7baa7d8003da2ae375975","first_seen":"2026-01-31T13:58:03.661334Z","last_seen":"2026-01-31T14:41:14.085324Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":17,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.cuvrance.com/img/how-curvance-works.jpg","fqdn":"app.cuvrance.com","domain":"cuvrance.com","tld":"com"},"ip":{"addr":"23.254.226.219","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.cuvrance.com/","date":"2026-01-31T14:40:52.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cuvrance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 06:43:35 GMT","end":"Sat, 18 Apr 2026 06:43:34 GMT"},"fingerprint":{"sha1":"54:E2:04:7C:C9:60:4D:30:CF:C0:EB:47:F0:0A:0A:47:78:E2:BE:36","sha256":"C5:31:9E:72:79:C3:72:8C:03:4C:9F:1F:8D:5F:31:D0:A0:32:35:BA:7B:D5:B0:49:1E:23:83:70:B1:AB:44:83"}}},"request":{"raw":"GET /img/how-curvance-works.jpg HTTP/1.1\r\nHost: app.cuvrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.cuvrance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 31 Jan 2026 14:40:52 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 18 Jan 2026 07:21:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"696c89f6-b144\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45380,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 670x676, components 3","md5":"62efbbab90db82e6888f5196c063f69c","sha1":"cee500737fa387b03ab4a5870172aa45a957f79d","sha256":"45ad19543d7d0af77794c997950d598493d6179fa145adb7f91efd5667906199","sha512":"d3193caa1fee76db0ab14bbb6cbb46d4c1f30515328f810f394d94ba3ce0a5035dc0198a7acd50991f7f0c96ef9ed674b6b4c41646999f78ba0650f1fcad3171","ssdeep":"768:GZtB2jE+VZTgN16BnhE6+nmgtn2T3Dj6Hir+NMTcOZxv1IADgKXASpOHT:632jEqZW64mgJ2T3Ddr1TcOvG","tlshash":"e613d00bc8158ac58a55cbf5bb672eec4b543b2cea863aff10538f873930630951d55e","first_seen":"2026-01-31T13:58:03.646195Z","last_seen":"2026-01-31T14:41:14.086084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":50,"dns":0,"connect":18,"send":0,"wait":40,"receive":17,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"app.cuvrance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}