{"report_id":"bc218cb9-8524-47df-bfbc-e5573008d8fe","version":0,"status":"done","tags":[],"date":"2026-09-16T16:28:53Z","url":{"schema":"https","addr":"climaxxhospital.com/","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"final":{"url":{"schema":"https","addr":"climaxxhospital.com/","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"title":"Quality Healthcare You Can Trust | Climaxx Hospital","dom":{"size":12046,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"89137ce64f6138ea48adad9022ddffb6","sha1":"f1d6953346811cae78da4e68bc25d421677d9684","sha256":"e9a35cf33c93df7a2c5d7b1b0609db1feedcb171bc92d065b4d1c209572a7ee6","sha512":"732065ef3e0b4b473a3fdff9b5c0d73e2a240437f39c873475fe331acc0b506faeb41c37fe9c1452287340cd0fc99bc3647db09e91380d59ccd0e06c710f094d","ssdeep":"96:nOv6ZwSY5u1N2mqByTLpSZSZS9l167bPyc6t6ENUW9akkk1mcV1/5VQxN1yWnp3n:VP+u1N2V/IIt6vRkkAoG6Ng9Aj","tlshash":"b1423e2570e86033069350e6651b6b4bbfe5d303c91a0a50b6fc0eea5fe6cdadd2352d","dom_hash":"domhash6fe4c911ab040b32c75ee6d20cbdd53b","first_seen":"2026-09-16T16:29:02.603594Z","last_seen":"2026-09-16T16:30:49.37343Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"climaxxhospital.com/","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T16:28:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"climaxxhospital.com","ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":25,"request_count":25,"received_data":1759957,"sent_data":13101,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":12246,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":2,"received_data":42328,"sent_data":992,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":3,"received_data":115707,"sent_data":1719,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.1/aos.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-09-16T18:03:42.166944Z","times_seen":24804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77572055803812f29d74c1eaa5b57c18","sha1":"99b2bdeff11d2594b3d97e3078d4c239500172e9","sha256":"21c9567108ddba09832ba16216de5921121bff6952e8014a6dd6f3999756d883","sha512":"ce92ca8196236c1f8a381805ae0de83506ab8710aee799dd3148cfd8dfbcf0223a541d3366d2331ebd9352e67e876a974e23c3aa3d34e7d0ba9ec38bccbdcf24","ssdeep":"","tlshash":"2ba022830e223a32000f0a3a022e800a00300003082aac20f3fe0be00f0c22af823000","size":66,"data":"","first_seen":"2026-09-16T16:29:02.666463Z","last_seen":"2026-09-16T16:30:49.420845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/js/script.js","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78ab96436c9c2bc9c016d7734d814e39","sha1":"3884fb6dc664699120d4f7363e34d07ff923e3a5","sha256":"5788e1642eabbf82b72ce709fc0e690e09ecbdbdf5aa49b984ac33ec1a6f868a","sha512":"cfa684d7497cee0207640047a2c23b3217b3d9b165dffd6bc1d5539e55588e18499c7d2d74464f335b30e28b970df3114f664de85698c265790dd66fadb9e004","ssdeep":"","tlshash":"c9115c2777182572c8fe6b7b73da96acbdbb10911842414138dcc8891f219986933dde","size":1052,"data":"","first_seen":"2026-09-16T16:29:02.620588Z","last_seen":"2026-09-16T16:30:49.419867Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/climaxx-hospital-logo.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.243Z","timestamp":1789576104243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/climaxx-hospital-logo.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jul 2026 22:02:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48346\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48346,"size_decoded":48613,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x620, components 3","md5":"a9d6e230bc843b66f4e60c9b1c30629f","sha1":"563ab9d285fc9605354972eaff8d59fbb88573f0","sha256":"0401e93da634518ec0f0a1c8d81b1b32f2be6752d82669fdbcaab15c2520b6fb","sha512":"7d4059ddefe0a2e681ac77f68f0f9b2ce347dcaa99f1daedcbeccd09d58e76fb9ea337b044fa408bfe3c2d341f0321a22e566bdc0a869978cab23a22c1e95cc5","ssdeep":"768:/8ZpZTKfuxeMw9pRjo7Zh7/LyoFN35iPXuKEyB2ktzKk9v/dM1sOrsOOtWPyyW:/8p+M2pRkFwo78PeKEyBrB993WsOpW","tlshash":"3223f10b27448189e1ece678565b8be81b3b1eb5320e57223027413bedb4bd63b84b59","first_seen":"2026-09-16T16:29:02.608535Z","last_seen":"2026-09-16T16:30:49.38191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo1b.png","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.245Z","timestamp":1789576104245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo1b.png HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jul 2026 14:46:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 688274\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":688274,"size_decoded":688541,"mime_type":"image/png","magic":"PNG image data, 2000 x 1143, 8-bit/color RGB, non-interlaced","md5":"6ee52847744285da003ebd15e0903ea7","sha1":"bbf3d0d94ece643f10f18032faa2ccd9b4a15039","sha256":"0c53bac8df6031a471c72201ca0fe385b85ee4d735f46ce0c9d503ba46312d6d","sha512":"725601b77d9e259653da1f3f2c6753f6be30033edc0d8e86454f0e21d01967aa067193257e12a31fec8db530d5e245cc37600909909480e5bfbd8c3ad84f91b8","ssdeep":"12288:z/6FT7iklHD2W/WG3deJOB+GyrZjDuNKaqkG01oKnpgOoHVt0e7HJ0KTtq:r6uWDd53deJOE/rlDuNToKpS5Dq","tlshash":"0fe4232c4d37fd20f8d48177644b3d58b160895b608b7ff677ac24a26bc8475823ea9b","first_seen":"2026-09-16T16:29:02.610855Z","last_seen":"2026-09-16T16:30:49.416925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo13.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.262Z","timestamp":1789576104262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo13.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15711\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15711,"size_decoded":15978,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"1431b378fdd65388eb813254bd29a264","sha1":"4652a5276ff8080023bc079832304588e6eff9bf","sha256":"a6a3cf94b6b440834b7ccea398826971e2a84cab5c05c77bc2505163a416dad2","sha512":"706462303f43d1700ca7f9ffa152100daae095cc4ff2fd48485dab5ed81aaae02e4b86e0c397a9138a9e95c8f715e59ee7889307d5f335ff11c00c9dcc637d11","ssdeep":"384:RTVNf601BuFCFjbIlebmfUrs6gv09uucLGQk:Rx1601BuFCFjRbm8rsFaQk","tlshash":"ce62cfb71982dca4c7bec7f35c5b0b971aab1ec678098a5bc09c04d905de63581cbad8","first_seen":"2026-09-16T16:29:02.613753Z","last_seen":"2026-09-16T16:30:49.399551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/css/style.css","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.228Z","timestamp":1789576104228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Jul 2026 08:40:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2878\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12019,"size_decoded":3365,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"791b08579a6fd2e7635e460ac68a8897","sha1":"6683bb77b7d889854b2b1b4983428ba18c7189d6","sha256":"71e51284a7cb2a7bf8c8af2299c682a9a1b18dfffff24bf4e5c6610eaa3e904c","sha512":"8573d0128596521bdd595873a57d4ad06bab61582a8005ef6e461fb170060d4d7c19ddcaf4c6cdf8a61f9741d0bd73e4d451f6475d0a163f2a64d4c313d03a49","ssdeep":"192:/heeywgBVQBI+slH/TJz/2SOVMx7OvNmzlzZpJ6tKTVcY2wFL+bwd01zdmtk3h:oAggIlTh2taxVfpO","tlshash":"2b427356b20032257137f378fba7d789e768d112d90a07bebe950044c68e2fb15a5f5c","first_seen":"2026-09-16T16:29:02.618232Z","last_seen":"2026-09-16T16:30:49.411028Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/js/script.js","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.235Z","timestamp":1789576104235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 24 Jul 2026 04:04:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 326\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1052,"size_decoded":562,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"78ab96436c9c2bc9c016d7734d814e39","sha1":"3884fb6dc664699120d4f7363e34d07ff923e3a5","sha256":"5788e1642eabbf82b72ce709fc0e690e09ecbdbdf5aa49b984ac33ec1a6f868a","sha512":"cfa684d7497cee0207640047a2c23b3217b3d9b165dffd6bc1d5539e55588e18499c7d2d74464f335b30e28b970df3114f664de85698c265790dd66fadb9e004","ssdeep":"","tlshash":"c9115c2777182572c8fe6b7b73da96acbdbb10911842414138dcc8891f219986933dde","first_seen":"2026-09-16T16:29:02.620588Z","last_seen":"2026-09-16T16:30:49.419867Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo2.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.251Z","timestamp":1789576104251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo2.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15356\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15356,"size_decoded":15623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"62095aa680bdf816e97ee16475e32df5","sha1":"99ee2f9c1205ff9271b14a625b309b2877d9980f","sha256":"c3a8236b2fd3ea5171434784e626148301360c3d279de84b2fadc64e183c4ca5","sha512":"d8ac2d775495f45fc2d0af8326b9a3f7959d4f79aab03bbe67c143c89549f6bdcb13298fee2e17b9faaf25a807ee6cbca6dd706066bc46fbeaaf1c1536d218df","ssdeep":"384:TfffrAvl3gaaC1JDJPdpO44444vp8PwDoV9NU9:TfffrA9d/1JbCIoU9","tlshash":"3562af8b07812dc6fb36777d4aabaf8e34959425392f4433abd5703650628873247b4c","first_seen":"2026-09-16T16:29:02.623088Z","last_seen":"2026-09-16T16:30:49.398798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo5.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.254Z","timestamp":1789576104254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo5.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16167\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16167,"size_decoded":16434,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"e669493b85d84ee3fab55aeacc9b1df0","sha1":"3d8cb016b5a6f912ff5ed387d08c1a264cf95325","sha256":"ff74a982eb1ba227e88c37d4ddfa2ad0536cc348b5618f1e094b07a769698890","sha512":"ecef4aded1c5e8ad4b96cf26884c26381fe2084dd96f018a8273acbc94c009699199febbc6d8916794217c9cb6e03ff8105ac743f5792fbfe92f8f8fce1b5cf2","ssdeep":"192:ZuyLAD8jhZ5wBtvwuGUPDc+jbReXL+rTxKwHK95E1cUke+sFldrRVB4Pz+oIuBZN:ZuyL32cu7fM7+gwHaSShe+cP/8uu0Ceu","tlshash":"35729d9bda412d5fe19e72f889c6873233508d5260df5a3b72ca4eb6d9e353704a3052","first_seen":"2026-09-16T16:29:02.624525Z","last_seen":"2026-09-16T16:30:49.376887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/climaxx-hospital-2.jpg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.344Z","timestamp":1789576104344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/climaxx-hospital-2.jpg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jul 2026 23:24:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76572\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76572,"size_decoded":76839,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x667, components 3","md5":"fdb177b07861f0f65ec5ca2a675b6dd6","sha1":"aa87c4ee366905c2434d7215ff38b776eb33ec7d","sha256":"81067bbaafae71ce191de4a03f4405ae7e04d31013be7e72f864d04777866d7e","sha512":"dfed5a17ece81931b3e0089f748838825a1f68a6392ed7c92c7fa668a0d93625c1d74d6433ffb60d1abe5d00bdbb76ef10d9f5dc793baa29c1f6cafb7fd97c29","ssdeep":"1536:z7nF+EbpW+hmU/iAPu2TKOhLOfGGSkwCFKZ99X:z7n4CNLar2TKOfHkwCYZH","tlshash":"ba7302bda3c8d1c59685e63853c193211739aa5b841d2f82ddfce853fa72339dba0c85","first_seen":"2026-09-16T16:29:02.625752Z","last_seen":"2026-09-16T16:30:49.414282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T16:28:23.230Z","timestamp":1789576103230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 16 Sep 2026 16:28:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":11964,"size_decoded":3397,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"94687ace72b773f970c348d0420ce642","sha1":"f93c40af521fb4820a6615203912fd0de84be3ea","sha256":"85d24f815bdbd2dae89d109301cf4ef60830ccb5321fef36e927041914f1f936","sha512":"068026c877275557ed493bf6831e12e4d604a0c9717777e9a84db51f64c0decc6448b312b719d5d705fbbd2a4064c3101417efb2013a463b86e8159b350d6fa8","ssdeep":"96:+iYda0t9ON2WZqmLqSZSZSHkX0bPyPCxEn3+K9xkkj1a7FltVdyYL3W03pLijocR:4z3ON2vuIIHkXMRwkk8cud9ZlmNB","tlshash":"2a321d2535c46823063350e6652a6b8affa1c303c61a4f54b6fd1beb6ff6c98dc23525","first_seen":"2026-09-16T16:29:02.628108Z","last_seen":"2026-09-16T16:30:49.415809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":222,"connect":101,"send":0,"wait":113,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.226Z","timestamp":1789576104226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 16:28:24 GMT\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11562,"size_decoded":1397,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2c2f658c6c4aa7f9c74ec9eddba6314e","sha1":"47e9dc1163a015e89dd3a14cb82dc3e0e77b5b1c","sha256":"01758188035c63f724b9ab5222cf55d7d3bce15f046e54ed33a2b31ecf3c5551","sha512":"c04365bc33a1740266775847ff7468088ccef6725c9c3b6149bf0aabd4706fb8701bb140a849c7a0bf49b8629a1516dcf373472dfa2561b13a2eb200077152be","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+OjuTRU7XPOKu8:zRPQPTzajdfMh","tlshash":"f432ad91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac224325b3d","first_seen":"2025-09-05T07:15:58.331555Z","last_seen":"2026-09-16T16:30:49.380248Z","times_seen":2112,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.1/aos.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.229Z","timestamp":1789576104229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/aos/2.3.1/aos.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2554015\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:05:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=woiw5pIhc6%2FbEBxkQzvvPZfAIeLSe28nQY02HU9Fdvxeu8RQY34Ja%2B5XcLGETADr%2B8TAxuCSrnO0nokNDpmRy6BUA7Pq6Jid05%2FExViFHslJO7on6w31%2Bt%2BkNkjy%2FPsHb02lz2Y7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c13e7b8d44569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":2450,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-09-16T18:03:42.171366Z","times_seen":46259,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo4.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.253Z","timestamp":1789576104253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo4.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23059\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23059,"size_decoded":23326,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"8dfbcb0618148263bcdff8afff301199","sha1":"046a43018b1986bda234b62610654795de4e011e","sha256":"73d89e1a3092ffd1f74e216528fd322e811dc44abf97b14787216c1ec4fcc915","sha512":"bd93d3958689535345399eae500a63c868667297cba36ab6bc17e1555f285b22955bf3e401a313f427dc4637d1b3e3f511734b27a46fb8ebf53322288d068cd2","ssdeep":"384:w6E+tHkaxhMcT1hoi+MgSG6HUww4K2+WwZj:wv+9zxh51M6HUF/2Qj","tlshash":"f6a2cf53ab04cc17f21e47b21c310679f5e9ce6a26916317dc1e0aba50edcb25c6f0c9","first_seen":"2026-09-16T16:29:02.633713Z","last_seen":"2026-09-16T16:30:49.412574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo7.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.256Z","timestamp":1789576104256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo7.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21095\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21095,"size_decoded":21362,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"fb83a5304e3f945175bd248c30a6161b","sha1":"d54e76759c169130ea7415eaf0229b99ed66bc60","sha256":"1659f0e102f06285a577c0068834543bedc90c7aa28125dbc322090e730d3e8c","sha512":"fff6f58565fa70bb632f2d6f7db3075774e14ce9e2a86581397efb2ebb9dfe8bcba36580df58d915921e65960c4064b24d716e33c3a5598b8f3813e9e248f2d1","ssdeep":"384:QRn+cb4SCAg11mwyJ/lgHFbAaK9VEfKddbSGSmN1sE6szu4A0SOT:QRndd/bslUZV6kdtN12I1A0SOT","tlshash":"d892d02fe70008b5c61b033f4d6903c8b7745d4359d90603dafea27a6ced9f126966c6","first_seen":"2026-09-16T16:29:02.635491Z","last_seen":"2026-09-16T16:30:49.40948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo8.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.257Z","timestamp":1789576104257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo8.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14122\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14122,"size_decoded":14389,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"c08e6bbd125c802ea816d0e76e78127a","sha1":"e1513682875017f85fec73c256ea8e0f216bc360","sha256":"a55b73f29a6370cba54d032d9327ec5aa684f9e054fd6df4d57e08db3618a420","sha512":"4c96dd9af2b94321ed6ee5be7103fa5206ba61579cdcbe77ccbf4b650d32e3176bafcee873b0f5b15d9ad3081497eddfd994a8a4aaf3ba51d93e9353df1fde14","ssdeep":"192:++8O3p2z19LPLfUcXpydsbVuJvXj2py7hWH7bNeIAaxn/dqKPEfyl6:++APLwcZ922pydYsAn/QAo","tlshash":"8252af799644ac87fa1403facd640358cb2c1e19690233b7dcc68e2966bccf779499e7","first_seen":"2026-09-16T16:29:02.637678Z","last_seen":"2026-09-16T16:30:49.418433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo11.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.260Z","timestamp":1789576104260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo11.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15832\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15832,"size_decoded":16099,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"6ca257b53423c56332ae867ac5eb1beb","sha1":"ae6f09217993e0f11bd4a3041be71f8e3f951989","sha256":"f99f492ac505793cbca717395567979b44e0225de069e76e635464aef05edfa7","sha512":"550897ec4cd3e5b1ac232c0b4a7b13df7471b4faf431d0cd1e9838fb8ce34019daf3843167fdfb6c4545f1f06f705afd3bda4ccfd6c6ba4e95d63dfa8ad1b872","ssdeep":"192:RclDrV7WX5ySoZf2L+hziGSungbF8Mz9htrQ20661kAOACZXWuW:RkDrZWX0SfEiGYbFPzDVaGrjZXWuW","tlshash":"f662bfa5ab059c37e36047b78cdff76683ad9c10825d514bd3d8e2b4807f2b824268d0","first_seen":"2026-09-16T16:29:02.639237Z","last_seen":"2026-09-16T16:30:49.415027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo14.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.262Z","timestamp":1789576104262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo14.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30931\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30931,"size_decoded":31198,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"12294d76f87598b5d22cb5a71dec4951","sha1":"7e438d44f004516f3f9acdbb2182a164d4dc3133","sha256":"6a51602df597c64bf919bad84b1f416e1917a254b6cb8daca59af035d7db44a2","sha512":"742354ec3dbc587601250143e9bb3d5dfd39f63347e10c7730123031a76ad019b6c0a8e391022374eadd5db5cef9a9d76cacc7d1b3dce154c36f141c2bce6838","ssdeep":"384:gwdAL+jshWUnzXNwxy8LhJvzT8ok2R/1nSdXsnrJAeIOSopi+85TOsJcEnDkp:NdACghWECNZnt91Znr0Si/TOB0Do","tlshash":"d7d2e1416761401ef09597396fdb085bbbbd3e14e2d27f4fda002ab2840de7d6c98ae4","first_seen":"2026-09-16T16:29:02.64054Z","last_seen":"2026-09-16T16:30:49.41342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo6.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.255Z","timestamp":1789576104255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo6.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15290\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15290,"size_decoded":15557,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"8c66475f40a642a76b4e969962d670be","sha1":"adca655f4808bba64167e334eee53a8795fe73e9","sha256":"854c8cd5bdcefcd41308aeb46264e09ca69530ef5449705d5f30d1b37a25fc7c","sha512":"3e9ae16b8feedbd17c5a6c1239927902f4baa4323b287422ee142ed9b45487996b65a4f413572ce4a78b1577769a06f36c1c6db2f08b8458d21a00461d66766b","ssdeep":"192:d2C8eFGt4ydqESY1izK/pswtPl++J5/IcD12t77Chu7XwWY4Sc4f+UgZA9LO:gveF+50kpxy+zIcDMt77Cw7XkyamA4","tlshash":"0862c0e6767a75a7c12c377b788594f939209e06fe0acf8684d1fe1175843d4dc14c25","first_seen":"2026-09-16T16:29:02.642063Z","last_seen":"2026-09-16T16:30:49.417646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo9.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.258Z","timestamp":1789576104258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo9.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13766\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13766,"size_decoded":14033,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"47d891b3e4947d9dbf239547a4c54c9b","sha1":"6d8aaeab8bf48bfd95ca378d164c106fdb9484e1","sha256":"dfd91ef1b5a35bc3be4c1f97e2cb5684258260ac97d4e6aafb373f0f862aa91a","sha512":"bef7962753f61499be13bb30310d4440e3c9fddeb21ded267d224305691dc45ae44a1e564c06649e0fb35862349c9fb84521ab5eb863c56a5a9330700ed8dc16","ssdeep":"384:sxqx29VB0buNxoDSpWMEDujG/LBOgl7I+53:sox29ftP+Spl4Ygl7IQ3","tlshash":"61526aeb9b51a4dbf1132b764e9e133b7b629dc438508f97ebc62c63004d47039885e8","first_seen":"2026-09-16T16:29:02.643529Z","last_seen":"2026-09-16T16:30:49.397981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/climaxx-hospital-1.jpg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.342Z","timestamp":1789576104342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/climaxx-hospital-1.jpg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jul 2026 23:24:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74073\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74073,"size_decoded":74340,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x667, components 3","md5":"37b9612773c2d539923f6b2cc3eb5703","sha1":"4d0e9a0a5ca890934b80d531d411e9f06bfa205c","sha256":"1e8a5e8e9b5165c710b8e01f9bf37c52dcca4d4c149d465c0b274bd9cac7253b","sha512":"5e96f0940ac7f0d03000cb60d7377c448400a4df20354aecc2e1cec1d781fa0348a618e9e10eac02f8224da28de7cd8662057b2cb0ddf3c175043336feda107d","ssdeep":"1536:WoMZHQHtMfxONTZulvQ7zwDyRmTF8S6BTb7SJwI+4tECO:5ECU8dulvAFYR09w5+uC","tlshash":"427302c5c7758108e5c4eb54aebb87a05e4363343d8d8ec2a655343b20b31fb8aaf567","first_seen":"2026-09-16T16:29:02.645382Z","last_seen":"2026-09-16T16:30:49.375598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":499,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.383Z","timestamp":1789576104383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://climaxxhospital.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-16T18:55:12.811547Z","times_seen":561128,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.385Z","timestamp":1789576104385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://climaxxhospital.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-16T18:55:12.811547Z","times_seen":561128,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":22,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/favicon.png","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.971Z","timestamp":1789576104971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/favicon.png HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 16 Sep 2026 16:28:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-16T18:38:01.987378Z","times_seen":155407,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo10.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.259Z","timestamp":1789576104259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo10.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18998\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18998,"size_decoded":19265,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"7061d6a12500e97169ddb3896f607f49","sha1":"f026b86b15fbe2d33365294e13f57143259ec61b","sha256":"40d7e55db44b2c39fe3a1926de3780c00d0408781610326c2076f47c82f7f961","sha512":"c0ec34b6d0967607b439aa64f99b0c684715242d3a59e9e917f70ec78f816912cb59d2a166a2fb0f3fda6feedfbb8ef96588f515428fc581f503024111500e7b","ssdeep":"384:SG7xPLAXCnJ74q9P9H+KO03hbZUE7+y+7lzvi1et:SG19nJ59P98otZfP+Set","tlshash":"e182bf1bbb949563d192bcb0238f042cbe96ac54d64f51b3a403d4f9a4052cbbfe726c","first_seen":"2026-09-16T16:29:02.648726Z","last_seen":"2026-09-16T16:30:49.377595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo12.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.261Z","timestamp":1789576104261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo12.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21262\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21262,"size_decoded":21529,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"d11746f24b5d020b1e93ad72199d11c5","sha1":"16f7172b63e61409506f5bfdad7e777ce0fd0bd3","sha256":"6d266c81e3c8a5726de23d153ae979593dde3b5975ff34a41aac3a1f105ae4db","sha512":"595dee3ebf0d7aee1614f0b44e6631fb7084c5026fa196f7dc4ac86ae81fc3432d4847dacacd76f96839e13bb5aa12050fc68a2d3d3828f79de4bc2ccde38b4a","ssdeep":"384:WGUEdfKjjpEvNaWO8rDsY9V4iZWh2ahHrT/tuQMgO7ZtMX9C9IZpT+vnnwwymEp:WoRK6NaWO8sKWh2arTV8gO7ZCMspKwo4","tlshash":"f4a2becb0eb464e5d84827715d5e11a334f8afa248854103dadb9ea0fe0d43aa49bbc3","first_seen":"2026-09-16T16:29:02.65042Z","last_seen":"2026-09-16T16:30:49.374346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo15.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.264Z","timestamp":1789576104264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo15.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23733\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23733,"size_decoded":24000,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"f9ed7467b2392d1307f5443d1ef93c00","sha1":"3938ee03dc477c8817f40d2b8827570515c55708","sha256":"41edafc452d63b62f8224086e65eab91f31ef12a97a4d766a2a93ca2b974db51","sha512":"a21f20f237571fa3652d5dc7226765314d0671c76458bfff09eeb15cb411d0359159235d2ecb9e122732c34a2b294e8ebb53abcab3447a9fa1a3e0954a996116","ssdeep":"384:b+F+1HUtaTH988C/rouWpNZF8xhpeoJsqqVWspV7LjhU9vKOcmEOi4N:RHUtaTd8r/rozNExL/+VWsXLjhWlzEOF","tlshash":"3fb2dfcbdb387e8ce1b16331dd55201361d5cf8021ba45a3c5f86b7a1abc8712af09e8","first_seen":"2026-09-16T16:29:02.652856Z","last_seen":"2026-09-16T16:30:49.378311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo1a.png","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.244Z","timestamp":1789576104244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo1a.png HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Jul 2026 14:45:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 471193\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":471193,"size_decoded":471460,"mime_type":"image/png","magic":"PNG image data, 2000 x 1143, 8-bit/color RGB, non-interlaced","md5":"97e7534ebf86f39dc4ce6a1a1959cddb","sha1":"9c5a1ace2072911f6ae360180aa9491e152c4abd","sha256":"abdd84fdd031877a8e0fd1aa60d84877565d28c52cff6a3554b476f1a14b07b5","sha512":"4db7d6e710e3246a0bb2149aea6adb321f5283dec869089b2c7927f6a22e7f45eb570c5394dff6d7245f51e77b1d0d7a849b16938dcc31559970d43c07835f1c","ssdeep":"12288:evOEII8+UwXSbOjLPzGXvPbVCkCu7EWT8SyeKw:ev5TYKLPADF7ESya","tlshash":"5ba42398e6f1a732fd4c557766935c7630319e5340c98fb4728e7ac32f02b7a4a23889","first_seen":"2026-09-16T16:29:02.655377Z","last_seen":"2026-09-16T16:30:49.408023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo1.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.247Z","timestamp":1789576104247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo1.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12640\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12640,"size_decoded":12907,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"1c87b88bed83390a5dfc099f1a7d5409","sha1":"ecea3aa65037b92f31fe5698c91ac984b5e76437","sha256":"11fba7e0a4a2079ab1939408b1f7e1c7c4ff5a9d159bb4dab8e1bd10049f3866","sha512":"d73c82d9c59bb8fdf1010d0c59d52e96ecca0ef846e8ed6886aee5f1c2b9c203c0e14d6f602de8d1de31167fed02286bad8648279bf183424b44bda4fb6c6cca","ssdeep":"192:HryfUNMirbV+EK7GtTgffWSx0ZHo/3qsMcZ0WWKmi:6virZJs+dBsxxJ","tlshash":"ac42d1fc7dd0a858d91846f7858e6b4f6e39b8021fd082df4e4601772c28a493cee4a7","first_seen":"2026-09-16T16:29:02.656743Z","last_seen":"2026-09-16T16:30:49.385101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.387Z","timestamp":1789576104387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://climaxxhospital.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-16T18:55:12.811547Z","times_seen":561128,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.1/aos.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.234Z","timestamp":1789576104234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/aos/2.3.1/aos.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4388955\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:05:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fp5ask3LAba8Y1XZCC4wuDhqKKra7MdoVZ5GRYWamdHjqqivCa%2Ffyb16LDBgqG3sMXHN%2BmlUQx%2Bh%2Fj21kdOA5v2vbJp%2FE8SFYMZOObN16Y8dbdGaO7PH1CPtPDMvu1xshrAS2%2Fwc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c13e7b8d43569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3947\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":4971,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-09-16T18:03:42.166944Z","times_seen":24804,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/hmo3.jpeg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.252Z","timestamp":1789576104252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/hmo3.jpeg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Jul 2026 22:28:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16204\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16204,"size_decoded":16471,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x571, components 3","md5":"58f0c441127c7b13166f19ef0b2f89f3","sha1":"580a2467c9691783f876a0b4f4c9e7b2a4523a89","sha256":"31d855d632ff2c911445a6bd474aef0a52d564054315cfee4d57f7d4171b7708","sha512":"8067e56610572cd645ef82c8c7efa7fcd2dff4e88445627a4cbea7423078e1c8b112c2c855ab92a7596684a6dcb7c552596a61272af4f5bff4bbf5593cab3bf0","ssdeep":"384:dHtQIb3BdGiXay2NMjnL2398i2woeDsC86JhWkJt:Vtbxdt12mWd2wo0rxhWkP","tlshash":"5b72aec3b7848605d55073b34ead9d5a6545ed08f0bc0abbe1ee29f0be5cab42d469c0","first_seen":"2026-09-16T16:29:02.66064Z","last_seen":"2026-09-16T16:30:49.408802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"climaxxhospital.com/assets/images/climaxx-hospital-3.jpg","fqdn":"climaxxhospital.com","domain":"climaxxhospital.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://climaxxhospital.com/","date":"2026-09-16T16:28:24.347Z","timestamp":1789576104347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.climaxxhospital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 19:54:27 GMT","end":"Thu, 15 Oct 2026 19:54:26 GMT"},"fingerprint":{"sha1":"A7:5F:80:07:1F:97:C6:74:4C:C3:A6:5F:25:A9:80:18:5F:F7:1E:AD","sha256":"0F:48:3E:EA:46:80:BB:4F:A9:82:78:6A:49:88:7B:CD:E9:E1:D0:7A:25:66:6B:74:C6:EB:77:F3:D3:1C:0D:70"}}},"request":{"raw":"GET /assets/images/climaxx-hospital-3.jpg HTTP/1.1\r\nHost: climaxxhospital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://climaxxhospital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 16:28:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jul 2026 23:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94155\r\ndate: Wed, 16 Sep 2026 16:28:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94155,"size_decoded":94422,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x667, components 3","md5":"69ccd8d301297a955a375cb55763e2af","sha1":"9069e08973d8c2775affa4fd6335004675e26149","sha256":"ebec7dcdc502d8b263c9e1ef509b5ab5467c6052f98cfd3d4703b8cd0bc4bbdf","sha512":"82c2698783d04c0f3494ae272d20a5e81d61e10842a80df5f412a228d242f8e2b5e5f1ea63e2a2b205e1dd76811d0179cf2927fc6a1daad524de0c91f7341218","ssdeep":"1536:T36juqLRqN7AouRSuIvPdgyBt4IAsvH9uyX8PPeqyGiyEYneNQgy7bhB4B0ULn:T36jNL67Af8uiPPACHrGPzriy8iT8D","tlshash":"1393023c536d84ee75c69a3f01ee533a00d1684bcd1ef60dd2be6d45aa6efa403909b4","first_seen":"2026-09-16T16:29:02.66467Z","last_seen":"2026-09-16T16:30:49.401397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"climaxxhospital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}