{"report_id":"bc3b7ade-1b28-4908-97b6-35cf42d476a6","version":0,"status":"done","tags":[],"date":"2026-09-20T14:48:45Z","url":{"schema":"https","addr":"coscokargo.delivery/","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"coscokargo.delivery/","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"title":"Swift Kargo Delivery Delivery and Transportation","dom":{"size":47131,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9791)","md5":"384797ec357e9288e6ec810cd8715324","sha1":"32e28a9122efbe35374ea3efe36143c695b68e9c","sha256":"d1d4c55a1a7b64fee0295bc7eaaf5f962d9b66fc50b2a750a65ae095e01b1945","sha512":"5dd2c7bd80fa8cdef953ef89009eaa647349d42fb6809a78ef1531c6a7f06f16f629baf39a1563eb8adc878e0cb48a1f96abe13b1a24bfde64c5fe8c334f2dd9","ssdeep":"768:KNIT+2ILjzesFvcr28M1RYGm/Punr9z2YUj7Qz9:Z+2IzvcroYGyorJ2r7Qz9","tlshash":"fd23332168e0882641db45c864b21a365af6c34bc55b0588ffbc8bf91fefd6dca77244","dom_hash":"domhashee998fbabcd566dc6efc2fd6df801b42","first_seen":"2026-09-20T14:49:11.134928Z","last_seen":"2026-09-20T14:49:11.134928Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"coscokargo.delivery/","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T14:48:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":22232,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"apicms.thestar.com.my","ip":{"addr":"13.249.8.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":892869,"first_seen":"2019-07-30T22:36:43Z","last_seen":"2026-09-20T14:46:49.728094Z","alert_count":0,"request_count":1,"received_data":105373,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-14T17:52:17.33946Z","alert_count":0,"request_count":5,"received_data":297542,"sent_data":2947,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-15T01:27:54.255531Z","alert_count":0,"request_count":4,"received_data":5814,"sent_data":2118,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lh5.googleusercontent.com","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":6378,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2026-09-20T05:52:19.331779Z","alert_count":0,"request_count":1,"received_data":51580,"sent_data":627,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-16T00:38:23.516778Z","alert_count":0,"request_count":1,"received_data":32459,"sent_data":575,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coscokargo.delivery","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-20T14:46:48.48593Z","last_seen":"2026-09-20T14:46:48.48593Z","alert_count":165,"request_count":55,"received_data":2740511,"sent_data":67899,"comment":"","tags":null,"fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":4,"received_data":138910,"sent_data":2293,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.businesstoday.com.my","ip":{"addr":"104.21.40.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":912432,"first_seen":"2019-01-22T13:34:19Z","last_seen":"2026-09-20T14:46:49.922957Z","alert_count":0,"request_count":1,"received_data":107808,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":5,"received_data":48622,"sent_data":3093,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/contact-form.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25bb7b304b1e5670f12efecc20d5cdf7","sha1":"11eae764f91eb82846c64e6625351d27e428c0f5","sha256":"648a71e7545c79f8aa8dcbfb2aa601894f92c4074c9b507625212deda8fd4738","sha512":"366ed7a98dceb1e04a89f66cca690ea2ca6beb4e9b62e09754449f4c4920b42b98c801d20561674c8e0b9623ac4ccc6dc66779fe4893e63661c56d25aec972d9","ssdeep":"","tlshash":"e431814daefd29a5107372b6a17f22019937c11f6a092d31fe8c00b80f9d75d76a7b64","size":1679,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-20T14:49:11.174769Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/slick.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"faa076ceaf93e2aa236a18ecda59c041","sha1":"ac1be3a3b1fb3fc3007796baa121b4fa1ca39977","sha256":"39edf75244e2496d51974fcf99fcc03ca37d2a837385a1a6ff921f9ce97e7d49","sha512":"acc7201eb6dbfab1ccea61c8b9ad91c6ce4a8038912ac6b01dccd9028461512936e1d7cba1af71acad1cac0431c93fde87eb285302e71d24cef45251421c8eec","ssdeep":"1536:Lu4rWZaGI2RnhibVibro1leYJATAY4sW2AF:Lu4rrGI2RnhibVibro1leYJATOF","tlshash":"a273ec0b55f2131294a731b96bdf8028b3ba91275504ed9dbccc43c5afd45288feabe4","size":79234,"data":"","first_seen":"2023-03-07T13:59:13Z","last_seen":"2026-09-20T14:49:11.149457Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8256caa03b97032d6bbc3ec88781810d","sha1":"b8059c446f040b9c780b5504dad3d9d30786191a","sha256":"f67bb20188531300cbbb4625d26bef446c45cedb9730f80b47d15a8549318984","sha512":"cd249f110f033881e85118b20737f3a5ac294ce22bfc0ee83ce55b04f029159d2f457c1560ecd3672d77c28ec3ebbae06c2007442b4426d75562f59cd26ce10b","ssdeep":"","tlshash":"91c09b47f571554b0497f105d387448c7178450a453a4e25375d50ca3fb3f9d174d1e8","size":148,"data":"","first_seen":"2026-06-10T01:20:08.460679Z","last_seen":"2026-09-20T14:49:11.205559Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75a92bf0b7262ea95aeb905148bbdc0e","sha1":"878ef66813fe4ea27c7a26d305cfe8725b60719a","sha256":"551f05790db1227ade331411938bf15f6eef4de8329649c7d4f40f38c493ccc6","sha512":"648224477ebffcb9bc340f550d5a4f0e49dac46b2a95833fbd4faa0aec48d78d566322363bb443a58de62a9917a0779f2054f51074809815c7401e24558b1bac","ssdeep":"","tlshash":"5fc09247f5b0164b049ae20ae387488c72bc8509463a0e292791a0ca3eb3f9d070e1a8","size":132,"data":"","first_seen":"2023-03-13T22:54:55Z","last_seen":"2026-09-20T14:49:11.206234Z","times_seen":1670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-09-20T16:29:30.637941Z","times_seen":28239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/bootstrap.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09224359ccf8277a46de23c00d2a0b29","sha1":"cc33f3b4abf1ff45edee5dae62a1f3fd0dcc24d4","sha256":"08bdf8113639c5ce697e6eba88ceb1ed3348e82168a0e0dc0a75eca428348bce","sha512":"9d63ed482afe1119a0681c7a49a168ab5e3c67db211d1fcda83bf07a7d99a991f2dea2553aac3978fb0868d81b56ffc384d29a0f599f69001edfddfc61a9b380","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm51CoFXflR8Gf3ZsbQ:4875vhqKOvlp3ZsQ","tlshash":"fff29646b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","size":36822,"data":"","first_seen":"2023-03-08T20:10:42Z","last_seen":"2026-09-20T14:49:11.201095Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/bootstrap-datepicker.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","size":13776,"data":"","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-09-20T14:49:11.191085Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.counterup.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T15:34:18.934468Z","times_seen":13393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.fancybox.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"921e9cb04ad6e2559869ec845c5be39b","sha1":"1cf3d47b5ccb7cb6e9019c64f2a88d03a64853e4","sha256":"6c78ce6b6d1928630b903084ea9d503643f303ba05455860cc7cd17f7687cc65","sha512":"91ee03bd3766b2584c70361ad0ff4729cd2745fd661089c077884d1e6c181b6c2244ac7ed1c94a4cbf74f8101e9d4c54e2af52c55f35586a0675fe12df5e7ac0","ssdeep":"768:I29rFqkxIWVSSy7DkA7DxQPgsvtrJ68ov6iIMdl7YjSg/bEfOKk53tlUgb:IYFqkxIWVShDlDxQE2Al4Efi53Pb","tlshash":"af23a8d0f7ec317bc67620069d1e21ec613ed4329b0244bbbd9c666857c46ec83a5fa9","size":48706,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-09-20T14:49:11.18109Z","times_seen":3353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.form.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ff23d156a15ac9eba83b6f571abd83f","sha1":"63b1ceaea04590b9611d3ef6dbb588b365be4559","sha256":"14b30a934e36cdfc5301709bf515adc31e060bd7275eb056964cf7d2ed6e7550","sha512":"5ed814a05a01362c292dbb7bd2ee41d8bf1f1dd6fd534ff63b6a1c1699d45e75739beedb068995da687c78fb365ff465940bd88f1db926260bb4d3f7b67a31ce","ssdeep":"768:4hN+wDMgNAWo8/e9z4UA+BtX66+PZ0s8Oa3ij6lOTwIMuliMIzMJVVRFRLRZzYih:cUwDMgNAWo8/e9DBaPZ03FSjCOpliMIG","tlshash":"de03a24a7aeb12a2192334b90bef91497639d0171208dd617d4c53a06fd4db4a2fafe8","size":41095,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-09-20T17:00:39.226763Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/scripts.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d09cf601baf021286e3f8e6c232031b8","sha1":"d4e641ed29edc7a48df150e8ec65dbf1ce82d12d","sha256":"b7c3dc18637730cab73a74f68f0225eff4f00c3606ebe97dccebf432f1d08009","sha512":"43eb78ef42baadc46d0182719c51a1531189595ba3e0ad5813776cacd66397b2a4fdef9d4b1343f32594e9e04571ebe5558e4ccd30fba482e2f3e87a18ca9e07","ssdeep":"","tlshash":"4541021bf358b723703f761845bf70c6133f10179a055a15fbbc414a2f9a62e24cae49","size":1883,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-20T14:49:11.181749Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/bootstrap-select.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72cf3ba80ac56eaf755bc760dd46924b","sha1":"10aaa874ab08af30a6982e80e097159eb55ef4f1","sha256":"6eadb9f319f0dd5b3fa94e780f0ee531dbada3ce7a190c187131483cece9016a","sha512":"7fbd0a761bb81609c43663e1d3b6c2629c42dc3c77fdadfb219b38f766212bcb049cc5e67faf611475ef232713395bf1909fe74f5427e164ab7e66e949c4f3c6","ssdeep":"768:9kHkK3JV9V0UCAMsl0xVQZc9PfYp10+6Wat1HrRnu/w94:9CJr9soA9Pwp10+6Wat1lu/w94","tlshash":"cc43625a36fb2230817b20aa5e9f5448b135812f5806e9293c5d43c86fd4938b6f7ff6","size":59424,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-20T14:49:11.172779Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/waypoints.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","size":8044,"data":"","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-09-20T15:34:18.963312Z","times_seen":13066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/masonry.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85ef736bbfdf0ce0c537caca4c1f29f6","sha1":"b0dc16d9bbe017437e0f116c425c4e20bbd4bc58","sha256":"694749e85b4d7726dc87795b3783f8b0d64513b8eb90a8170e5db9ef2e3f4c19","sha512":"6a234d647e417447aed9fafa95bd727f848287bc533ed798612a95b397f56f344716906dd89c9b8b05b0eca3ff844455c9331c74170992a3b1a175a786769050","ssdeep":"768:f9+z0BFXYKby+HvOqKvVOkYtkdEvWBzigMPI0:fgKbbOlIkdEvPgI","tlshash":"f7d2c54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","size":28969,"data":"","first_seen":"2023-03-07T12:57:28Z","last_seen":"2026-09-20T14:49:11.194863Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.b8OHV15W648.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrKm6UrWW_bP_uRDPzjMFn_hgeiQA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3feddf19ffc1311fd41c33ab6c5b470","sha1":"0209de8777c0059fd270d4b77040c1b3a4618724","sha256":"ced932dc0e4762bf76751783f76d487907abd3ae25242f74a89cb52622de35d2","sha512":"28216b3da471348fb5d97a74643846abd46619121f51185d8b76ecaa021184acaffbfe7a9bb9bc636e6ce3c862c7b86788b59de616856caf7b30e41dedf2a269","ssdeep":"3072:wRfiIm4KgqdIbB3KreB2kE045Pr2bMwnxDcWovJeunifNeyTtvVO1v+yd90:8uHrO54BwmvgE90","tlshash":"4b54d8dcb2a670a79363f4b5517f004ab13b68a5f8484d6cb288d8e26df4909417bf7c","size":291234,"data":"","first_seen":"2026-09-14T20:28:16.096002Z","last_seen":"2026-09-20T14:54:16.874071Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f42cd0b9eadf24f338bf7c32398ea28d","sha1":"be9cec3b1e6de9cff6a527c3202055159314e880","sha256":"5ebb1db82fc981e0bdefa7d6efc80c8f4825554920e0fb7dfd9c932a2c739741","sha512":"3398c7183e86144712f7dfd2d94900caf8e038ea62e3a3252f6aeca398b13ffc3cfc1c5b6fe402b5d2025ac702ddf7f98558aa4c0bc9d3e7c8894262710924e6","ssdeep":"","tlshash":"ba51039a98b6d0d6c4436c29dfef967921040037ac21ece17ddcd906ffb054ab60d9e4","size":2990,"data":"","first_seen":"2026-09-20T14:46:59.460558Z","last_seen":"2026-09-20T14:54:16.917904Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.stellar.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","size":23282,"data":"","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-09-20T16:16:35.742482Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.validate.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a4a78977c67935d388e92928e6b735","sha1":"87b58387cd22f3280a081e30470648edceb4e4b0","sha256":"46dc5b21ccb40ed8e13a10b2e62a01648a841672091671f6b03bee034a0d00d4","sha512":"4b100b768f19463bcce2398099017df00a2cecb4e3eb720232578bc75fbc5c351a5af34f7b437dc879b614bf47951b70c02db80880af0b419127c4ad6fc56362","ssdeep":"384:QeOXcp7Lm+dmr9qhk0XuExz9Bcd1Jny+0xC7WpdOC8PGDm9KLNKI9ci9sk:dfXdmr990ekpqJny+UO798NBc8Z","tlshash":"d592b94d7282b04a5b9620f5a45b560ba1f259b8600ce03cb5f8d4d2fdf8fc95167fb8","size":21067,"data":"","first_seen":"2023-04-05T08:37:20Z","last_seen":"2026-09-20T17:00:39.227408Z","times_seen":4734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coscokargo.delivery/#","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.475Z","timestamp":1789915693475,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.680Z","timestamp":1789915693680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 08:25:20 GMT\r\nexpires: Sat, 18 Sep 2027 08:25:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 195773\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":1507,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-09-20T14:49:11.143389Z","times_seen":28680,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T14:48:09.130Z","timestamp":1789915689130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 16:48:11 GMT; Max-Age=7200; path=/; samesite=lax; secure\nswift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 16:48:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 5741\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 14:48:11 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T16:48:11Z","raw_expires":"Sun, 20-Sep-2026 16:48:11 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 16:48:11 GMT; Max-Age=7200; path=/; samesite=lax; secure"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T16:48:11Z","raw_expires":"Sun, 20-Sep-2026 16:48:11 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 16:48:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":28471,"size_decoded":6972,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators","md5":"55607b3bbd4dfd780cf15732b914bb10","sha1":"539f4ab8fcea03c6286c0d07f5a0555770731304","sha256":"11d45e4b1f533895896ed10cdc94dba104f440f0e5ee90267b8e1a291b300f5b","sha512":"78e0af956755b21a7096bdd9b216455e4b2ffb52bc1cb0f9313e44f18e4a5732946b2fb204b0728ce1a6dd38814825cb15b2312e46e64157debc3121642a9913","ssdeep":"192:cFFkCfpAWO986gYrt8bp+GX5g5q0I5Ias6NZe222GbqLQTYwxqemYXHw4DJq7uPF:cYNngYrt88GXmL61GOLQ0wEA9audgDS","tlshash":"ced2d92658d1103641f38288aaa12b5affb2c18bc79e5e5536ed1bcb2ff3d05dd43680","first_seen":"2026-09-20T14:49:11.144919Z","last_seen":"2026-09-20T14:49:11.144919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":81,"connect":102,"send":0,"wait":216,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/style1.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:09.858Z","timestamp":1789915689858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/style1.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 836\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4041,"size_decoded":1164,"mime_type":"text/css","magic":"ASCII text","md5":"6fc74ad480d1ce1725aed54e44fb904c","sha1":"80e0ced78a3e4d9b08b9b6f027fde2652555796f","sha256":"93a0c0da3f8780859d6ed58c87af56bcb5f4ac75f7461b01c9ddafa8ef8e409e","sha512":"ff99bcea09116571bf9076f7ceaa85a266120d5d48217d92a7e377b9fe90f185a75f5785bc0b1472e2ba424c25032b4879ecef769418470899353806289c633c","ssdeep":"","tlshash":"6b819d939ea30546b42fc5583beea768d32ca043d816cf3c379571984f881a8516efc6","first_seen":"2025-04-17T05:23:49.752581Z","last_seen":"2026-09-20T14:49:11.147389Z","times_seen":55,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.counterup.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.074Z","timestamp":1789915690074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/jquery.counterup.min.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 496\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1067,"size_decoded":752,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T15:34:18.934468Z","times_seen":13393,"resource_available":true,"data":null}},"time_used":1288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/slick.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.083Z","timestamp":1789915690083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/slick.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13116\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79234,"size_decoded":13374,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"faa076ceaf93e2aa236a18ecda59c041","sha1":"ac1be3a3b1fb3fc3007796baa121b4fa1ca39977","sha256":"39edf75244e2496d51974fcf99fcc03ca37d2a837385a1a6ff921f9ce97e7d49","sha512":"acc7201eb6dbfab1ccea61c8b9ad91c6ce4a8038912ac6b01dccd9028461512936e1d7cba1af71acad1cac0431c93fde87eb285302e71d24cef45251421c8eec","ssdeep":"1536:Lu4rWZaGI2RnhibVibro1leYJATAY4sW2AF:Lu4rrGI2RnhibVibro1leYJATOF","tlshash":"a273ec0b55f2131294a731b96bdf8028b3ba91275504ed9dbccc43c5afd45288feabe4","first_seen":"2023-03-07T13:59:13Z","last_seen":"2026-09-20T14:49:11.149457Z","times_seen":219,"resource_available":true,"data":null}},"time_used":1379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/testimonial-head1.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.104Z","timestamp":1789915690104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head1.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25121\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25121,"size_decoded":25407,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"a79c56d2a05ffa8052f488307ffd0446","sha1":"6fa7df5357c0dbfdf5eb37c8068ce383a7302989","sha256":"38ae7a11a291e120978c533d0ef49fd974dae528741939afa9e51d960e79468a","sha512":"3a077131397a647fd4c6a37dbccc6b00d57f9c203da1b7975018339c82972f8836737ea92795f51980acd0492435fc89fc8b4450acaf24073c930fd810bf241d","ssdeep":"768:6mcuerbimgxjZ3d54lBfcye/Yny6Tjh/opF:6mcuQpkjZc9ssyY9c","tlshash":"75b2e169bc71114b405fc9076cba10ffe464ccd558c064f8a989ccec56bc07aa6d7aa5","first_seen":"2023-12-20T09:18:58Z","last_seen":"2026-09-20T14:49:11.150161Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1360,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/slick.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.140Z","timestamp":1789915690140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/slick.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 480\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1767,"size_decoded":808,"mime_type":"text/css","magic":"ASCII text","md5":"88b2daf9da57af3ab03fea77577a2fe5","sha1":"439055f9b9d1f5e89f6b52b30d4e4ba232717351","sha256":"893485d48fc8651981b4810fee0d92ebd7fd85baa7f362ad3934a2c652be8dc9","sha512":"8a784d760ec8cdf4801fde07de5e82b61497e09c3ed7385eb2afcdec9674d59c8cbdb1af3a1d9defe8f57ee107039ed331d183257278f12b172a1c788883a405","ssdeep":"","tlshash":"d831285845b38946451681881fd7ca6d2ffff0130c28a198bacd53068fce7e8e9c16b2","first_seen":"2023-04-05T10:17:13Z","last_seen":"2026-09-20T14:49:11.15081Z","times_seen":3955,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.806Z","timestamp":1789915692806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/assets/img/bg/06.html","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.822Z","timestamp":1789915692822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/assets/img/bg/06.html HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1164,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-09-20T14:49:11.153022Z","times_seen":7082,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.381Z","timestamp":1789915693381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 08:23:15 GMT\r\nexpires: Sat, 18 Sep 2027 08:23:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 195898\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-09-20T14:54:16.87932Z","times_seen":98179,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.stellar.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.075Z","timestamp":1789915690075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/jquery.stellar.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4537\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23282,"size_decoded":4794,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (310)","md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-09-20T16:16:35.742482Z","times_seen":785,"resource_available":true,"data":null}},"time_used":1287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.validate.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.077Z","timestamp":1789915690077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/jquery.validate.min.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6108\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21068,"size_decoded":6365,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20964)","md5":"02a4a78977c67935d388e92928e6b735","sha1":"87b58387cd22f3280a081e30470648edceb4e4b0","sha256":"46dc5b21ccb40ed8e13a10b2e62a01648a841672091671f6b03bee034a0d00d4","sha512":"4b100b768f19463bcce2398099017df00a2cecb4e3eb720232578bc75fbc5c351a5af34f7b437dc879b614bf47951b70c02db80880af0b419127c4ad6fc56362","ssdeep":"384:QeOXcp7Lm+dmr9qhk0XuExz9Bcd1Jny+0xC7WpdOC8PGDm9KLNKI9ci9sk:dfXdmr990ekpqJny+UO798NBc8Z","tlshash":"d592b94d7282b04a5b9620f5a45b560ba1f259b8600ce03cb5f8d4d2fdf8fc95167fb8","first_seen":"2023-04-05T08:37:20Z","last_seen":"2026-09-20T17:00:39.227408Z","times_seen":4734,"resource_available":true,"data":null}},"time_used":1286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/main.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:09.860Z","timestamp":1789915689860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 103\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":263,"size_decoded":431,"mime_type":"text/css","magic":"ASCII text","md5":"7de6c99397aedc3b2c2fc395bcdea0f0","sha1":"7ad6ae651f4682294f6671bcacffcbad2c1f3b30","sha256":"7441eae5addc0cbd5f3a2a9b301025eae51f2804174f11970f54843865add5ab","sha512":"7f5a9851ac2fc4bdd7a0d8f11804caafb261cec88a77541d3695ef4bd846e69ec4a892f6ebde156f8762c90c2e09eb2964874254925faa7bf3b28e495af0ce22","ssdeep":"","tlshash":"c7d06c07cd00334760f28c946209336077f9ad194ef6f0d8017b57340bf8a7aa8b9381","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-20T14:49:11.156642Z","times_seen":71,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/testimonial-head2.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.105Z","timestamp":1789915690105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head2.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24446\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24446,"size_decoded":24732,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"9c6b95c54d0d86261d8ab833647dface","sha1":"ffca9cc50a0898622f0d08eb4df7357f99b9a51d","sha256":"75c6e4f0fa745ffb1469800638863015d01fcd58c0ad3edfc3a1c22a9fc8f748","sha512":"a6262e2f9208d1c7f99055528612acf3598670898edb8367cfef897eaef3a14a9d7bacb5cc5ddd0163bb0c07c68e1916ff6138c9d9f13cdbb846884377424bfb","ssdeep":"384:/lq9xAYL84KBiKDtmN34rfPljjGYGwSNzZftmXeWAumv0+mFOxL+9s9EVRiJZmft:tq9xA54Kk3x4jwlwS1ZFs6BvjmFUy6VK","tlshash":"b3b2e0f4e7c8f815345eee0d73cde919afd50870e9e4a034ee5fa0197a311b51861a86","first_seen":"2023-12-20T09:18:57Z","last_seen":"2026-09-20T14:49:11.158351Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1457,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/logo1.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.110Z","timestamp":1789915690110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/logo1.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7248\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7248,"size_decoded":7534,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 236x141, components 3","md5":"dc7588124dbb02cdedf607e553de86ff","sha1":"965bfb9238604365604f5938fb26f5bb2053b51f","sha256":"fc857bfe140a4fb2a2f400fa24737f1c429620eeb78b7d98cbf94e02aa497c86","sha512":"7afc6929ba75fb6777acc21e81ef780845d1461399b03e49e1df2083c9ce3fb32a47688aee340a3fbf8f3fad0ac3c9b486688ae9bac0ea53c0cf970159f8db14","ssdeep":"96:9Y2osteUZaw6/wIgUoESqI2RcsvdxgDzdCrRMVXxrhmhMDSkkAJeLzXbB:95eu676Zq5RNvwNWMVBsMhkAQLzLB","tlshash":"58e15922a8124c72f7cacd7133d3c02b1a4f868187fa2d45d47740c3b861eadd9a6dca","first_seen":"2024-08-20T14:43:16.050058Z","last_seen":"2026-09-20T14:49:11.159082Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/et-line-fonts.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.139Z","timestamp":1789915690139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/et-line-fonts.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1540\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7074,"size_decoded":1869,"mime_type":"text/css","magic":"ASCII text, with very long lines (1512)","md5":"75549347f663e5380d18409dd6259982","sha1":"b491327511778957e8505b3b4dea9bd40eba28f8","sha256":"03eb685e0a41eb4ac4f561e56f4fedae8dcf10fd6f94a1384d346cd1a4a1b60f","sha512":"18e6478f44d9a99783b0af05fb322d12be0e96b00b7df8a36da76141e856e30e64ccb9b363251980429e3a8afcbbac8aaef47b8932060dfd2f7058773334960a","ssdeep":"96:G+VDsd9iOV4esZ7sl0jF8v1bYpdetWNSX5KBbZdf7TXvkaZQvwKjY8AzY3Q1Kj//:Lc9i8sZ7sSjB1opDHmi","tlshash":"25e191eced1da9a25780e4d16b417a00df0cb3299ccb2d5bf417b82ca7f2a1494d63d9","first_seen":"2025-04-17T05:23:49.770414Z","last_seen":"2026-09-20T14:49:11.160077Z","times_seen":59,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.068Z","timestamp":1789915690068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32389\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95992,"size_decoded":32647,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-09-20T16:29:30.637941Z","times_seen":28239,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/icon-googleplay.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.120Z","timestamp":1789915690120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/icon-googleplay.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4915\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4915,"size_decoded":5200,"mime_type":"image/png","magic":"PNG image data, 146 x 53, 8-bit/color RGBA, non-interlaced","md5":"938f928a026406d9384bb7734857168f","sha1":"1fbd4281a7efa63d6c1611b1cae9ac10bd2efa3b","sha256":"f53ac2d211951ee01a8a2e32bf219020c28bdbb022f7e967f7bb526563fa5414","sha512":"5d85ed24f2dcdf2689b4ca8eaf0944da8e7e61bee3cadf55b0966c00c705f780785b501848753614951d3411e6dbfd6eb1e599624609e3e488390464f06692f7","ssdeep":"96:RVSK2b0Aab7I/e7j7P2CibDPQMGAWz1W83ntI6L1IvYOteUWNrl:m3s7IK75ib7WAWz1W83ntI6L1IleUO5","tlshash":"6ca14ccfb9eb67027a4a528564d376a35c361cc070e25d537ecfca8308740e485b95dd","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-20T14:49:11.161542Z","times_seen":72,"resource_available":false,"data":null}},"time_used":2437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.706Z","timestamp":1789915692706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coscokargo.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 275434\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-20T16:44:05.598909Z","times_seen":301310,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":21,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh5.googleusercontent.com/proxy/s7-F34QFz4WmKbb-I_es_ldhvK-pJENIz-NwJg0Iq08Bu4SvY1MqWEjdDLgdbPJlXIQzZL5En6oWTQ","fqdn":"lh5.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.823Z","timestamp":1789915692823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:12 GMT","end":"Fri, 27 Nov 2026 08:06:11 GMT"},"fingerprint":{"sha1":"2E:AB:5C:37:21:50:98:AD:20:2F:58:6D:02:D3:E8:89:F8:F4:6E:F7","sha256":"FC:B6:92:10:5D:CA:FE:3B:21:85:BF:26:C2:E0:A8:03:71:59:37:4D:BF:C1:11:BC:5F:CF:FD:B7:08:E4:9E:6B"}}},"request":{"raw":"GET /proxy/s7-F34QFz4WmKbb-I_es_ldhvK-pJENIz-NwJg0Iq08Bu4SvY1MqWEjdDLgdbPJlXIQzZL5En6oWTQ HTTP/1.1\r\nHost: lh5.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 51019\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 14:46:04 GMT\r\nexpires: Mon, 21 Sep 2026 14:46:04 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nage: 129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51019,"size_decoded":51580,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 512x303, components 3","md5":"99e4e7ac449fe970c1002fdc26e8207d","sha1":"c770f4f24651491213bda9692a90489c3938868d","sha256":"041917687ad39e90ee212e046010b8399f54f046e6e1f8aacebc0f3220155116","sha512":"f6b26f3acfdc4dea3863feef95aa2bb0a07a3241dcece233f5607537157739706aebb7efa6840386b982e2ef6cd17419d08d21c0f72ec50dba876f9648346634","ssdeep":"1536:71kXTshEQ2RGJbU8cvvcdmCGna8l7cI4Fg:71kDshEQt2Hvch+a27cXi","tlshash":"dd3301ace2c8ed24cb0d9e7a3bc4426819dbc09d491d37789bbd5260c5f0c5a4b0f42a","first_seen":"2026-09-20T14:46:59.482885Z","last_seen":"2026-09-20T14:49:11.162677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":6,"connect":16,"send":0,"wait":17,"receive":22,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.businesstoday.com.my/wp-content/uploads/2023/05/swift-haulage.jpg","fqdn":"www.businesstoday.com.my","domain":"businesstoday.com.my","tld":"com.my"},"ip":{"addr":"104.21.40.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.106Z","timestamp":1789915690106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"businesstoday.com.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 14:45:35 GMT","end":"Thu, 17 Dec 2026 15:45:32 GMT"},"fingerprint":{"sha1":"C5:BD:8D:3B:FD:8D:CA:A0:64:B9:9F:7A:12:74:A7:D1:09:DC:40:02","sha256":"49:AD:B7:02:DE:21:05:49:95:49:83:76:93:76:79:17:94:6F:38:E8:B8:70:EF:C8:F7:A9:69:7D:CE:3D:30:7C"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/swift-haulage.jpg HTTP/1.1\r\nHost: www.businesstoday.com.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:48:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106928\r\nserver: cloudflare\r\nlast-modified: Sun, 14 May 2023 03:54:33 GMT\r\netag: \"64605b79-1a1b0\"\r\nexpires: Tue, 20 Oct 2026 14:40:35 GMT\r\ncache-control: max-age=2678400\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-runcache-type: native\r\naccept-ranges: bytes\r\ncf-apo-via: origin,no-cache\r\nage: 461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5c2wfkkn%2F4TMqP0JJhsL7Or%2ByqDA1nXmCXwP2ApYkjGjY0kB3IwoNRAe4LVbBkE8KvpgfmQl%2F1zUDgVxWS1QH3hhviW1VEM8XaGnM3JLqS0vx0amXTfNyXmjJCMShXPYdIxx3hPEGKwFIFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e1a14f3ad35691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106928,"size_decoded":107808,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1073x839, components 3","md5":"a6057228cd194d82a4a5de71e58ec9ea","sha1":"570c5f084abb51edb09bffcb7f7fa24fe0ea0b34","sha256":"6fd2b095c081d231ce68d6c650cc2c6f7ed29232c3d634dad4edce38f8b8237e","sha512":"ef2839f35489eda6bbd274c539d158d003f28f137c7ca4c608066b5d6df6dd550de25578bfa6b9343bcdc79c77d75a132d001e1607023d9512ce1842c0f8b53e","ssdeep":"1536:/8KO5Cvs/eVt3xtB0J63ihlT2xUb42gBzq1EFdRi+pveO1oZWwHTabOU9O73wksv:NO5Cvs2X+GiP2VRi+8cgPU9O730","tlshash":"cea31208770e901226d62593eef31ba5f7aed6004c1419c67fd00db96d7e1a62fc8adb","first_seen":"2026-06-26T17:25:46.510786Z","last_seen":"2026-09-20T14:49:11.163539Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6474,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":66,"receive":4,"ssl":6398},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/style.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.150Z","timestamp":1789915690150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/style.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7616\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44391,"size_decoded":7945,"mime_type":"text/css","magic":"ASCII text, with very long lines (306)","md5":"4858f114d84ac360860ea9a410c65281","sha1":"8b4711038ab758e68993eebb20a68778f85a62a7","sha256":"f69833750f461187bcdf23058ec16df3e9e05823d1db3547bb9723a5befb8fb1","sha512":"30606cc57a9a495e80b74173a5362aa13a4edbffb34c7a9f76815985493339a63a7c786a651b0f52cb3efc050ccc1bb7d77db448579e6b7874d5a37b4c6bbe70","ssdeep":"768:sjjCS0CHYhQ7Q5pdyJyE1kENE2QXk+VqhOT2gNVB7ZHsFcEeBNObQPzlj:sjjCS0CHYhQ7Q5pdyJyE1kENE2QXk+IC","tlshash":"4f136128e192742c75770225bf8297ed717c809bb20b6dad6d7e245ac08e4ef84727e4","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-20T14:49:11.164202Z","times_seen":57,"resource_available":true,"data":null}},"time_used":2407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/steps-image1.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.824Z","timestamp":1789915692824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/steps-image1.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 86805\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86805,"size_decoded":87091,"mime_type":"image/png","magic":"PNG image data, 377 x 229, 8-bit/color RGBA, non-interlaced","md5":"2708a9a1b9cdfdb6fdb9e195e8b301df","sha1":"de1542766a1c07b1944ab1459eba342b7103f61a","sha256":"aea776d560cc70853e69604406d8e30d1bc1efbf07356df8e1ecfb3b8d318534","sha512":"685700f179ff9dbb0c50f116340e101afd68621bfbdfb79348b2b666fcee8b0914a90900e8910b576f4ca830a8014b719f3888704e1a7f5bc32235e4ad73f9d5","ssdeep":"1536:TIUT2hNHATgDi7wUQE/OFf0uGzuR5JCrld2pdLGGA+XR/TO8ZqKXqSM3lbMYl5Lp:TIlhNogDKeEGF3GImxCdLa+9vZTazRP1","tlshash":"4e830296bc9fe621cf24a9a685b0c23b2f07b5ef19b4dd0331d9985c5e18a13942db84","first_seen":"2024-08-20T14:43:16.063889Z","last_seen":"2026-09-20T14:49:11.164762Z","times_seen":66,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/icon02.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.099Z","timestamp":1789915690099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/icon02.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3554\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3554,"size_decoded":3839,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"d5dc7d9436ddf91e2099ccf36bd0c308","sha1":"6f9debdc8d78bbcd7ad76f30b27577cfd726b0c7","sha256":"6868d6250d4332df2581e118c6cd2f8b350ef204e391857ccb5fde8ed9059729","sha512":"979d3d6870e04c826ae6ef08e1855e6f02dca83a699034434d974923544b3d5658b30cd832dd62c4f3b55685c72879f1fb1cfb963f79ea4b19768970d2056b84","ssdeep":"","tlshash":"e5713b76b4036812b66cc2d676eaa94fad1207c2a4c4ef9a2ccf0db64d19ee147585c8","first_seen":"2024-08-20T14:43:16.046448Z","last_seen":"2026-09-20T14:49:11.165395Z","times_seen":67,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/icon03.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.103Z","timestamp":1789915690103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/icon03.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3493\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3493,"size_decoded":3778,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"f1cd016a28660394c342d66b402f3c2a","sha1":"58d250f1b4789de2ad2f4d08530464d0887333a3","sha256":"fc8a4d67fb5fc8ec375e244adf86e0bff335c3325875f423fd0eab86883d01e0","sha512":"7980737180fd7513c7cb8e07c0d053ce5ed74584f19d91c2980348b0e3443b6ed044ddbb8ced5a628238d9923eb0b6f70b14f3f4ee3043bba699164ef9df7d8d","ssdeep":"","tlshash":"30715ad5fbd1d2030268c8d719f24427eb2015c56ec0eef2598de81fa9389b17c2a6cc","first_seen":"2024-08-20T14:43:16.020921Z","last_seen":"2026-09-20T14:49:11.165976Z","times_seen":67,"resource_available":false,"data":null}},"time_used":1361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/bootstrap-datepicker.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.142Z","timestamp":1789915690142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-datepicker.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 951\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4953,"size_decoded":1279,"mime_type":"text/css","magic":"ASCII text","md5":"f0f519c66ea65bb3725ab268be978d60","sha1":"d95121446299a0b6a5b06e1d287e6e105a3e355a","sha256":"03ad95964d61ff7b69502b303b9d639aacc99ae34e054e2dfc11a6cd338f5822","sha512":"563504c2eff57a7a61d7c4b073ba552bf5a7d15eecadf9b959d8d6cddc8f217f929fbb1a82115ba820e194c96f641d2576bd2d8a78de592b96d6900bc74c24fe","ssdeep":"96:4lVdvCmyPTapd2l0USSPPxxxx11LLhNixx1ypapd2l0USMdo1:4PdvCmyPkFSPPxxxx11LLDixx1yyFH","tlshash":"e0a1019952d02c1b3633d2987920edfa3f4b558b44c1cb7c35e1b0acab1eec5496d5b2","first_seen":"2023-04-25T12:20:18Z","last_seen":"2026-09-20T14:49:11.166584Z","times_seen":447,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.708Z","timestamp":1789915692708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coscokargo.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 275434\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-20T16:44:05.598909Z","times_seen":301310,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":28,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/image1.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.828Z","timestamp":1789915692828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/image1.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 200316\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":200316,"size_decoded":200604,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1010x621, components 3","md5":"e5c5946930d09a997097780296eb30b1","sha1":"ef86ed14a4eab21ca7b77ebf05f7d97dfd33409f","sha256":"1fa1ef56dcb1be7b2c650aa7d74fca5536d2919441f7fa9e7a0ef88e9a8e59f5","sha512":"4c77de553f85d6f8656244edb7f9cdead8c50acc3b59366dad2993f26d5ad46e6358c6942030e72ab95ff645f108d070179214b8c442c88f0259d2e8de1ef7bc","ssdeep":"6144:Xs34gm10MqKtJINV+N65yeJIZZxWNcdqx8dy:Xs3M1uIaqN65uX68o","tlshash":"7414125072c27fb098e43c3406c3ba7a0b3a46b45ded56bbe952d4d0e5d74ab887b8c1","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-20T14:49:11.167191Z","times_seen":67,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.486Z","timestamp":1789915693486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 23:17:39 GMT\r\nexpires: Fri, 17 Sep 2027 23:17:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 228634\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4799,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-20T14:54:16.908401Z","times_seen":38652,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.493Z","timestamp":1789915693493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 21:40:10 GMT\r\nexpires: Sat, 18 Sep 2027 21:40:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 148083\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-09-20T14:54:16.922234Z","times_seen":37193,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:23.387Z","timestamp":1789915703387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://coscokargo.delivery/\r\nOrigin: https://coscokargo.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://coscokargo.delivery\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 20 Sep 2026 14:48:23 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":527,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/waypoints.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.082Z","timestamp":1789915690082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/waypoints.min.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2461\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8044,"size_decoded":2718,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7808)","md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-09-20T15:34:18.963312Z","times_seen":13066,"resource_available":true,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/news2.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.107Z","timestamp":1789915690107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/news2.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31876\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31876,"size_decoded":32163,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x210, components 3","md5":"1bf1c5371ed31154fca491faa5e02edd","sha1":"1ad54ffee8dbccc76ca7868ecdec6149b6eb7e93","sha256":"be77fd299ce1ec06d0a5b22784b164fe7c1614d65c35e12d3fa7f95d7075f5b6","sha512":"be068f5cc5e9ca3793007637cf6a6a7f8389e4e30706e3dab579cf21fb31575127039252db25013490286cb843e1539be4b0d1050ec107b59b6b90182691ffec","ssdeep":"768:9s7W2A4sRrIJMhCTxYNHKWgKth0j/swM068/7HX7bkyfx0F:9sNRGEaCT6QWgKunM0d3kG0F","tlshash":"c4e2f156d7e37e06f5da7e3d1898ddb205d3cd408f1bd38da148436978bc0a28267686","first_seen":"2024-08-20T14:43:16.02236Z","last_seen":"2026-09-20T14:49:11.16975Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/logo5.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.117Z","timestamp":1789915690117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/logo5.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7891\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7891,"size_decoded":8177,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 236x141, components 3","md5":"ebb7c48d1a323f46c1ec22aeb2f3eda8","sha1":"fe8944e2be25e26a5df92e82bad8a3d3537a0607","sha256":"e410c33e2fc3d37fc45a9fb7b7460df2b72b9e362a881dd99b11c6cb59b64389","sha512":"4b0e00b3674e2e98b86cf88f8018ecb342aa558edbe4d1822894018da96372917d6485d8e03c4f5bb6d7e23f9c64c7cf3936ac585e4408a5d49c1894959df48a","ssdeep":"192:9O1G/PROIBNOWYFcJrxvMhqBzuEyfvRnGa:9OoOIBINFeJMIuEyJp","tlshash":"31f14a03a760ac70fbeded703bc3d2132a0f99a5637bdc5650a606cb7661c9e85056e1","first_seen":"2024-08-20T14:43:16.020209Z","last_seen":"2026-09-20T14:49:11.170425Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/icon-appstore.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.119Z","timestamp":1789915690119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/icon-appstore.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4961\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4961,"size_decoded":5246,"mime_type":"image/png","magic":"PNG image data, 146 x 53, 8-bit/color RGBA, non-interlaced","md5":"a5007a6f974e0bbef99fffe0f8255c63","sha1":"5a9922179163afa8e55f1ac9922df9c1c0b5bd43","sha256":"ddfafbb59ba0979b026050fdfb07603ab0239980be43f87cb63d8cd30895a02a","sha512":"3abe4371411079e04f31a4e7974c26eed8226592cb3ec0881c5db941823c0c438b8efd98590740e08782404f444eb9047b26e06da25b978a02e1c279b0a92e03","ssdeep":"96:RVSK2QYSWU2AXo7R+SuHGWptAGrjIfUrj5rAwSy51IUZqtnO:mNS+AowS+GWtdXIfUrjNfpqU","tlshash":"eaa17dab363749c7b06ce50640e7062396a1ded099e06cb87feda43106736dd49582ef","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-20T14:49:11.171045Z","times_seen":72,"resource_available":false,"data":null}},"time_used":2438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/jquery.fancybox.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.141Z","timestamp":1789915690141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/jquery.fancybox.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1292\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4840,"size_decoded":1621,"mime_type":"text/css","magic":"ASCII text","md5":"471e0fef5b8fb45c966c2d54d2d34ee2","sha1":"28b17eca621caa317f32099dd7655d434c934aee","sha256":"7d03a2bbc7518cfe455ee6f6a322c3f05c2295f0e1dae613be864bbe7b1aca08","sha512":"a17f5262be993bfb583803d65c9de272a704ef559dca6ec2d5cdd8ae6c4f694e974a0c8d53eeeb70c4d76b9d56b0b4df2df462fb19ebc40dfe19a3c989eb9323","ssdeep":"96:GKXaIzQFRhRdrlAWJDo0Oy8Li4cSX2W4LeO2gnTMo:GKQF/7rjyStLNnj","tlshash":"d4a1116b6a503a01643f9e50db6f9a45d63f2486aa0b4efb611cf92883d53e011f3dcc","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-20T14:49:11.17164Z","times_seen":64,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.681Z","timestamp":1789915693681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:13:48 GMT\r\nexpires: Sat, 18 Sep 2027 10:13:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189265\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":2072,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-20T14:49:11.172214Z","times_seen":34227,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/bootstrap-select.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.071Z","timestamp":1789915690071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12881\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59424,"size_decoded":13139,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"72cf3ba80ac56eaf755bc760dd46924b","sha1":"10aaa874ab08af30a6982e80e097159eb55ef4f1","sha256":"6eadb9f319f0dd5b3fa94e780f0ee531dbada3ce7a190c187131483cece9016a","sha512":"7fbd0a761bb81609c43663e1d3b6c2629c42dc3c77fdadfb219b38f766212bcb049cc5e67faf611475ef232713395bf1909fe74f5427e164ab7e66e949c4f3c6","ssdeep":"768:9kHkK3JV9V0UCAMsl0xVQZc9PfYp10+6Wat1HrRnu/w94:9CJr9soA9Pwp10+6Wat1lu/w94","tlshash":"cc43625a36fb2230817b20aa5e9f5448b135812f5806e9293c5d43c86fd4938b6f7ff6","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-20T14:49:11.172779Z","times_seen":100,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/steps-image2.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.825Z","timestamp":1789915692825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/steps-image2.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54205\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54205,"size_decoded":54491,"mime_type":"image/png","magic":"PNG image data, 428 x 260, 8-bit/color RGBA, non-interlaced","md5":"2f0f8fd4f0760f41ff9905b121b38903","sha1":"e7d26e1d1eda72c962705b8799252473f54c3b71","sha256":"3a0cef50fb78a6c4dfdb03cc6bec252e324a0d6b8874b17c279a50acf5efa1a3","sha512":"120a894d2026755b3186df3f32524aa037ca42135115e1aa188a584598336086ecb630afc2233292480798a414af0ec0c19f1facf827b154cc219431a516a74c","ssdeep":"1536:Cc+renBGDhXyR0vUREJUy+BVUil5gHnbixCGrT67Ya:ChreBGpyu2ESxBBsnOxCGra","tlshash":"c433f1457e75b409882b7be8c6f4e3ad9eb89c44b8656f6d8700be09c894f002dec0d6","first_seen":"2024-08-20T14:43:16.065516Z","last_seen":"2026-09-20T14:49:11.173386Z","times_seen":66,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/steps-image3.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.826Z","timestamp":1789915692826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/steps-image3.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91354\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91354,"size_decoded":91640,"mime_type":"image/png","magic":"PNG image data, 428 x 260, 8-bit/color RGBA, non-interlaced","md5":"46bc449e051eba0f1457e24dc77bb985","sha1":"f83128277318f4d040fb58195df61d340aa47958","sha256":"8688ed8d0c4b92a65d3b733d6a38ccb2a6b02cbc1446e8533deb9d87f4047b15","sha512":"95290b62e420286d070a0bd357f215597ed4fa7133f73a375ea19e18b898fd0fd240043b7f6bb2471590ade13584fd523936a441fa0baab27f3c06ec6ac825c8","ssdeep":"1536:nBjAKooOMy/y5zGFT2BmJZmtoOXaxfBK9Q8whlz0fwIjtTnO4paFnLYRM+M:B0Ho2q5W2BcZmto8CE91tfwIxLaFnLOq","tlshash":"5193129ee5b6b56750c03f0f2ce6555aeb12b0d7dc0c87d897e0c505a278ca06eb6e83","first_seen":"2024-08-20T14:43:16.064581Z","last_seen":"2026-09-20T14:49:11.173973Z","times_seen":66,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/contact-form.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.079Z","timestamp":1789915690079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/contact-form.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 398\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1679,"size_decoded":654,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"25bb7b304b1e5670f12efecc20d5cdf7","sha1":"11eae764f91eb82846c64e6625351d27e428c0f5","sha256":"648a71e7545c79f8aa8dcbfb2aa601894f92c4074c9b507625212deda8fd4738","sha512":"366ed7a98dceb1e04a89f66cca690ea2ca6beb4e9b62e09754449f4c4920b42b98c801d20561674c8e0b9623ac4ccc6dc66779fe4893e63661c56d25aec972d9","ssdeep":"","tlshash":"e431814daefd29a5107372b6a17f22019937c11f6a092d31fe8c00b80f9d75d76a7b64","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-20T14:49:11.174769Z","times_seen":71,"resource_available":true,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/fonts/ionicons28b528b5.ttf?v=2.0.0","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.703Z","timestamp":1789915692703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/fonts/ionicons28b528b5.ttf?v=2.0.0 HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/ionicons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 104496\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":188508,"size_decoded":104827,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"24712f6c47821394fba7942fbb52c3b2","sha1":"1b0a0de084905946a20300ca8c354865dec46764","sha256":"2ba7f20b1d8990e17a47fe3d88e4c766628aaa2baf1dd30fca0a0db59836f5f9","sha512":"e61d99095429861d335b7f1fa720d63ce3a5e7879aad0c02937b7a8367b8107e4b874637b3fa4f5590f8f3e5a68ad8c37d646e6cb315815af8b962dee1cf2777","ssdeep":"3072:ZevphGNEm96ksZlU9WZEwXnwY3Xv8KLyVT8s+mW0uu2r9FsysMgWU/:ZBEm9Z26kXWb+mN+cpX/","tlshash":"2f048e0bf7cfda4bd125a67e44f69b1319a8d0106e2353dbebce364994e76c40c6a0c9","first_seen":"2023-04-05T10:17:13Z","last_seen":"2026-09-20T16:00:26.278437Z","times_seen":13587,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/banner3.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.821Z","timestamp":1789915692821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/banner3.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 317031\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":317031,"size_decoded":317319,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"13e00f3886e580dbffc1b5a05dcc3cb7","sha1":"b804d2cd37bc06b4a4479afcf86e01cb6c3ff18d","sha256":"7e32bf0c7e0d656076e5235994b1e7eec91a4ce3ca27d76260c844f9ba249e45","sha512":"36404e7955b5610b3b3280d95d8e4400826cc78b3a83a777fce1e614254c0356d9ff1d92f0437896f6baf96b104a88b4c9f0de0a4edf81db151af6b84fad66d6","ssdeep":"6144:Q/gK2y0pqk+vWTQfVb64D1ntecDszsQXqhSj7tU5T9o7Q9++y0iwWDbVjXnzYJ:2gK2y0pqk+vWkV/Xe7sqqhS/tUtC7eOS","tlshash":"6d6423136f490cd2df869bf8a0c6e384272399bd2174f9db50215cabaf84b21675f0e5","first_seen":"2024-08-20T14:43:16.062209Z","last_seen":"2026-09-20T14:49:11.176504Z","times_seen":63,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.382Z","timestamp":1789915693382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 20:17:08 GMT\r\nexpires: Thu, 16 Sep 2027 20:17:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325865\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-20T14:54:16.885989Z","times_seen":74924,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/testimonial-head3.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.105Z","timestamp":1789915690105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head3.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22985\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22985,"size_decoded":23271,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"b885947476ccb3f7233bc991ab0949ac","sha1":"e02a42a0ada10e5610a3b9bf314d4ed3e8b3f366","sha256":"97895dc7017c814cd9b49a7ddf42e6e96b39d3932cbe4482498da7750c88ba13","sha512":"af196781e414afb44e82e13aeae2ae9e6ac900cc28ea50e24448e9bd719730a525fbc17736b4534f63272dfb26b279af28c7f1544c3597436223eeff6d7f44fe","ssdeep":"384:Qz3zeoh7w76WAWJoAgIt8Ll6mGvtck/uZqgy2z91EkNCAJ2Xr/MeaiHyOp:w3zeUs6WAsoAgIt9pvmkZgr91EkN32Xh","tlshash":"68a2d07eeba0ce5245af908e6c9385210c2547801b629cd3f897cb3d4e1ccf6646ca9e","first_seen":"2023-12-20T09:18:58Z","last_seen":"2026-09-20T14:49:11.17861Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1458,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/path/to/font-awesome/css/font-awesome.min.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:09.866Z","timestamp":1789915689866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /path/to/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.2.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 414\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":940,"size_decoded":671,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"958fd2bcf4d9e58643cfbabb562e34e6","sha1":"a4b08b4d6d2cc09f3e4487b95a049b4e966545f3","sha256":"f07d8224c297611a07fc31d5b31cb42b4f800aeda76221c8cf9f41de2e626ee5","sha512":"34e4e13bdebe18982196e183405e0739b178c0f0d196a197729dcb310d71b2bf06426634a9a4bf620a79c5a062902375a87317132c685cdef9769f3d7f580d31","ssdeep":"","tlshash":"3111277f44011abe1300c162b015772cc5dfaf2eaf427460e1631575afe4f84c57e499","first_seen":"2026-09-20T14:46:59.453218Z","last_seen":"2026-09-20T14:49:11.179627Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.fancybox.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.080Z","timestamp":1789915690080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/jquery.fancybox.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13322\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48706,"size_decoded":13580,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"921e9cb04ad6e2559869ec845c5be39b","sha1":"1cf3d47b5ccb7cb6e9019c64f2a88d03a64853e4","sha256":"6c78ce6b6d1928630b903084ea9d503643f303ba05455860cc7cd17f7687cc65","sha512":"91ee03bd3766b2584c70361ad0ff4729cd2745fd661089c077884d1e6c181b6c2244ac7ed1c94a4cbf74f8101e9d4c54e2af52c55f35586a0675fe12df5e7ac0","ssdeep":"768:I29rFqkxIWVSSy7DkA7DxQPgsvtrJ68ov6iIMdl7YjSg/bEfOKk53tlUgb:IYFqkxIWVShDlDxQE2Al4Efi53Pb","tlshash":"af23a8d0f7ec317bc67620069d1e21ec613ed4329b0244bbbd9c666857c46ec83a5fa9","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-09-20T14:49:11.18109Z","times_seen":3353,"resource_available":true,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/scripts.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.085Z","timestamp":1789915690085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/scripts.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 748\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1883,"size_decoded":1004,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d09cf601baf021286e3f8e6c232031b8","sha1":"d4e641ed29edc7a48df150e8ec65dbf1ce82d12d","sha256":"b7c3dc18637730cab73a74f68f0225eff4f00c3606ebe97dccebf432f1d08009","sha512":"43eb78ef42baadc46d0182719c51a1531189595ba3e0ad5813776cacd66397b2a4fdef9d4b1343f32594e9e04571ebe5558e4ccd30fba482e2f3e87a18ca9e07","ssdeep":"","tlshash":"4541021bf358b723703f761845bf70c6133f10179a055a15fbbc414a2f9a62e24cae49","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-20T14:49:11.181749Z","times_seen":70,"resource_available":true,"data":null}},"time_used":1378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/icon01.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.098Z","timestamp":1789915690098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/icon01.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4225\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4225,"size_decoded":4510,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"9a9f3e65490771d550cbc99785d6fb1d","sha1":"8854a1b6a4c309ef97baef5fee5bcc38495e1fdd","sha256":"ac20cb9c0e7c70761c39d5a3aced64af66c91d16d266543104231a4a35886ced","sha512":"1edd1f0501e3cd04fa7a9e02fcca0e429853b270c73d2aecbe0d0240dde7456de72bc7ab37e4d42f1f5890bf5d95c122876c89a8de743cc7cf241cf803567550","ssdeep":"96:eSeQ/l2zjMUNld8dxPGpW7KHK8sm/ZYbWKJl5VPTf:NDDEIPPGpyaIjVPTf","tlshash":"39916fcd20d2c865d4d5e14274ea9a1fed7e1ed1ce70a83237cace110d8d92a504c7cb","first_seen":"2024-08-20T14:43:16.010395Z","last_seen":"2026-09-20T14:49:11.182397Z","times_seen":72,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/logo6.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.118Z","timestamp":1789915690118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/logo6.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30470\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30470,"size_decoded":30757,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"c4785ad5ab08f3a78529c350cecffa1f","sha1":"a0a1512277f916ed953850ea78b8c79c39f67f7a","sha256":"01bdc8e033dc77f31c844e95ec87c60df024596cfa3b3f1420bd90fdf8263084","sha512":"e8bdae834ac6b9f1d8323a3ebfff14be036b2753f20d101e1b8e17733609ecc9f7900de2013d0ebfd8dfc84699acc7d307260c05bea0fa73322f5bc0f0a2a3d2","ssdeep":"384:YrvYNg7/M6U/ijYNg7/M6pGnjK4Pn56sHWFOzOPK4/VowEZt:YrvYy7M//gYy7MSG9566WMzWmwEZt","tlshash":"04d28e70bf5aef83f9f1467881e8c7e1b3526b28a7b3114a385c5515bb76ac00d4d34a","first_seen":"2024-08-20T14:43:16.052218Z","last_seen":"2026-09-20T14:49:11.183009Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2340,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/storage/app/public/photos/VjCaXhUb5FCRc6uEhcSPWtgQLFrVr5SyRtStkjLp.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.257Z","timestamp":1789915693257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /storage/app/public/photos/VjCaXhUb5FCRc6uEhcSPWtgQLFrVr5SyRtStkjLp.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.2.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 414\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":940,"size_decoded":671,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"958fd2bcf4d9e58643cfbabb562e34e6","sha1":"a4b08b4d6d2cc09f3e4487b95a049b4e966545f3","sha256":"f07d8224c297611a07fc31d5b31cb42b4f800aeda76221c8cf9f41de2e626ee5","sha512":"34e4e13bdebe18982196e183405e0739b178c0f0d196a197729dcb310d71b2bf06426634a9a4bf620a79c5a062902375a87317132c685cdef9769f3d7f580d31","ssdeep":"","tlshash":"3111277f44011abe1300c162b015772cc5dfaf2eaf427460e1631575afe4f84c57e499","first_seen":"2026-09-20T14:46:59.453218Z","last_seen":"2026-09-20T14:49:11.179627Z","times_seen":2,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.384Z","timestamp":1789915693384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 08:23:23 GMT\r\nexpires: Sat, 18 Sep 2027 08:23:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 195890\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-20T14:54:16.947173Z","times_seen":92939,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.060Z","timestamp":1789915690060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 20 Sep 2026 14:48:10 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2990,"size_decoded":1582,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"f42cd0b9eadf24f338bf7c32398ea28d","sha1":"be9cec3b1e6de9cff6a527c3202055159314e880","sha256":"5ebb1db82fc981e0bdefa7d6efc80c8f4825554920e0fb7dfd9c932a2c739741","sha512":"3398c7183e86144712f7dfd2d94900caf8e038ea62e3a3252f6aeca398b13ffc3cfc1c5b6fe402b5d2025ac702ddf7f98558aa4c0bc9d3e7c8894262710924e6","ssdeep":"","tlshash":"ba51039a98b6d0d6c4436c29dfef967921040037ac21ece17ddcd906ffb054ab60d9e4","first_seen":"2026-09-20T14:46:59.460558Z","last_seen":"2026-09-20T14:54:16.917904Z","times_seen":3,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":38,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/banner2.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.820Z","timestamp":1789915692820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/banner2.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 522683\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":522683,"size_decoded":522971,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"200eebf058d54c1303a63c330880e434","sha1":"c927db36cf62cd1f06e33624f2646c1348699e18","sha256":"d9bc12d947732cc27271b38b365c58541c4d9b95772b446e26641c375d0a87a2","sha512":"3ce5293113fdbae690a59fd97f9ff0f08cde32807220d1a6656d40c0262310f5aad7492f9851d97c307d924794939f51ea03fb2be504e75ea796a47227d979e5","ssdeep":"12288:jlp+WC7WCi4cW0U0GRY4WWbG3sjexQkxBFSyZkL7m:jQ9jcBNKYf3sGlBFrkW","tlshash":"82b42338fcc2c9c39a5e74ff473f7c665f18af1190039e96744b051b229e24946ac9e6","first_seen":"2024-08-20T14:43:16.060573Z","last_seen":"2026-09-20T14:49:11.185059Z","times_seen":64,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{08231803-3db4-4d5b-bd12-e804f7d217e3}?https://coscokargo.delivery","date":"2026-09-20T14:48:13.431Z","timestamp":1789915693431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=CvoBCAESrAEBp2sxrka5_AvUvciqCkdwx1OHv0uCOJxqmITQUwD4hT0nac4zBtCiBBCV7lm1Quri_x_YbGC831x2VS1_VwplR8SSX8uZrwj2qlsRWOqUQGNdV9LC8GGeGQjTBPIoRX5KDsBm1kHeQZB3g3yCe5cCKIlbx5ALr-FxYO1M_e6bK1bON8r2r-vqHySEDunBWuRg67dRN3oxT-ieTsqUyQAWdumPCSpWHm16QylpKAEyRQEOK94RGL6KmNXhVxzx2j-_aZmAL0uubobbE3-kAFV_IAg6MSCw463zYpdQY3p9CSc0SSsvjx83CyxJdDW_8hnYkUHeBA; expires=Mon, 22-Mar-2027 14:48:13 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Sun, 20 Sep 2026 14:48:13 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"CvoBCAESrAEBp2sxrka5_AvUvciqCkdwx1OHv0uCOJxqmITQUwD4hT0nac4zBtCiBBCV7lm1Quri_x_YbGC831x2VS1_VwplR8SSX8uZrwj2qlsRWOqUQGNdV9LC8GGeGQjTBPIoRX5KDsBm1kHeQZB3g3yCe5cCKIlbx5ALr-FxYO1M_e6bK1bON8r2r-vqHySEDunBWuRg67dRN3oxT-ieTsqUyQAWdumPCSpWHm16QylpKAEyRQEOK94RGL6KmNXhVxzx2j-_aZmAL0uubobbE3-kAFV_IAg6MSCw463zYpdQY3p9CSc0SSsvjx83CyxJdDW_8hnYkUHeBA","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-03-22T14:48:13Z","raw_expires":"Mon, 22-Mar-2027 14:48:13 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=CvoBCAESrAEBp2sxrka5_AvUvciqCkdwx1OHv0uCOJxqmITQUwD4hT0nac4zBtCiBBCV7lm1Quri_x_YbGC831x2VS1_VwplR8SSX8uZrwj2qlsRWOqUQGNdV9LC8GGeGQjTBPIoRX5KDsBm1kHeQZB3g3yCe5cCKIlbx5ALr-FxYO1M_e6bK1bON8r2r-vqHySEDunBWuRg67dRN3oxT-ieTsqUyQAWdumPCSpWHm16QylpKAEyRQEOK94RGL6KmNXhVxzx2j-_aZmAL0uubobbE3-kAFV_IAg6MSCw463zYpdQY3p9CSc0SSsvjx83CyxJdDW_8hnYkUHeBA; expires=Mon, 22-Mar-2027 14:48:13 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3612,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-09-20T14:54:16.879929Z","times_seen":28534,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.490Z","timestamp":1789915693490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 20:24:29 GMT\r\nexpires: Thu, 16 Sep 2027 20:24:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325424\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-20T14:54:16.942251Z","times_seen":37611,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/custom-style.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:09.865Z","timestamp":1789915689865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/custom-style.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 224\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":550,"size_decoded":552,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"51110467d04e1701e3b186cbe678251c","sha1":"223afcfb3b84c053f0e8d286e5d49402a21e6271","sha256":"900b1e2001834f38c1e352ced21834621329bc66fdacb32f06f385fd99e08694","sha512":"6feb5309d33c66ffb7001745f2a86a3a40f99d143bd4fa29ea58d823c3ab6c21717a12cbabfaaecc12cbb3aae964f356ba69257552c65b28d39cbbc0ef9cad9f","ssdeep":"","tlshash":"14f04699a680413310374f0e6073ba35b62be1334601b6393d90d72422ca9f988a2787","first_seen":"2025-04-17T05:23:49.774305Z","last_seen":"2026-09-20T14:49:11.186735Z","times_seen":66,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/logo3.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.115Z","timestamp":1789915690115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/logo3.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30699\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30699,"size_decoded":30986,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"95f6cea878e246dbd3494fbe84e771c4","sha1":"59f4c6e8f014915c636647aa9ac281cbdba5430e","sha256":"ab27c2f1d5f63bc3feacdf8ac09983b6802a0000c61fd3f29b830d71f2fdc5b2","sha512":"82532ef145d82529e8477a3bb28c731448fbad7c8541b8c4cf4c98683b5fdcfa62ce1ff75856b0493ba9d830666d9759efc7e1fca35c9ccb0c5d6d202411b820","ssdeep":"768:QrEYyeruR/bYyeru8GK/bMbsygxK66zakzV6MA:z66R668G3bOXku","tlshash":"c4d29d34af9baf23f9d0d1bc44e4c7e2e3236a68a7b35751746c5122b3716d11a4c34a","first_seen":"2024-08-20T14:43:16.023188Z","last_seen":"2026-09-20T14:49:11.188013Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2242,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/bootstrap-select.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.147Z","timestamp":1789915690147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1350\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6643,"size_decoded":1679,"mime_type":"text/css","magic":"ASCII text","md5":"aebb9fd3530a99ce0ddabafdf3eb8a7a","sha1":"03c9d48b035aa82f15f33450bdf778362221f07c","sha256":"a031409712ab20005498eb00a940ffedc6cbed46727979d7854e5d93c6ea6808","sha512":"4b4a698f4d7e66f03b5cc3becab9bf72ba4e2de7699018b574f91ea44c34205c5e7a522ba25571f00f6586348f57ee8e19e4588bd52769fe837e2605bb913873","ssdeep":"192:hV0L7t8v8yVd5nF7l4pHCSDJcvULuDcLb:r88F7l4pH5DJcU","tlshash":"afd10fed77e20170618981fa34856a53339db002728fc878b7dfa18c5fc618b6a73b56","first_seen":"2023-05-15T03:00:33Z","last_seen":"2026-09-20T14:49:11.188963Z","times_seen":134,"resource_available":true,"data":null}},"time_used":2410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:500,400,300,700\u0026amp;subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.569Z","timestamp":1789915692569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Roboto:500,400,300,700\u0026amp;subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 14:48:12 GMT\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":2426,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ba7c658fb900892ba3c80a4ab6029c5d","sha1":"b5e0e06cd259b2d7c1a0496b9cdc3e6a951ccb79","sha256":"1fed9a9f0c2575723702f958957d187a562ee172f0df5c1889e2d339676ab949","sha512":"d90733d22bf95b1d0681c33b4a8f1f4c93be127f987d4828fa373b2001881a82739202a6bc6bbd512adb0e8029c0db87286136c3bac6ffc810072bd59e4f5e7c","ssdeep":"384:39fn9+9h9d9yS9/qY4o9m9G939fa9D9w9k9yf9/qY459L9r9c9fF9Y979/9yE9/s:3FsbbYSRv4wFMl22YfRiJhan6BBYERNW","tlshash":"4aa20ca10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-19T22:49:57.257828Z","last_seen":"2026-09-20T15:35:48.162575Z","times_seen":7110,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":5,"connect":17,"send":0,"wait":33,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.702Z","timestamp":1789915692702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coscokargo.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 275434\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-20T16:44:05.598909Z","times_seen":301310,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":5,"connect":31,"send":0,"wait":18,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/fonts/et-line.woff","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.705Z","timestamp":1789915692705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/fonts/et-line.woff HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/et-line-fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55220\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55220,"size_decoded":55506,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 55220, version 1.0","md5":"b01ff252761958325faab1535c90c87f","sha1":"d33413e7bc42acc8837cc9030ca45d29c1ccf0c6","sha256":"19d2f43d546ada73dd083f7778aa4a5cac1a8e7a3af56efccae580fce07a5e1c","sha512":"23fa6804a69fdba706d5b918d41dd9feb1b70c6e0b01e4aa4724d4027e1802e7e253301a9f7966d5ee86ac14e00e65c0bb4cb565b7b3173af8d95d9001952945","ssdeep":"1536:YC7RF69D0oLUKheQnEBIoCdDLT4z1cN2CTNr/:YCiooLneQ1oGMz6gCTNb","tlshash":"8e430239225cdc06f13b90f785686024347730be909fe8be8a7d49655227fd6f735681","first_seen":"2023-04-12T04:16:50Z","last_seen":"2026-09-20T14:49:11.190398Z","times_seen":1948,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.066Z","timestamp":1789915690066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Sun, 20 Sep 2026 14:48:10 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/bootstrap-datepicker.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.072Z","timestamp":1789915690072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-datepicker.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3728\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13776,"size_decoded":3985,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-09-20T14:49:11.191085Z","times_seen":466,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/jquery.form.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.078Z","timestamp":1789915690078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11217\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41095,"size_decoded":11475,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9ff23d156a15ac9eba83b6f571abd83f","sha1":"63b1ceaea04590b9611d3ef6dbb588b365be4559","sha256":"14b30a934e36cdfc5301709bf515adc31e060bd7275eb056964cf7d2ed6e7550","sha512":"5ed814a05a01362c292dbb7bd2ee41d8bf1f1dd6fd534ff63b6a1c1699d45e75739beedb068995da687c78fb365ff465940bd88f1db926260bb4d3f7b67a31ce","ssdeep":"768:4hN+wDMgNAWo8/e9z4UA+BtX66+PZ0s8Oa3ij6lOTwIMuliMIzMJVVRFRLRZzYih:cUwDMgNAWo8/e9DBaPZ03FSjCOpliMIG","tlshash":"de03a24a7aeb12a2192334b90bef91497639d0171208dd617d4c53a06fd4db4a2fafe8","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-09-20T17:00:39.226763Z","times_seen":983,"resource_available":true,"data":null}},"time_used":1384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1285,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/banner1.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.819Z","timestamp":1789915692819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/banner1.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 174236\r\ndate: Sun, 20 Sep 2026 14:48:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":174236,"size_decoded":174524,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"e480a2a0a8a1a5a9aedf670ced5acf46","sha1":"4de9eaa2955084b030aba0bd5d16ad26c255db06","sha256":"197f05298caf34b554fec3e7c629e8c692c17964b8d5b2912337165c5324991f","sha512":"595e7be327da1c9a17c6db2d6e8ab4686af8aaac15737d4633811c5642ba9d82f99b9eafec7f817a15503dba9e0cd4e6f73c7b3eee3d79c30b3fad3be8b30f0b","ssdeep":"3072:eZOsTJ/nA6HyWNO+mZp5ybdySU015UW97OXW+wQcSurahNNR2LVi4rYmRRMQYd:enTJ/n3HRO+mT5ybdySUnW97OXW+UkNr","tlshash":"56041224e5924d8540adde2347149eaa2af7c1c37150e84b1b2cbbfed29ed88d271f5c","first_seen":"2024-08-20T14:43:16.057932Z","last_seen":"2026-09-20T14:49:11.193556Z","times_seen":64,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.491Z","timestamp":1789915693491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-09-20T16:37:00.187505Z","times_seen":101888,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":2,"connect":26,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/masonry.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.084Z","timestamp":1789915690084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/masonry.min.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8278\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28969,"size_decoded":8535,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28833)","md5":"85ef736bbfdf0ce0c537caca4c1f29f6","sha1":"b0dc16d9bbe017437e0f116c425c4e20bbd4bc58","sha256":"694749e85b4d7726dc87795b3783f8b0d64513b8eb90a8170e5db9ef2e3f4c19","sha512":"6a234d647e417447aed9fafa95bd727f848287bc533ed798612a95b397f56f344716906dd89c9b8b05b0eca3ff844455c9331c74170992a3b1a175a786769050","ssdeep":"768:f9+z0BFXYKby+HvOqKvVOkYtkdEvWBzigMPI0:fgKbbOlIkdEvPgI","tlshash":"f7d2c54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","first_seen":"2023-03-07T12:57:28Z","last_seen":"2026-09-20T14:49:11.194863Z","times_seen":166,"resource_available":true,"data":null}},"time_used":1378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/logo2.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.114Z","timestamp":1789915690114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/logo2.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22878\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22878,"size_decoded":23165,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"c987e8b807fccbff3a1deff01d7d8550","sha1":"2fed68d85feb691bbb85e62f95db9f64216bdb9d","sha256":"fb1eb2c16ac313787aaeefd9aebbe107368d9fc18e4c0a8a2f4d62d482b60032","sha512":"1173efed1810d9a6462e6050b15920cd77c4c52a889bee541909d9f2123ad138e554ddea0aa8d13126525253fdfb40539635f1f4868c85792bdce0cf6ff6c0e7","ssdeep":"384:3rfRXHRKy/i1RXHRKGGnRK8/h8/ewpCHJ2H0VkXnJijR:3rfRF/mRZGF8WWw3F","tlshash":"57a29f65bb0dee83f9d0113b56a4c6ea2312dd4096f326563c2e70267b72f555c2f312","first_seen":"2024-08-20T14:43:16.056284Z","last_seen":"2026-09-20T14:49:11.195489Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/bootstrap.min.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.148Z","timestamp":1789915690148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18377\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122559,"size_decoded":18707,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"9b9d87c09c0e00c7dbd7b819959c5fc2","sha1":"c89d14a22098a5acf417e38e64a5fb9db52bba93","sha256":"8c73e31d4ae02a7a5a6d128c9e5b78d842dc8c2c8fa98e74178e8bbfda1bf66d","sha512":"8df866276db3bc97286828cb3e75726f0954d0b6f30030df370a8184afec6ad8b44efafc629cadf70638dfaa390350dcec27c2905b40d7816f8005e01805a216","ssdeep":"768:ayHGxw/jc/QWlJxtQZIuiHlncmzI4I8OAduFKbv2ctm2Bm8JP+eckOvS1Fs:sw/o1wIuiHlncm28lDbzzPux","tlshash":"02c3d7a0f11031ea7323c55a71d0ed872259a153e56a4eb7f22f25d88f886cb1773f1a","first_seen":"2025-04-17T05:23:49.783523Z","last_seen":"2026-09-20T14:49:11.199964Z","times_seen":61,"resource_available":true,"data":null}},"time_used":2409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.712Z","timestamp":1789915692712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 23:17:39 GMT\r\nexpires: Fri, 17 Sep 2027 23:17:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 228633\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-20T14:54:16.908401Z","times_seen":38652,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":19,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260916","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:13.488Z","timestamp":1789915693488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260916 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 20 Sep 2026 14:48:13 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-3eR-Z8GbKJwW10HLym9-IQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw0JBiEOLhWPtk_1U2gRUTnyxhUlJKyi-MLylKzCvOSSxJLU4tKkstijcyMDIzsDQ00zMwji8wAAAmORLi\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=CoICCAIStAEBAQxeRSVJqEWZWOykNpjEbIAaDKXRDoGP_87UkavJA25B6GNs8x7BVik67CFSwq31K3F_80QvycMx_tLTU_-ejiq_sX768Cjy4Pjkq4W8VtxWBvbblnISJX7f_bCSPL2Pzsuz_ION9a7w3lI-llc1izaA4-gnN8Gpo-Ei9ydeHAlnH516nPNSbzv6cpUdJP-wx9J9DKph7nRElEE22nN9wfk6P73D_tllS0H7jdODugAFcYkoAjJFAX1sxKr7Iow8pDjuiNGy1Q5rYisho8UvIE0NGrKsRwUn2MKjsx0DPHO1r-59tTNs7maDJ_aU6OJFybw1BCvOVa7v3dMN; expires=Thu, 21-Oct-2027 07:06:31 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"CoICCAIStAEBAQxeRSVJqEWZWOykNpjEbIAaDKXRDoGP_87UkavJA25B6GNs8x7BVik67CFSwq31K3F_80QvycMx_tLTU_-ejiq_sX768Cjy4Pjkq4W8VtxWBvbblnISJX7f_bCSPL2Pzsuz_ION9a7w3lI-llc1izaA4-gnN8Gpo-Ei9ydeHAlnH516nPNSbzv6cpUdJP-wx9J9DKph7nRElEE22nN9wfk6P73D_tllS0H7jdODugAFcYkoAjJFAX1sxKr7Iow8pDjuiNGy1Q5rYisho8UvIE0NGrKsRwUn2MKjsx0DPHO1r-59tTNs7maDJ_aU6OJFybw1BCvOVa7v3dMN","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-21T07:06:31Z","raw_expires":"Thu, 21-Oct-2027 07:06:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=CoICCAIStAEBAQxeRSVJqEWZWOykNpjEbIAaDKXRDoGP_87UkavJA25B6GNs8x7BVik67CFSwq31K3F_80QvycMx_tLTU_-ejiq_sX768Cjy4Pjkq4W8VtxWBvbblnISJX7f_bCSPL2Pzsuz_ION9a7w3lI-llc1izaA4-gnN8Gpo-Ei9ydeHAlnH516nPNSbzv6cpUdJP-wx9J9DKph7nRElEE22nN9wfk6P73D_tllS0H7jdODugAFcYkoAjJFAX1sxKr7Iow8pDjuiNGy1Q5rYisho8UvIE0NGrKsRwUn2MKjsx0DPHO1r-59tTNs7maDJ_aU6OJFybw1BCvOVa7v3dMN; expires=Thu, 21-Oct-2027 07:06:31 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/js/bootstrap.min.js","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.070Z","timestamp":1789915690070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9432\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36822,"size_decoded":9689,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32040)","md5":"09224359ccf8277a46de23c00d2a0b29","sha1":"cc33f3b4abf1ff45edee5dae62a1f3fd0dcc24d4","sha256":"08bdf8113639c5ce697e6eba88ceb1ed3348e82168a0e0dc0a75eca428348bce","sha512":"9d63ed482afe1119a0681c7a49a168ab5e3c67db211d1fcda83bf07a7d99a991f2dea2553aac3978fb0868d81b56ffc384d29a0f599f69001edfddfc61a9b380","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm51CoFXflR8Gf3ZsbQ:4875vhqKOvlp3ZsQ","tlshash":"fff29646b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-08T20:10:42Z","last_seen":"2026-09-20T14:49:11.201095Z","times_seen":108,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/storage/app/public/photos/5IGjIiXqIPzcJwLppsFjcRIzMkVy1HisvlqZDwW4.png","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.090Z","timestamp":1789915690090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /storage/app/public/photos/5IGjIiXqIPzcJwLppsFjcRIzMkVy1HisvlqZDwW4.png HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Sep 2026 14:42:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36782\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36782,"size_decoded":37068,"mime_type":"image/png","magic":"PNG image data, 354 x 142, 8-bit/color RGBA, non-interlaced","md5":"f8cf09f432f075a23e5a1c9982379fd3","sha1":"afa9de6e004d2acc56433e5efe2404aeb3b15dee","sha256":"32b8e462db62e07e800c24f3b197aaa44e39ff5af2d7d06b6539cb8f17fd271c","sha512":"dab735728e05acf637799cf97b9a9cc3dad2fc619a21b6f31330f0f622b7de3b88536004a1c2f9ad634ad3260b38b4bbd15e4badfd238959909eab157f4013a1","ssdeep":"768:/D0WlRNl/pqHUWi/E7K+7D5gyx221foS3+OCtRVELnh7Vcrz:rvRN1pqHXf5NP1QTv6nh7Vc/","tlshash":"fef2f14e9367d9670d0205934d9bd6bf4733a702bc4c6af5b0bb63ab0a406a429f84f0","first_seen":"2026-06-26T17:25:46.509862Z","last_seen":"2026-09-20T14:49:11.201917Z","times_seen":3,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apicms.thestar.com.my/uploads/images/2024/02/07/2532149.webp","fqdn":"apicms.thestar.com.my","domain":"thestar.com.my","tld":"com.my"},"ip":{"addr":"13.249.8.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.108Z","timestamp":1789915690108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.thestar.com.my","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Aug 2026 00:00:00 GMT","end":"Wed, 03 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"14:11:E5:4E:EB:D4:1D:2E:42:E5:0C:DC:44:5B:4A:2E:7A:5A:04:F9","sha256":"53:FA:6A:BF:F1:4B:6C:4E:74:AD:F3:7A:BD:25:1D:E8:9A:5E:B0:F0:3E:64:DF:8F:7A:BD:87:AB:48:90:10:0C"}}},"request":{"raw":"GET /uploads/images/2024/02/07/2532149.webp HTTP/1.1\r\nHost: apicms.thestar.com.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 104734\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 07 May 2024 03:13:26 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9yjrNIv2863ComKAsTLBO52FiDCqnXhp\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 20 Sep 2026 14:40:36 GMT\r\ncache-control: max-age=31536000\r\netag: \"1e0634218f1b07c1de7bc56b9edf6227\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c4c5dabdc780c35f0408131822b3a96a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Qhp3FS4t8dJo22SSZUKjcRfL7G9H1nTfC93S-Fn0ZXOB5yWbtB46ew==\r\nage: 455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":104734,"size_decoded":105373,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e0634218f1b07c1de7bc56b9edf6227","sha1":"1a16831715ca8b1f58b56b3afed91e2d5a6aff78","sha256":"9e2e593cdc5460dfb879cd4e22363d1a584472e7bc951a57276904bc41a048c6","sha512":"9ba5f0b42a40d4798aebe976c03885477c37567ccd66c6b42323ebd03210e50889e0db3669489789f26feffec123f5cbd077fd37521b05f327f0ca697b524a27","ssdeep":"1536:GJpT6iVrgCsk2E2lYAY0C0cpR3nlVtyFa74IJn78tOE/g+LnkLEyeSqYoiKS3Udg:Gf66Ek2EPgFO3nlPTSDIMkQygiKqn","tlshash":"7fa3e028fcb46ad2c19d1e7b5bdb288a9dd31b86a8c10d1b71ec4e149f53ed088439f1","first_seen":"2026-06-26T17:25:46.570638Z","last_seen":"2026-09-20T14:49:11.202629Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":13,"connect":8,"send":0,"wait":11,"receive":13,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/css/ionicons.css","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.138Z","timestamp":1789915690138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/css/ionicons.css HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7630\r\ndate: Sun, 20 Sep 2026 14:48:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57233,"size_decoded":7959,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (20240)","md5":"fffff6c0a358ff6f87e55ca318d363b1","sha1":"fceba750660aa99a9d159f629eea5be52d5a4e39","sha256":"1cd4be7be57d9d5846d092aaba15e878429d071a4f096440c43f38958a664526","sha512":"4a28072b50730b16d1a7ba7c09ab5edd7d4bfda863053dfcd22e8412e9ec19daea696bf28167919289d7727c69876f362927e1251043b178a1d513d0e90741ac","ssdeep":"384:W48numrLJrtpbxxYlbDiLq2LEg+KjL5w62s1zIZbyzid:W4wrTxilbOLVLEj+LfJ1kZmzid","tlshash":"f44310f6d71e0ee14e35d480330bab905775b5fda4580c59e00ba88df6cba28e2d29dd","first_seen":"2025-04-17T05:23:49.771246Z","last_seen":"2026-09-20T14:49:11.203328Z","times_seen":59,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coscokargo.delivery/temp/custom/images/logo4.jpg","fqdn":"coscokargo.delivery","domain":"coscokargo.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:10.116Z","timestamp":1789915690116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coscokargo.delivery","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 13:35:28 GMT","end":"Wed, 16 Dec 2026 13:35:27 GMT"},"fingerprint":{"sha1":"AA:F1:42:13:A6:C8:A0:DF:57:3E:1E:A0:59:97:7F:F7:6F:CE:EC:E0","sha256":"03:25:D3:C8:F3:26:08:31:33:74:2F:B3:81:36:4C:0B:CA:C6:D7:6E:2A:CA:72:ED:A4:94:8C:1F:41:23:85:A3"}}},"request":{"raw":"GET /temp/custom/images/logo4.jpg HTTP/1.1\r\nHost: coscokargo.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZHMHlMRUt5Uk5UY1o1Y2Y5bVdnYUE9PSIsInZhbHVlIjoiL3lNWDZBREsyVFVEK2JhMmsyNkxRZlBKQ3JQOEl0YkZ5WWttTXJvb1hoTVBIMk9rTFJ3eGFXejhtWjU2eXJnOWlLSTh4bGNyOHRwMElTcit6N1lldFZ6dXpXdElyY3oxL0U2WWY0R3JFT1NtMW4vMHR1NDYzVFY5ZmtjSzlCOG0iLCJtYWMiOiJhMTc2MWVmZWM2YzJmYzUxMWE1N2ZkMTg4MzRkMTlkNTA3N2M2MDA2YThmNmViMzM0NjA5ZmQ5YjYwOTIzYWNjIiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IlNwYjRVSitxYy81REx6SWFYd1RKYnc9PSIsInZhbHVlIjoiaDltSzFDc0xnc2ZBSllSbHVrcU8zbTBLZGpiZk94SVRSdWM1d0s4MnVoWEVyd0d6b0xkajZXZnRUdXYybUUxYk1qc1FsTlg5M3A1TTh0ZWdzMVpIQ09UdEFpcFk3MVd4elVSc0MxN2MzTm1pMGIwanBtRUhsamxvV3Z6NjFtdWEiLCJtYWMiOiJmODc1NzM3YzlmMWE3ZTQ3Mzk0MzJjNmVjZDNlOTAwOTFmMzViOWRkNDlhMjQyMjk3ZTNmOTNjODM0YTQ1YTU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 14:48:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 14:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24033\r\ndate: Sun, 20 Sep 2026 14:48:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24033,"size_decoded":24320,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"7b2623996addd3070774a17ad65e32e6","sha1":"74a43ff42b9547e97b7c5b36bcafd787df4b81ac","sha256":"a87a8366ba6cb1b1515ce4da5b7764a371cfa910006bd73a4263c2936eecc755","sha512":"dceaeab96ae7e1c0a72636948aded18d9cf24e99a399db23ff285f4fd0e32fd6f974eb444c7b3641291ff77ef6400d4a7295da88453f2105c3a8460d8ba50e63","ssdeep":"384:FrU+imvrJqi/iC+imvrJqyGnSKfvXJReLDhMccd2xE:FrU+iQJ//b+iQJtGbZr","tlshash":"29b27d286baecdf2fcd14478c4d5da8372205e818aaf75ea7c5d288bb7746c3441c293","first_seen":"2024-08-20T14:43:16.051491Z","last_seen":"2026-09-20T14:49:11.204081Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2341,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"coscokargo.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"coscokargo.delivery","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.b8OHV15W648.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrKm6UrWW_bP_uRDPzjMFn_hgeiQA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coscokargo.delivery/","date":"2026-09-20T14:48:12.713Z","timestamp":1789915692713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.b8OHV15W648.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrKm6UrWW_bP_uRDPzjMFn_hgeiQA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coscokargo.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 101318\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 17:51:29 GMT\r\nexpires: Tue, 14 Sep 2027 17:51:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 11 Sep 2026 21:32:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 507404\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":291234,"size_decoded":102159,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"d3feddf19ffc1311fd41c33ab6c5b470","sha1":"0209de8777c0059fd270d4b77040c1b3a4618724","sha256":"ced932dc0e4762bf76751783f76d487907abd3ae25242f74a89cb52622de35d2","sha512":"28216b3da471348fb5d97a74643846abd46619121f51185d8b76ecaa021184acaffbfe7a9bb9bc636e6ce3c862c7b86788b59de616856caf7b30e41dedf2a269","ssdeep":"3072:wRfiIm4KgqdIbB3KreB2kE045Pr2bMwnxDcWovJeunifNeyTtvVO1v+yd90:8uHrO54BwmvgE90","tlshash":"4b54d8dcb2a670a79363f4b5517f004ab13b68a5f8484d6cb288d8e26df4909417bf7c","first_seen":"2026-09-14T20:28:16.096002Z","last_seen":"2026-09-20T14:54:16.874071Z","times_seen":415,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":17,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}